Function at 0x4099c0
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov eax, 0x17fc
push edi
push esi
push ebx
call fcn.0042d140
sub esp, eax
movzx eax, word [0x4583ec]
movzx edx, word [0x4583ee]
movzx ecx, word [0x4583f2]
lea ebx, [esp + 0x80]
mov dword [esp + 4], 0x840
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x1810]
mov dword [esp + 0x20], ecx
mov dword [esp + 0xc], eax
mov eax, dword [0x452484]
mov dword [esp + 0x1c], edx
add eax, 0x740
mov dword [esp + 0x14], edx
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.004096e0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0x80000000
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
sub esp, 0x1c
mov dword [esp + 0x3c], eax
cmp eax, 0xffffffff
je 0x409b70
mov dword [esp + 0xc], 0
mov esi, eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x58
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
cmp eax, 0xffffffff
je 0x409b60
lea ebp, [esp + 0x8c0]
lea edi, [esp + 0x60]
lea ebx, [esp + 0x5c]
jmp 0x409b2e
cmp dword [esp + 0x60], 2
jne 0x409b60
movzx eax, byte [esp + 0x5c]
cmp al, 0x40
jle 0x409ad6
movsx edx, byte [esp + 0x5d]
cmp dl, 0x60
jg 0x409b0f
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edi
mov dword [esp + 8], 2
mov dword [esp + 4], ebx
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x409b60
cmp dword [esp + 0x60], 2
jne 0x409b60
movsx edx, byte [esp + 0x5d]
movzx eax, byte [esp + 0x5c]
sub eax, 0x41
sub edx, 0x61
add ebp, 1
and eax, 0xf
shl edx, 4
or eax, edx
mov byte [ebp - 1], al
lea eax, [esp + 0x17f0]
cmp ebp, eax
je 0x409b8b
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edi
mov dword [esp + 8], 2
mov dword [esp + 4], ebx
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
jne 0x409ab8
lea esi, [esi]
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov edx, 0x459380
mov ecx, 0x3cc
xor eax, eax
mov edi, edx
rep stosd dword es:[edi], eax
add esp, 0x17fc
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebp, edi
lea esi, [esp + 0x70]
lea edi, [esp + 0x58]
jmp 0x409c17
cmp dword [esp + 0x5c], 2
jne 0x409b60
movzx eax, byte [esp + 0x58]
cmp al, 0x40
jle 0x409bba
movsx ecx, byte [esp + 0x59]
cmp cl, 0x60
jg 0x409bff
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 2
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x409b60
cmp dword [esp + 0x5c], 2
jne 0x409b60
movsx ecx, byte [esp + 0x59]
movzx eax, byte [esp + 0x58]
sub eax, 0x41
sub ecx, 0x61
add ebp, 1
and eax, 0xf
shl ecx, 4
or eax, ecx
mov byte [ebp - 1], al
cmp ebp, esi
je 0x409c4c
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 2
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
jne 0x409ba0
jmp 0x409b60
mov esi, dword [esp + 0x3c]
lea ebp, [esp + 0x56]
jmp 0x409cd7
cmp dword [esp + 0x5c], 2
jne 0x409b60
movzx eax, byte [esp + 0x56]
cmp al, 0x40
jle 0x409c7e
movsx edx, byte [esp + 0x57]
cmp dl, 0x60
jg 0x409cbf
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 2
mov dword [esp + 4], ebp
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x409b60
cmp dword [esp + 0x5c], 2
jne 0x409b60
movsx edx, byte [esp + 0x57]
movzx eax, byte [esp + 0x56]
sub eax, 0x41
sub edx, 0x61
add edi, 1
and eax, 0xf
shl edx, 4
or eax, edx
mov byte [edi - 1], al
cmp edi, ebx
je 0x409d08
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 2
mov dword [esp + 4], ebp
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
jne 0x409c60
jmp 0x409b60
mov dword [esp + 0x40], 0
lea eax, [esp + 0x8c0]
lea edx, [esp + 0x17f0]
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
lea esi, [esi]
lea esi, [esi]
mov ecx, dword [eax]
mov esi, dword [eax + 8]
xor ebx, ebx
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x10]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x18]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x20]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x28]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x30]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x38]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x40]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x48]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x50]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x58]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x60]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x68]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x70]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x78]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x80]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x88]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x90]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x98]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xa0]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xa8]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xb0]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xb8]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xc0]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xc8]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xd0]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xd8]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xe0]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xe8]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xf0]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xf8]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x100]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x108]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x110]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x118]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x120]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x128]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x130]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x138]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x140]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x148]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x150]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x158]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x160]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x168]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x170]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x178]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x180]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x188]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x190]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x198]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x1a0]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x1a8]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 4]
adc edi, ebx
add dword [esp + 0x48], esi
mov esi, dword [eax + 0xc]
adc dword [esp + 0x4c], edi
xor ebx, ebx
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x14]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x1c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x24]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x2c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x34]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x3c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x44]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x4c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x54]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x5c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x64]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x6c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x74]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x7c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x84]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x8c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x94]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x9c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xa4]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xac]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xb4]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xbc]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xc4]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xcc]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xd4]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xdc]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xe4]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xec]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xf4]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0xfc]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x104]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x10c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x114]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x11c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x124]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x12c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x134]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x13c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x144]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x14c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x154]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x15c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x164]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x16c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x174]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x17c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x184]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x18c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x194]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x19c]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x1a4]
adc edi, ebx
xor ebx, ebx
add esi, ecx
mov ecx, dword [eax + 0x1ac]
adc edi, ebx
xor ebx, ebx
add esi, ecx
adc edi, ebx
add dword [esp + 0x40], esi
adc dword [esp + 0x44], edi
add eax, 0x1b0
cmp eax, edx
jne 0x409d40
mov eax, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov edi, dword [esp + 0x40]
mov ebp, dword [esp + 0x44]
mov dword [esp + 0x70], eax
xor eax, dword [esp + 0x60]
mov dword [esp + 0x74], edx
xor edx, dword [esp + 0x64]
or eax, edx
mov dword [esp + 0x78], edi
mov dword [esp + 0x7c], ebp
jne 0x409b60
mov eax, edi
mov edx, ebp
xor eax, dword [esp + 0x68]
xor edx, dword [esp + 0x6c]
or eax, edx
jne 0x409b60
mov eax, dword [esp + 0x58]
mov dword [esp + 0xc], 0xf30
mov dword [esp + 4], 0xf30
mov dword [0x4583e8], eax
lea eax, [esp + 0x8c0]
mov dword [esp + 8], eax
mov dword [esp], 0x459380
call dword [0x42e308]
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
mov eax, 1
jmp 0x409b80