Function at 0x1000c135
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
push esi
push edi
push ebx
sub esp, 0x34
mov eax, dword [str.kernel32.dll]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ebx, eax
mov edi, dword [0x10006856]
mov eax, dword [0x1000684e]
push eax
mov edi, dword [edi + 0x101a4]
call edi
mov esi, eax
add esp, 4
mov eax, esi
mov edx, dword [0x1000684e]
call fcn.1000c43d
push 0x104
push esi
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx eax, word [esi]
xor ecx, ecx
mov edx, dword [str.swiftie.gif]
test eax, eax
je 0x1000c42a
mov dword [esp + 0x14], ebx
inc ecx
lea eax, [esi + ecx*2]
movzx ebx, word [eax]
test ebx, ebx
jne 0x1000c19a
mov ebx, dword [esp + 0x14]
movzx eax, word [eax - 2]
cmp eax, 0x5c
je 0x1000c1cb
mov dword [esp + 0x14], ebx
xor eax, eax
mov word [esi + ecx*2], ax
dec ecx
movzx ebx, word [esi + ecx*2 - 2]
cmp ebx, 0x5c
jne 0x1000c1b8
mov ebx, dword [esp + 0x14]
cmp byte [edx], 0
je 0x1000c1ea
mov dword [esp + 0x14], ebx
xor eax, eax
movsx ebx, byte [eax + edx]
inc eax
mov word [esi + ecx*2], bx
inc ecx
cmp byte [eax + edx], 0
jne 0x1000c1d6
mov ebx, dword [esp + 0x14]
xor edx, edx
mov ecx, 1
push edx
push 0x80
push 3
push edx
push ecx
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x1000c419
mov eax, dword [str.GetFileSize]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0
push esi
call eax
mov dword [esp + 0x10], eax
mov eax, dword [0x10006866]
push eax
call edi
mov edi, eax
add esp, 4
mov eax, edi
mov edx, dword [0x10006866]
call fcn.1000c43d
xor edx, edx
lea ecx, [esp + 0x2c]
mov dword [ecx], edx
push edx
push ecx
push dword [esp + 0x18]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1000c419
mov eax, dword [0x1000685a]
mov edx, dword [esp + 0x2c]
add edx, edi
mov dword [esp + 0x28], edx
lea esi, [edi + eax]
mov edx, dword [esi]
mov ecx, dword [esi + 4]
test edx, edx
jbe 0x1000c310
cmp edx, 4
jb 0x1000c423
lea edi, [edi + eax + 8]
and edi, 0xf
je 0x1000c2da
test edi, 3
jne 0x1000c423
neg edi
add edi, 0x10
shr edi, 2
lea eax, [edi + 4]
cmp edx, eax
jb 0x1000c423
mov eax, edx
sub eax, edi
and eax, 3
neg eax
add eax, edx
test edi, edi
je 0x1000c2e3
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x10]
add dword [esi + ebx*4 + 8], ecx
inc ebx
cmp ebx, edi
jb 0x1000c2cb
mov ebx, dword [esp + 0x14]
jmp 0x1000c2e3
mov eax, edx
and eax, 3
neg eax
add eax, edx
movd xmm0, ecx
pshufd xmm0, xmm0, 0
movdqu xmm1, xmmword [esi + edi*4 + 8]
paddd xmm1, xmm0
movdqu xmmword [esi + edi*4 + 8], xmm1
add edi, 4
cmp edi, eax
jb 0x1000c2ec
cmp eax, edx
jae 0x1000c310
add dword [esi + eax*4 + 8], ecx
inc eax
cmp eax, edx
jb 0x1000c307
mov eax, dword [0x1000683a]
lea edx, [eax + esi + 1]
push edx
push ebx
lea edi, [esi + eax]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x1000c419
movsx edx, byte [edi]
lea ecx, [edi + edx + 1]
lea eax, [edi + edx]
mov dword [esp + 0x10], eax
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, eax
test ebx, ebx
je 0x1000c419
mov edx, dword [esp + 0x10]
movsx ecx, byte [edx]
lea edi, [edx + ecx + 1]
lea eax, [edx + ecx]
mov dword [esp + 0x14], eax
xor eax, eax
jmp 0x1000c303
mov eax, esi
jmp 0x1000c1a9