Function at 0x424dca
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56328b
mov eax, dword fs:[0]
push eax
sub esp, 0x238
mov eax, dword [0x5d6c64]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x204], ecx
mov eax, dword [ebp - 0x204]
mov byte [eax + 8], 0
push dword [ebp + 8]
lea ecx, [ebp - 0xd8]
call fcn.0041838b
and dword [ebp - 4], 0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1a0], esp
push dword [ebp + 8]
call fcn.0041838b
mov dword [ebp - 0x208], eax
mov byte [ebp - 4], 1
mov byte [ebp - 4], 0
call fcn.00427bdf
add esp, 0x1c
mov byte [ebp - 0x209], al
movzx eax, byte [ebp - 0x209]
test eax, eax
je 0x424fcc
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
jne 0x424f38
lea eax, [ebp - 0x2c]
push eax
call fcn.00427da7
pop ecx
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x214], eax
mov byte [ebp - 4], 2
push 0x5707b4
push dword [ebp - 0x214]
lea eax, [ebp - 0x48]
push eax
call fcn.00412118
add esp, 0xc
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x21c], eax
mov byte [ebp - 4], 3
push dword [ebp + 8]
push dword [ebp - 0x21c]
lea eax, [ebp - 0x64]
push eax
call fcn.00407dd0
add esp, 0xc
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x1cc], eax
mov byte [ebp - 4], 4
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0xd8]
call fcn.004064e0
mov byte [ebp - 4], 5
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00406660
mov byte [ebp - 4], 3
mov byte [ebp - 4], 6
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00406660
mov byte [ebp - 4], 2
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00406660
mov byte [ebp - 4], 0
jmp 0x424fcc
push 0x5707b8
push dword [ebp + 0xc]
lea eax, [ebp - 0x80]
push eax
call fcn.00412033
add esp, 0xc
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x228], eax
mov byte [ebp - 4], 8
push dword [ebp + 8]
push dword [ebp - 0x228]
lea eax, [ebp - 0x9c]
push eax
call fcn.00407dd0
add esp, 0xc
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x1d0], eax
mov byte [ebp - 4], 9
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0xd8]
call fcn.004064e0
mov byte [ebp - 4], 0xa
push 0
push 1
lea ecx, [ebp - 0x9c]
call fcn.00406660
mov byte [ebp - 4], 8
mov byte [ebp - 4], 0xb
push 0
push 1
lea ecx, [ebp - 0x80]
call fcn.00406660
mov byte [ebp - 4], 0
cmp dword [ebp - 0xc4], 8
jb 0x424fe3
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x230], eax
jmp 0x424fef
lea eax, [ebp - 0xd8]
mov dword [ebp - 0x230], eax
push 0x5707bc
push dword [ebp - 0x230]
call dword [sym.imp.MSVCR100.dll__wfopen]
pop ecx
pop ecx
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
je 0x425331
push 2
push 0
push dword [ebp - 0xbc]
call dword [sym.imp.MSVCR100.dll_fseek]
add esp, 0xc
push dword [ebp - 0xbc]
call dword [sym.imp.MSVCR100.dll_ftell]
pop ecx
mov dword [ebp - 0xdc], eax
push 0
push 0
push dword [ebp - 0xbc]
call dword [sym.imp.MSVCR100.dll_fseek]
add esp, 0xc
cmp dword [ebp - 0xdc], 0
jle 0x42531d
mov eax, dword [ebp - 0xdc]
inc eax
push eax
call fcn.00460f9e
pop ecx
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
add eax, dword [ebp - 0xdc]
mov byte [eax], 0
push dword [ebp - 0xbc]
push dword [ebp - 0xdc]
push 1
push dword [ebp - 0xe0]
call dword [sym.imp.MSVCR100.dll_fread]
add esp, 0x10
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0xdc]
jne 0x4252fe
lea ecx, [ebp - 0x164]
call fcn.0040ca50
mov byte [ebp - 4], 0xc
push dword [ebp - 0xe0]
lea ecx, [ebp - 0xb8]
call fcn.00404b40
mov byte [ebp - 4], 0xd
push 1
mov eax, dword [ebp - 0x204]
add eax, 0x10
