Function at 0x4037d8
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1224
call fcn.00409af0
mov dl, byte [0x415a08]
push ebx
push esi
push edi
push 0x40
mov esi, dword [ebp + 8]
xor eax, eax
pop ecx
mov byte [ebp - 0x224], dl
or dword [ebp - 0x10], 0xffffffff
lea edi, [ebp - 0x223]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x40
pop ecx
xor eax, eax
mov byte [ebp - 0x120], dl
lea edi, [ebp - 0x11f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor ebx, ebx
push 0x120
stosb byte es:[edi], al
lea eax, [esi + 0x14]
push ebx
push eax
mov dword [ebp - 0x14], ebx
call fcn.00409240
add esp, 0xc
push 1
push ebx
push ebx
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
mov dword [ebp - 0x18], eax
lea eax, [ebp - 4]
push eax
push 0x15
lea eax, [ebp - 0x1224]
push eax
push dword [esi + 4]
mov dword [ebp - 4], ebx
call edi
cmp dword [ebp - 4], ebx
je 0x403874
cmp byte [ebp - 0x1224], bl
jne 0x40387c
inc dword [esi + 0xc]
push 1
pop eax
jmp 0x403d3e
push dword [ebp - 4]
lea eax, [ebp - 0x1224]
push eax
call fcn.004020af
cmp byte [ebp - 0x1222], 0x2d
pop ecx
pop ecx
mov dword [ebp - 0xc], eax
jne 0x403d31
cmp byte [ebp - 0x1221], 0x6c
jne 0x403d31
cmp byte [ebp - 0x1220], 0x68
jne 0x403d31
cmp byte [ebp - 0x121e], 0x2d
jne 0x403d31
mov al, byte [ebp - 0x121f]
cmp al, 0x30
jne 0x4038d3
mov byte [esi + 0x14], bl
jmp 0x403907
cmp al, 0x34
jne 0x4038dd
mov byte [esi + 0x14], 4
jmp 0x403907
cmp al, 0x35
jne 0x4038e7
mov byte [esi + 0x14], 5
jmp 0x403907
cmp al, 0x36
jne 0x4038f1
mov byte [esi + 0x14], 6
jmp 0x403907
cmp al, 0x37
jne 0x4038fb
mov byte [esi + 0x14], 7
jmp 0x403907
cmp al, 0x64
jne 0x403d31
mov byte [esi + 0x14], 0x63
mov al, byte [ebp - 0x1210]
mov ecx, dword [ebp - 0x121d]
mov byte [esi + 0x28], al
movzx eax, al
sub eax, ebx
mov dword [esi + 0x18], ecx
mov ecx, dword [ebp - 0x1219]
mov dword [esi + 0x1c], ecx
je 0x403abc
dec eax
je 0x403a0d
dec eax
je 0x4039a8
dec eax
je 0x403949
mov dword [0x415b48], 4
jmp 0x403d3b
push ebx
lea eax, [ebp - 4]
push eax
push 0xb
lea eax, [ebp - 0x120f]
push eax
push dword [esi + 4]
mov dword [ebp - 4], ebx
call edi
push dword [ebp - 0xc]
lea eax, [ebp - 0x120f]
push dword [ebp - 4]
push eax
call fcn.004020c2
mov dword [ebp - 0xc], eax
lea eax, [esi + 0x20]
push eax
push dword [ebp - 0x1215]
call fcn.00408b5a
mov ax, word [ebp - 0x120f]
mov word [esi + 0x130], ax
mov al, byte [ebp - 0x120d]
mov byte [esi + 0x132], al
add esp, 0x14
lea eax, [ebp - 0x1208]
jmp 0x403a05
push ebx
lea eax, [ebp - 4]
push eax
push 5
lea eax, [ebp - 0x120f]
push eax
push dword [esi + 4]
mov dword [ebp - 4], ebx
call edi
push dword [ebp - 0xc]
lea eax, [ebp - 0x120f]
push dword [ebp - 4]
push eax
call fcn.004020c2
mov dword [ebp - 0xc], eax
lea eax, [esi + 0x20]
push eax
push dword [ebp - 0x1215]
call fcn.00408b5a
mov ax, word [ebp - 0x120f]
mov word [esi + 0x130], ax
mov al, byte [ebp - 0x120d]
mov byte [esi + 0x132], al
add esp, 0x14
lea eax, [ebp - 0x120c]
mov dword [ebp + 8], eax
jmp 0x403b64
push ebx
lea eax, [ebp - 4]
push eax
movzx eax, byte [ebp - 0x1224]
sub eax, 0x13
push eax
lea eax, [ebp - 0x120f]
push eax
push dword [esi + 4]
mov dword [ebp - 4], ebx
call edi
push dword [ebp - 0xc]
lea eax, [ebp - 0x120f]
push dword [ebp - 4]
push eax
call fcn.004020c2
add esp, 0xc
mov dword [ebp - 0xc], eax
lea eax, [esi + 0x20]
push eax
push dword [ebp - 0x1215]
push dword [ebp - 0x1213]
call dword [sym.imp.KERNEL32.dll_DosDateTimeToFileTime]
lea eax, [esi + 0x20]
push eax
push eax
call dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
movzx eax, byte [ebp - 0x120f]
lea ecx, [ebp - 0x120e]
xor edx, edx
cmp eax, ebx
mov dword [ebp + 8], ecx
je 0x403a91
mov dword [ebp - 8], eax
mov al, byte [ecx]
inc ecx
mov byte [ebp + edx - 0x120], al
inc edx
dec dword [ebp - 8]
mov dword [ebp + 8], ecx
jne 0x403a7e
lea eax, [ebp + 8]
push eax
mov byte [ebp + edx - 0x120], bl
