Function at 0x522620
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
push esi
mov dword [ebp - 0xc], 0xfffffffe
mov eax, dword [ebp + 0x10]
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 0xfffffffe
jne 0x522658
call fcn.00518f10
mov dword [eax], 0
call fcn.00518ee0
mov dword [eax], 9
or eax, 0xffffffff
jmp 0x52354f
cmp dword [ebp + 8], 0
jl 0x522672
mov ecx, dword [ebp + 8]
cmp ecx, dword [0x763e64]
jae 0x522672
mov dword [ebp - 0x68], 1
jmp 0x522679
mov dword [ebp - 0x68], 0
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0
jne 0x5226a6
push str._fh___0___unsigned_fh____unsigned__nhandle_
push 0
push 0x84
push 0x6052e0
push 2
call fcn.00519260
add esp, 0x14
cmp eax, 1
jne 0x5226a6
int3
cmp dword [ebp - 0x44], 0
jne 0x5226e8
call fcn.00518f10
mov dword [eax], 0
call fcn.00518ee0
mov dword [eax], 9
push 0
push 0x84
push 0x6052e0
push str._read_nolock
push str._fh___0___unsigned_fh____unsigned__nhandle_
call fcn.00518a50
add esp, 0x14
or eax, 0xffffffff
jmp 0x52354f
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x763ec0]
movsx ecx, byte [eax + edx + 4]
and ecx, 1
neg ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0x48], ecx
jne 0x522732
push str.__osfile_fh___FOPEN_
push 0
push 0x85
push 0x6052e0
push 2
call fcn.00519260
add esp, 0x14
cmp eax, 1
jne 0x522732
int3
cmp dword [ebp - 0x48], 0
jne 0x522774
call fcn.00518f10
mov dword [eax], 0
call fcn.00518ee0
mov dword [eax], 9
push 0
push 0x85
push 0x6052e0
push str._read_nolock
push str.__osfile_fh___FOPEN_
call fcn.00518a50
add esp, 0x14
or eax, 0xffffffff
jmp 0x52354f
mov eax, closesocket
cmp eax, dword [ebp + 0x10]
sbb ecx, ecx
add ecx, 1
mov dword [ebp - 0x4c], ecx
jne 0x5227a7
push str._cnt___INT_MAX_
push 0
push 0x86
push 0x6052e0
push 2
call fcn.00519260
add esp, 0x14
cmp eax, 1
jne 0x5227a7
int3
cmp dword [ebp - 0x4c], 0
jne 0x5227e9
call fcn.00518f10
mov dword [eax], 0
call fcn.00518ee0
mov dword [eax], 0x16
push 0
push 0x86
push 0x6052e0
push str._read_nolock
push str._cnt___INT_MAX_
call fcn.00518a50
add esp, 0x14
or eax, 0xffffffff
jmp 0x52354f
mov dword [ebp - 0x34], 0
cmp dword [ebp + 0x10], 0
je 0x522816
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x763ec0]
movsx eax, byte [edx + ecx + 4]
and eax, 2
je 0x52281d
xor eax, eax
jmp 0x52354f
xor ecx, ecx
cmp dword [ebp + 0xc], 0
setne cl
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 0
jne 0x522850
push str._inputbuf___NULL_
push 0
push 0x90
push 0x6052e0
push 2
call fcn.00519260
add esp, 0x14
cmp eax, 1
jne 0x522850
int3
cmp dword [ebp - 0x50], 0
jne 0x522892
call fcn.00518f10
mov dword [eax], 0
call fcn.00518ee0
mov dword [eax], 0x16
push 0
push 0x90
push 0x6052e0
push str._read_nolock
push str._inputbuf___NULL_
call fcn.00518a50
add esp, 0x14
or eax, 0xffffffff
jmp 0x52354f
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x763ec0]
mov al, byte [edx + ecx + 0x24]
shl al, 1
sar al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x15]
mov byte [ebp - 0x6c], cl
cmp byte [ebp - 0x6c], 1
je 0x5228ce
cmp byte [ebp - 0x6c], 2
je 0x5229d8
jmp 0x522a56
mov edx, dword [ebp + 0x10]
and edx, 1
neg edx
sbb edx, edx
add edx, 1
mov dword [ebp - 0x54], edx
jne 0x522901
push str.__cnt__1___0_
push 0
push 0xac
push 0x6052e0
push 2
call fcn.00519260
add esp, 0x14
cmp eax, 1
jne 0x522901
int3
cmp dword [ebp - 0x54], 0
jne 0x522943
call fcn.00518f10
mov dword [eax], 0
call fcn.00518ee0
mov dword [eax], 0x16
push 0
push 0xac
push 0x6052e0
push str._read_nolock
push str.__cnt__1___0_
call fcn.00518a50
add esp, 0x14
or eax, 0xffffffff
jmp 0x52354f
mov ecx, dword [ebp + 0x10]
shr ecx, 1
cmp ecx, 4
jae 0x522956
mov dword [ebp - 0x70], 4
jmp 0x52295e
mov edx, dword [ebp + 0x10]
shr edx, 1
mov dword [ebp - 0x70], edx
