Function at 0x426c80
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x98
push ebx
push ebp
mov ebp, ecx
xor ebx, ebx
push esi
push edi
mov edx, dword [ebp + 0x280ed4]
mov edi, dword [esp + 0xb0]
cmp edx, 0x294
mov ecx, 4
sbb eax, eax
xor edx, edx
neg eax
dec eax
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x28], eax
mov eax, edi
div dword [ebp + 0x480]
mov byte [esp + 0x13], bl
inc eax
cmp eax, ecx
mov dword [esp + 0x1c], eax
jae 0x426cef
mov esi, dword [ebp + 0x480]
cmp esi, 0x400
jb 0x426cef
shr esi, 1
mov eax, edi
xor edx, edx
div esi
mov dword [ebp + 0x480], esi
inc eax
cmp eax, ecx
mov dword [esp + 0x1c], eax
jb 0x426cca
mov eax, edi
xor edx, edx
div dword [ebp + 0x480]
xor eax, eax
mov dword [esp + 0x18], ebx
mov dword [esp + 0x30], eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x34], eax
mov dword [esp + 0x20], ecx
mov dword [esp + 0x38], eax
lea esi, [esp + 0x60]
lea ebx, [ebp + 0x4cc]
mov dword [esp + 0x3c], eax
xor edi, edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x40], edx
push 0
push 0
push 1
mov dword [esi + 4], 0
push 0
mov dword [esi], 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
lea ecx, [esi - 8]
mov dword [esi + 8], eax
mov eax, dword [ebp + 0x480]
lea edx, [esp + edi + 0x48]
push ecx
mov ecx, dword [ebp + 0x280edc]
push edx
push eax
push ebx
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [esp + 0x14]
add esi, 0x14
add edi, 4
add ebx, 0x80200
dec eax
mov dword [esp + 0x14], eax
jne 0x426d2b
mov eax, dword [esp + 0x1c]
test eax, eax
jbe 0x427056
xor al, al
mov byte [esp + 0x11], al
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
cmp ecx, edx
jae 0x427047
movsx esi, al
mov ecx, dword [esp + esi*4 + 0x30]
lea eax, [esp + esi*4 + 0x30]
cmp ecx, 1
mov dword [esp + 0x44], eax
je 0x427025
mov eax, dword [ebp + 0x484]
lea edi, [esi + esi*4]
shl edi, 2
push eax
mov ecx, dword [esp + edi + 0x6c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [ebp + 0x488]
mov eax, dword [ebp + 0x280edc]
lea ebx, [esp + esi*4 + 0x48]
lea edi, [esp + edi + 0x58]
push edx
push ebx
push edi
push eax
mov dword [esp + 0x24], edi
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
test eax, eax
mov dword [esp + 0x2c], eax
je 0x42704f
cmp dword [esp + 0x20], 1
je 0x4270c1
mov ecx, dword [ebp + 0x480]
mov eax, dword [ebx]
cmp ecx, eax
jne 0x426e9b
mov edi, ecx
mov edx, esi
imul edi, dword [esp + 0x18]
shl edx, 0xa
add edx, esi
shl edx, 9
lea eax, [edx + ebp + 0x4cc]
mov edx, dword [esp + 0xac]
add edi, edx
mov edx, ecx
mov esi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x1c]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x24]
inc esi
cmp ecx, edx
mov dword [esp + 0x18], esi
jae 0x426e83
mov edx, dword [esp + 0x14]
mov ecx, dword [ebp + 0x480]
push edx
mov edx, dword [ebp + 0x280edc]
push ebx
push ecx
push eax
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
inc dword [esp + 0x24]
jmp 0x427025
mov eax, dword [esp + 0x20]
dec eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x44]
mov dword [eax], 1
jmp 0x427025
cmp byte [esp + 0x13], 1
jae 0x427125
mov al, byte [esp + 0x11]
dec al
mov byte [esp + 0x12], al
jns 0x426eb7
mov byte [esp + 0x12], 3
mov al, byte [esp + 0x12]
dec al
jns 0x426ec1
mov al, 3
mov edx, dword [esp + 0x20]
sub edx, 2
je 0x426f6a
dec edx
je 0x426eff
dec edx
