Function at 0x41d640
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x13c
mov eax, dword [0x7079d0]
xor eax, esp
mov dword [esp + 0x138], eax
mov eax, dword [esp + 0x144]
push esi
mov esi, dword [esp + 0x14c]
push edi
mov edi, dword [esp + 0x148]
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], 1
cmp esi, 0xa
je 0x41d69d
cmp esi, 0xb
je 0x41d69d
pop edi
mov eax, 0xfffffffb
pop esi
mov ecx, dword [esp + 0x138]
xor ecx, esp
call fcn.00466e0a
add esp, 0x13c
ret
test eax, eax
je 0x41db9f
cmp byte [eax], 0
je 0x41db9f
push ebp
push 0x489c64
push eax
call dword [sym.imp.MSVCR90.dll_fopen]
mov ebp, eax
add esp, 8
test ebp, ebp
jne 0x41d6df
lea eax, [ebp - 4]
pop ebp
pop edi
pop esi
mov ecx, dword [esp + 0x138]
xor ecx, esp
call fcn.00466e0a
add esp, 0x13c
ret
push ebx
mov ebx, dword [esp + 0x15c]
cmp ebx, 2
jne 0x41d753
push 0
push 0
push ebp
call fcn.0043b980
add esp, 0xc
test eax, eax
je 0x41d719
lea ecx, [ecx]
push eax
mov ecx, edi
call fcn.00435300
push 0
push 0
push ebp
call fcn.0043b980
add esp, 0xc
test eax, eax
jne 0x41d700
push ebp
call dword [sym.imp.MSVCR90.dll_feof]
add esp, 4
test eax, eax
jne 0x41d895
push ebp
call dword [sym.imp.MSVCR90.dll_fclose]
add esp, 4
mov eax, 0xfffffffc
pop ebx
pop ebp
pop edi
pop esi
mov ecx, dword [esp + 0x138]
xor ecx, esp
call fcn.00466e0a
add esp, 0x13c
ret
test ebx, ebx
jne 0x41d760
lea eax, [edi + 4]
mov dword [esp + 0x10], eax
jmp 0x41d767
lea ecx, [edi + 8]
mov dword [esp + 0x10], ecx
cmp esi, 0xa
jne 0x41d8a8
push 2
push 0
push ebp
call dword [sym.imp.MSVCR90.dll_fseek]
push ebp
call dword [sym.imp.MSVCR90.dll_ftell]
push ebp
mov esi, eax
call dword [sym.imp.MSVCR90.dll_rewind]
movzx edx, byte [0x786e84]
push edx
push 8
call fcn.00431e40
add esp, 0x1c
test eax, eax
je 0x41d7ab
push esi
mov ecx, eax
call fcn.00446480
jmp 0x41d7ad
xor eax, eax
mov ecx, dword [esp + 0x10]
push ebp
push 1
mov dword [ecx], eax
push esi
mov ecx, eax
call fcn.00446510
push eax
call dword [sym.imp.MSVCR90.dll_fread]
add esp, 0x10
cmp eax, 1
jne 0x41d72b
cmp ebx, 1
jne 0x41d895
mov ecx, dword [edi + 8]
test ecx, ecx
je 0x41d895
call fcn.004464f0
mov ecx, dword [edi + 8]
push eax
call fcn.00446500
push eax
lea ecx, [esp + 0xcc]
call fcn.0041d150
lea ecx, [esp + 0x44]
call fcn.0041d250
lea ecx, [esp + 0xc4]
push ecx
lea ecx, [esp + 0x48]
call fcn.00450030
cmp dword [esp + 0xd4], 0
je 0x41d880
mov ecx, dword [edi + 8]
call fcn.004464f0
mov ecx, dword [edi + 8]
push eax
call fcn.00446500
push eax
lea ecx, [esp + 0x28]
call fcn.0041d150
lea ecx, [esp + 0xf8]
call fcn.0041d520
