Function at 0x425130
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x85c
mov edx, 0xafab16
mov eax, dword [esp + 0x864]
mov dword [esp + 0x84c], ebx
mov dword [esp + 0x850], esi
mov dword [esp + 0x854], edi
mov dword [esp + 0x858], ebp
call fcn.00423c20
test eax, eax
mov dword [esp + 0x1c], eax
je 0x4257e8
mov edx, eax
mov eax, dword [eax]
test eax, eax
je 0x4251f1
lea ebp, [esp + 0x40]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0x800
mov dword [esp], ebp
call sub.msvcrt.dll_fread
mov esi, eax
sub esi, 1
je 0x425240
mov esi, dword [esp + 0x874]
mov ebx, 0xffffffff
test esi, esi
jne 0x4253e0
mov edx, dword [esp + 0x1c]
mov eax, dword [edx]
test eax, eax
je 0x425410
mov dword [esp], eax
call sub.msvcrt.dll_fclose
mov eax, ebx
mov esi, dword [esp + 0x850]
mov ebx, dword [esp + 0x84c]
mov edi, dword [esp + 0x854]
mov ebp, dword [esp + 0x858]
add esp, 0x85c
ret
mov ecx, edx
mov edx, dword [edx + 0xc]
mov eax, dword [ecx + 8]
cmp edx, eax
jae 0x4251a2
sub eax, edx
cmp eax, 0x800
sbb ebx, ebx
not ebx
and ebx, 0x800
cmp eax, 0x800
sbb esi, esi
add edx, dword [ecx + 4]
add esi, 1
lea ebp, [esp + 0x40]
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
mov dword [esp], ebp
call sub.msvcrt.dll_memcpy
mov edi, dword [esp + 0x1c]
add dword [edi + 0xc], ebx
sub esi, 1
jne 0x4251a2
nop
mov eax, 0xafad33
mov ecx, 0xd
cld
mov esi, ebp
mov edi, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x42543a
movzx eax, byte [esp + 0x10c]
movzx edx, byte [esp + 0x10e]
mov ecx, dword [esp + 0x870]
mov edi, dword [esp + 0x86c]
mov byte [esp + 0x20], al
movzx eax, byte [esp + 0x240]
mov byte [esp + 0x3f], dl
movzx edx, byte [esp + 0x241]
movzx esi, byte [esp + 0x10d]
movzx ebx, byte [esp + 0x10f]
and eax, 0x30
and edx, 0xc
sar eax, 4
sar edx, 2
cmp eax, 1
sbb eax, eax
and eax, 0xffffffa0
add eax, 0x240
cmp edx, 1
mov dword [ecx], eax
mov dword [edi], 0
je 0x4254a8
jle 0x425420
cmp edx, 2
je 0x4254ce
cmp edx, 3
lea esi, [esi]
je 0x4254b3
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0xafad64
mov dword [esp + 4], 2
mov dword [esp], 0x23
call fcn.00405fb0
mov ecx, dword [esp + 0x87c]
test ecx, ecx
je 0x42534f
mov edx, dword [esp + 0x878]
test edx, edx
js 0x42534f
cmp dword [esp + 0x878], 0x1f
jg 0x42534f
mov edx, dword [esp + 0x878]
mov ecx, dword [esp + 0x87c]
lea eax, [edx + edx*2]
lea eax, [esp + eax*2 + 0x296]
movzx edx, byte [eax + 2]
mov byte [ecx], dl
movzx eax, byte [eax + 3]
mov byte [ecx + 2], 0
mov byte [ecx + 1], al
movzx edx, byte [esp + 0x20]
mov ecx, esi
movzx eax, cl
xor ecx, ecx
shl eax, 0x10
shl edx, 0x18
or edx, eax
movzx eax, bl
or edx, eax
movzx eax, byte [esp + 0x3f]
shl eax, 8
or edx, eax
mov eax, dword [esp + 0x1c]
shl edx, 0xb
call fcn.00423fd0
test eax, eax
jne 0x4253b7
mov edi, dword [esp + 0x1c]
mov eax, dword [edi]
test eax, eax
je 0x425460
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0x800
mov dword [esp], ebp
call sub.msvcrt.dll_fread
mov esi, eax
sub esi, 1
je 0x4254e0
mov dword [esp + 8], 0xafad84
mov ebx, 0xffffffff
mov dword [esp + 4], 1
mov dword [esp], 0x23
call fcn.00405fb0
jmp 0x4251b6
mov dword [esp + 8], 0xafad14
mov dword [esp + 4], 1
mov dword [esp], 0x23
call fcn.00405fb0
mov edx, dword [esp + 0x1c]
mov eax, dword [edx]
test eax, eax
jne 0x4251c4
lea esi, [esi]
mov eax, dword [edx + 4]
mov dword [esp], eax
call sub.msvcrt.dll_free
jmp 0x4251cc
test edx, edx
jne 0x4252e6
mov eax, dword [esp + 0x86c]
mov dword [eax], 0x2d0
jmp 0x425306
mov dword [esp + 8], 0xafad40
mov ebx, 0xffffffff
mov dword [esp + 4], 1
mov dword [esp], 0x23
call fcn.00405fb0
jmp 0x4251b6
mov edx, dword [edi + 0xc]
mov eax, dword [edi + 8]
cmp edx, eax
jae 0x4253b7
