Function at 0x1e86b0
Capabilities:
Read file on windows

Disassembly:
push 0x898
mov eax, 0x2187c0
call fcn.0020501e
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x898], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x894], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x8a4], eax
xor eax, eax
xor ebx, ebx
mov byte [ebp - 0x64], bl
lea edi, [ebp - 0x63]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x50], bl
lea edi, [ebp - 0x4f]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov esi, 0xff
push esi
stosb byte es:[edi], al
lea eax, [ebp - 0x1f3]
push ebx
push eax
mov byte [ebp - 0x1f4], bl
call fcn.001ff900
add esp, 0xc
push esi
lea eax, [ebp - 0x4f3]
push ebx
push eax
mov byte [ebp - 0x4f4], bl
call fcn.001ff900
add esp, 0xc
push esi
lea eax, [ebp - 0x2f3]
push ebx
push eax
mov byte [ebp - 0x2f4], bl
call fcn.001ff900
xor eax, eax
mov byte [ebp - 0xf0], bl
lea edi, [ebp - 0xef]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0xdc], bl
lea edi, [ebp - 0xdb]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0xb4], bl
lea edi, [ebp - 0xb3]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0xc8], bl
add esp, 0xc
xor eax, eax
lea edi, [ebp - 0xc7]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x78], bl
lea edi, [ebp - 0x77]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0xa0], bl
lea edi, [ebp - 0x9f]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x3c], bl
lea edi, [ebp - 0x3b]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x8c], bl
lea edi, [ebp - 0x8b]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
push esi
stosb byte es:[edi], al
lea eax, [ebp - 0x5f3]
push ebx
push eax
mov dword [ebp - 0x89c], ebx
mov byte [ebp - 0x5f4], bl
call fcn.001ff900
xor eax, eax
mov byte [ebp - 0x870], bl
lea edi, [ebp - 0x86f]
stosw word es:[edi], ax
mov byte [ebp - 0x87c], bl
lea edi, [ebp - 0x87b]
stosw word es:[edi], ax
mov eax, dword [ebp - 0x8a4]
mov byte [eax], bl
add esp, 0xc
lea eax, [ebp - 0x82c]
push eax
push ecx
lea eax, [ebp - 0x8a0]
push eax
mov dword [ebp - 0x86c], ebx
call fcn.001f6c06
pop ecx
pop ecx
mov ecx, eax
call fcn.001f6ccc
mov dword [ebp - 4], ebx
lea ebx, [ebp - 0x848]
call fcn.001f5ca4
cmp dword [eax + 0x14], 0x10
jb 0x1e885c
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x64]
push 0x14
push eax
call fcn.00202249
add esp, 0xc
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x848]
call fcn.001e5dcc
lea eax, [ebp - 0x848]
push eax
call fcn.001f5e77
cmp dword [eax + 0x14], 0x10
pop ecx
jb 0x1e8890
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x50]
push 0x14
push eax
call fcn.00202249
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x848]
call fcn.001e5dcc
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x14]
cmp edx, 0x10
jb 0x1e88bc
mov esi, dword [eax]
jmp 0x1e88be
mov esi, eax
mov ecx, dword [eax + 0x10]
add ecx, esi
cmp edx, 0x10
jb 0x1e88ca
mov eax, dword [eax]
push dword [ebp - 0x894]
mov dword [ebp - 0x890], ebx