mov eax, dword [ebp - 0x70]
mov dword [ebp + 0x10], eax
push 0xb0
push str.read.c
push 2
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00509850
add esp, 0x10
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x5229a3
call fcn.00518ee0
mov dword [eax], 0xc
call fcn.00518f10
mov dword [eax], 8
or eax, 0xffffffff
jmp 0x52354f
push 1
push 0
push 0
mov edx, dword [ebp + 8]
push edx
call fcn.0053fc90
add esp, 0x10
mov ecx, dword [ebp + 8]
sar ecx, 5
mov esi, dword [ebp + 8]
and esi, 0x1f
shl esi, 6
mov ecx, dword [ecx*4 + 0x763ec0]
mov dword [ecx + esi + 0x28], eax
mov dword [ecx + esi + 0x2c], edx
jmp 0x522a5c
mov edx, dword [ebp + 0x10]
and edx, 1
neg edx
sbb edx, edx
add edx, 1
mov dword [ebp - 0x58], edx
jne 0x522a0b
push str.__cnt__1___0_
push 0
push 0xbc
push 0x6052e0
push 2
call fcn.00519260
add esp, 0x14
cmp eax, 1
jne 0x522a0b
int3
cmp dword [ebp - 0x58], 0
jne 0x522a4d
call fcn.00518f10
mov dword [eax], 0
call fcn.00518ee0
mov dword [eax], 0x16
push 0
push 0xbc
push 0x6052e0
push str._read_nolock
push str.__cnt__1___0_
call fcn.00518a50
add esp, 0x14
or eax, 0xffffffff
jmp 0x52354f
mov ecx, dword [ebp + 0x10]
and ecx, 0xfffffffe
mov dword [ebp + 0x10], ecx
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x763ec0]
movsx ecx, byte [eax + edx + 4]
and ecx, 0x48
je 0x522c1c
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x763ec0]
movsx edx, byte [ecx + eax + 5]
cmp edx, 0xa
je 0x522c1c
cmp dword [ebp + 0x10], 0
je 0x522c1c
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x763ec0]
mov eax, dword [ebp - 0x38]
mov cl, byte [edx + ecx + 5]
mov byte [eax], cl
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp + 0x10]
sub ecx, 1
mov dword [ebp + 0x10], ecx
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x763ec0]
mov byte [ecx + eax + 5], 0xa
movsx edx, byte [ebp - 0x15]
test edx, edx
je 0x522c1c
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x763ec0]
movsx eax, byte [edx + ecx + 0x25]
cmp eax, 0xa
je 0x522c1c
cmp dword [ebp + 0x10], 0
je 0x522c1c
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x763ec0]
mov ecx, dword [ebp - 0x38]
mov dl, byte [eax + edx + 0x25]
mov byte [ecx], dl
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp + 0x10]
sub edx, 1
mov dword [ebp + 0x10], edx
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x763ec0]
mov byte [edx + ecx + 0x25], 0xa
movsx eax, byte [ebp - 0x15]
cmp eax, 1
jne 0x522c1c
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x763ec0]
movsx ecx, byte [eax + edx + 0x26]
cmp ecx, 0xa
je 0x522c1c
cmp dword [ebp + 0x10], 0
je 0x522c1c
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x763ec0]
mov edx, dword [ebp - 0x38]
mov al, byte [ecx + eax + 0x26]
mov byte [edx], al
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
mov eax, dword [ebp + 0x10]
sub eax, 1
mov dword [ebp + 0x10], eax
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x763ec0]
mov byte [eax + edx + 0x26], 0xa
push 0
lea ecx, [ebp - 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x763ec0]
mov ecx, dword [eax + edx]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x522c5c
cmp dword [ebp - 0x14], 0
jl 0x522c5c
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp + 0x10]
jbe 0x522cba
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 5
jne 0x522c8e
call fcn.00518ee0
mov dword [eax], 9
call fcn.00518f10
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
mov dword [ebp - 0xc], 0xffffffff
jmp 0x523524
cmp dword [ebp - 0x24], 0x6d
jne 0x522ca2
mov dword [ebp - 0xc], 0
jmp 0x523524
mov edx, dword [ebp - 0x24]
push edx
call fcn.00518cd0
add esp, 4
mov dword [ebp - 0xc], 0xffffffff
jmp 0x523524
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x763ec0]
movsx ecx, byte [eax + edx + 4]
and ecx, 0x80
