Function at 0x627130
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffa4
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], eax
xor eax, eax
push ebp
push 0x627478
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp + 8]
mov ax, word [eax - 0xc]
call fcn.006270ec
movzx eax, ax
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x18]
shl ebx, 4
mov eax, ebx
call fcn.00401e58
mov esi, eax
push 0
mov eax, dword [ebp + 8]
add eax, 0xfffffffc
push eax
push ebx
push esi
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_ReadFile
test eax, eax
je 0x627453
call fcn.0064d744
mov dword [ebp - 0xc], eax
mov ebx, dword [ebp - 0x18]
dec ebx
cmp ebx, 0
jl 0x62738a
mov eax, ebx
shl eax, 4
add eax, esi
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [eax], 0x656d616e
jne 0x627380
push 0
push 0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 8]
call fcn.00627104
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_SetFilePointer
push 0
mov eax, dword [ebp + 8]
add eax, 0xfffffffc
push eax
push 6
lea eax, [ebp - 6]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_ReadFile
test eax, eax
je 0x62738a
mov ax, word [ebp - 4]
call fcn.006270ec
mov word [ebp - 4], ax
mov ax, word [ebp - 2]
call fcn.006270ec
mov word [ebp - 2], ax
lea eax, [ebp - 0x10]
call fcn.00403880
movzx ebx, word [ebp - 4]
dec ebx
test ebx, ebx
jl 0x62738a
inc ebx
push 0
mov eax, dword [ebp + 8]
add eax, 0xfffffffc
push eax
push 0xc
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_ReadFile
mov ax, word [ebp - 0x26]
call fcn.006270ec
cmp ax, 1
jne 0x627377
mov ax, word [ebp - 0x24]
call fcn.006270ec
mov word [ebp - 0x24], ax
mov ax, word [ebp - 0x22]
call fcn.006270ec
mov edi, eax
mov word [ebp - 0x22], di
test di, di
jbe 0x627377
push 1
push 0
push 0
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_SetFilePointer
mov dword [ebp - 0x1c], eax
push 0
push 0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 8]
call fcn.00627104
movzx edx, word [ebp - 0x22]
add eax, edx
movzx edx, word [ebp - 2]
add eax, edx
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_SetFilePointer
movzx edx, word [ebp - 0x24]
lea eax, [ebp - 0x14]
call fcn.00403804
push 0
mov eax, dword [ebp + 8]
add eax, 0xfffffffc
push eax
movzx eax, word [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x14]
call fcn.004036e0
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_ReadFile
mov ax, word [ebp - 0x2a]
call fcn.006270ec
cmp ax, 1
jne 0x62733f
movzx edx, word [ebp - 0x24]
shr edx, 1
lea eax, [ebp - 0x10]
call fcn.00403de4
movzx eax, word [ebp - 0x24]
shr eax, 1
cmp eax, 1
jl 0x62734a
mov edx, eax
add edx, edx
mov ecx, dword [ebp - 0x14]
movzx edx, byte [ecx + edx]
shl edx, 8
mov ecx, eax
add ecx, ecx
mov edi, dword [ebp - 0x14]
movzx ecx, byte [edi + ecx - 1]
or dx, cx
mov ecx, dword [ebp - 0x10]
mov word [ecx + eax*2 - 2], dx
dec eax
test eax, eax
jne 0x627313
jmp 0x62734a
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x14]
call fcn.00403a34
lea eax, [ebp - 0x10]
call fcn.0065418c
cmp dword [ebp - 0x10], 0
je 0x627363
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.0064ed24
push 0
push 0
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_SetFilePointer
dec ebx
jne 0x62722c
jmp 0x62738a
dec ebx
cmp ebx, 0xffffffff
jne 0x6271a4
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x24], 0
jle 0x62744b
mov ebx, dword [ebp - 0x18]
dec ebx
cmp ebx, 0
jl 0x62744b
mov edi, ebx
shl edi, 4
add edi, esi
cmp dword [edi], 0x64616568
jne 0x627441
push 0
push 0
mov eax, dword [edi + 8]
call fcn.00627104
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_SetFilePointer
push 0
mov eax, dword [ebp + 8]
add eax, 0xfffffffc
push eax
push 0x2e
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x14]
push eax
call sub.kernel32.dll_ReadFile
test eax, eax
je 0x627441
mov eax, dword [ebp - 0xc]
mov edi, dword [eax + 0x24]
dec edi
cmp edi, 0
jl 0x627441
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x18]
mov edx, dword [eax + edi*4]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x1c]
mov ecx, dword [eax + 0x24]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x18]
call fcn.0064ed68
mov ax, word [ebp - 0x30]
call fcn.006270ec
mov ecx, eax
and cx, 3
movzx ecx, cx
mov eax, dword [ebp + 8]
mov edx, dword [eax - 0x20]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x1c]
call fcn.0064ed68
dec edi
cmp edi, 0xffffffff
jne 0x6273fb
dec ebx
cmp ebx, 0xffffffff
jne 0x6273a4
mov eax, dword [ebp - 0xc]
call fcn.004028c0
mov eax, esi
call fcn.00401fac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x62747f
lea eax, [ebp - 0x14]
call fcn.00403274
lea eax, [ebp - 0x10]
call fcn.00403880
ret