jne 0x42700c
push edi
push ebx
push ecx
mov ecx, esi
shl ecx, 0xa
mov eax, dword [ebp + 0x280edc]
add ecx, esi
shl ecx, 9
lea edx, [ecx + ebp + 0x4cc]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
jmp 0x42700c
movsx edi, byte [esp + 0x12]
lea edx, [edi + edi*4]
lea eax, [esp + edx*4 + 0x58]
lea edx, [esp + edi*4 + 0x48]
push eax
mov eax, edi
shl eax, 0xa
add eax, edi
push edx
mov edx, dword [ebp + 0x280edc]
push ecx
shl eax, 9
lea ecx, [eax + ebp + 0x4cc]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [esp + 0x14]
mov ecx, dword [ebp + 0x480]
mov edx, esi
push eax
shl edx, 0xa
add edx, esi
push ebx
shl edx, 9
push ecx
mov ecx, dword [ebp + 0x280edc]
lea eax, [edx + ebp + 0x4cc]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [esp + edi*4 + 0x30], 0
jmp 0x42700c
movsx edi, al
lea edx, [edi + edi*4]
lea eax, [esp + edx*4 + 0x58]
lea edx, [esp + edi*4 + 0x48]
push eax
mov eax, edi
shl eax, 0xa
add eax, edi
push edx
mov edx, dword [ebp + 0x280edc]
push ecx
shl eax, 9
lea ecx, [eax + ebp + 0x4cc]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
movsx ebx, byte [esp + 0x12]
lea eax, [ebx + ebx*4]
lea edx, [esp + ebx*4 + 0x48]
lea ecx, [esp + eax*4 + 0x58]
mov eax, dword [ebp + 0x480]
push ecx
mov ecx, ebx
shl ecx, 0xa
add ecx, ebx
push edx
shl ecx, 9
push eax
mov eax, dword [ebp + 0x280edc]
lea edx, [ecx + ebp + 0x4cc]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov ecx, dword [esp + 0x14]
lea eax, [esp + esi*4 + 0x48]
push ecx
push eax
mov edx, dword [ebp + 0x480]
mov eax, esi
shl eax, 0xa
add eax, esi
push edx
mov edx, dword [ebp + 0x280edc]
shl eax, 9
lea ecx, [eax + ebp + 0x4cc]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
mov dword [esp + edi*4 + 0x30], eax
mov dword [esp + ebx*4 + 0x30], eax
mov eax, 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], eax
inc byte [esp + 0x13]
mov al, byte [esp + 0x11]
inc al
cmp al, 4
mov byte [esp + 0x11], al
jl 0x426d90
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
cmp eax, ecx
jb 0x426d8a
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x427096
cmp byte [esp + 0x11], 4
jl 0x42705b
mov byte [esp + 0x11], 0
mov bl, byte [esp + 0x11]
mov esi, 3
inc bl
cmp bl, 4
mov byte [esp + 0x11], bl
jl 0x427074
mov byte [esp + 0x11], 0
mov bl, byte [esp + 0x11]
movsx eax, bl
mov ecx, dword [esp + eax*4 + 0x30]
test ecx, ecx
jne 0x427093
lea edx, [eax + eax*4]
push 0x14
mov eax, dword [esp + edx*4 + 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
dec esi
jne 0x427064
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
lea esi, [esp + 0x68]
mov edi, 4
mov ecx, dword [esi]
push ecx
call ebx
add esi, 0x14
dec edi
jne 0x4270a5
mov eax, dword [esp + 0x28]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x98
ret 8
movsx eax, byte [esp + 0x11]
mov ecx, dword [esp + 0x40]
xor edx, edx
cmp ecx, dword [esp + eax*4 + 0x48]
sete dl
test edx, edx
mov dword [esp + 0x2c], edx
je 0x427115
test ecx, ecx
je 0x427115
mov esi, eax
shl esi, 0xa
add esi, eax
mov eax, dword [esp + 0x1c]
shl esi, 9
lea edi, [eax - 1]
mov eax, ecx
imul edi, dword [ebp + 0x480]
lea esi, [esi + ebp + 0x4cc]
mov ebp, dword [esp + 0xac]
add edi, ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor ecx, ecx
test edx, edx
setne cl
mov dword [esp + 0x28], ecx
jmp 0x427047
mov dword [esp + 0x28], 0
jmp 0x42704f