Function at 0x4d4d60
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
push esi
mov dword [ebp - 0xc], 0xfffffffe
mov eax, dword [ebp + 0x10]
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 0xfffffffe
jne 0x4d4d98
call fcn.004dc140
mov dword [eax], 0
call fcn.004dc110
mov dword [eax], 9
or eax, 0xffffffff
jmp 0x4d5c8f
cmp dword [ebp + 8], 0
jl 0x4d4db2
mov ecx, dword [ebp + 8]
cmp ecx, dword [0x5cc1e4]
jae 0x4d4db2
mov dword [ebp - 0x68], 1
jmp 0x4d4db9
mov dword [ebp - 0x68], 0
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0
jne 0x4d4de6
push str._fh___0___unsigned_fh____unsigned__nhandle_
push 0
push 0x84
push 0x597f18
push 2
call fcn.004d4350
add esp, 0x14
cmp eax, 1
jne 0x4d4de6
int3
cmp dword [ebp - 0x44], 0
jne 0x4d4e28
call fcn.004dc140
mov dword [eax], 0
call fcn.004dc110
mov dword [eax], 9
push 0
push 0x84
push 0x597f18
push str._read_nolock
push str._fh___0___unsigned_fh____unsigned__nhandle_
call fcn.004d13a0
add esp, 0x14
or eax, 0xffffffff
jmp 0x4d5c8f
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x5cc200]
movsx ecx, byte [eax + edx + 4]
and ecx, 1
neg ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0x48], ecx
jne 0x4d4e72
push str.__osfile_fh___FOPEN_
push 0
push 0x85
push 0x597f18
push 2
call fcn.004d4350
add esp, 0x14
cmp eax, 1
jne 0x4d4e72
int3
cmp dword [ebp - 0x48], 0
jne 0x4d4eb4
call fcn.004dc140
mov dword [eax], 0
call fcn.004dc110
mov dword [eax], 9
push 0
push 0x85
push 0x597f18
push str._read_nolock
push str.__osfile_fh___FOPEN_
call fcn.004d13a0
add esp, 0x14
or eax, 0xffffffff
jmp 0x4d5c8f
mov eax, SysReAllocString
cmp eax, dword [ebp + 0x10]
sbb ecx, ecx
add ecx, 1
mov dword [ebp - 0x4c], ecx
jne 0x4d4ee7
push str._cnt___INT_MAX_
push 0
push 0x86
push 0x597f18
push 2
call fcn.004d4350
add esp, 0x14
cmp eax, 1
jne 0x4d4ee7
int3
cmp dword [ebp - 0x4c], 0
jne 0x4d4f29
call fcn.004dc140
mov dword [eax], 0
call fcn.004dc110
mov dword [eax], 0x16
push 0
push 0x86
push 0x597f18
push str._read_nolock
push str._cnt___INT_MAX_
call fcn.004d13a0
add esp, 0x14
or eax, 0xffffffff
jmp 0x4d5c8f
mov dword [ebp - 0x34], 0
cmp dword [ebp + 0x10], 0
je 0x4d4f56
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x5cc200]
movsx eax, byte [edx + ecx + 4]
and eax, 2
je 0x4d4f5d
xor eax, eax
jmp 0x4d5c8f
xor ecx, ecx
cmp dword [ebp + 0xc], 0
setne cl
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 0
jne 0x4d4f90
push str._inputbuf___NULL_
push 0
push 0x90
push 0x597f18
push 2
call fcn.004d4350
add esp, 0x14
cmp eax, 1
jne 0x4d4f90
int3
cmp dword [ebp - 0x50], 0
jne 0x4d4fd2
call fcn.004dc140
mov dword [eax], 0
call fcn.004dc110
mov dword [eax], 0x16
push 0
push 0x90
push 0x597f18
push str._read_nolock
push str._inputbuf___NULL_
call fcn.004d13a0
add esp, 0x14
or eax, 0xffffffff
jmp 0x4d5c8f
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x5cc200]
mov al, byte [edx + ecx + 0x24]
shl al, 1
sar al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x15]
mov byte [ebp - 0x6c], cl
cmp byte [ebp - 0x6c], 1
je 0x4d500e
cmp byte [ebp - 0x6c], 2
je 0x4d5118
jmp 0x4d5196
mov edx, dword [ebp + 0x10]
and edx, 1
neg edx
sbb edx, edx
add edx, 1
mov dword [ebp - 0x54], edx
jne 0x4d5041
push str.__cnt__1___0_
push 0
push 0xac
push 0x597f18
push 2
call fcn.004d4350
add esp, 0x14
cmp eax, 1
jne 0x4d5041
int3
cmp dword [ebp - 0x54], 0
jne 0x4d5083
call fcn.004dc140
mov dword [eax], 0
call fcn.004dc110
mov dword [eax], 0x16
push 0
push 0xac
push 0x597f18
push str._read_nolock
push str.__cnt__1___0_
call fcn.004d13a0
add esp, 0x14
or eax, 0xffffffff
jmp 0x4d5c8f
mov ecx, dword [ebp + 0x10]
shr ecx, 1
cmp ecx, 4
jae 0x4d5096
mov dword [ebp - 0x70], 4
jmp 0x4d509e
mov edx, dword [ebp + 0x10]