je 0x523524
movsx edx, byte [ebp - 0x15]
cmp edx, 2
je 0x5231e3
cmp dword [ebp - 0x14], 0
je 0x522d42
mov eax, dword [ebp - 0x2c]
movsx ecx, byte [eax]
cmp ecx, 0xa
jne 0x522d42
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x763ec0]
movsx edx, byte [ecx + eax + 4]
or edx, 4
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov eax, dword [eax*4 + 0x763ec0]
mov byte [eax + ecx + 4], dl
jmp 0x522d7a
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x763ec0]
movsx ecx, byte [eax + edx + 4]
and ecx, 0xfffffffb
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov edx, dword [edx*4 + 0x763ec0]
mov byte [edx + eax + 4], cl
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x34]
cmp dword [ebp - 8], edx
jae 0x522fce
mov eax, dword [ebp - 8]
movsx ecx, byte [eax]
cmp ecx, 0x1a
jne 0x522e24
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x763ec0]
movsx edx, byte [ecx + eax + 4]
and edx, 0x40
jne 0x522dfe
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x763ec0]
movsx eax, byte [edx + ecx + 4]
or eax, 2
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov ecx, dword [ecx*4 + 0x763ec0]
mov byte [ecx + edx + 4], al
jmp 0x522e1a
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 8]
mov cl, byte [eax]
mov byte [edx], cl
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
jmp 0x522fce
mov ecx, dword [ebp - 8]
movsx edx, byte [ecx]
cmp edx, 0xd
je 0x522e50
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 8]
mov dl, byte [ecx]
mov byte [eax], dl
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
jmp 0x522fc9
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + edx - 1]
cmp dword [ebp - 8], ecx
jae 0x522ea6
mov edx, dword [ebp - 8]
movsx eax, byte [edx + 1]
cmp eax, 0xa
jne 0x522e85
mov ecx, dword [ebp - 8]
add ecx, 2
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x28]
mov byte [edx], 0xa
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
jmp 0x522ea1
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 8]
mov al, byte [edx]
mov byte [ecx], al
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x522fc9
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov dword [ebp - 0x24], 0
push 0
lea ecx, [ebp - 0x14]
push ecx
push 1
lea edx, [ebp - 0xd]
push edx
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x763ec0]
mov eax, dword [edx + ecx]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x522eef
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x522efb
cmp dword [ebp - 0x14], 0
jne 0x522f0f
mov ecx, dword [ebp - 0x28]
mov byte [ecx], 0xd
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x522fc9
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x763ec0]
movsx eax, byte [edx + ecx + 4]
and eax, 0x48
je 0x522f77
movsx ecx, byte [ebp - 0xd]
cmp ecx, 0xa
jne 0x522f49
mov edx, dword [ebp - 0x28]
mov byte [edx], 0xa
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
jmp 0x522f75
mov ecx, dword [ebp - 0x28]
mov byte [ecx], 0xd
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x763ec0]
mov al, byte [ebp - 0xd]
mov byte [edx + ecx + 5], al
jmp 0x522fc9
mov ecx, dword [ebp - 0x28]
cmp ecx, dword [ebp - 0x2c]
jne 0x522f99
movsx edx, byte [ebp - 0xd]
cmp edx, 0xa
jne 0x522f99
mov eax, dword [ebp - 0x28]
mov byte [eax], 0xa
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
jmp 0x522fc9
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
mov edx, dword [ebp + 8]
push edx
call fcn.0053fc90
add esp, 0x10
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], edx
movsx eax, byte [ebp - 0xd]
cmp eax, 0xa
je 0x522fc9
mov ecx, dword [ebp - 0x28]
mov byte [ecx], 0xd
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x522d86
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
movsx ecx, byte [ebp - 0x15]
cmp ecx, 1
