Function at 0x413470
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x11624
call fcn.0043b580
mov eax, dword [0x47c554]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0x11624], esi
lea eax, [esi + 0x119]
push eax
lea eax, [esi + 0x14]
push eax
push str._s_s
lea eax, [ebp - 0x10c]
push 0x105
push eax
call fcn.004038d0
push 0x45b9d8
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x11614]
push eax
call fcn.0043f4a5
add esp, 0x20
test eax, eax
jne 0x413a07
cmp dword [edi*4 + 0x47ceb0], 0xffffffff
jne 0x4134f7
push eax
push 0x8000
push eax
call dword [sym.imp.KERNEL32.dll_HeapCreate]
mov dword [edi*4 + 0x47ceb0], eax
push ebx
push dword [ebp - 0x11614]
lea eax, [ebp - 0x520]
push 1
push 0x414
push eax
call fcn.0043f901
push dword [ebp - 0x11614]
cmp eax, 1
lea eax, [ebp - 0x9994]
push 1
push 0x60
push eax
sete bl
call fcn.0043f901
xor edx, edx
movzx ecx, bl
cmp eax, 1
mov eax, dword [ebp - 0x520]
push 1
cmove edx, ecx
add eax, 0xffffffa0
push eax
push dword [ebp - 0x11614]
mov dword [ebp - 0x11618], edx
call fcn.0043fd25
push dword [ebp - 0x11614]
mov ecx, dword [ebp - 0x11618]
xor ebx, ebx
test eax, eax
movzx ecx, cl
push 1
lea eax, [ebp - 0x9934]
cmove ebx, ecx
push 0x14
push eax
call fcn.0043f901
xor edx, edx
movzx ecx, bl
cmp eax, 1
mov eax, dword [ebp - 0x51c]
push 1
cmove edx, ecx
add eax, 0xffffffec
push eax
push dword [ebp - 0x11614]
mov dword [ebp - 0x11618], edx
call fcn.0043fd25
mov ecx, dword [ebp - 0x11618]
add esp, 0x48
xor ebx, ebx
movzx ecx, cl
test eax, eax
lea eax, [ebp - 0x9920]
push dword [ebp - 0x11614]
cmove ebx, ecx
push 1
push 0x7850
push eax
call fcn.0043f901
xor edx, edx
movzx ecx, bl
cmp eax, 1
mov eax, dword [ebp - 0x518]
push 1
cmove edx, ecx
add eax, 0xffff87b0
push eax
push dword [ebp - 0x11614]
mov dword [ebp - 0x11618], edx
call fcn.0043fd25
push dword [ebp - 0x11614]
mov ecx, dword [ebp - 0x11618]
xor ebx, ebx
push 1
test eax, eax
movzx ecx, cl
push 0x24
lea eax, [ebp - 0x20d0]
cmove ebx, ecx
push eax
call fcn.0043f901
xor edx, edx
movzx ecx, bl
cmp eax, 1
mov eax, dword [ebp - 0x514]
push 1
cmove edx, ecx
add eax, 0xffffffdc
push eax
push dword [ebp - 0x11614]
mov dword [ebp - 0x11618], edx
call fcn.0043fd25
push dword [ebp - 0x11614]
mov ecx, dword [ebp - 0x11618]
xor ebx, ebx
test eax, eax
movzx ecx, cl
push 1
lea eax, [ebp - 0x20ac]
cmove ebx, ecx
push 0x1930
push eax
call fcn.0043f901
add esp, 0x48
movzx ecx, bl
xor edx, edx
cmp eax, 1
mov eax, dword [ebp - 0x510]
cmove edx, ecx
add eax, 0xffffe6d0
push 1
push eax
push dword [ebp - 0x11614]
mov dword [ebp - 0x11618], edx
call fcn.0043fd25
push dword [ebp - 0x11614]
mov ecx, dword [ebp - 0x11618]
xor ebx, ebx
test eax, eax
movzx ecx, cl
push 1
lea eax, [ebp - 0x77c]
cmove ebx, ecx
push 0x25c
push eax
call fcn.0043f901
xor edx, edx
movzx ecx, bl
cmp eax, 1
mov eax, dword [ebp - 0x508]
push 1
cmove edx, ecx
add eax, 0xfffffda4
push eax
push dword [ebp - 0x11614]
mov dword [ebp - 0x11618], edx
call fcn.0043fd25
mov ecx, dword [ebp - 0x11618]
xor ebx, ebx
push 1
push dword [ebp - 0x50c]
test eax, eax
movzx ecx, cl
push dword [ebp - 0x11614]
cmove ebx, ecx
call fcn.0043fd25
xor edx, edx
movzx ecx, bl
add esp, 0x34
test eax, eax
cmove edx, ecx
mov dword [ebp - 0x11620], edx
cmp dl, 1
jne 0x413746
push 0x7c7c
lea eax, [ebp - 0x11610]
push esi
push eax
call fcn.0043ce80
mov edx, dword [ebp - 0x11620]
add esp, 0xc
mov eax, dword [ebp - 0x20b4]