shr edx, 1
mov dword [ebp - 0x70], edx
mov eax, dword [ebp - 0x70]
mov dword [ebp + 0x10], eax
push 0xb0
push str.read.c
push 2
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.004d1650
add esp, 0x10
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x4d50e3
call fcn.004dc110
mov dword [eax], 0xc
call fcn.004dc140
mov dword [eax], 8
or eax, 0xffffffff
jmp 0x4d5c8f
push 1
push 0
push 0
mov edx, dword [ebp + 8]
push edx
call fcn.004eccf0
add esp, 0x10
mov ecx, dword [ebp + 8]
sar ecx, 5
mov esi, dword [ebp + 8]
and esi, 0x1f
shl esi, 6
mov ecx, dword [ecx*4 + 0x5cc200]
mov dword [ecx + esi + 0x28], eax
mov dword [ecx + esi + 0x2c], edx
jmp 0x4d519c
mov edx, dword [ebp + 0x10]
and edx, 1
neg edx
sbb edx, edx
add edx, 1
mov dword [ebp - 0x58], edx
jne 0x4d514b
push str.__cnt__1___0_
push 0
push 0xbc
push 0x597f18
push 2
call fcn.004d4350
add esp, 0x14
cmp eax, 1
jne 0x4d514b
int3
cmp dword [ebp - 0x58], 0
jne 0x4d518d
call fcn.004dc140
mov dword [eax], 0
call fcn.004dc110
mov dword [eax], 0x16
push 0
push 0xbc
push 0x597f18
push str._read_nolock
push str.__cnt__1___0_
call fcn.004d13a0
add esp, 0x14
or eax, 0xffffffff
jmp 0x4d5c8f
mov ecx, dword [ebp + 0x10]
and ecx, 0xfffffffe
mov dword [ebp + 0x10], ecx
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x5cc200]
movsx ecx, byte [eax + edx + 4]
and ecx, 0x48
je 0x4d535c
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x5cc200]
movsx edx, byte [ecx + eax + 5]
cmp edx, 0xa
je 0x4d535c
cmp dword [ebp + 0x10], 0
je 0x4d535c
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x5cc200]
mov eax, dword [ebp - 0x38]
mov cl, byte [edx + ecx + 5]
mov byte [eax], cl
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp + 0x10]
sub ecx, 1
mov dword [ebp + 0x10], ecx
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x5cc200]
mov byte [ecx + eax + 5], 0xa
movsx edx, byte [ebp - 0x15]
test edx, edx
je 0x4d535c
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x5cc200]
movsx eax, byte [edx + ecx + 0x25]
cmp eax, 0xa
je 0x4d535c
cmp dword [ebp + 0x10], 0
je 0x4d535c
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x5cc200]
mov ecx, dword [ebp - 0x38]
mov dl, byte [eax + edx + 0x25]
mov byte [ecx], dl
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp + 0x10]
sub edx, 1
mov dword [ebp + 0x10], edx
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x5cc200]
mov byte [edx + ecx + 0x25], 0xa
movsx eax, byte [ebp - 0x15]
cmp eax, 1
jne 0x4d535c
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x5cc200]
movsx ecx, byte [eax + edx + 0x26]
cmp ecx, 0xa
je 0x4d535c
cmp dword [ebp + 0x10], 0
je 0x4d535c
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x5cc200]
mov edx, dword [ebp - 0x38]
mov al, byte [ecx + eax + 0x26]
mov byte [edx], al
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
mov eax, dword [ebp + 0x10]
sub eax, 1
mov dword [ebp + 0x10], eax
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x5cc200]
mov byte [eax + edx + 0x26], 0xa
push 0
lea ecx, [ebp - 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x5cc200]
mov ecx, dword [eax + edx]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x4d539c
cmp dword [ebp - 0x14], 0
jl 0x4d539c
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp + 0x10]
jbe 0x4d53fa
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 5
jne 0x4d53ce
call fcn.004dc110
mov dword [eax], 9
call fcn.004dc140
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
mov dword [ebp - 0xc], 0xffffffff
jmp 0x4d5c64
cmp dword [ebp - 0x24], 0x6d
jne 0x4d53e2
mov dword [ebp - 0xc], 0
jmp 0x4d5c64
mov edx, dword [ebp - 0x24]
push edx
call fcn.004dc060
add esp, 4
mov dword [ebp - 0xc], 0xffffffff
jmp 0x4d5c64
