Function at 0x4320e0
Capabilities:
Read file on windows

Disassembly:
mov eax, dword [esp + 4]
sub esp, 0x10
cmp dword [0x447c90], eax
push ebx
push esi
push edi
push ebp
jbe 0x432322
and eax, 0xffffffe7
sar eax, 3
lea ebp, [eax + 0x447b90]
mov eax, dword [esp + 0x24]
and eax, 0x1f
lea ebx, [eax*8]
mov eax, dword [ebp]
add eax, ebx
test byte [eax + 4], 1
je 0x432322
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x14], 0
test ecx, ecx
je 0x432318
test byte [eax + 4], 2
jne 0x432318
test byte [eax + 4], 0x48
je 0x432163
mov al, byte [eax + 5]
cmp al, 0xa
je 0x432163
mov byte [edx], al
inc edx
dec ecx
mov eax, dword [ebp]
mov dword [esp + 0x14], 1
mov byte [eax + ebx + 5], 0xa
lea eax, [esp + 0x18]
push 0
push eax
push ecx
push edx
mov ecx, dword [ebp]
mov edx, dword [ecx + ebx]
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x4321c9
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
jne 0x4321a4
pop ebp
mov dword [0x443378], eax
mov eax, 0xffffffff
pop edi
mov dword [0x443374], 9
pop esi
pop ebx
add esp, 0x10
ret
cmp eax, 0x6d
jne 0x4321b3
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x10
ret
push eax
call fcn.00428ef0
add esp, 4
mov eax, 0xffffffff
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x10
ret
mov eax, dword [esp + 0x18]
mov ecx, dword [ebp]
add dword [esp + 0x14], eax
lea eax, [ecx + ebx + 4]
mov cl, byte [eax]
test cl, 0x80
je 0x43230c
cmp dword [esp + 0x18], 0
je 0x4321f8
mov edx, dword [esp + 0x28]
cmp byte [edx], 0xa
jne 0x4321f8
or cl, 4
jmp 0x4321fb
and cl, 0xfb
mov edi, dword [esp + 0x28]
mov byte [eax], cl
mov esi, edi
mov eax, dword [esp + 0x14]
add eax, edi
mov dword [esp + 0x1c], eax
cmp eax, edi
jbe 0x432304
mov al, byte [esi]
cmp al, 0x1a
je 0x4322f1
cmp al, 0xd
je 0x43222b
inc esi
mov byte [edi], al
jmp 0x4322e4
mov ecx, dword [esp + 0x1c]
dec ecx
cmp ecx, esi
jbe 0x432250
lea ecx, [esi + 1]
cmp byte [ecx], 0xa
jne 0x432247
add esi, 2
mov byte [edi], 0xa
jmp 0x4322e4
mov esi, ecx
mov byte [edi], al
jmp 0x4322e4
inc esi
push 0
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x17]
push eax
mov edx, dword [ebp]
mov dword [esp + 0x1c], 0
push 1
mov eax, dword [edx + ebx]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x432282
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x14], eax
cmp dword [esp + 0x14], 0
jne 0x4322e1
cmp dword [esp + 0x18], 0
je 0x4322e1
mov eax, dword [ebp]
test byte [eax + ebx + 4], 0x48
je 0x4322b7
cmp byte [esp + 0x13], 0xa
jne 0x4322a6
mov byte [edi], 0xa
jmp 0x4322e4
mov byte [edi], 0xd
inc edi
mov al, byte [esp + 0x13]
mov ecx, dword [ebp]
mov byte [ecx + ebx + 5], al
jmp 0x4322e5
cmp edi, dword [esp + 0x28]
jne 0x4322c9
cmp byte [esp + 0x13], 0xa
jne 0x4322c9
mov byte [edi], 0xa
jmp 0x4322e4
mov eax, dword [esp + 0x24]
push 1
push 0xffffffffffffffff
push eax
call fcn.0042d590
add esp, 0xc
cmp byte [esp + 0x13], 0xa
je 0x4322e5
mov byte [edi], 0xd
inc edi
cmp esi, dword [esp + 0x1c]
jb 0x432215
jmp 0x432304
mov eax, dword [ebp]
lea eax, [eax + ebx + 4]
mov cl, byte [eax]
test cl, 0x40
jne 0x432304
or cl, 2
mov byte [eax], cl
sub edi, dword [esp + 0x28]
mov dword [esp + 0x14], edi
mov eax, dword [esp + 0x14]
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x10
ret
xor eax, eax
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x10
ret
mov eax, 0xffffffff
pop ebp
mov dword [0x443374], 9
mov dword [0x443378], 0
pop edi
pop esi
pop ebx
add esp, 0x10
ret