push ecx
push eax
lea eax, [ebp - 0x890]
push eax
mov dword [ebp - 0x88c], ebx
mov dword [ebp - 0x888], ebx
call fcn.001ecc48
mov byte [ebp - 4], 1
lea eax, [ebp - 0x865]
lea esi, [ebp - 0x890]
mov byte [ebp - 0x865], 0
call fcn.001ea1c4
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp dword [0x22b68c], ebx
je 0x1e8c96
push ebx
push 0x80
push 3
push ebx
push 1
push 0x80000000
push 0x22b468
mov dword [ebp - 0x8a0], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x878], eax
cmp eax, 0xffffffff
jne 0x1e8976
push ebx
push str.TestMode
push str.Failed_to_Open_Test_ConfigFile
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [ebp - 0x890], ebx
je 0x1e8970
push dword [ebp - 0x890]
call fcn.001fe562
pop ecx
push ebx
jmp 0x1e925d
mov esi, 0x200
push esi
lea eax, [ebp - 0x7f4]
push ebx
push eax
call fcn.001ff900
add esp, 0xc
push ebx
lea eax, [ebp - 0x8a0]
push eax
push esi
lea eax, [ebp - 0x7f4]
push eax
push dword [ebp - 0x878]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push dword [ebp - 0x878]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x8a0], ebx
jbe 0x1e8c96
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [ebp - 0x7f4]
push 0x21d83c
mov dword [ebp - 0x874], eax
call fcn.001e8536
mov esi, eax
pop ecx
test esi, esi
je 0x1e8b91
push 0x21d840
call fcn.001e8536
pop ecx
mov dword [ebp - 0x878], eax
test eax, eax
jne 0x1e8a07
push esi
call edi
add eax, esi
mov dword [ebp - 0x878], eax
mov eax, dword [ebp - 0x878]
sub eax, esi
dec eax
mov dword [ebp - 0x880], eax
test eax, eax
jle 0x1e8b86
push 0x21d844
call edi
push eax
push 0x21d844
push dword [ebp - 0x874]
call fcn.00201825
add esp, 0xc
test eax, eax
jne 0x1e8a45
lea eax, [ebp - 0x1f4]
jmp 0x1e8a8b
push 0x21d858
call edi
push eax
push 0x21d858
push dword [ebp - 0x874]
call fcn.00201825
add esp, 0xc
test eax, eax
jne 0x1e8a69
lea eax, [ebp - 0x64]
jmp 0x1e8a8b
push str.Arch
call edi
push eax
push str.Arch
push dword [ebp - 0x874]
call fcn.00201825
add esp, 0xc
test eax, eax
jne 0x1e8a95
lea eax, [ebp - 0x50]
push dword [ebp - 0x880]
push esi
push eax
jmp 0x1e8ac1
push str.Version
call edi
push eax
push str.Version
push dword [ebp - 0x874]
call fcn.00201825
add esp, 0xc
test eax, eax
jne 0x1e8ac8
push dword [ebp - 0x880]
push esi
push dword [ebp - 0x898]
call ebx
jmp 0x1e8b86
push str.Locale
call edi
push eax
push str.Locale
push dword [ebp - 0x874]
call fcn.00201825
add esp, 0xc
test eax, eax
jne 0x1e8b51
push 0x14
push esi
lea eax, [ebp - 0x28]
push eax
call ebx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x848]
call fcn.001e5ac0
lea eax, [ebp - 0x848]
push eax
lea eax, [ebp - 0x864]
mov byte [ebp - 4], 2
call fcn.001f48a1
pop ecx
mov esi, eax
lea edi, [ebp - 0x82c]
mov byte [ebp - 4], 3
call fcn.001e5ce9
push 0
push 1
lea ecx, [ebp - 0x864]
call fcn.001e5dcc
push 0
push 1
lea ecx, [ebp - 0x848]
mov byte [ebp - 4], 1
call fcn.001e5dcc
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
jmp 0x1e8b86
push str.Cntry
