Function at 0x401929
Capabilities:
Read file on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x20
mov qword [rbp + 0x10], rcx
mov r9, qword [rbp + 0x10]
mov r8d, 1
mov edx, 0x10
lea rcx, [0x0040f060]
call sub.msvcrt.dll_fread
cmp rax, 1
je 0x401960
mov eax, 0
jmp 0x401dbd
movzx eax, byte [0x0040f060]
cmp al, 0x7f
jne 0x40198c
movzx eax, byte [0x0040f061]
cmp al, 0x45
jne 0x40198c
movzx eax, byte [0x0040f062]
cmp al, 0x4c
jne 0x40198c
movzx eax, byte [0x0040f063]
cmp al, 0x46
je 0x401996
mov eax, 0
jmp 0x401dbd
movzx eax, byte [0x0040f065]
movzx eax, al
cmp eax, 2
je 0x4019c9
mov rax, qword [0x0040bc00]
mov rdx, qword [fcn.00402e94]
mov qword [rax], rdx
mov rax, qword [0x0040bc30]
mov rdx, qword [0x0040bc50]
mov qword [rax], rdx
jmp 0x4019ec
mov rax, qword [0x0040bc00]
mov rdx, qword [fcn.004031a8]
mov qword [rax], rdx
mov rax, qword [0x0040bc30]
mov rdx, qword [0x0040bc40]
mov qword [rax], rdx
nop
movzx eax, byte [0x0040f064]
movzx eax, al
cmp eax, 1
je 0x401a0e
cmp eax, 2
je 0x401be5
mov eax, 0
jmp 0x401dbd
mov r9, qword [rbp + 0x10]
mov r8d, 1
mov edx, 0x24
lea rcx, [0x0040f0d0]
call sub.msvcrt.dll_fread
cmp rax, 1
je 0x401a39
mov eax, 0
jmp 0x401dbd
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f0d0]
call rax
mov word [0x0040f090], ax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f0d2]
call rax
mov word [0x0040f092], ax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 4
lea rcx, [0x0040f0d4]
call rax
mov dword [0x0040f088], eax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 4
lea rcx, [0x0040f0d8]
call rax
mov qword [0x0040f070], rax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 4
lea rcx, [0x0040f0dc]
call rax
mov qword [0x0040f078], rax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 4
lea rcx, [0x0040f0e0]
call rax
mov qword [0x0040f080], rax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 4
lea rcx, [0x0040f0e4]
call rax
mov dword [0x0040f08c], eax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f0e8]
call rax
mov dword [0x0040f094], eax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f0ea]
call rax
mov dword [0x0040f098], eax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f0ec]
call rax
mov dword [0x0040f09c], eax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f0ee]
call rax
mov dword [0x0040f0a0], eax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f0f0]
call rax
mov dword [0x0040f0a4], eax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f0f2]
call rax
mov dword [0x0040f0a8], eax
mov rax, qword [0x0040f060]
mov rdx, qword [0x0040f068]
mov qword [0x0040f0c0], rax
mov qword [0x0040f0c8], rdx
jmp 0x401db8
mov r9, qword [rbp + 0x10]
mov r8d, 1
mov edx, 0x30
lea rcx, [0x0040f110]
call sub.msvcrt.dll_fread
cmp rax, 1
je 0x401c10
mov eax, 0
jmp 0x401dbd
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f110]
call rax
mov word [0x0040f090], ax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f112]
call rax
mov word [0x0040f092], ax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 4
lea rcx, [0x0040f114]
call rax
mov dword [0x0040f088], eax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 8
lea rcx, [0x0040f118]
call rax
mov qword [0x0040f070], rax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 8
lea rcx, [0x0040f120]
call rax
mov qword [0x0040f078], rax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 8
lea rcx, [0x0040f128]
call rax
mov qword [0x0040f080], rax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 4
lea rcx, [0x0040f130]
call rax
mov dword [0x0040f08c], eax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f134]
call rax
mov dword [0x0040f094], eax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f136]
call rax
mov dword [0x0040f098], eax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f138]
call rax
mov dword [0x0040f09c], eax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f13a]
call rax
mov dword [0x0040f0a0], eax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f13c]
call rax
mov dword [0x0040f0a4], eax
mov rax, qword [0x0040bc00]
mov rax, qword [rax]
mov edx, 2
lea rcx, [0x0040f13e]
call rax
mov dword [0x0040f0a8], eax
mov rax, qword [0x0040f060]
mov rdx, qword [0x0040f068]
mov qword [0x0040f100], rax
mov qword [0x0040f108], rdx
nop
mov eax, 1
add rsp, 0x20
pop rbp
ret