Function at 0x406270
Capabilities:
Read file on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [sym.imp.MSVCR100.dll_fread]
push esi
push edi
mov edi, ecx
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x34], ecx
cmp dword [ebp + 0xc], ecx
jle 0x4063de
lea esi, [eax + 0x1e]
mov dword [ebp - 0x2c], esi
jmp 0x4062b3
mov esi, dword [ebp - 0x2c]
push edi
push 1
lea edx, [ebp - 0x1c]
xor ecx, ecx
push 4
push edx
mov word [esi + 2], cx
call ebx
add esp, 0x10
cmp dword [ebp - 0x1c], 2
jne 0x40643d
push edi
push 1
lea eax, [ebp - 0x3c]
push 4
push eax
call ebx
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
add esp, 0x10
test eax, eax
setne cl
inc ecx
mov word [esi - 2], cx
cmp eax, 1
jne 0x4062fd
mov edx, 8
mov word [esi], dx
jmp 0x406300
mov word [esi], ax
push edi
push 1
lea eax, [ebp - 0x40]
push 4
push eax
call ebx
push edi
push 1
lea ecx, [ebp - 0x30]
push 4
push ecx
call ebx
mov edx, dword [ebp - 0x30]
push 1
push 0
push 8
push edi
mov dword [esi - 6], edx
call dword [sym.imp.MSVCR100.dll__fseeki64]
push edi
push 1
lea eax, [ebp - 0x10]
push 8
push eax
call ebx
add esp, 0x40
push 8
lea ecx, [ebp - 0x10]
push ecx
add esi, 4
push esi
call dword [sym.imp.MSVCR100.dll_strncpy]
add esp, 0xc
mov eax, 8
call fcn.004045b0
cmp dword [ebp - 0x40], 0
je 0x40639a
push edi
push 1
lea edx, [ebp - 0x1c]
push 4
push edx
call ebx
mov eax, dword [ebp - 0x1c]
mov ecx, eax
add esp, 0x10
and ecx, 0x80000003
jns 0x40637a
dec ecx
or ecx, 0xfffffffc
inc ecx
mov dword [ebp - 0x38], ecx
je 0x40638b
mov edx, 4
sub edx, ecx
add eax, edx
mov dword [ebp - 0x1c], eax
cdq
push 1
push edx
push eax
push edi
call dword [sym.imp.MSVCR100.dll__fseeki64]
add esp, 0x10
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x4063c1
cdq
xor eax, edx
sub eax, edx
mov dword [ebp - 0x30], eax
add eax, eax
add eax, eax
add eax, eax
je 0x4063c1
push edi
push 1
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0xffffffe2
push eax
call ebx
add esp, 0x10
cmp dword [ebp - 0x3c], 0xffffffff
je 0x4063ca
inc dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
add dword [ebp - 0x2c], 0x30
inc eax
mov dword [ebp - 0x28], eax
cmp eax, dword [ebp + 0xc]
jl 0x4062b0
push edi
push 1
lea ecx, [ebp - 0x1c]
push 4
push ecx
call ebx
mov eax, dword [ebp - 0x1c]
add esp, 0x10
cmp eax, 0x3e7
je 0x406708
lea ebx, [ebx]
sub eax, 3
je 0x406646
sub eax, 3
je 0x406621
dec eax
jne 0x406744
push edi
push 1
lea edx, [ebp - 0x38]
push 4
push edx
call ebx
mov ecx, dword [ebp - 0x38]
lea eax, [ecx - 3]
add esp, 0x10
cmp eax, 0x15
ja case.default.0x406436
jmp dword [eax*4 + 0x4067a0]
mov edi, dword [ebp - 0x24]
mov esi, dword [sym.imp.MSVCR100.dll_printf]
push str.SPSS
lea ecx, [edi + 1]
push ecx
push str.The_level__d_file_does_not_seem_to_be_a__s_file__n
call esi
mov eax, dword [edi*4 + 0x438510]
push eax
push str.__s_is_an_empty_file_n
call esi
add esp, 0x14
call fcn.00404c60
inc dword [0x437d8c]
je 0x4064ac
mov edi, dword [sym.imp.MSVCR100.dll_clock]
call edi
mov ecx, eax
mov eax, 0x10624dd3
imul ecx
sar edx, 6
mov esi, edx
shr esi, 0x1f
add esi, edx
call edi
mov ecx, eax
mov eax, 0x10624dd3
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
sub eax, esi
cmp eax, 3
jbe 0x406490
push 1
call dword [sym.imp.MSVCR100.dll_exit]
push 1
push 0
push 0x28
push edi
call dword [sym.imp.MSVCR100.dll__fseeki64]
add esp, 0x10
jmp case.0x406436.9
mov esi, dword [sym.imp.MSVCR100.dll__fseeki64]
push 1
push 0
push 8
push edi
call esi
push edi
push 1
push 8
push 0x439768
call ebx
push 1
push 0
push 0x10
push edi
call esi
add esp, 0x30
jmp case.0x406436.9
push edi
push 1
lea eax, [ebp - 0x18]
push 4
push eax
call ebx
push edi
push 1
lea ecx, [ebp - 0x14]
push 4
push ecx
call ebx
mov eax, dword [ebp - 0x14]
cdq
push 1
push edx
push eax
push edi
call dword [sym.imp.MSVCR100.dll__fseeki64]
add esp, 0x30
jmp case.0x406436.9
push edi
push 1
lea edx, [ebp - 0x18]