jne 0x5231de
cmp dword [ebp - 0x34], 0
je 0x5231de
mov edx, dword [ebp - 0x28]
sub edx, 1
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
movsx ecx, byte [eax]
and ecx, 0x80
jne 0x523013
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x523162
mov dword [ebp - 0x5c], 1
mov eax, dword [ebp - 0x28]
movzx ecx, byte [eax]
movsx edx, byte [ecx + 0x62a0f0]
test edx, edx
jne 0x52304d
cmp dword [ebp - 0x5c], 4
jg 0x52304d
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x2c]
jb 0x52304d
mov ecx, dword [ebp - 0x28]
sub ecx, 1
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
jmp 0x52301a
mov eax, dword [ebp - 0x28]
movzx ecx, byte [eax]
movsx edx, byte [ecx + 0x62a0f0]
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 0
jne 0x52307a
call fcn.00518ee0
mov dword [eax], 0x2a
mov dword [ebp - 0xc], 0xffffffff
jmp 0x523524
mov eax, dword [ebp - 0x60]
add eax, 1
cmp eax, dword [ebp - 0x5c]
jne 0x523093
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x28], ecx
jmp 0x523162
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x763ec0]
movsx edx, byte [ecx + eax + 4]
and edx, 0x48
je 0x523146
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x763ec0]
mov eax, dword [ebp - 0x28]
mov al, byte [eax]
mov byte [edx + ecx + 5], al
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x5c], 2
jl 0x52310d
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x763ec0]
mov edx, dword [ebp - 0x28]
mov dl, byte [edx]
mov byte [ecx + eax + 0x25], dl
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x5c], 3
jne 0x52313b
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x763ec0]
mov ecx, dword [ebp - 0x28]
mov cl, byte [ecx]
mov byte [eax + edx + 0x26], cl
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x5c]
mov dword [ebp - 0x28], eax
jmp 0x523162
push 1
mov eax, dword [ebp - 0x5c]
neg eax
cdq
push edx
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0053fc90
add esp, 0x10
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 4]
shr eax, 1
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x34]
push edx
mov eax, dword [ebp - 0x2c]
push eax
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jne 0x5231ae
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.00518cd0
add esp, 4
mov dword [ebp - 0xc], 0xffffffff
jmp 0x523524
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x2c]
xor edx, edx
cmp dword [ebp - 0x34], ecx
setne dl
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov eax, dword [eax*4 + 0x763ec0]
mov dword [eax + ecx + 0x30], edx
mov ecx, dword [ebp - 0x34]
shl ecx, 1
mov dword [ebp - 0x34], ecx
jmp 0x523524
cmp dword [ebp - 0x14], 0
je 0x52322e
mov edx, dword [ebp - 0x2c]
movzx eax, word [edx]
cmp eax, 0xa
jne 0x52322e
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x763ec0]
movsx ecx, byte [eax + edx + 4]
or ecx, 4
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov edx, dword [edx*4 + 0x763ec0]
mov byte [edx + eax + 4], cl
jmp 0x523266
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x763ec0]
movsx eax, byte [edx + ecx + 4]
and eax, 0xfffffffb
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov ecx, dword [ecx*4 + 0x763ec0]
mov byte [ecx + edx + 4], al
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x34]
cmp dword [ebp - 0x30], ecx
jae 0x52351b
mov edx, dword [ebp - 0x30]
movzx eax, word [edx]
cmp eax, 0x1a
jne 0x523312
mov ecx, dword [ebp + 8]
sar ecx, 5
mov edx, dword [ebp + 8]
and edx, 0x1f
shl edx, 6
mov eax, dword [ecx*4 + 0x763ec0]
movsx ecx, byte [eax + edx + 4]
and ecx, 0x40
jne 0x5232ea
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x763ec0]
movsx edx, byte [ecx + eax + 4]
or edx, 2
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov eax, dword [eax*4 + 0x763ec0]
mov byte [eax + ecx + 4], dl
jmp 0x523308
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x30]
mov ax, word [edx]
mov word [ecx], ax
mov ecx, dword [ebp - 0x20]
add ecx, 2
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x30]
add edx, 2
mov dword [ebp - 0x30], edx
jmp 0x52351b
mov eax, dword [ebp - 0x30]
movzx ecx, word [eax]
cmp ecx, 0xd
je 0x523340
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov cx, word [eax]
mov word [edx], cx
mov edx, dword [ebp - 0x20]
add edx, 2
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x30]
add eax, 2
mov dword [ebp - 0x30], eax
jmp 0x523516
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
lea eax, [edx + ecx - 2]
cmp dword [ebp - 0x30], eax
jae 0x52339a
mov ecx, dword [ebp - 0x30]
movzx edx, word [ecx + 2]
cmp edx, 0xa
jne 0x523377
mov eax, dword [ebp - 0x30]
add eax, 4
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x20]
mov word [ecx], 0xa
mov edx, dword [ebp - 0x20]
add edx, 2
mov dword [ebp - 0x20], edx
jmp 0x523395
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x30]
mov dx, word [ecx]
mov word [eax], dx
mov eax, dword [ebp - 0x20]
add eax, 2
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x30]
add ecx, 2
mov dword [ebp - 0x30], ecx
jmp 0x523516
mov edx, dword [ebp - 0x30]
add edx, 2
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x14]
push eax
push 2
lea ecx, [ebp - 0x1c]
push ecx
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x763ec0]
mov edx, dword [ecx + eax]
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x5233e3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x5233ef
cmp dword [ebp - 0x14], 0
jne 0x523405
mov eax, dword [ebp - 0x20]
mov word [eax], 0xd
mov ecx, dword [ebp - 0x20]
add ecx, 2
mov dword [ebp - 0x20], ecx
jmp 0x523516
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x763ec0]
movsx edx, byte [ecx + eax + 4]
and edx, 0x48
je 0x5234c0
movzx eax, word [ebp - 0x1c]
cmp eax, 0xa
jne 0x523445
mov ecx, dword [ebp - 0x20]
mov word [ecx], 0xa
mov edx, dword [ebp - 0x20]
add edx, 2
mov dword [ebp - 0x20], edx
jmp 0x5234be
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x20]
mov word [ecx], 0xd
mov edx, dword [ebp - 0x20]
add edx, 2
mov dword [ebp - 0x20], edx
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x763ec0]
mov eax, dword [ebp - 0x64]
mov al, byte [eax]
mov byte [edx + ecx + 5], al
mov ecx, dword [ebp - 0x64]
add ecx, 1
mov dword [ebp - 0x64], ecx
mov edx, dword [ebp + 8]
sar edx, 5
mov eax, dword [ebp + 8]
and eax, 0x1f
shl eax, 6
mov ecx, dword [edx*4 + 0x763ec0]
mov edx, dword [ebp - 0x64]
mov dl, byte [edx]
mov byte [ecx + eax + 0x25], dl
mov eax, dword [ebp + 8]
sar eax, 5
mov ecx, dword [ebp + 8]
and ecx, 0x1f
shl ecx, 6
mov edx, dword [eax*4 + 0x763ec0]
mov byte [edx + ecx + 0x26], 0xa
jmp 0x523516
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x2c]
jne 0x5234e4
movzx ecx, word [ebp - 0x1c]
cmp ecx, 0xa
jne 0x5234e4
mov edx, dword [ebp - 0x20]
mov word [edx], 0xa
mov eax, dword [ebp - 0x20]
add eax, 2
mov dword [ebp - 0x20], eax
jmp 0x523516
push 1
push 0xffffffffffffffff
push 0xfffffffffffffffe
mov ecx, dword [ebp + 8]
push ecx
call fcn.0053fc90
add esp, 0x10
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], edx
movzx edx, word [ebp - 0x1c]
cmp edx, 0xa
je 0x523516
mov eax, dword [ebp - 0x20]
mov word [eax], 0xd
mov ecx, dword [ebp - 0x20]
add ecx, 2
mov dword [ebp - 0x20], ecx
jmp 0x523272
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp + 0xc]
je 0x523538
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0050a690
add esp, 4
cmp dword [ebp - 0xc], 0xfffffffe
jne 0x523546
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x74], edx
jmp 0x52354c
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
pop esi
mov esp, ebp
pop ebp
ret