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x5cc200]
movsx ecx, byte [eax + edx + 4]
and ecx, 0x80
je 0x4d5c64
movsx edx, byte [ebp - 0x15]
cmp edx, 2
je 0x4d5923
cmp dword [ebp - 0x14], 0
je 0x4d5482
mov eax, dword [ebp - 0x2c]
movsx ecx, byte [eax]
cmp ecx, 0xa
jne 0x4d5482
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x5cc200]
movsx edx, byte [ecx + eax + 4]
or edx, 4
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov eax, dword [eax*4 + 0x5cc200]
mov byte [eax + ecx + 4], dl
jmp 0x4d54ba
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x5cc200]
movsx ecx, byte [eax + edx + 4]
and ecx, 0xfffffffb
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov edx, dword [edx*4 + 0x5cc200]
mov byte [edx + eax + 4], cl
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x34]
cmp dword [ebp - 8], edx
jae 0x4d570e
mov eax, dword [ebp - 8]
movsx ecx, byte [eax]
cmp ecx, 0x1a
jne 0x4d5564
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x5cc200]
movsx edx, byte [ecx + eax + 4]
and edx, 0x40
jne 0x4d553e
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x5cc200]
movsx eax, byte [edx + ecx + 4]
or eax, 2
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov ecx, dword [ecx*4 + 0x5cc200]
mov byte [ecx + edx + 4], al
jmp 0x4d555a
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 8]
mov cl, byte [eax]
mov byte [edx], cl
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
jmp 0x4d570e
mov ecx, dword [ebp - 8]
movsx edx, byte [ecx]
cmp edx, 0xd
je 0x4d5590
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx]
mov byte [eax], dl
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
jmp 0x4d5709
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + edx - 1]
cmp dword [ebp - 8], ecx
jae 0x4d55e6
mov edx, dword [ebp - 8]
movsx eax, byte [edx + 1]
cmp eax, 0xa
jne 0x4d55c5
mov ecx, dword [ebp - 8]
add ecx, 2
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x28]
mov byte [edx], 0xa
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
jmp 0x4d55e1
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 8]
mov al, byte [edx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x4d5709
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov dword [ebp - 0x24], 0
push 0
lea ecx, [ebp - 0x14]
push ecx
push 1
lea edx, [ebp - 0xd]
push edx
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x5cc200]
mov eax, dword [edx + ecx]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x4d562f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x4d563b
cmp dword [ebp - 0x14], 0
jne 0x4d564f
mov ecx, dword [ebp - 0x28]
mov byte [ecx], 0xd
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x4d5709
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x5cc200]
movsx eax, byte [edx + ecx + 4]
and eax, 0x48
je 0x4d56b7
movsx ecx, byte [ebp - 0xd]
cmp ecx, 0xa
jne 0x4d5689
mov edx, dword [ebp - 0x28]
mov byte [edx], 0xa
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
jmp 0x4d56b5
mov ecx, dword [ebp - 0x28]
mov byte [ecx], 0xd
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x5cc200]
mov al, byte [ebp - 0xd]
mov byte [edx + ecx + 5], al
jmp 0x4d5709
mov ecx, dword [ebp - 0x28]
cmp ecx, dword [ebp - 0x2c]
jne 0x4d56d9
movsx edx, byte [ebp - 0xd]
cmp edx, 0xa
jne 0x4d56d9
mov eax, dword [ebp - 0x28]
mov byte [eax], 0xa
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
jmp 0x4d5709
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
mov edx, dword [ebp + 8]
push edx
call fcn.004eccf0
add esp, 0x10
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], edx
movsx eax, byte [ebp - 0xd]
cmp eax, 0xa
je 0x4d5709
mov ecx, dword [ebp - 0x28]
mov byte [ecx], 0xd
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x4d54c6
