Function at 0x42f89c
Capabilities:
Read file on windows

Disassembly:
push 0x44
mov eax, 0x456b35
call fcn.004526a8
xor ebx, ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 4], ebx
fld qword [0x476940]
fstp qword [ebp - 0x30]
push 0x80
fld qword [ebp - 0x30]
push 3
fadd qword [ebp - 0x30]
push 1
push SysReAllocString
push dword [ebp + 8]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fmul qword [0x476938]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fadd qword [0x4768a0]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fmul qword [0x476930]
fmul qword [ebp - 0x30]
fld qword [ebp - 0x30]
fadd qword [0x476928]
faddp st(1)
fadd qword [0x4768e0]
fsub qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fmul qword [ebp - 0x30]
fld qword [ebp - 0x30]
fsub qword [0x476920]
faddp st(1)
fadd qword [0x476918]
fadd qword [ebp - 0x30]
fsub qword [0x476910]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fmul qword [ebp - 0x30]
fmul qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fstp qword [ebp - 0x30]
call fcn.004407fb
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 1
mov dword [ebp - 0x2c], 0x41
mov dword [ebp - 0x1c], 0x11
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
imul eax, ecx
mov ecx, 0xffffff64
sub ecx, eax
add ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
imul eax, ecx
mov ecx, dword [ebp - 0x1c]
imul eax, eax, 0x4e
imul ecx, ecx, 0x29
add eax, ecx
add eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
cmp dword [ebp - 0x24], 0xffffffff
lea eax, [eax + ecx + 0x97]
mov dword [ebp - 0x1c], eax
jne 0x42f9c4
mov byte [ebp - 4], bl
call fcn.0043f31e
push 0xffffffffffffffff
call dword [eax + reloc.winhttp.dll_WinHttpCrackUrl]
jmp 0x42fa46
mov dword [ebp - 0x1c], 0x58
mov dword [ebp - 0x2c], 0x35
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
imul eax, eax, 0x13
sub ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
add ecx, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x24]
push edi
mov dword [ebp - 0x2c], ecx
call fcn.0043f1a7
mov esi, eax
mov byte [ebp - 0x10], bl
cmp esi, ebx
jbe 0x42fa13
lea eax, [ebp - 0x10]
push eax
push ebx
mov eax, esi
lea ecx, [ebp - 0x50]
call fcn.0040c70c
push ebx
lea eax, [ebp - 0x38]
push eax
push esi
mov esi, dword [ebp - 0x50]
push esi
push edi
mov dword [ebp - 0x38], ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov byte [ebp - 4], bl
test eax, eax
jne 0x42fa4e
cmp edi, ebx
je 0x42fa3b
call fcn.0043f31e
push edi
call dword [eax + reloc.winhttp.dll_WinHttpCrackUrl]
cmp esi, ebx
je 0x42fa46
push esi
call fcn.004119f6
pop ecx
xor al, al
call fcn.00452780
ret
cmp edi, ebx
je 0x42fa63
xor eax, eax
lea edi, [ebp - 0x11]
stosb byte es:[edi], al
call fcn.0043f31e
push dword [ebp - 0x24]
call dword [eax + reloc.winhttp.dll_WinHttpCrackUrl]
lea eax, [esi + 4]
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], esi
cmp eax, dword [ebp - 0x4c]
jae 0x42fa3b
lea ecx, [ebp - 0x3c]
lea eax, [ebp - 0x20]
call fcn.0042f678
cmp al, bl
je 0x42fa3b
cmp dword [ebp - 0x3c], 0x4c
jne 0x42fa3b
mov eax, dword [ebp - 0x20]
lea edi, [eax + 0x10]
cmp edi, dword [ebp - 0x4c]
jae 0x42fa3b
push 0x10
push 0x45a3c8
push eax
call fcn.00411b4b
add esp, 0xc
test eax, eax
jne 0x42fa3b
fld qword [0x476940]
mov dword [ebp - 0x20], edi
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fmul qword [0x476938]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fadd qword [0x4768a0]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fmul qword [0x476930]
fmul qword [ebp - 0x30]
fld qword [ebp - 0x30]
fadd qword [0x476928]
faddp st(1)
fadd qword [0x4768e0]
fsub qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fmul qword [ebp - 0x30]
fld qword [ebp - 0x30]
fsub qword [0x476920]
faddp st(1)
fadd qword [0x476918]
fadd qword [ebp - 0x30]
fsub qword [0x476910]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fmul qword [ebp - 0x30]
fmul qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fsub qword [ebp - 0x30]
fsub qword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
add eax, 4
fstp qword [ebp - 0x30]
cmp eax, dword [ebp - 0x4c]
jae 0x42fb4a
lea ecx, [ebp - 0x40]
lea eax, [ebp - 0x20]
call fcn.0042f678
cmp al, bl
jne 0x42fb5b
cmp dword [ebp - 0x50], ebx
je 0x42fa46
push dword [ebp - 0x50]
jmp 0x42fa40
mov eax, dword [ebp - 0x40]
test al, 1
je 0x42fb4a
shr eax, 7
test al, 1
je 0x42fb4a
mov esi, dword [ebp - 0x50]
lea eax, [esi + 0x4c]
mov dword [ebp - 0x20], eax
add eax, 2
cmp eax, dword [ebp - 0x4c]
jae 0x42fa3b
lea ecx, [ebp - 0x18]
lea eax, [ebp - 0x20]
call fcn.0042f721
cmp al, bl
je 0x42fa3b
fld qword [0x476990]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
add eax, 2
cmp eax, dword [ebp - 0x4c]
jae 0x42fb4a
lea ecx, [ebp - 0x34]
lea eax, [ebp - 0x20]
call fcn.0042f721
cmp al, bl
je 0x42fb4a
mov dword [ebp - 0x1c], 8
add dword [ebp - 0x1c], 0x1a
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 0x61]
add eax, dword [ebp - 0x1c]
push 0xffffffffffffffe1
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
imul eax, ecx
mov ecx, dword [ebp - 0x1c]
imul eax, ecx
pop ecx
sub ecx, eax
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
imul eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
add ecx, dword [ebp - 0x1c]
push 0x5b
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
imul eax, ecx
pop ecx
sub ecx, eax
add ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
add dword [ebp - 0x1c], 0x3d
cmp word [ebp - 0x34], bx
je 0x42fb4a
mov dword [ebp - 0x1c], 0x58
mov dword [ebp - 0x2c], 0x35
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
imul eax, eax, 0x13
sub ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
add ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x34]
movzx esi, cx
add esi, eax
lea edx, [esi - 2]
cmp edx, dword [ebp - 0x4c]
jae 0x42fb4a
push dword [ebp + 0xc]
add ecx, 0xfffffffe
push eax
call fcn.0042f73c
pop ecx
pop ecx
test al, al
jne 0x42fcea
add esi, 0xfffffffe
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x2c], 0x41
mov dword [ebp - 0x1c], 0x11
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
imul eax, ecx
mov ecx, 0xffffff64
sub ecx, eax
add ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
imul eax, ecx
mov ecx, dword [ebp - 0x1c]
imul eax, eax, 0x4e
imul ecx, ecx, 0x29
add eax, ecx
add eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
lea eax, [eax + ecx + 0x97]
mov dword [ebp - 0x1c], eax
jmp 0x42fba3
cmp dword [ebp - 0x50], ebx
je 0x42fcf8
push dword [ebp - 0x50]
call fcn.004119f6
pop ecx
mov al, 1
jmp 0x42fa48