Function at 0x11e5bc60
Capabilities:
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x11fbef48
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
mov eax, dword [esp + 0x40]
push ebx
push ebp
push esi
push edi
xor edi, edi
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x24], edi
call fcn.11e7eae0
mov eax, dword [esp + 0x54]
mov dword [esp + 0x48], edi
cmp eax, edi
je 0x11e5bca6
push eax
lea ecx, [esp + 0x1c]
call fcn.11e7f500
mov dword [esp + 0x2c], edi
xor ebp, ebp
mov esi, 0x120f2e88
mov bl, 2
mov ecx, dword [esi]
push ecx
lea ecx, [esp + 0x18]
call fcn.11e7eae0
mov edx, dword [0x11fd6250]
mov byte [esp + 0x48], 1
mov dword [esp + 0x54], edx
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x24]
push eax
push 0x12095a94
push ecx
mov byte [esp + 0x54], bl
lea ecx, [esp + 0x20]
mov dword [esp + 0x28], edi
call fcn.11e83a20
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x4c], 3
call fcn.11e7f410
lea ecx, [esp + 0x24]
mov byte [esp + 0x48], bl
call fcn.11e7f280
mov edx, dword [esp + 0x54]
cmp dword [edx - 8], edi
je 0x11e5bd7d
lea ecx, [esp + 0x54]
call fcn.11e82fb0
lea ecx, [esp + 0x54]
call fcn.11e82c90
mov eax, dword [esp + 0x54]
cmp dword [eax - 8], edi
je 0x11e5bd40
push eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.11e9bad0
add esp, 8
test eax, eax
jne 0x11e5bdaa
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x28]
push ecx
push 0x12095a94
push edx
lea ecx, [esp + 0x20]
call fcn.11e83a20
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x4c], 4
call fcn.11e7f410
lea ecx, [esp + 0x28]
mov byte [esp + 0x48], bl
call fcn.11e7f280
mov eax, dword [esp + 0x54]
cmp dword [eax - 8], edi
jne 0x11e5bd13
lea ecx, [esp + 0x54]
mov byte [esp + 0x48], 1
call fcn.11e7f280
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 0
call fcn.11e7f280
add esi, 8
inc ebp
cmp esi, str.504B
jae 0x11e5bdcd
jmp 0x11e5bcb3
lea ecx, [esp + 0x54]
mov esi, 1
mov byte [esp + 0x48], 1
call fcn.11e7f280
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 0
call fcn.11e7f280
jmp 0x11e5bdd1
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x58]
cmp eax, edi
je 0x11e5bddb
mov dword [eax], esi
cmp ebp, 5
jae 0x11e5bf45
mov ecx, dword [ebp*8 + 0x120f2e8c]
push ecx
lea ecx, [esp + 0x14]
call fcn.11e7eae0
mov edx, dword [esp + 0x10]
mov byte [esp + 0x48], 5
mov eax, dword [edx - 8]
cmp eax, edi
je 0x11e5bf37
cdq
sub eax, edx
lea ecx, [esp + 0x30]
mov esi, eax
sar esi, 1
call fcn.11e8b340
push 0xffffffffffffffff
push esi
lea ecx, [esp + 0x38]
mov byte [esp + 0x50], 6
call fcn.11e8b360
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x30]
push esi
push eax
push ecx
call fcn.11ec3d50
push esi
call fcn.11e679bc
mov ebp, eax
add esp, 0x10
cmp ebp, edi
je 0x11e5bf29
mov eax, dword [esp + 0x5c]
push edi
cmp eax, edi
je 0x11e5be75
mov edx, dword [esp + 0x54]
push 0x60
push 1
push 7
push 0x80
push 0x120089
push edx
call fcn.11dbafc0
add esp, 0x1c
jmp 0x11e5be8f
mov eax, dword [esp + 0x54]
push 0x80
push 3
push edi
push 7
push bind
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x11e5bf20
lea ecx, [esp + 0x54]
push edi
push ecx
push esi
push ebp
push ebx
mov dword [esp + 0x68], edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x11e5bef8
cmp dword [esp + 0x54], esi
jne 0x11e5bef8
mov edi, dword [esp + 0x30]
mov ecx, esi
mov esi, ebp
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x11e5becf
mov dword [esp + 0x20], 1
jmp 0x11e5bf19
mov eax, dword [0x12133f80]
test eax, eax
je 0x11e5bf19
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x50]
push eax
push ecx
push str.IsWellKnownFile_Unmatch___s____s_
push str.SDTransform
push 0xffffffffffffffff
call fcn.11ca5810
add esp, 0x14
jmp 0x11e5bf19
cmp dword [0x12133f80], edi
je 0x11e5bf19
mov edx, dword [esp + 0x50]
push edx
push str.IsWellKnownFile_read_file__s__fail
push str.SDTransform
push 0xffffffffffffffff
call fcn.11ca5810
add esp, 0x10
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebp
call fcn.11e679b1
add esp, 4
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 5
call fcn.11e8b350
lea ecx, [esp + 0x10]
mov byte [esp + 0x48], 0
call fcn.11e7f280
lea ecx, [esp + 0x18]
mov dword [esp + 0x48], 0xffffffff
call fcn.11e7f280
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x20]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x3c
ret