Function at 0x41e980
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10a8
call fcn.0053de80
push esi
push edi
push fcn.00422200
lea eax, [ebp - 0x10]
lea edi, [ebp + 4]
push eax
add edi, 0xfffffffc
push edi
call fcn.004207e0
mov dword [ebp - 0x10], eax
lea eax, [ebp - 4]
push 0x41e1c0
push eax
push edi
call fcn.004207e0
add esp, 0x18
push dword [ebp + 8]
call fcn.0041a800
push eax
push 0x56a788
push dword [ebp - 4]
call fcn.00421930
mov dword [ebp - 4], eax
lea eax, [ebp - 0xc]
push 0x41e1c0
push eax
push edi
call fcn.004207e0
mov dword [ebp - 0xc], eax
lea eax, [ebp - 8]
push 0x41e1c0
push eax
push edi
call fcn.004207e0
mov dword [ebp - 8], eax
lea eax, [ebp - 0x14]
push 0x41e1c0
push eax
push edi
call fcn.004207e0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
push dword [eax]
push dword [ebp - 0x10]
call fcn.00422230
mov eax, dword [ebp - 4]
push dword [eax]
call fcn.004235c0
add esp, 0x40
test eax, eax
mov eax, dword [ebp - 4]
jne 0x41ea55
push dword [ebp + 0xc]
push str.dll_missing__s
mov esi, dword [eax]
push edi
call fcn.00420b40
push 1
push 0
push 0
push 1
push esi
push dword [eax]
call fcn.00418b20
add esp, 0x24
or eax, 0xffffffff
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push dword [eax]
call fcn.00423b30
add esp, 4
cmp eax, 0x8561f8
je 0x41eaa3
push 0x8561f8
push eax
push str._d__d
push edi
call fcn.00420b40
push dword [ebp + 0xc]
push str.dll_invalid_size__s
mov esi, dword [eax]
push edi
call fcn.00420b40
push 1
push 0
push 0
push 1
push esi
push dword [eax]
call fcn.00418b20
add esp, 0x34
or eax, 0xffffffff
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 4]
push ebx
mov ebx, dword [ebp - 0xc]
push ebx
mov esi, dword [eax]
call fcn.00421a20
lea eax, [ebp - 0xa8]
push eax
call fcn.0044c840
push 0x56b688
push esi
call fcn.00423600
add esp, 0x10
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x41eaf1
mov eax, dword [ebx]
test eax, eax
je 0x41eb72
push eax
call fcn.005414d0
add esp, 4
mov dword [ebx], 0
jmp 0x41eb72
push eax
push 0x1000
lea eax, [ebp - 0x10a8]
push 1
push eax
call fcn.00541e3c
add esp, 0x10
test eax, eax
je 0x41eb41
nop dword [eax]
push eax
lea eax, [ebp - 0x10a8]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.0044c8c0
push dword [ebp - 0x18]
lea eax, [ebp - 0x10a8]
push 0x1000
push 1
push eax
call fcn.00541e3c
add esp, 0x1c
test eax, eax
jne 0x41eb10
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0044c560
push 0x20
lea eax, [ebp - 0x38]
push eax
push 0
push ebx
call fcn.00425650
push dword [ebx]
call fcn.00422110
lea eax, [ebp - 0x18]
push eax
call fcn.004235e0
add esp, 0x20
cmp dword [ebx], 0
pop ebx
jne 0x41eb88
push dword [ebp + 0xc]
mov eax, dword [ebp - 4]
push str.dll_failed_open__s
jmp 0x41ea31
mov eax, dword [ebp - 0xc]
push str.7f6cdf7cf5bb90a59d7d70d38f95bbe15dbe27384d6f165e95759bd524cfe705
push dword [eax]
call fcn.00421710
add esp, 8
test eax, eax
je 0x41ebdf
mov eax, dword [ebp - 0xc]
push str.7f6cdf7cf5bb90a59d7d70d38f95bbe15dbe27384d6f165e95759bd524cfe705
push dword [eax]
push str._s__s
push edi
call fcn.00420b40
push dword [ebp + 0xc]
push str.dll_invalid_hash__s
mov esi, dword [eax]
push edi
call fcn.00420b40
push 1
push 0
push 0
push 1
push esi
push dword [eax]
call fcn.00418b20
add esp, 0x34
or eax, 0xffffffff
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
push dword [ebp - 8]
push dword [eax]
call fcn.0041ec60
add esp, 0xc
test eax, eax
je 0x41ec06
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x14]
push str.dll_failed_verify__s
jmp 0x41ea31
mov eax, dword [ebp - 8]
push str.CIL__PostalCode4250713__LNetanya__STREET3_Hamachshev_st__OLuminati_Networks_Ltd__CNLuminati_Networks_Ltd
push dword [eax]
call fcn.00421710
add esp, 8
test eax, eax
je 0x41ec58
mov eax, dword [ebp - 8]
push str.CIL__SCentral__OBright_Data_Ltd.__CNBright_Data_Ltd.
push dword [eax]
call fcn.00421710
add esp, 8
test eax, eax
je 0x41ec58
mov eax, dword [ebp - 8]
push str.OID.2.5.4.15Private_Organization__OID.1.3.6.1.4.1.311.60.2.1.3IL__SERIALNUMBER514114842__CIL__LNetanya__OBright_Data_Ltd__CNBright_Data_Ltd
push dword [eax]
call fcn.00421710
add esp, 8
test eax, eax
je 0x41ec58
push dword [ebp + 0xc]
mov eax, dword [ebp - 8]
push str.dll_invalid_signature__s
jmp 0x41ea31
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret