Function at 0x40d6b1
Capabilities:
Read file on windows

Disassembly:
push ebp
lea ebp, [esp - 0xdb0]
sub esp, 0xe30
mov eax, dword [0x439c3c]
xor eax, ebp
mov dword [ebp + 0xdac], eax
push esi
push edi
mov edi, 0x208
xor esi, esi
push edi
lea eax, [ebp + 0x99c]
push esi
push eax
mov dword [ebp - 0x7c], esi
call fcn.00419dc0
xor eax, eax
push 0x206
mov word [ebp + 0x794], ax
lea eax, [ebp + 0x796]
push esi
push eax
call fcn.00419dc0
mov eax, dword [0x43c478]
add esp, 0x18
cmp eax, esi
je 0x40d71f
mov ecx, dword [eax]
push 0x104
lea edx, [ebp + 0x794]
push edx
push eax
call dword [ecx + 0x20]
push str.._theme_logcenter.xml
lea eax, [ebp + 0x794]
push eax
lea eax, [ebp + 0x99c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push edi
lea eax, [ebp + 0xba4]
push esi
push eax
call fcn.00419dc0
lea eax, [ebp + 0x99c]
add esp, 0xc
test eax, eax
je 0x40d89e
lea eax, [ebp + 0xba4]
test eax, eax
je 0x40d89e
lea eax, [ebp + 0x99c]
push 0x5c
push eax
call fcn.0041a534
pop ecx
pop ecx
cmp eax, esi
je 0x40d7a5
push esi
push edi
lea ecx, [ebp + 0xba4]
push ecx
push esi
add eax, 2
push 0x431e6c
push eax
call fcn.0040ce5c
add esp, 0x18
test eax, eax
je 0x40d7a5
cmp word [ebp + 0xba4], si
jne 0x40d8a4
push esi
push 0x80
push 3
push esi
push 1
push SysReAllocString
lea eax, [ebp + 0x99c]
push eax
mov dword [ebp - 0x70], esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x78], eax
cmp eax, 0xffffffff
je 0x40d90b
push ebx
push 2
push esi
push 0xffffff00
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ebx, 0x800
push ebx
lea eax, [ebp - 0x6c]
push esi
push eax
mov dword [ebp - 0x74], esi
call fcn.00419dc0
add esp, 0xc
push esi
lea eax, [ebp - 0x74]
push eax
push ebx
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_ReadFile]
pop ebx
test eax, eax
je 0x40d85c
mov eax, dword [ebp - 0x74]
cmp eax, 0x100
ja 0x40d85c
shr eax, 1
push 0x431dd8
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0040cdc2
add esp, 0xc
cmp eax, esi
je 0x40d84e
push edi
push esi
lea ecx, [ebp + 0xba4]
push ecx
push eax
call fcn.0040ce10
add esp, 0x10
test al, al
je 0x40d84e
mov dword [ebp - 0x70], 1
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x70], esi
jne 0x40d899
lea eax, [ebp + 0x99c]
push 0x5c
push eax
call fcn.0041a534
pop ecx
pop ecx
cmp eax, esi
je 0x40d899
push 1
push edi
lea ecx, [ebp + 0xba4]
push ecx
push esi
add eax, 2
push 0x431e6c
push eax
call fcn.0040ce5c
add esp, 0x18
test eax, eax
je 0x40d899
cmp word [ebp + 0xba4], si
jne 0x40d8a4
mov eax, dword [ebp - 0x70]
jmp 0x40d8a0
xor eax, eax
cmp eax, esi
je 0x40d90b
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp + 0xba4]
push str._u._u._u._u
push eax
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x80], esi
call fcn.0041ce78
movzx eax, word [ebp - 0x78]
movzx ecx, word [ebp - 0x74]
movzx edx, word [ebp - 0x80]
mov esi, dword [ebp + 0xdbc]
shl eax, 0x10
or eax, ecx
movzx ecx, word [ebp - 0x70]
shl ecx, 0x10
or ecx, edx
mov edx, dword [ebp + 0xdb8]
add esp, 0x18
cmp eax, edx
jl 0x40d90b
jg 0x40d904
cmp ecx, esi
jb 0x40d90b
mov dword [ebp - 0x7c], 1
mov ecx, dword [ebp + 0xdac]
mov eax, dword [ebp - 0x7c]
pop edi
xor ecx, ebp
pop esi
call fcn.00419db1
add ebp, 0xdb0
leave
ret