Function at 0x425131
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push edi
push dword [0x59fc74]
xor edi, edi
mov dword [ebp - 8], edi
call fcn.0043379e
mov esi, eax
call fcn.004250ef
cmp dword [ebp + 8], edi
jne 0x42515d
mov dword [ebp + 8], 0x4ac002
push edi
mov ebx, pe_nt_image_headers32
push ebx
push 3
push edi
push 1
push 0xc0000000
push dword [ebp + 8]
mov dword [esi + 0xc], edi
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileA]
call edi
mov dword [esi], eax
cmp eax, 0xffffffff
jne 0x4251c2
push 0
push ebx
push 3
push 0
push 1
push 0x80000000
push dword [ebp + 8]
call edi
mov dword [esi], eax
cmp eax, 0xffffffff
jne 0x4251b2
push 0
push ebx
push 3
push 0
push 3
push 0x80000000
push dword [ebp + 8]
call edi
mov dword [esi], eax
cmp dword [esi], 0xffffffff
mov dword [esi + 0xc], 1
je 0x425396
xor edi, edi
push edi
push dword [esi]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebx, eax
mov eax, dword [ebp + 0xc]
mov dword [esi + 0x18], edi
mov dword [esi + 0x2c], eax
cmp ebx, 3
jl 0x425224
push edi
lea eax, [ebp - 0xc]
push eax
push 3
lea eax, [ebp - 4]
push eax
push dword [esi]
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebp - 0xc], 3
jne 0x425219
push 3
lea eax, [ebp - 4]
push 0x4bc8b4
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x425219
mov dword [esi + 0x18], 0xfde9
sub ebx, 3
jmp 0x425224
push edi
push edi
push edi
push dword [esi]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp ebx, edi
jle 0x425252
lea eax, [ebx + 2]
push eax
push edi
push dword [0x59efb8]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [esi + 0x10], eax
cmp eax, edi
je 0x425252
push edi
lea ecx, [ebp - 0xc]
push ecx
push ebx
push eax
push dword [esi]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov ebx, dword [ebp - 0xc]
mov eax, dword [esi + 0x10]
cmp eax, edi
je 0x4253c7
xor ecx, ecx
mov word [eax + ebx], cx
mov edi, dword [esi + 0x10]
lea eax, [edi + ebx]
mov dword [esi + 0x14], eax
mov bl, 0xa
cmp edi, eax
jae 0x4253c7
mov al, byte [edi]
cmp al, 0x20
je 0x425280
cmp al, 9
jne 0x425283
inc edi
jmp 0x425276
mov al, byte [edi]
cmp al, 0x3b
jne 0x4252c4
inc edi
cmp byte [edi], 0x20
jne 0x425290
inc edi
push edi
push 2
push dword [ebp - 8]
lea eax, [esi + 0x1c]
push eax
call fcn.00425101
add esp, 0x10
mov dword [ebp - 8], eax
jmp 0x4252ba
mov al, byte [edi]
cmp al, bl
je 0x42537d
cmp al, 0xd
je 0x42537d
inc edi
cmp byte [edi], 0
jne 0x4252a7
jmp 0x42537d
cmp al, 0x5b
jne 0x425313
inc edi
push edi
push 1
push dword [ebp - 8]
lea eax, [esi + 0x1c]
push eax
call fcn.00425101
add esp, 0x10
mov dword [ebp - 8], eax
jmp 0x4252ef
mov al, byte [edi]
cmp al, 0x5d
je 0x4252fd
cmp al, bl
je 0x4252f4
cmp al, 0xd
je 0x4252f4
inc edi
cmp byte [edi], 0
jne 0x4252e0
cmp byte [edi], 0x5d
jne 0x42537d
mov byte [edi], 0
jmp 0x42530a
cmp al, bl
je 0x425380
cmp al, 0xd
je 0x425381
inc edi
mov al, byte [edi]
test al, al
jne 0x425302
jmp 0x425381
cmp al, bl
je 0x425381
cmp al, 0xd
je 0x425381
mov edx, edi
jmp 0x42532e
cmp al, 0x3d
je 0x425332
cmp al, 0xd
je 0x425332
cmp al, bl
je 0x425332
inc edi
mov al, byte [edi]
test al, al
jne 0x42531f
lea eax, [edi - 1]
jmp 0x425344
mov cl, byte [eax]
cmp cl, 0x20
je 0x425343
cmp cl, 9
jne 0x425348
dec eax
cmp eax, edx
ja 0x425337
mov byte [eax + 1], 0
inc edi
mov al, byte [edi]
cmp al, 0x20
je 0x42534c
cmp al, 9
je 0x42534c
push edi
push edx
push dword [ebp - 8]
lea eax, [esi + 0x1c]
push eax
call fcn.00425101
add esp, 0x10
mov dword [ebp - 8], eax
jmp 0x425378
mov al, byte [edi]
cmp al, bl
je 0x42537d
cmp al, 0xd
je 0x42537d
inc edi
cmp byte [edi], 0
jne 0x42536d
mov byte [edi], 0
inc edi
mov al, byte [edi]
cmp al, bl
je 0x425380
cmp al, 0xd
je 0x425380
cmp edi, dword [esi + 0x14]
jb 0x425276
jmp 0x4253c7
push dword [ebp + 8]
xor edi, edi
mov dword [esi], edi
mov dword [esi + 0x18], edi
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
push edi
push dword [0x59efb8]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [esi + 4], eax
cmp eax, edi
je 0x4253c7
push dword [ebp + 8]
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
mov eax, dword [esi]
pop edi
pop esi
pop ebx
leave
ret 8