Function at 0x422d60
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1024
call fcn.004ad970
mov eax, dword [0x4d4008]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x1024], eax
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x1010]
push ecx
push eax
mov dword [ebp - 0x101c], edx
call dword [sym.imp.PAL.dll_PalFileCreate]
mov esi, eax
add esp, 8
cmp esi, 0xffffffff
jne 0x422db7
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00470463
mov esp, ebp
pop ebp
ret
push ebx
push 0
push dword [ebp - 0x1008]
call dword [sym.imp.PAL.dll_PalMemoryAlloc]
add esp, 8
mov ebx, eax
lea eax, [ebp - 0x1018]
mov dword [ebp - 0x1014], ebx
push 0
push eax
push dword [ebp - 0x1008]
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x1008]
mov edx, ebx
mov ecx, edi
call fcn.00422c10
mov ecx, dword [ebp - 0x1008]
add esp, 4
mov dword [ebp - 0x1020], eax
mov dword [ebp - 0x1018], eax
cmp eax, ecx
je 0x422f4f
mov edi, ecx
lea ebx, [eax + ebx]
mov esi, 0
sub edi, eax
je 0x422edc
nop dword [eax]
mov cl, byte [esi + ebx]
lea edx, [esi + ebx]
movsx eax, cl
add eax, 0xfffffff6
cmp eax, 0x51
ja case.0x422e48.11
movzx eax, byte [eax + 0x422fb8]
jmp dword [eax*4 + 0x422fac]
xor eax, eax
test cl, cl
je 0x422ec6
cmp cl, 0xd
je 0x422eb9
cmp cl, 0xa
je 0x422ec5
mov cl, byte [eax + edx + 1]
inc eax
test cl, cl
jne 0x422e55
jmp 0x422ec6
mov eax, edi
lea ecx, [ebp - 0x1004]
sub eax, esi
push eax
push 0x4c0720
call fcn.0046bcc0
push dword [ebp - 0x101c]
add esi, eax
lea eax, [ebp - 0x1004]
push eax
call fcn.00471e10
add esp, 0x10
test eax, eax
jne 0x422ed0
mov cl, byte [esi + ebx]
lea edx, [esi + ebx]
test cl, cl
je 0x422ec6
cmp cl, 0xd
je 0x422eb9
cmp cl, 0xa
je 0x422ec5
mov cl, byte [eax + edx + 1]
inc eax
test cl, cl
jne 0x422ea4
jmp 0x422ec6
cmp byte [edx + eax + 1], 0xa
jne 0x422ec5
add eax, 2
jmp 0x422ec6
inc eax
add esi, eax
cmp esi, edi
jb 0x422e30
mov ecx, dword [ebp - 0x1008]
mov eax, dword [ebp - 0x1020]
mov dword [ebp - 0x1018], esi
cmp esi, 0xffffffff
je 0x422f49
mov ebx, dword [ebp - 0x1014]
add esi, eax
cmp esi, ecx
jae 0x422f8a
lea edi, [esi + ebx]
nop word [eax + eax]
movzx eax, byte [edi]
push eax
call fcn.0047e893
add esp, 4
test eax, eax
je 0x422f6c
cmp byte [edi], 0xa
je 0x422f8a
inc esi
inc edi
cmp esi, dword [ebp - 0x1008]
jb 0x422f00
push ebx
call dword [sym.imp.PAL.dll_PalMemoryFree]
add esp, 4
mov eax, 1
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00470463
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x1018], 0xffffffff
mov ebx, dword [ebp - 0x1014]
push ebx
call dword [sym.imp.PAL.dll_PalMemoryFree]
add esp, 4
xor eax, eax
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00470463
mov esp, ebp
pop ebp
ret
mov ecx, edi
call fcn.0046b8f0
mov esi, eax
push esi
push edi
mov edi, dword [ebp - 0x1024]
push edi
call fcn.0047b010
add esp, 0xc
mov byte [edi + esi], 0
push ebx
call dword [sym.imp.PAL.dll_PalMemoryFree]
mov ecx, dword [ebp - 4]
add esp, 4
xor ecx, ebp
mov eax, 1
pop ebx
pop edi
pop esi
call fcn.00470463
mov esp, ebp
pop ebp
ret