mov bl, dl
mov dword [ebp - 0x1161c], ebx
test eax, eax
je 0x413864
imul eax, eax, 0x8c
push eax
push 8
push dword [edi*4 + 0x47ceb0]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
cmp dword [ebp - 0x20b4], 0
mov ecx, eax
mov eax, dword [ebp - 0x11620]
mov bl, al
mov dword [ebp - 0x20b0], ecx
mov dword [ebp - 0x11618], 0
mov dword [ebp - 0x1161c], ebx
jle 0x413864
mov dword [ebp - 0x1161c], ebx
xor esi, esi
cmp bl, 1
jne 0x413858
push dword [ebp - 0x11614]
lea eax, [esi + ecx]
push 1
push 0x8c
push eax
call fcn.0043f901
add esp, 0x10
cmp eax, 1
je 0x4137d8
mov ecx, dword [ebp - 0x20b0]
xor bl, bl
jmp 0x413839
mov eax, dword [ebp - 0x20b0]
imul eax, dword [esi + eax + 4], 0x88
push eax
push 8
push dword [edi*4 + 0x47ceb0]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [ebp - 0x20b0]
mov dword [esi + ecx + 0x88], eax
mov eax, dword [ebp - 0x20b0]
push dword [ebp - 0x11614]
push dword [esi + eax + 4]
push 0x88
push dword [esi + eax + 0x88]
call fcn.0043f901
mov ecx, dword [ebp - 0x20b0]
xor edx, edx
add esp, 0x10
movzx ebx, bl
cmp eax, dword [esi + ecx + 4]
cmovne ebx, edx
mov eax, dword [ebp - 0x11618]
add esi, 0x8c
inc eax
mov dword [ebp - 0x11618], eax
cmp eax, dword [ebp - 0x20b4]
jl 0x4137a7
mov esi, dword [ebp - 0x11624]
mov dword [ebp - 0x1161c], ebx
push dword [ebp - 0x11614]
call fcn.0043f6f8
add esp, 4
cmp bl, 1
jne 0x413958
cmp byte [ebp + 0x10], bl
jne 0x413895
xor eax, eax
movzx ebx, bl
cmp byte [ebp - 0x9994], 1
cmove ebx, eax
mov dword [ebp - 0x1161c], ebx
cmp byte [ebp + 0xc], 1
jne 0x4138b1
lea eax, [ebp - 0x11610]
mov byte [ebp - 0x9994], 1
push eax
call fcn.004129f0
add esp, 4
cmp bl, 1
jne 0x413958
mov eax, dword [esi + 0xf55c]
test eax, eax
je 0x413930
mov ecx, dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [ebp - 0x11618], 0
jle 0x41391f
xor ebx, ebx
nop dword [eax + eax]
mov eax, dword [esi + 0xf560]
push dword [ebx + eax + 0x88]
push 0
push dword [edi*4 + 0x47ceb0]
call ecx
mov eax, dword [ebp - 0x11618]
lea ebx, [ebx + 0x8c]
mov ecx, dword [sym.imp.KERNEL32.dll_HeapFree]
inc eax
mov dword [ebp - 0x11618], eax
cmp eax, dword [esi + 0xf55c]
jl 0x4138e0
mov ebx, dword [ebp - 0x1161c]
push dword [esi + 0xf560]
push 0
push dword [edi*4 + 0x47ceb0]
call ecx
push 0x110f0
lea eax, [ebp - 0x11610]
push eax
push esi
call fcn.0043ce80
add esp, 0xc
mov al, bl
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0043b572
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x20b4]
test eax, eax
je 0x4139d6
mov ecx, dword [sym.imp.KERNEL32.dll_HeapFree]
jle 0x4139b1
xor esi, esi
xor ebx, ebx
nop
mov eax, dword [ebp - 0x20b0]
push dword [esi + eax + 0x88]
push 0
push dword [edi*4 + 0x47ceb0]
call ecx
mov eax, dword [ebp - 0x20b0]
lea esi, [esi + 0x8c]
mov ecx, dword [sym.imp.KERNEL32.dll_HeapFree]
inc ebx
mov dword [esi + eax - 4], 0
cmp ebx, dword [ebp - 0x20b4]
jl 0x413970
mov ebx, dword [ebp - 0x1161c]
push dword [ebp - 0x20b0]
push 0
push dword [edi*4 + 0x47ceb0]
call ecx
mov dword [ebp - 0x20b0], 0
mov dword [ebp - 0x20b4], 0
mov eax, dword [edi*4 + 0x47ceb0]
cmp eax, 0xffffffff
je 0x4139e9
push eax
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
mov al, bl
mov dword [edi*4 + 0x47ceb0], 0xffffffff
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0043b572
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor al, al
pop edi
xor ecx, ebp
pop esi
call fcn.0043b572
mov esp, ebp
pop ebp
ret