Function at 0x41ebc0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10a8
call fcn.00593940
push esi
push edi
push fcn.00477a10
lea eax, [ebp - 0x10]
lea edi, [ebp + 4]
push eax
add edi, 0xfffffffc
push edi
call fcn.00475ff0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 4]
push 0x41e400
push eax
push edi
call fcn.00475ff0
add esp, 0x18
push dword [ebp + 8]
call fcn.0041a890
push eax
push 0x5c28b8
push dword [ebp - 4]
call fcn.00477140
mov dword [ebp - 4], eax
lea eax, [ebp - 0xc]
push 0x41e400
push eax
push edi
call fcn.00475ff0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 8]
push 0x41e400
push eax
push edi
call fcn.00475ff0
mov dword [ebp - 8], eax
lea eax, [ebp - 0x14]
push 0x41e400
push eax
push edi
call fcn.00475ff0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
push dword [eax]
push dword [ebp - 0x10]
call fcn.00477a40
mov eax, dword [ebp - 4]
push dword [eax]
call fcn.00478dd0
add esp, 0x40
test eax, eax
mov eax, dword [ebp - 4]
jne 0x41ec95
push dword [ebp + 0xc]
push str.dll_missing__s
mov esi, dword [eax]
push edi
call fcn.00476350
push 1
push 0
push 0
push 1
push esi
push dword [eax]
call fcn.00418ad0
add esp, 0x24
or eax, 0xffffffff
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push dword [eax]
call fcn.00479340
add esp, 4
cmp eax, 0x735df8
je 0x41ece3
push 0x735df8
push eax
push str._d__d
push edi
call fcn.00476350
push dword [ebp + 0xc]
push str.dll_invalid_size__s
mov esi, dword [eax]
push edi
call fcn.00476350
push 1
push 0
push 0
push 1
push esi
push dword [eax]
call fcn.00418ad0
add esp, 0x34
or eax, 0xffffffff
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 4]
push ebx
mov ebx, dword [ebp - 0xc]
push ebx
mov esi, dword [eax]
call fcn.00477230
lea eax, [ebp - 0xa8]
push eax
call fcn.004a2030
push 0x5c37f8
push esi
call fcn.00478e10
add esp, 0x10
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x41ed31
mov eax, dword [ebx]
test eax, eax
je 0x41edb2
push eax
call fcn.00596eae
add esp, 4
mov dword [ebx], 0
jmp 0x41edb2
push eax
push 0x1000
lea eax, [ebp - 0x10a8]
push 1
push eax
call fcn.0059781a
add esp, 0x10
test eax, eax
je 0x41ed81
nop dword [eax]
push eax
lea eax, [ebp - 0x10a8]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.004a20b0
push dword [ebp - 0x18]
lea eax, [ebp - 0x10a8]
push 0x1000
push 1
push eax
call fcn.0059781a
add esp, 0x1c
test eax, eax
jne 0x41ed50
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.004a1d50
push 0x20
lea eax, [ebp - 0x38]
push eax
push 0
push ebx
call fcn.0047ae60
push dword [ebx]
call fcn.00477920
lea eax, [ebp - 0x18]
push eax
call fcn.00478df0
add esp, 0x20
cmp dword [ebx], 0
pop ebx
jne 0x41edc8
push dword [ebp + 0xc]
mov eax, dword [ebp - 4]
push str.dll_failed_open__s
jmp 0x41ec71
mov eax, dword [ebp - 0xc]
push str.5a2c326fabef2e4f95f3740b3b27838f14ddf3069d686341015bce7f5197f3a8
push dword [eax]
call fcn.00476f20
add esp, 8
test eax, eax
je 0x41ee1f
mov eax, dword [ebp - 0xc]
push str.5a2c326fabef2e4f95f3740b3b27838f14ddf3069d686341015bce7f5197f3a8
push dword [eax]
push 0x5c3884
push edi
call fcn.00476350
push dword [ebp + 0xc]
push str.dll_invalid_hash__s
mov esi, dword [eax]
push edi
call fcn.00476350
push 1
push 0
push 0
push 1
push esi
push dword [eax]
call fcn.00418ad0
add esp, 0x34
or eax, 0xffffffff
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
push dword [ebp - 8]
push dword [eax]
call fcn.0041eec0
add esp, 0xc
test eax, eax
je 0x41ee46
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x14]
push str.dll_failed_verify__s
jmp 0x41ec71
mov eax, dword [ebp - 8]
push str.CIL__PostalCode4250713__LNetanya__STREET3_Hamachshev_st__OLuminati_Networks_Ltd__CNLuminati_Networks_Ltd
push dword [eax]
call fcn.00476f20
add esp, 8
test eax, eax
je 0x41eeae
mov eax, dword [ebp - 8]
push str.CIL__SCentral__OBright_Data_Ltd.__CNBright_Data_Ltd.
push dword [eax]
call fcn.00476f20
add esp, 8
test eax, eax
je 0x41eeae
mov eax, dword [ebp - 8]
push str.OID.2.5.4.15Private_Organization__OID.1.3.6.1.4.1.311.60.2.1.3IL__SERIALNUMBER514114842__CIL__LNetanya__OBright_Data_Ltd__CNBright_Data_Ltd
push dword [eax]
call fcn.00476f20
add esp, 8
test eax, eax
je 0x41eeae
mov eax, dword [ebp - 8]
push str.OID.1.3.6.1.4.1.311.60.2.1.3IL__OID.2.5.4.15Private_Organization__SERIALNUMBER514114842__CIL__LNetanya__OBright_Data_Ltd__CNBright_Data_Ltd
push dword [eax]
call fcn.00476f20
add esp, 8
test eax, eax
je 0x41eeae
push dword [ebp + 0xc]
mov eax, dword [ebp - 8]
push str.dll_invalid_signature__s
jmp 0x41ec71
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret