Function at 0x425355
Capabilities:
Read file on windows

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xffffffa0
mov ebx, eax
push 0
push 0x8000080
push 3
push 0
push 3
push 0x80000000
push edx
call sub.KERNEL32.dll_CreateFileA
mov edi, eax
cmp edi, 0xffffffff
jne 0x425388
xor eax, eax
mov dword [ebx], eax
mov eax, ebx
jmp 0x4258b9
push 0
lea edx, [esp + 4]
push edx
push 0xc
lea ecx, [esp + 0x60]
push ecx
push edi
call sub.KERNEL32.dll_ReadFile
test eax, eax
je 0x4253a8
mov eax, dword [esp]
cmp eax, 0xc
je 0x4253b9
push edi
call sub.KERNEL32.dll_CloseHandle
xor edx, edx
mov eax, ebx
mov dword [ebx], edx
jmp 0x4258b9
mov edx, dword [esp + 0x54]
cmp edx, 0x46464952
jne 0x4253d1
mov ecx, dword [esp + 0x5c]
cmp ecx, 0x45564157
je 0x425408
mov eax, dword [esp + 0x58]
inc eax
shr eax, 1
add eax, eax
mov dword [esp + 0x58], eax
cmp eax, 4
jg 0x4253f4
push edi
call sub.KERNEL32.dll_CloseHandle
xor edx, edx
mov eax, ebx
mov dword [ebx], edx
jmp 0x4258b9
push 1
push 0
mov edx, dword [esp + 0x60]
sub edx, 4
push edx
push edi
call sub.KERNEL32.dll_SetFilePointer
jmp 0x425388
push 0
lea ecx, [esp + 4]
push ecx
push 8
lea eax, [esp + 0x10]
push eax
push edi
call sub.KERNEL32.dll_ReadFile
test eax, eax
je 0x425428
mov edx, dword [esp]
cmp edx, 8
je 0x425439
push edi
call sub.KERNEL32.dll_CloseHandle
xor ecx, ecx
mov eax, ebx
mov dword [ebx], ecx
jmp 0x4258b9
mov edx, dword [esp + 4]
cmp edx, 0x20746d66
je 0x425477
mov eax, dword [esp + 8]
inc eax
shr eax, 1
add eax, eax
mov dword [esp + 8], eax
test eax, eax
jg 0x425467
push edi
call sub.KERNEL32.dll_CloseHandle
xor edx, edx
mov eax, ebx
mov dword [ebx], edx
jmp 0x4258b9
push 1
push 0
push dword [esp + 0x10]
push edi
call sub.KERNEL32.dll_SetFilePointer
jmp 0x425408
mov eax, dword [esp + 8]
cmp eax, 0x2000
ja 0x425487
cmp eax, 0xe
jae 0x425498
push edi
call sub.KERNEL32.dll_CloseHandle
xor edx, edx
mov eax, ebx
mov dword [ebx], edx
jmp 0x4258b9
push dword [esp + 8]
call fcn.0044cdb4
pop ecx
mov esi, eax
push 0
lea eax, [esp + 4]
push eax
push dword [esp + 0x10]
push esi
push edi
call sub.KERNEL32.dll_ReadFile
test eax, eax
je 0x4254c5
mov edx, dword [esp]
mov ecx, dword [esp + 8]
cmp edx, ecx
je 0x4254dd
push esi
call fcn.0044cd5c
pop ecx
push edi
call sub.KERNEL32.dll_CloseHandle
xor eax, eax
mov dword [ebx], eax
mov eax, ebx
jmp 0x4258b9
push 0
lea edx, [esp + 4]
push edx
push 8
lea ecx, [esp + 0x10]
push ecx
push edi
call sub.KERNEL32.dll_ReadFile
test eax, eax
je 0x4254fd
mov eax, dword [esp]
cmp eax, 8
je 0x425515
push esi
call fcn.0044cd5c
pop ecx
push edi
call sub.KERNEL32.dll_CloseHandle
xor edx, edx
mov eax, ebx
mov dword [ebx], edx
jmp 0x4258b9
mov edx, dword [esp + 4]
cmp edx, 0x61746164
je 0x42555a
mov eax, dword [esp + 8]
inc eax
shr eax, 1
add eax, eax
mov dword [esp + 8], eax
test eax, eax
jg 0x42554a
push esi
call fcn.0044cd5c
pop ecx
push edi
call sub.KERNEL32.dll_CloseHandle
xor edx, edx
mov eax, ebx
mov dword [ebx], edx
jmp 0x4258b9
push 1
push 0
push dword [esp + 0x10]
push edi
call sub.KERNEL32.dll_SetFilePointer
jmp 0x4254dd
xor edx, edx
mov dword [esp + 0xc], edx
mov ax, word [esi + 2]
test ax, ax
jbe 0x425870
cmp ax, 0xff
ja 0x425870
mov edx, dword [esi + 4]
test edx, edx
jbe 0x425870
mov ecx, dword [esi + 4]
cmp ecx, 0x2ee00
ja 0x425870
cmp word [esi], 1
jne 0x4257f9
cmp word [esi + 0xe], 8
ja 0x425668
push 0x2c
call fcn.0044cd80
pop ecx
mov ebp, eax
test eax, eax
je 0x4255fe
mov dword [esp + 0x14], edi
mov edx, dword [esi + 4]
mov dword [esp + 0x18], edx
mov cl, byte [esi + 2]
mov byte [esp + 0x1c], cl
mov al, byte [esp + 0x1c]
push eax
push 0x3f800
push 1
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov eax, ebp
call fcn.00424a58
mov dword [ebp], 0x455c64
xor edx, edx
mov dl, byte [ebp + 0xc]
shl edx, 0xd
push edx
call fcn.0044cdb4
pop ecx
mov dword [ebp + 0x28], eax
mov ecx, ebp
jmp 0x425600
mov ecx, ebp
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x20], eax