call edi
push eax
push str.Cntry
push dword [ebp - 0x874]
call fcn.00201825
add esp, 0xc
test eax, eax
jne 0x1e8b86
push 3
push esi
lea eax, [ebp - 0x870]
push eax
call ebx
mov dword [ebp - 0x86c], 1
mov eax, dword [ebp - 0x878]
jmp 0x1e89cc
xor esi, esi
mov dword [ebp - 0x7fc], 0xf
mov dword [ebp - 0x800], esi
mov byte [ebp - 0x810], 0
push esi
push esi
push 1
lea eax, [ebp - 0x810]
push esi
push eax
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 4
call fcn.001e7f70
add esp, 0x14
test eax, eax
jns 0x1e8c08
push esi
lea eax, [ebp - 0x1f4]
push eax
push str.FAILED_to_read_map.xml_File
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
push esi
push 1
lea ecx, [ebp - 0x810]
call fcn.001e5dcc
cmp dword [ebp - 0x890], esi
je 0x1e8c02
push dword [ebp - 0x890]
call fcn.001fe562
pop ecx
push esi
jmp 0x1e925d
cmp dword [ebp - 0x7fc], 0x10
mov ebx, dword [ebp - 0x810]
mov eax, ebx
jae 0x1e8c1f
lea eax, [ebp - 0x810]
mov esi, dword [ebp - 0x800]
add esi, eax
cmp dword [ebp - 0x7fc], 0x10
jae 0x1e8c36
lea ebx, [ebp - 0x810]
push dword [ebp - 0x88c]
lea eax, [ebp - 0x878]
push dword [ebp - 0x890]
lea edi, [ebp - 0x890]
push eax
call fcn.001ece91
push dword [ebp - 0x894]
mov ecx, edi
push esi
push ebx
push dword [ebp - 0x890]
call fcn.001ed4aa
lea eax, [ebp - 0x865]
mov esi, edi
mov byte [ebp - 0x865], 0
call fcn.001ea1c4
push 0
push 1
lea ecx, [ebp - 0x810]
mov byte [ebp - 4], 1
call fcn.001e5dcc
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, dword [ebp - 0x890]
mov dword [0x22b694], esi
call fcn.001efe16
call fcn.001efee2
mov ebx, eax
test ebx, ebx
je 0x1e9250
push str.java_update_map
push dword [ebx + 4]
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x1e9250
mov eax, dword [ebx + 0xc]
push str.cntry_lookup
call fcn.001f00af
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
pop ecx
test eax, eax
je 0x1e8d31
mov eax, dword [eax + 0xc]
test eax, eax
je 0x1e8d31
push 0xffffffffffffffff
push dword [eax + 4]
lea eax, [ebp - 0x5f4]
push pe_nt_image_headers32
push eax
call fcn.001ffed8
lea eax, [ebp - 0x5f4]
push eax
lea ecx, [ebp - 0x87c]
call fcn.001f069b
add esp, 0x14
cmp dword [ebp - 0x86c], 0
jne 0x1e8d4a
lea eax, [ebp - 0x87c]
push eax
lea eax, [ebp - 0x870]
push eax
call esi
jmp 0x1e8d4a
push 0x21d8bc
lea eax, [ebp - 0x870]
push eax
call esi
push str.No_cntry_lookup_tag_in_map.xml
call fcn.001f262c
pop ecx
mov eax, dword [ebx + 0xc]
push str.DEBUG
call fcn.001f00af
pop ecx
test eax, eax
je 0x1e8d6b
mov eax, dword [eax + 0xc]
test eax, eax
je 0x1e8d6b
mov ecx, dword [eax + 4]
call fcn.001e7af5
mov eax, dword [ebx + 0xc]
push str.SendUDPing
call fcn.001f00af
pop ecx
test eax, eax
je 0x1e8de7
lea eax, [ebp - 0x86c]
push 1
push eax
call fcn.001ed91e
pop ecx
pop ecx
test eax, eax
je 0x1e8de7
mov eax, dword [ebp - 0x86c]
and dword [ebp - 0x7f8], 0
push 1
lea esi, [ebp - 0x28]
mov dword [ebp - 0x810], eax
mov byte [ebp - 0x7fc], 0
call fcn.001e7865
mov eax, dword [ebp - 0x86c]