call fcn.00403d43
mov word [esi + 0x130], ax
mov eax, dword [ebp + 8]
mov al, byte [eax]
inc dword [ebp + 8]
pop ecx
mov byte [esi + 0x132], al
jmp 0x403b64
push ebx
lea eax, [ebp - 4]
push eax
movzx eax, byte [ebp - 0x1224]
sub eax, 0x13
push eax
lea eax, [ebp - 0x120f]
push eax
push dword [esi + 4]
mov dword [ebp - 4], ebx
call edi
push dword [ebp - 0xc]
lea eax, [ebp - 0x120f]
push dword [ebp - 4]
push eax
call fcn.004020c2
add esp, 0xc
mov dword [ebp - 0xc], eax
lea eax, [esi + 0x20]
push eax
push dword [ebp - 0x1215]
push dword [ebp - 0x1213]
call dword [sym.imp.KERNEL32.dll_DosDateTimeToFileTime]
lea eax, [esi + 0x20]
push eax
push eax
call dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
movzx ax, byte [ebp - 0x1211]
mov word [esi + 0x2a], ax
movzx eax, byte [ebp - 0x120f]
lea ecx, [ebp - 0x120e]
xor edx, edx
cmp eax, ebx
mov dword [ebp + 8], ecx
je 0x403b4c
mov dword [ebp - 8], eax
mov al, byte [ecx]
inc ecx
mov byte [ebp + edx - 0x120], al
inc edx
dec dword [ebp - 8]
mov dword [ebp + 8], ecx
jne 0x403b39
lea eax, [ebp + 8]
push eax
mov byte [ebp + edx - 0x120], bl
call fcn.00403d43
pop ecx
mov word [esi + 0x130], ax
mov al, byte [esi + 0x28]
cmp al, bl
je 0x403cae
cmp al, 3
lea eax, [ebp + 8]
push eax
jae 0x403b82
call fcn.00403d43
pop ecx
movzx eax, ax
jmp 0x403b88
call fcn.00403d63
pop ecx
cmp eax, ebx
mov dword [ebp - 8], eax
je 0x403cae
push ebx
lea eax, [ebp - 4]
push eax
push dword [ebp - 8]
lea eax, [ebp - 0x1224]
push eax
push dword [esi + 4]
mov dword [ebp - 4], ebx
call edi
mov eax, dword [ebp - 8]
add dword [ebp - 0x14], eax
movzx ecx, byte [ebp - 0x1224]
lea edx, [ebp - 0x1223]
push 3
mov dword [ebp + 8], edx
pop edx
sub eax, edx
cmp byte [esi + 0x28], dl
mov dword [ebp - 8], eax
jne 0x403bd2
dec eax
dec eax
mov dword [ebp - 8], eax
sub ecx, ebx
mov dword [ebp - 0x1c], eax
je 0x403c6c
dec ecx
je 0x403c42
dec ecx
je 0x403c01
sub ecx, 0x3e
je 0x403bf1
sub ecx, 0x3f
jne 0x403c7c
lea eax, [ebp + 8]
push eax
call fcn.00403d43
pop ecx
mov word [esi + 0x2a], ax
jmp 0x403c7c
xor ecx, ecx
cmp eax, 0x104
jge 0x403ca3
mov edx, eax
dec eax
test edx, edx
je 0x403c39
lea edx, [eax + 1]
mov eax, dword [ebp + 8]
mov al, byte [eax]
cmp al, 0xff
jne 0x403c2b
mov byte [ebp + ecx - 0x224], 0x5c
jmp 0x403c32
mov byte [ebp + ecx - 0x224], al
inc ecx
inc dword [ebp + 8]
dec edx
jne 0x403c18
mov byte [ebp + ecx - 0x224], bl
jmp 0x403c7c
cmp eax, 0x104
jge 0x403ca3
push eax
lea eax, [ebp - 0x1223]
push eax
lea eax, [ebp - 0x120]
push eax
call fcn.004096d0
mov eax, dword [ebp - 8]
add esp, 0xc
mov byte [ebp + eax - 0x120], bl
jmp 0x403c7c
lea eax, [ebp + 8]
push eax
call fcn.00403da9
movzx eax, ax
pop ecx
mov dword [ebp - 0x10], eax
push dword [ebp - 0xc]
lea eax, [ebp - 0x1224]
push dword [ebp - 4]
push eax
call fcn.004020c2
add esp, 0xc
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x1c]
lea eax, [ebp + eax - 0x1223]
jmp 0x403a05
mov dword [0x415b48], edx
jmp 0x403d3b
cmp byte [esi + 0x28], 1
jne 0x403cba
mov eax, dword [ebp - 0x14]
sub dword [esi + 0x18], eax
or eax, 0xffffffff
cmp dword [ebp - 0x10], eax
je 0x403cd7
movzx ecx, word [ebp - 0xc]
cmp dword [ebp - 0x10], ecx
je 0x403cd7
mov dword [0x415b48], 3
jmp 0x403d3e
cmp byte [ebp - 0x224], bl
je 0x403cf7
lea eax, [ebp - 0x224]
push eax
lea edi, [esi + 0x2c]
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push edi
call fcn.0040878e
pop ecx
lea eax, [ebp - 0x120]
push eax
lea edi, [esi + 0x2c]
push edi
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp byte [edi], 0x5c
jne 0x403d1a
lea eax, [esi + 0x2d]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x403d08
push 1
push ebx
push ebx
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub eax, dword [ebp - 0x18]
add dword [esi + 0xc], eax
xor eax, eax
jmp 0x403d3e
mov dword [0x415b48], 5
or eax, 0xffffffff
pop edi
pop esi
pop ebx
leave
ret