push 4
push edx
call ebx
push edi
push 1
push 4
lea eax, [ebp - 0x14]
push eax
call ebx
mov eax, dword [ebp - 0x14]
add eax, eax
add eax, eax
cdq
push 1
push edx
push eax
push edi
call dword [sym.imp.MSVCR100.dll__fseeki64]
add esp, 0x30
jmp case.0x406436.9
push edi
push 1
lea edx, [ebp - 0x18]
push 4
push edx
call ebx
push edi
push 1
lea eax, [ebp - 0x14]
push 4
push eax
call ebx
mov eax, dword [ebp - 0x14]
cdq
push 1
push edx
push eax
push edi
call dword [sym.imp.MSVCR100.dll__fseeki64]
add esp, 0x30
jmp case.0x406436.9
push edi
push 1
lea ecx, [ebp - 0x18]
push 4
push ecx
call ebx
push edi
push 1
push 4
lea edx, [ebp - 0x14]
push edx
jmp 0x406536
push edi
push 1
lea edx, [ebp - 0x18]
push 4
push edx
call ebx
push edi
push 1
lea eax, [ebp - 0x14]
push 4
push eax
call ebx
mov eax, dword [ebp - 0x14]
cdq
push 1
push edx
push eax
push edi
call dword [sym.imp.MSVCR100.dll__fseeki64]
add esp, 0x30
jmp case.0x406436.9
push edi
push 1
lea edx, [ebp - 0x18]
push 4
push edx
call ebx
push edi
push 1
lea eax, [ebp - 0x14]
push 4
push eax
call ebx
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x18]
cdq
push 1
push edx
push eax
push edi
call dword [sym.imp.MSVCR100.dll__fseeki64]
add esp, 0x30
jmp case.0x406436.9
push edi
push 1
lea ecx, [ebp - 0x18]
push 4
push ecx
call ebx
push edi
push 1
lea edx, [ebp - 0x14]
push 4
push edx
call ebx
mov eax, dword [ebp - 0x14]
cdq
push 1
push edx
push eax
push edi
call dword [sym.imp.MSVCR100.dll__fseeki64]
add esp, 0x30
jmp case.0x406436.9
push edi
push 1
lea eax, [ebp - 0x18]
push 4
push eax
call ebx
mov eax, dword [ebp - 0x18]
lea eax, [eax + eax*4]
shl eax, 4
cdq
push 1
push edx
push eax
push edi
call dword [sym.imp.MSVCR100.dll__fseeki64]
jmp 0x4066e9
push edi
push 1
lea ecx, [ebp - 0x18]
push 4
push ecx
call ebx
add esp, 0x10
cmp dword [ebp - 0x18], 0
mov dword [ebp - 0x28], 0
jle 0x4066b1
mov esi, dword [sym.imp.MSVCR100.dll__fseeki64]
push 1
push 0
push 8
push edi
call esi
push edi
push 1
lea edx, [ebp - 0x1d]
push 1
push edx
call ebx
movzx eax, byte [ebp - 0x1d]
lea ecx, [eax + 1]
add esp, 0x20
and ecx, 7
jne 0x40668e
xor edx, edx
jmp 0x406695
mov edx, 8
sub edx, ecx
lea eax, [edx + eax]
cdq
push 1
push edx
push eax
push edi
call esi
mov eax, dword [ebp - 0x28]
inc eax
add esp, 0x10
mov dword [ebp - 0x28], eax
cmp eax, dword [ebp - 0x18]
jl 0x406661
jmp 0x4066b7
mov esi, dword [sym.imp.MSVCR100.dll__fseeki64]
push edi
push 1
lea eax, [ebp - 0x1c]
push 4
push eax
call ebx
add esp, 0x10
cmp dword [ebp - 0x1c], 4
jne 0x406779
push edi
push 1
lea ecx, [ebp - 0x18]
push 4
push ecx
call ebx
mov eax, dword [ebp - 0x18]
add eax, eax
add eax, eax
cdq
push 1
push edx
push eax
push edi
call esi
add esp, 0x20
push edi
push 1
lea edx, [ebp - 0x1c]
push 4
push edx
call ebx
mov eax, dword [ebp - 0x1c]
add esp, 0x10
cmp eax, 0x3e7
jne 0x406400
push 1
push 0
push 4
push edi
call dword [sym.imp.MSVCR100.dll__fseeki64]
push edi
call dword [sym.imp.MSVCR100.dll__ftelli64]
mov ecx, dword [ebp - 0x24]
mov dword [ecx*8 + 0x437c40], eax
mov eax, dword [ebp - 0x34]
add esp, 0x14
mov dword [ecx*8 + 0x437c44], edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0042e325
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x24]
jmp 0x40677d
mov edx, dword [ebp - 0x24]
mov esi, dword [sym.imp.MSVCR100.dll_printf]
inc edx
push edx
push ecx
push str.Invalid_dictionary_subtype__d_in_SPSS_level__d_file.__This_is_n
call esi
push str.probably_due_to_a_new_version_of_SPSS_that_HLM_does_not_know_about_yet._n
call esi
add esp, 0x10
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0042e325
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x24]
inc eax
push eax
push str.The_level__d_SPSS_has_a_strange_header._n
call dword [sym.imp.MSVCR100.dll_printf]
mov ecx, dword [ebp - 8]
add esp, 8
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.0042e325
mov esp, ebp
pop ebp
ret