Function at 0x658bb828
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0xfc
mov dword [ebp - 0xbc], 0x658db3c0
mov dword [ebp - 0xb8], 0x6592ff58
lea eax, [ebp - 0xb4]
lea edx, [ebp - 0x18]
mov dword [eax], edx
mov edx, 0x658bba68
mov dword [eax + 4], edx
mov dword [eax + 8], esp
lea eax, [ebp - 0xd4]
mov dword [esp], eax
call fcn.658e7610
mov eax, dword [ebp + 8]
mov dword [esp], eax
mov dword [ebp - 0xd0], 0xffffffff
call fcn.658bb7a0
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.658f61c4
mov dword [esp + 4], 0x65935588
mov dword [esp], eax
call sub.msvcrt.dll_fopen
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x658bb8b4
mov dword [ebp - 0xd8], 0
jmp 0x658bbcb9
mov eax, dword [ebp + 8]
add eax, 0x144
mov dword [esp + 4], eax
lea eax, [ebp - 0x38]
mov dword [esp], eax
mov dword [ebp - 0xd0], 0xffffffff
call fcn.658bd672
mov edx, dword [ebp + 0xc]
mov dword [esp + 4], edx
mov eax, dword [ebp + 8]
add eax, 0x120
mov dword [esp], eax
mov dword [ebp - 0xd0], 2
call fcn.65912a28
jmp 0x658bb93d
lea eax, [ebp - 0x38]
mov dword [esp], eax
mov dword [ebp - 0xd0], 0xffffffff
call fcn.658bd6a4
mov eax, dword [ebp - 0x1c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 4
lea eax, [ebp - 0x3c]
mov dword [esp], eax
call sub.msvcrt.dll_fread
mov dword [esp + 8], 1
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call sub.msvcrt.dll_fseek
mov dword [ebp - 0x40], 0
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.6592ed3c
test eax, eax
jne 0x658bbb8a
mov eax, dword [ebp - 0x1c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 8
mov dword [esp], 0x6594dd58
call sub.msvcrt.dll_fread
mov eax, dword [ebp - 0x1c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 2
mov dword [esp], 0x6594dd68
call sub.msvcrt.dll_fread
mov eax, dword [ebp - 0x1c]
mov dword [esp + 0xc], eax
movzx eax, word [0x6594dd68]
mov dword [esp + 8], eax
mov dword [esp + 4], 1
mov dword [esp], 0x6594dd6a
call sub.msvcrt.dll_fread
movzx eax, word [0x6594dd68]
add eax, 2
mov word [ebp - 0x42], ax
mov dword [esp], 0x10
mov dword [ebp - 0xd0], 0xffffffff
call fcn.658dc7d0
mov dword [ebp - 0xe4], eax
movzx eax, word [ebp - 0x42]
mov dword [esp + 8], eax
mov dword [esp + 4], 1
mov edx, dword [ebp - 0xe4]
mov dword [esp], edx
mov dword [ebp - 0xd0], 1
call fcn.658efeb0
jmp 0x658bbac4
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call fcn.658efe50
lea edx, [eax + 2]
movzx eax, word [ebp - 0x42]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x6594dd68
mov dword [esp], edx
mov dword [ebp - 0xd0], 0xffffffff
call sub.msvcrt.dll_memcpy
movzx eax, word [0x6594dd68]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call fcn.658efc04
mov eax, dword [ebp + 8]
add eax, 4
mov dword [esp], eax
call fcn.658f823c
test eax, eax
jne 0x658bbb39
mov ecx, dword [ebp + 8]
mov eax, dword [0x6594dd58]
mov edx, dword [0x6594dd5c]
mov dword [ecx + 0x20], eax
mov dword [ecx + 0x24], edx
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 0x48]
mov dword [esp + 0xc], eax
mov eax, dword [0x6594dd58]
mov edx, dword [0x6594dd5c]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp], ecx
mov dword [ebp - 0xd0], 0xffffffff
call fcn.6592cc00
sub esp, 4
lea eax, [ebp - 0x38]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
add eax, 4
mov dword [esp], eax
call fcn.65923a00
lea eax, [ebp - 0x40]
inc dword [eax]
jmp 0x658bb995
mov eax, dword [ebp - 0x40]
mov dword [esp + 8], eax
mov dword [esp + 4], str.Total__d_packets
lea eax, [ebp - 0x88]
mov dword [esp], eax
mov dword [ebp - 0xd0], 0xffffffff
call sub.msvcrt.dll_sprintf
mov eax, dword [ebp + 8]
add eax, 4
mov dword [esp], eax
call fcn.658f823c
dec eax
mov dword [ebp - 0x90], eax
lea edx, [ebp - 0x90]
mov dword [ebp - 0xec], edx
mov eax, dword [ebp + 8]
add eax, 4
mov dword [esp], eax
call fcn.65923874
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x94]
mov edx, dword [ebp - 0xec]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.658f5a30
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x8c]
mov dword [esp], eax
call fcn.658f5a60
mov edx, eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x20]
mov ebx, dword [eax + 0x24]
mov eax, dword [edx]
mov edx, dword [edx + 4]
sub eax, ecx
sbb edx, ebx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.658bb690
mov eax, dword [ebp + 8]
add eax, 4
mov dword [esp], eax
call fcn.658f823c
dec eax
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x9c]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp + 8]
add eax, 4
mov dword [esp], eax
call fcn.65923874
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xa0]
mov edx, dword [ebp - 0xf0]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.658f5a30
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
add eax, 4
mov dword [esp], eax
call fcn.659238d4
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call sub.msvcrt.dll_fclose
mov dword [ebp - 0xd8], 1
lea eax, [ebp - 0xd4]
mov dword [esp], eax
call fcn.658e76f0
mov eax, dword [ebp - 0xd8]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret