Function at 0x100436f8
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov ecx, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
xor edi, edi
cmp dword [ebp + 0x10], edi
mov dword [ebp - 8], ecx
mov dword [ebp - 4], ebx
je 0x10043735
cmp dword [ebp + 0x14], edi
je 0x10043735
cmp ecx, edi
jne 0x1004373c
call fcn.10042c60
push edi
push edi
push edi
push edi
mov dword [eax], 0x16
push edi
call fcn.10041d02
add esp, 0x14
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret
mov esi, dword [ebp + 0x18]
cmp esi, edi
je 0x10043750
or eax, 0xffffffff
xor edx, edx
div dword [ebp + 0x10]
cmp dword [ebp + 0x14], eax
jbe 0x10043771
cmp ebx, 0xffffffff
je 0x10043760
push ebx
push edi
push ecx
call fcn.10041500
add esp, 0xc
cmp esi, edi
je 0x1004371d
or eax, 0xffffffff
xor edx, edx
div dword [ebp + 0x10]
cmp dword [ebp + 0x14], eax
ja 0x1004371d
mov edi, dword [ebp + 0x10]
imul edi, dword [ebp + 0x14]
test word [esi + 0xc], 0x10c
mov dword [ebp - 0x10], edi
mov ebx, edi
je 0x1004378d
mov eax, dword [esi + 0x18]
mov dword [ebp - 0xc], eax
jmp 0x10043794
mov dword [ebp - 0xc], 0x1000
test edi, edi
je 0x10043885
test word [esi + 0xc], 0x10c
je 0x100437e8
mov eax, dword [esi + 4]
test eax, eax
je 0x100437e8
jl 0x100438e6
cmp ebx, eax
mov edi, ebx
jb 0x100437b9
mov edi, eax
cmp edi, dword [ebp - 4]
ja 0x1004388d
push edi
push dword [esi]
push dword [ebp - 4]
push dword [ebp - 8]
call fcn.10040f67
sub dword [esi + 4], edi
add dword [esi], edi
add dword [ebp - 8], edi
sub ebx, edi
add esp, 0x10
sub dword [ebp - 4], edi
mov edi, dword [ebp - 0x10]
jmp 0x1004387d
cmp ebx, dword [ebp - 0xc]
jb 0x10043855
cmp dword [ebp - 0xc], 0
je 0x10043812
mov ecx, SysReAllocString
xor edx, edx
cmp ebx, ecx
jbe 0x10043807
mov eax, ecx
div dword [ebp - 0xc]
mov eax, ecx
jmp 0x1004380e
mov eax, ebx
div dword [ebp - 0xc]
mov eax, ebx
sub eax, edx
jmp 0x1004381d
mov eax, SysReAllocString
cmp ebx, eax
ja 0x1004381d
mov eax, ebx
cmp eax, dword [ebp - 4]
ja 0x100438b9
push eax
push dword [ebp - 8]
push esi
call fcn.1004e70c
pop ecx
push eax
call fcn.1004e60f
add esp, 0xc
test eax, eax
je 0x100438f8
cmp eax, 0xffffffff
je 0x100438e6
add dword [ebp - 8], eax
sub ebx, eax
sub dword [ebp - 4], eax
jmp 0x1004387d
push esi
call fcn.1004df2e
cmp eax, 0xffffffff
pop ecx
je 0x100438ea
cmp dword [ebp - 4], 0
je 0x100438b9
mov ecx, dword [ebp - 8]
inc dword [ebp - 8]
mov byte [ecx], al
mov eax, dword [esi + 0x18]
dec ebx
dec dword [ebp - 4]
mov dword [ebp - 0xc], eax
test ebx, ebx
jne 0x1004379c
mov eax, dword [ebp + 0x14]
jmp 0x10043737
xor esi, esi
cmp dword [ebp + 0xc], 0xffffffff
je 0x100438a4
push dword [ebp + 0xc]
push esi
push dword [ebp + 8]
call fcn.10041500
add esp, 0xc
call fcn.10042c60
push esi
push esi
push esi
push esi
mov dword [eax], 0x22
push esi
jmp 0x1004372d
cmp dword [ebp + 0xc], 0xffffffff
je 0x100438cf
push dword [ebp + 0xc]
push 0
push dword [ebp + 8]
call fcn.10041500
add esp, 0xc
call fcn.10042c60
mov dword [eax], 0x22
xor eax, eax
push eax
push eax
push eax
push eax
push eax
jmp 0x1004372d
or dword [esi + 0xc], 0x20
mov eax, edi
sub eax, ebx
xor edx, edx
div dword [ebp + 0x10]
jmp 0x10043737
or dword [esi + 0xc], 0x10
jmp 0x100438ea