Function at 0x421e10
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4977ae
mov eax, dword fs:[0]
push eax
sub esp, 0x1d0
mov eax, dword [0x4c1280]
xor eax, esp
mov dword [esp + 0x1c8], eax
push ebx
push esi
push edi
mov eax, dword [0x4c1280]
xor eax, esp
push eax
lea eax, [esp + 0x1e0]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
push 0x170
mov edi, edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], ecx
or esi, 0xffffffff
call fcn.00475d7a
add esp, 4
mov dword [esp + 0x1c], eax
xor ebx, ebx
mov dword [esp + 0x1e8], ebx
cmp eax, ebx
je 0x421e88
push edi
mov edi, eax
call fcn.00422f00
mov ebx, eax
cmp dword [esp + 0x20], 0
mov dword [esp + 0x1e8], 0xffffffff
je 0x422136
cmp dword [esp + 0x14], 0
je 0x422136
cmp dword [ebp + 8], 1
jne 0x421ed6
mov edx, 0x30
push edx
mov word [ebx + 0xc], dx
call fcn.0047159e
movzx ecx, word [ebx + 0xc]
add esp, 4
push ecx
push 0
push eax
mov dword [ebx + 8], eax
call fcn.00472990
add esp, 0xc
jmp 0x421ef0
call fcn.004233b0
test eax, eax
je 0x421ee9
mov esi, 0xfffffff5
jmp 0x422136
mov ecx, ebx
call fcn.00423d00
mov esi, 5
mov edx, dword [esp + 0x20]
push 0x20
push 0x4b15ec
push edx
call fcn.004754fb
mov edi, eax
add esp, 0xc
mov dword [esp + 0x18], edi
test edi, edi
jne 0x421f41
lea eax, [esp + 0x1c]
push eax
call fcn.0047a3a9
add esp, 4
cmp dword [esp + 0x1c], 0xd
jne 0x421f37
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
dec esi
test esi, esi
jg 0x421ef5
mov esi, 0xfffffffe
jmp 0x422125
lea ecx, [esp + 0xac]
push ecx
call fcn.00470390
movzx edx, word [ebx + 0xc]
mov eax, dword [ebx + 8]
add esp, 4
push edx
push 0
push eax
call fcn.00472990
movzx ecx, word [ebx + 0xc]
mov edx, dword [ebx + 8]
add esp, 0xc
push edi
push 1
push ecx
push edx
call fcn.0047a301
add esp, 0x10
cmp eax, 1
je 0x421f87
mov esi, 0xfffffffd
jmp 0x422125
movzx eax, word [ebx + 0xc]
mov ecx, dword [ebx + 8]
push eax
push ecx
lea edx, [esp + 0xb4]
push edx
call fcn.00470d50
xor eax, eax
add esp, 0xc
push edi
push 1
mov dword [esp + 0x1a1], eax
mov dword [esp + 0x1a5], eax
mov dword [esp + 0x1a9], eax
mov dword [esp + 0x1ad], eax
mov dword [esp + 0x1b1], eax
mov dword [esp + 0x1b5], eax
mov dword [esp + 0x1b9], eax
mov word [esp + 0x1bd], ax
mov byte [esp + 0x1bf], al
lea eax, [esp + 0x1a0]
push 0x20
push eax
mov byte [esp + 0x1a8], 0
call fcn.0047a301
add esp, 0x10
cmp eax, 1
je 0x42200e
mov esi, 0xfffffffc
jmp 0x422125
push 0x10
call fcn.0047159e
add esp, 4
mov edi, eax
call fcn.004258e0
mov eax, edi
lea ecx, [esp + 0x24]
call fcn.00422a10
xor eax, eax
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
push edi
mov dword [edi + 0xc], eax
call fcn.0047311d
add esp, 4
lea edi, [esp + 0x198]
mov esi, 2
lea esp, [esp]
push edi
mov eax, edi
lea ecx, [esp + 0x2c]
call fcn.00422610
add esp, 4
add edi, 0x10
sub esi, 1
jne 0x422050
lea ecx, [esp + 0x1b8]
push ecx
lea edx, [esp + 0xb0]
push edx
call fcn.00470e00
add esp, 8
lea eax, [esi + 0x20]
lea ecx, [esp + 0x1b8]
lea edx, [esp + 0x198]
mov esi, dword [edx]
cmp esi, dword [ecx]
jne 0x4220de
sub eax, 4
add ecx, 4
add edx, 4
cmp eax, 4
jae 0x422090
mov ecx, dword [ebx + 8]
movzx eax, word [ebx + 0xc]
lea edx, [esp + 0x24]
push edx
mov edx, ecx
call fcn.00422a50
mov eax, dword [ebx + 8]
mov cx, word [ebx + 0xc]
add esp, 4
cmp cx, word [eax]
je 0x422119
mov edx, dword [esp + 0x14]
push 0x30
push 0
push edx
call fcn.00472990
add esp, 0xc
mov esi, 0xfffffffa
jmp 0x422121
movzx eax, byte [edx]
movzx esi, byte [ecx]
sub eax, esi
jne 0x42210a
movzx eax, byte [edx + 1]
movzx esi, byte [ecx + 1]
sub eax, esi
jne 0x42210a
movzx eax, byte [edx + 2]
movzx esi, byte [ecx + 2]
sub eax, esi
jne 0x42210a
movzx eax, byte [edx + 3]
movzx ecx, byte [ecx + 3]
sub eax, ecx
sar eax, 0x1f
or eax, 1
je 0x4220a4
mov esi, 0xfffffffb
jmp 0x422121
mov ecx, dword [esp + 0x14]
mov dword [ecx], eax
xor esi, esi
mov edi, dword [esp + 0x18]
test edi, edi
je 0x422132
push edi
call fcn.00474bde
add esp, 4
test esi, esi
je 0x42214d
mov eax, dword [ebx + 8]
test eax, eax
je 0x42214d
push eax
call fcn.0047311d
add esp, 4
mov dword [ebx + 8], 0
test ebx, ebx
je 0x4221a7
mov eax, dword [ebx + 0x34]
test eax, eax
je 0x422168
push 0x8000
push 0
push eax
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, dword [ebx + 0x14c]
test eax, eax
je 0x42217b
push eax
call fcn.0047295c
add esp, 4
mov edx, dword [ebx + 0x140]
xor eax, eax
push edx
mov dword [ebx + 0x14c], eax
mov dword [ebx + 0x150], eax
mov dword [ebx + 0x154], eax
call fcn.0047295c
add esp, 4
push ebx
call fcn.0047295c
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x1e0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1c8]
xor ecx, esp
call fcn.00472a79
mov esp, ebp
pop ebp
ret 8