mov dword [ebp - 0x80c], eax
push str.SendUDPing
lea eax, [ebp - 0x810]
push eax
mov ecx, esi
call fcn.001f2ded
lea esi, [ebp - 0x810]
call fcn.001f2d4a
lea esi, [ebp - 0x24]
call fcn.001ead65
mov eax, dword [ebx + 0xc]
push str.SendUAPing
call fcn.001f00af
pop ecx
test eax, eax
je 0x1e8e63
lea eax, [ebp - 0x86c]
push 1
push eax
call fcn.001ed91e
pop ecx
pop ecx
test eax, eax
je 0x1e8e63
mov eax, dword [ebp - 0x86c]
and dword [ebp - 0x7f8], 0
push 1
lea esi, [ebp - 0x28]
mov dword [ebp - 0x810], eax
mov byte [ebp - 0x7fc], 0
call fcn.001e7865
mov eax, dword [ebp - 0x86c]
mov dword [ebp - 0x80c], eax
push str.SendUAPing
lea eax, [ebp - 0x810]
push eax
mov ecx, esi
call fcn.001f2ded
lea esi, [ebp - 0x810]
call fcn.001f2d4a
lea esi, [ebp - 0x24]
call fcn.001ead65
mov eax, dword [ebx + 0xc]
push str.mapping
call fcn.001f00af
pop ecx
mov esi, eax
jmp 0x1e9189
push str.mapping
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x1e9186
mov eax, dword [esi + 0xc]
push str.version
call fcn.001f00af
mov ebx, eax
mov eax, dword [esi + 0xc]
mov dword [esp], 0x21d910
call fcn.001f00af
pop ecx
test ebx, ebx
je 0x1e9186
mov ebx, dword [ebx + 0xc]
test ebx, ebx
je 0x1e9186
test eax, eax
je 0x1e9186
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x86c], eax
test eax, eax
je 0x1e9186
mov ecx, dword [ebp - 0x898]
mov edx, dword [ebx + 4]
lea eax, [ebp - 0x2f4]
push 0
push eax
call fcn.001e8573
pop ecx
pop ecx
test eax, eax
jne 0x1e8f16
mov ecx, dword [ebp - 0x894]
mov edx, dword [ebx + 4]
push eax
lea eax, [ebp - 0x2f4]
push eax
call fcn.001e8573
pop ecx
pop ecx
test eax, eax
je 0x1e9186
cmp dword [ebp + 0x14], 0
je 0x1e8f32
mov eax, dword [esi + 0xc]
push str.critical
call fcn.001f00af
pop ecx
test eax, eax
je 0x1e9186
mov eax, dword [esi + 0xc]
push 0x21d920
call fcn.001f00af
pop ecx
test eax, eax
je 0x1e8fa4
mov eax, dword [eax + 0xc]
test eax, eax
je 0x1e8fa4
mov edx, dword [eax + 4]
lea ecx, [ebp - 0x78]
push 1
push ecx
lea ecx, [ebp - 0x64]
call fcn.001e8573
pop ecx
pop ecx
test eax, eax
je 0x1e9186
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [esi + 0xc]
push str.arch
call fcn.001f00af
pop ecx
test eax, eax
je 0x1e8fb7
mov eax, dword [eax + 0xc]
test eax, eax
je 0x1e8fb7
mov edx, dword [eax + 4]
lea ecx, [ebp - 0xa0]
push 0
push ecx
lea ecx, [ebp - 0x50]
call fcn.001e8573
pop ecx
pop ecx
test eax, eax
jne 0x1e8fc5
jmp 0x1e9186
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x21c7de
lea eax, [ebp - 0x78]
push eax
call ebx
jmp 0x1e8f6c
push 0x21c7de
lea eax, [ebp - 0xa0]
push eax
call ebx
mov eax, dword [esi + 0xc]
push str.cntry
call fcn.001f00af
pop ecx
test eax, eax
je 0x1e9000
mov eax, dword [eax + 0xc]
test eax, eax
je 0x1e9000
mov edx, dword [eax + 4]
lea ecx, [ebp - 0x8c]
push 0
push ecx
lea ecx, [ebp - 0x870]
call fcn.001e8573
pop ecx
pop ecx
test eax, eax
jne 0x1e900e
jmp 0x1e9186
push 0x21c7de
lea eax, [ebp - 0x8c]
push eax
call ebx
mov eax, dword [esi + 0xc]
push str.locale
call fcn.001f00af