mov edx, dword [esp + 0x20]
test edx, edx
je 0x42561c
mov eax, dword [esp + 0x20]
inc word [eax + 0xe]
lea edx, [esp + 0x20]
lea eax, [esp + 0xc]
call fcn.004249f0
mov edx, dword [esp + 0x20]
test edx, edx
je 0x425870
mov ecx, dword [esp + 0x20]
dec word [ecx + 0xe]
mov ax, word [ecx + 0xe]
test ax, ax
jne 0x425870
mov edx, dword [esp + 0x20]
test edx, edx
je 0x425870
mov edx, 3
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
call dword [ecx]
jmp 0x425870
cmp word [esi + 0xe], 0x10
ja 0x425737
push 0x2c
call fcn.0044cd80
pop ecx
mov ebp, eax
test eax, eax
je 0x4256cd
mov dword [esp + 0x28], edi
mov edx, dword [esi + 4]
mov dword [esp + 0x2c], edx
mov cl, byte [esi + 2]
mov byte [esp + 0x30], cl
mov al, byte [esp + 0x30]
push eax
push 0x7fff0
push 2
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x34]
mov eax, ebp
call fcn.00424a58
mov dword [ebp], 0x455c50
xor edx, edx
mov dl, byte [ebp + 0xc]
shl edx, 0xd
add edx, edx
push edx
call fcn.0044cdb4
pop ecx
mov dword [ebp + 0x28], eax
mov ecx, ebp
jmp 0x4256cf
mov ecx, ebp
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x24]
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x34]
test edx, edx
je 0x4256eb
mov eax, dword [esp + 0x34]
inc word [eax + 0xe]
lea edx, [esp + 0x34]
lea eax, [esp + 0xc]
call fcn.004249f0
mov edx, dword [esp + 0x34]
test edx, edx
je 0x425870
mov ecx, dword [esp + 0x34]
dec word [ecx + 0xe]
mov ax, word [ecx + 0xe]
test ax, ax
jne 0x425870
mov edx, dword [esp + 0x34]
test edx, edx
je 0x425870
mov edx, 3
mov eax, dword [esp + 0x34]
mov ecx, dword [eax]
call dword [ecx]
jmp 0x425870
push 0x2c
call fcn.0044cd80
pop ecx
mov ebp, eax
test eax, eax
je 0x425792
mov dword [esp + 0x3c], edi
mov edx, dword [esi + 4]
mov dword [esp + 0x40], edx
mov cl, byte [esi + 2]
mov byte [esp + 0x44], cl
mov al, byte [esp + 0x44]
push eax
push 0x7fff0
push 4
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
mov eax, ebp
call fcn.00424a58
mov dword [ebp], 0x455c3c
xor edx, edx
mov dl, byte [ebp + 0xc]
shl edx, 0xd
shl edx, 2
push edx
call fcn.0044cdb4
pop ecx
mov dword [ebp + 0x28], eax
mov ecx, ebp
jmp 0x425794
mov ecx, ebp
mov dword [esp + 0x38], ecx
mov eax, dword [esp + 0x38]
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0x48]
test edx, edx
je 0x4257b0
mov eax, dword [esp + 0x48]
inc word [eax + 0xe]
lea edx, [esp + 0x48]
lea eax, [esp + 0xc]
call fcn.004249f0
mov edx, dword [esp + 0x48]
test edx, edx
je 0x425870
mov ecx, dword [esp + 0x48]
dec word [ecx + 0xe]
mov ax, word [ecx + 0xe]
test ax, ax
jne 0x425870
mov edx, dword [esp + 0x48]
test edx, edx
je 0x425870
mov edx, 3
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
call dword [ecx]
jmp 0x425870
push 0x93
call fcn.0044cd80
pop ecx
mov ebp, eax
test eax, eax
je 0x42581b
push dword [esp + 8]
mov ecx, esi
mov edx, edi
mov eax, ebp
call fcn.00424c83
jmp 0x42581d
mov eax, ebp
mov dword [esp + 0x4c], eax
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x50], edx
mov ecx, dword [esp + 0x50]
test ecx, ecx
je 0x425839
mov eax, dword [esp + 0x50]
inc word [eax + 0xe]
lea edx, [esp + 0x50]
lea eax, [esp + 0xc]
call fcn.004249f0
mov edi, dword [esp + 0x50]
test edi, edi
je 0x425870
dec word [edi + 0xe]
mov ax, word [edi + 0xe]
test ax, ax
jne 0x425870
mov edx, dword [esp + 0x50]
test edx, edx
je 0x425870
mov edx, 3
mov eax, dword [esp + 0x50]
mov ecx, dword [eax]
call dword [ecx]
push esi
call fcn.0044cd5c
pop ecx
mov esi, dword [esp + 0xc]
mov dword [ebx], esi
test esi, esi
je 0x425887
mov eax, dword [ebx]
inc word [eax + 0xe]
mov eax, ebx
push eax
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4258b8
mov ecx, dword [esp + 0x10]
dec word [ecx + 0xe]
mov ax, word [ecx + 0xe]
test ax, ax
jne 0x4258b8
mov edx, dword [esp + 0x10]
test edx, edx
je 0x4258b8
mov edx, 3
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
call dword [ecx]
pop eax
add esp, 0x60
pop ebp
pop edi
pop esi
pop ebx
ret