push eax
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x164]
call fcn.0040cb90
mov ecx, dword [ebp - 0x204]
mov byte [ecx + 8], al
mov byte [ebp - 4], 0xe
push 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.00406430
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x204]
movzx eax, byte [eax + 8]
test eax, eax
je 0x42517a
mov ecx, dword [ebp - 0x204]
add ecx, 0x10
call fcn.0040b670
movzx eax, al
test eax, eax
je 0x42517a
mov ecx, dword [ebp - 0x204]
add ecx, 0x10
call fcn.0040acc0
movzx eax, al
test eax, eax
jne 0x42517a
mov ecx, dword [ebp - 0x204]
add ecx, 0x10
call fcn.0040b610
movzx eax, al
test eax, eax
jne 0x42517a
mov dword [ebp - 0x234], 1
jmp 0x425181
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x204]
mov cl, byte [ebp - 0x234]
mov byte [eax + 8], cl
mov eax, dword [ebp - 0x204]
movzx eax, byte [eax + 8]
test eax, eax
jne 0x4252ef
lea eax, [ebp - 0x1e9]
mov dword [ebp - 0x1e8], eax
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x238], eax
mov byte [ebp - 4], 0xf
push 0
push 0
lea ecx, [ebp - 0x19c]
call fcn.00406430
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x18c]
ja 0x4251f8
push dword [0x5c0400]
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x19c]
call fcn.00406d00
jmp 0x425212
push 0
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x19c]
call fcn.00406180
cmp dword [ebp - 0x188], 0x10
jb 0x425229
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x23c], eax
jmp 0x425235
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x23c], eax
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
push dword [ebp - 0x23c]
call sub.MSVCR100.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x1f5]
mov dword [ebp - 0x1f4], eax
lea eax, [ebp - 0x180]
mov dword [ebp - 0x240], eax
mov byte [ebp - 4], 0x11
push 0
push 0
lea ecx, [ebp - 0x180]
call fcn.00406430
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x19c]
push eax
call fcn.0042e476
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x4252c1
push 1
mov eax, dword [ebp - 0x204]
add eax, 0x10
push eax
lea eax, [ebp - 0x180]
push eax
lea ecx, [ebp - 0x164]
call fcn.0040cb90
mov ecx, dword [ebp - 0x204]
mov byte [ecx + 8], al
mov byte [ebp - 4], 0x13
push 0
push 1
lea ecx, [ebp - 0x180]
call fcn.00406430
mov byte [ebp - 4], 0x10
mov byte [ebp - 4], 0x14
push 0
push 1
lea ecx, [ebp - 0x19c]
call fcn.00406430
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x164]
call fcn.0040ede0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x1a8], eax
push dword [ebp - 0x1a8]
call fcn.004614b8
pop ecx
and dword [ebp - 0xe0], 0
push dword [ebp - 0xbc]
call dword [sym.imp.MSVCR100.dll_fclose]
pop ecx
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x204]
movzx eax, byte [eax + 8]
test eax, eax
je 0x42538a
mov ecx, dword [ebp - 0x204]
add ecx, 0x10
call fcn.0040b670
movzx eax, al
test eax, eax
je 0x42538a
mov ecx, dword [ebp - 0x204]
add ecx, 0x10
call fcn.0040acc0
movzx eax, al
test eax, eax
jne 0x42538a
mov ecx, dword [ebp - 0x204]
add ecx, 0x10
call fcn.0040b610
movzx eax, al
test eax, eax
jne 0x42538a
mov dword [ebp - 0x244], 1
jmp 0x425391
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x204]
mov cl, byte [ebp - 0x244]
mov byte [eax + 8], cl
mov eax, dword [ebp - 0x204]
mov al, byte [eax + 8]
mov byte [ebp - 0x1a9], al
mov dword [ebp - 4], 0x15
push 0
push 1
lea ecx, [ebp - 0xd8]
call fcn.00406660
or dword [ebp - 4], 0xffffffff
mov al, byte [ebp - 0x1a9]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004610a0
leave
ret 8