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
movsx ecx, byte [ebp - 0x15]
cmp ecx, 1
jne 0x4d591e
cmp dword [ebp - 0x34], 0
je 0x4d591e
mov edx, dword [ebp - 0x28]
sub edx, 1
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
movsx ecx, byte [eax]
and ecx, 0x80
jne 0x4d5753
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x4d58a2
mov dword [ebp - 0x5c], 1
mov eax, dword [ebp - 0x28]
movzx ecx, byte [eax]
movsx edx, byte [ecx + 0x5c5ac8]
test edx, edx
jne 0x4d578d
cmp dword [ebp - 0x5c], 4
jg 0x4d578d
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x2c]
jb 0x4d578d
mov ecx, dword [ebp - 0x28]
sub ecx, 1
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
jmp 0x4d575a
mov eax, dword [ebp - 0x28]
movzx ecx, byte [eax]
movsx edx, byte [ecx + 0x5c5ac8]
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 0
jne 0x4d57ba
call fcn.004dc110
mov dword [eax], 0x2a
mov dword [ebp - 0xc], 0xffffffff
jmp 0x4d5c64
mov eax, dword [ebp - 0x60]
add eax, 1
cmp eax, dword [ebp - 0x5c]
jne 0x4d57d3
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x28], ecx
jmp 0x4d58a2
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x5cc200]
movsx edx, byte [ecx + eax + 4]
and edx, 0x48
je 0x4d5886
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x5cc200]
mov eax, dword [ebp - 0x28]
mov al, byte [eax]
mov byte [edx + ecx + 5], al
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x5c], 2
jl 0x4d584d
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x5cc200]
mov edx, dword [ebp - 0x28]
mov dl, byte [edx]
mov byte [ecx + eax + 0x25], dl
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x5c], 3
jne 0x4d587b
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x5cc200]
mov ecx, dword [ebp - 0x28]
mov cl, byte [ecx]
mov byte [eax + edx + 0x26], cl
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x5c]
mov dword [ebp - 0x28], eax
jmp 0x4d58a2
push 1
mov eax, dword [ebp - 0x5c]
neg eax
cdq
push edx
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004eccf0
add esp, 0x10
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 4]
shr eax, 1
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x34]
push edx
mov eax, dword [ebp - 0x2c]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jne 0x4d58ee
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.004dc060
add esp, 4
mov dword [ebp - 0xc], 0xffffffff
jmp 0x4d5c64
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x2c]
xor edx, edx
cmp dword [ebp - 0x34], ecx
setne dl
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov eax, dword [eax*4 + 0x5cc200]
mov dword [eax + ecx + 0x30], edx
mov ecx, dword [ebp - 0x34]
shl ecx, 1
mov dword [ebp - 0x34], ecx
jmp 0x4d5c64
cmp dword [ebp - 0x14], 0
je 0x4d596e
mov edx, dword [ebp - 0x2c]
movzx eax, word [edx]
cmp eax, 0xa
jne 0x4d596e
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x5cc200]
movsx ecx, byte [eax + edx + 4]
or ecx, 4
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov edx, dword [edx*4 + 0x5cc200]
mov byte [edx + eax + 4], cl
jmp 0x4d59a6
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x5cc200]
movsx eax, byte [edx + ecx + 4]
and eax, 0xfffffffb
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov ecx, dword [ecx*4 + 0x5cc200]
mov byte [ecx + edx + 4], al
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x34]
cmp dword [ebp - 0x30], ecx
jae 0x4d5c5b
mov edx, dword [ebp - 0x30]
movzx eax, word [edx]
cmp eax, 0x1a
jne 0x4d5a52
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x5cc200]
movsx ecx, byte [eax + edx + 4]
and ecx, 0x40
jne 0x4d5a2a
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x5cc200]
movsx edx, byte [ecx + eax + 4]
or edx, 2
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov eax, dword [eax*4 + 0x5cc200]
