Function at 0x402e30
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1210
call fcn.00409490
mov eax, dword [0x41e024]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1208], eax
mov eax, dword [ebp + 0xc]
lea edx, [ebp - 0x1f8]
mov dword [ebp - 0x1204], 0
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x402e65
lea eax, [ebp - 0x1f8]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x402e76
mov ecx, dword [str.profiles.ini]
mov edx, dword [0x417a48]
mov dword [eax], ecx
mov ecx, dword [0x417a4c]
push ebx
mov dword [eax + 4], edx
mov dl, byte [0x417a50]
push edi
mov dword [eax + 8], ecx
push 0x28
mov byte [eax + 0xc], dl
call fcn.00409a19
add esp, 4
xor edi, edi
push edi
push 0x80
push 3
push edi
push 1
mov ebx, eax
push 0x80000000
lea eax, [ebp - 0x1f8]
push eax
mov dword [ebp - 0x1200], ebx
mov dword [ebp - 0x11fc], edi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x120c], eax
cmp eax, 0xffffffff
jne 0x402f0b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Could_not_open_file__error__d__n
call fcn.00409ffd
add esp, 8
pop edi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00409472
mov esp, ebp
pop ebp
ret
push esi
push 0
lea ecx, [ebp - 0x1210]
push ecx
push 0xfff
lea edx, [ebp - 0x11f8]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x403031
cmp dword [ebp - 0x1210], edi
je 0x403031
lea eax, [ebp - 0x11f8]
push 0x417a40
push eax
call fcn.00409f3f
add esp, 8
test eax, eax
je 0x403031
jmp 0x402f60
cmp edi, 0xa
jge 0x403022
push str.Path
push eax
call fcn.00409d10
add esp, 8
test eax, eax
je 0x40300b
push 0x12c
lea esi, [eax + 5]
call fcn.00409a19
push 0x3a
push esi
mov dword [ebx], eax
call fcn.00409c50
mov edx, dword [ebx]
add esp, 0xc
test eax, eax
jne 0x4030b8
mov ecx, dword [ebp + 0xc]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x402fa6
mov eax, esi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x402fb2
mov edi, dword [ebx]
sub eax, esi
dec edi
mov edi, edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x402fc0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx]
push 0x2f
push eax
call fcn.00409c50
add esp, 8
test eax, eax
je 0x402ffb
mov byte [eax], 0x5c
mov eax, dword [ebx]
push 0x2f
push eax
call fcn.00409c50
add esp, 8
test eax, eax
jne 0x402fe7
mov edi, dword [ebp - 0x11fc]
inc edi
mov dword [ebp - 0x11fc], edi
add ebx, 4
push 0x417a40
push 0
call fcn.00409f3f
add esp, 8
test eax, eax
jne 0x402f60
test edi, edi
jle 0x403031
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xc7
lea ecx, [ebp - 0xcb]
push 0
push ecx
mov byte [ebp - 0xcc], 0
call fcn.004094c0
add esp, 0xc
xor ebx, ebx
test edi, edi
jle 0x4030f0
mov edi, dword [ebp + 0x10]
jmp 0x403060
mov edx, dword [ebp - 0x1200]
mov esi, dword [edx + ebx*4]
mov eax, esi
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403070
sub eax, edx
je 0x403086
cmp byte [eax + esi - 1], 0xd
jne 0x403086
mov byte [eax + esi - 1], cl
push 0xc
push str.cookies.txt
push esi
call fcn.004090e6
lea eax, [ebp - 0xcc]
push eax
push esi
call fcn.00402010
add esp, 0x14
mov dword [ebp - 0x1204], eax
cmp eax, edi
je 0x4030cf
inc ebx
cmp ebx, dword [ebp - 0x11fc]
jl 0x403060
jmp 0x4030ea
mov ecx, esi
lea ebx, [ebx]
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x4030c0
jmp 0x403001
mov edx, dword [ebp - 0x1208]
lea eax, [ebp - 0xcc]
mov ecx, eax
sub edx, ecx
nop
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4030e0
mov edi, dword [ebp - 0x11fc]
xor esi, esi
test edi, edi
jle 0x40310d
mov edx, dword [ebp - 0x1200]
mov eax, dword [edx + esi*4]
push eax
call fcn.0040a0ba
inc esi
add esp, 4
cmp esi, edi
jl 0x4030f6
mov ecx, dword [ebp - 0x1200]
push ecx
call fcn.0040a0ba
mov edx, dword [ebp - 0x120c]
add esp, 4
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x1204]
pop esi
pop edi
xor ecx, ebp
pop ebx
call fcn.00409472
mov esp, ebp
pop ebp
ret