sub eax, edx
cmp eax, 0x800
sbb ebx, ebx
not ebx
and ebx, 0x800
cmp eax, 0x800
sbb esi, esi
add edx, dword [edi + 4]
add esi, 1
mov dword [esp + 8], ebx
mov dword [esp], ebp
mov dword [esp + 4], edx
call sub.msvcrt.dll_memcpy
mov edi, dword [esp + 0x1c]
add dword [edi + 0xc], ebx
jmp 0x4253ae
mov dword [edi], 0x2c0
jmp 0x425306
mov edi, dword [esp + 0x86c]
mov eax, dword [esp + 0x870]
mov dword [edi], 0x160
shr dword [eax], 1
jmp 0x425306
mov ecx, dword [esp + 0x86c]
mov dword [ecx], 0x160
jmp 0x425306
movzx ecx, byte [esp + 0x4c]
movzx eax, byte [esp + 0x4d]
mov edi, dword [esp + 0x868]
shl ecx, 0x18
shl eax, 0x10
or ecx, eax
movzx eax, byte [esp + 0x4f]
or ecx, eax
movzx eax, byte [esp + 0x4e]
shl eax, 8
or ecx, eax
lea ecx, [ebp + ecx]
movzx eax, byte [ecx + 0xa4]
lea ebx, [ecx + 0xa4]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
lea ebx, [ecx + 0xa8]
shl eax, 8
or edx, eax
mov eax, dword [esp + 0x868]
mov dword [eax], edx
movzx eax, byte [ecx + 0xa8]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
lea ebx, [ecx + 0xac]
shl eax, 8
or edx, eax
mov dword [edi + 4], edx
movzx eax, byte [ecx + 0xac]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
lea ebx, [ecx + 0xb0]
shl eax, 8
or edx, eax
mov dword [edi + 8], edx
movzx eax, byte [ecx + 0xb0]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
lea ebx, [ecx + 0xb4]
shl eax, 8
or edx, eax
mov dword [edi + 0xc], edx
movzx eax, byte [ecx + 0xb4]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
lea ebx, [ecx + 0xb8]
shl eax, 8
or edx, eax
mov dword [edi + 0x10], edx
movzx eax, byte [ecx + 0xb8]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
lea ebx, [ecx + 0xbc]
shl eax, 8
or edx, eax
mov dword [edi + 0x14], edx
movzx eax, byte [ecx + 0xbc]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
lea ebx, [ecx + 0xc0]
shl eax, 8
or edx, eax
mov dword [edi + 0x18], edx
movzx eax, byte [ecx + 0xc0]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
lea ebx, [ecx + 0xc4]
shl eax, 8
or edx, eax
mov dword [edi + 0x1c], edx
movzx eax, byte [ecx + 0xc4]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
lea ebx, [ecx + 0xc8]
shl eax, 8
or edx, eax
mov dword [edi + 0x20], edx
movzx eax, byte [ecx + 0xc8]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
lea ebx, [ecx + 0xcc]
shl eax, 8
or edx, eax
mov dword [edi + 0x24], edx
movzx eax, byte [ecx + 0xcc]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
lea ebx, [ecx + 0xd0]
shl eax, 8
or edx, eax
mov dword [edi + 0x28], edx
movzx eax, byte [ecx + 0xd0]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
lea ebx, [ecx + 0xd4]
shl eax, 8
or edx, eax
mov dword [edi + 0x2c], edx
movzx eax, byte [ecx + 0xd4]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
lea ebx, [ecx + 0xd8]
shl eax, 8
or edx, eax
mov dword [edi + 0x30], edx
movzx eax, byte [ecx + 0xd8]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
lea ebx, [ecx + 0xdc]
shl eax, 8
or edx, eax
mov dword [edi + 0x34], edx
movzx eax, byte [ecx + 0xdc]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
lea ebx, [ecx + 0xe0]
shl eax, 8
or edx, eax
mov dword [edi + 0x38], edx
movzx eax, byte [ecx + 0xe0]
movzx edx, byte [ebx + 3]
shl eax, 0x18
or edx, eax
movzx eax, byte [ebx + 1]
shl eax, 0x10
or edx, eax
movzx eax, byte [ebx + 2]
xor ebx, ebx
shl eax, 8
or edx, eax
mov eax, dword [esp + 0x860]
mov dword [edi + 0x3c], edx
test eax, eax
je 0x4251b6
mov eax, dword [esp + 0x860]
mov dword [eax + 0x58], 1
jmp 0x4251b6
mov edi, dword [esp + 0x874]
mov ebx, 0xffffffff
test edi, edi
je 0x4251cc
mov dword [esp + 8], 0xafacf7
mov dword [esp + 4], 1
mov dword [esp], 0x23
call fcn.00405fb0
jmp 0x4251cc