mov byte [eax + ecx + 4], dl
jmp 0x4d5a48
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x30]
mov ax, word [edx]
mov word [ecx], ax
mov ecx, dword [ebp - 0x20]
add ecx, 2
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x30]
add edx, 2
mov dword [ebp - 0x30], edx
jmp 0x4d5c5b
mov eax, dword [ebp - 0x30]
movzx ecx, word [eax]
cmp ecx, 0xd
je 0x4d5a80
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov cx, word [eax]
mov word [edx], cx
mov edx, dword [ebp - 0x20]
add edx, 2
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x30]
add eax, 2
mov dword [ebp - 0x30], eax
jmp 0x4d5c56
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
lea eax, [edx + ecx - 2]
cmp dword [ebp - 0x30], eax
jae 0x4d5ada
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + 2]
cmp edx, 0xa
jne 0x4d5ab7
mov eax, dword [ebp - 0x30]
add eax, 4
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x20]
mov word [ecx], 0xa
mov edx, dword [ebp - 0x20]
add edx, 2
mov dword [ebp - 0x20], edx
jmp 0x4d5ad5
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x30]
mov dx, word [ecx]
mov word [eax], dx
mov eax, dword [ebp - 0x20]
add eax, 2
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x30]
add ecx, 2
mov dword [ebp - 0x30], ecx
jmp 0x4d5c56
mov edx, dword [ebp - 0x30]
add edx, 2
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x14]
push eax
push 2
lea ecx, [ebp - 0x1c]
push ecx
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x5cc200]
mov edx, dword [ecx + eax]
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x4d5b23
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x4d5b2f
cmp dword [ebp - 0x14], 0
jne 0x4d5b45
mov eax, dword [ebp - 0x20]
mov word [eax], 0xd
mov ecx, dword [ebp - 0x20]
add ecx, 2
mov dword [ebp - 0x20], ecx
jmp 0x4d5c56
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x5cc200]
movsx edx, byte [ecx + eax + 4]
and edx, 0x48
je 0x4d5c00
movzx eax, word [ebp - 0x1c]
cmp eax, 0xa
jne 0x4d5b85
mov ecx, dword [ebp - 0x20]
mov word [ecx], 0xa
mov edx, dword [ebp - 0x20]
add edx, 2
mov dword [ebp - 0x20], edx
jmp 0x4d5bfe
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x20]
mov word [ecx], 0xd
mov edx, dword [ebp - 0x20]
add edx, 2
mov dword [ebp - 0x20], edx
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x5cc200]
mov eax, dword [ebp - 0x64]
mov al, byte [eax]
mov byte [edx + ecx + 5], al
mov ecx, dword [ebp - 0x64]
add ecx, 1
mov dword [ebp - 0x64], ecx
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x5cc200]
mov edx, dword [ebp - 0x64]
mov dl, byte [edx]
mov byte [ecx + eax + 0x25], dl
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x5cc200]
mov byte [edx + ecx + 0x26], 0xa
jmp 0x4d5c56
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x2c]
jne 0x4d5c24
movzx ecx, word [ebp - 0x1c]
cmp ecx, 0xa
jne 0x4d5c24
mov edx, dword [ebp - 0x20]
mov word [edx], 0xa
mov eax, dword [ebp - 0x20]
add eax, 2
mov dword [ebp - 0x20], eax
jmp 0x4d5c56
push 1
push 0xffffffffffffffff
push 0xfffffffffffffffe
mov ecx, dword [ebp + 8]
push ecx
call fcn.004eccf0
add esp, 0x10
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], edx
movzx edx, word [ebp - 0x1c]
cmp edx, 0xa
je 0x4d5c56
mov eax, dword [ebp - 0x20]
mov word [eax], 0xd
mov ecx, dword [ebp - 0x20]
add ecx, 2
mov dword [ebp - 0x20], ecx
jmp 0x4d59b2
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp + 0xc]
je 0x4d5c78
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.004d2450
add esp, 4
cmp dword [ebp - 0xc], 0xfffffffe
jne 0x4d5c86
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x74], edx
jmp 0x4d5c8c
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
pop esi
mov esp, ebp
pop ebp
ret