pop ecx
test eax, eax
je 0x1e9055
mov eax, dword [eax + 0xc]
test eax, eax
je 0x1e9055
cmp dword [ebp - 0x818], 0x10
mov ecx, dword [ebp - 0x82c]
jae 0x1e903c
lea ecx, [ebp - 0x82c]
lea edx, [ebp - 0x3c]
push 0
push edx
mov edx, dword [eax + 4]
call fcn.001e8573
pop ecx
pop ecx
test eax, eax
jne 0x1e9060
jmp 0x1e9186
push 0x21c7de
lea eax, [ebp - 0x3c]
push eax
call ebx
lea eax, [ebp - 0x4f4]
push eax
call edi
mov ebx, eax
lea eax, [ebp - 0x2f4]
push eax
call edi
cmp ebx, eax
ja 0x1e9186
jb 0x1e90ee
lea eax, [ebp - 0xf0]
push eax
call edi
mov ebx, eax
lea eax, [ebp - 0x78]
push eax
call edi
cmp ebx, eax
ja 0x1e9186
jb 0x1e90ee
lea eax, [ebp - 0xdc]
push eax
call edi
mov ebx, eax
lea eax, [ebp - 0xa0]
push eax
call edi
cmp ebx, eax
ja 0x1e9186
jb 0x1e90ee
lea eax, [ebp - 0xc8]
push eax
call edi
mov ebx, eax
lea eax, [ebp - 0x8c]
push eax
call edi
cmp ebx, eax
ja 0x1e9186
jb 0x1e90ee
lea eax, [ebp - 0xb4]
push eax
call edi
mov ebx, eax
lea eax, [ebp - 0x3c]
push eax
call edi
cmp ebx, eax
jae 0x1e9186
push 0xffffffffffffffff
lea eax, [ebp - 0x2f4]
push eax
mov ebx, pe_nt_image_headers32
lea eax, [ebp - 0x4f4]
push ebx
push eax
call fcn.001ffed8
mov eax, dword [ebp - 0x86c]
push 0xffffffffffffffff
push dword [eax + 4]
lea eax, [ebp - 0x1f4]
push ebx
push eax
call fcn.001ffed8
or ebx, 0xffffffff
push ebx
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xf0]
push 0x14
push eax
call fcn.001ffed8
push ebx
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xdc]
push 0x14
push eax
call fcn.001ffed8
add esp, 0x40
push ebx
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0xc8]
push 0x14
push eax
call fcn.001ffed8
push ebx
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0xb4]
push 0x14
push eax
call fcn.001ffed8
add esp, 0x20
mov dword [ebp - 0x89c], 1
mov esi, dword [esi + 8]
test esi, esi
jne 0x1e8e78
push 0xff
xor edi, edi
lea eax, [ebp - 0x3f3]
push edi
push eax
mov byte [ebp - 0x3f4], 0
call fcn.001ff900
mov eax, dword [ebp - 0x82c]
add esp, 0xc
cmp dword [ebp - 0x818], 0x10
jae 0x1e91c4
lea eax, [ebp - 0x82c]
lea ecx, [ebp - 0x870]
push ecx
push eax
push dword [ebp - 0x898]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x64]
push eax
push dword [0x22b68c]
mov esi, pe_nt_image_headers32
push str.OVERRIDE_SYSTEM_VALUE_d:OS:_s_Arch:_s_Version:_s_Locale:_s_Cntry:_s_n
push 0xffffffffffffffff
lea eax, [ebp - 0x3f4]
push esi
push eax
call fcn.001fe983
lea eax, [ebp - 0x3f4]
push eax
call fcn.001f262c
add esp, 0x2c
cmp dword [ebp - 0x89c], edi
je 0x1e9226
lea eax, [ebp - 0x1f4]
push eax
push esi
push dword [ebp - 0x8a4]
call fcn.00202249
add esp, 0xc
cmp dword [ebp - 0x890], edi
je 0x1e923a
push dword [ebp - 0x890]
call fcn.001fe562
pop ecx
push edi
push 1
lea ecx, [ebp - 0x82c]
call fcn.001e5dcc
mov eax, dword [ebp - 0x89c]
jmp 0x1e926c
test esi, esi
je 0x1e925b
push esi
call fcn.001fe562
pop ecx
push 0
push 1
lea ecx, [ebp - 0x82c]
call fcn.001e5dcc
xor eax, eax
call fcn.002050a1
ret