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0xfc]
call fcn.0044f610
cmp dword [esp + 0x30], 0
je 0x41d86b
mov dword [esp + 0x18], 0
lea ecx, [esp + 0xf8]
call fcn.0041d440
lea ecx, [esp + 0x20]
call fcn.0041d1b0
lea ecx, [esp + 0x44]
call fcn.0041d360
lea ecx, [esp + 0xc4]
call fcn.0041d1b0
push ebp
call dword [sym.imp.MSVCR90.dll_fclose]
mov eax, dword [esp + 0x1c]
add esp, 4
jmp 0x41d73a
lea edx, [esp + 0x44]
push edx
push ebx
push ebp
mov dword [esp + 0xc0], 0
mov byte [esp + 0xc4], 0
call fcn.0043b980
mov ecx, dword [esp + 0x1c]
add esp, 0xc
mov dword [ecx], eax
test eax, eax
je 0x41d72b
cmp byte [esp + 0xb8], 0
je 0x41d7d1
mov ecx, edi
call fcn.00432750
mov esi, eax
test esi, esi
je 0x41d72b
mov ecx, edi
call fcn.00432770
push eax
push 0
lea edx, [esp + 0x100]
push 0x50
push edx
call esi
add esp, 0x10
mov esi, eax
mov eax, dword [esp + 0xb4]
push eax
lea ecx, [esp + 0x98]
push ecx
lea ecx, [esp + 0x28]
call fcn.0041d150
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x38]
call fcn.0041d5f0
mov eax, dword [esp + 0x24]
push eax
push 0x20
call fcn.0041c860
mov ecx, dword [esp + 0x30]
push eax
push ecx
lea edx, [esp + 0xa4]
push edx
call sub.MSVCR90.dll_memcpy
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0xf0]
push ecx
push 1
push esi
lea edx, [esp + 0x11c]
push edx
lea eax, [esp + 0xbc]
push eax
lea ecx, [esp + 0x70]
push 0x489c24
push ecx
call fcn.0041cae0
mov esi, dword [sym.imp.MSVCR90.dll_strncmp]
push 7
lea edx, [esp + 0x7c]
push str.DES_CBC
push edx
mov dword [esp + 0x54], 0
call esi
add esp, 0x40
test eax, eax
jne 0x41d9d3
movzx eax, byte [0x786e84]
push eax
push 8
call fcn.00431e40
add esp, 8
test eax, eax
je 0x41dab4
mov ecx, eax
call fcn.0043a0c0
jmp 0x41dab6
push 0xd
lea ecx, [esp + 0x48]
push str.DES_EDE3_CBC
push ecx
call esi
add esp, 0xc
test eax, eax
jne 0x41da0e
movzx edx, byte [0x786e84]
push edx
push 8
call fcn.00431e40
add esp, 8
test eax, eax
je 0x41dab4
mov ecx, eax
call fcn.0043a130
jmp 0x41dab6
push 0xd
lea eax, [esp + 0x48]
push str.AES_128_CBC
push eax
call esi
add esp, 0xc
test eax, eax
jne 0x41da44
movzx ecx, byte [0x786e84]
push ecx
push 8
call fcn.00431e40
add esp, 8
test eax, eax
je 0x41dab4
push 0x10
mov ecx, eax
call fcn.004398b0
jmp 0x41dab6
push 0xd
lea edx, [esp + 0x48]
push str.AES_192_CBC
push edx
call esi
add esp, 0xc
test eax, eax
jne 0x41da7a
movzx eax, byte [0x786e84]
push eax
push 8
call fcn.00431e40
add esp, 8
test eax, eax
je 0x41dab4
push 0x18
mov ecx, eax
call fcn.004398b0
jmp 0x41dab6
push 0xd
lea ecx, [esp + 0x48]
push str.AES_256_CBC
push ecx
call esi
add esp, 0xc
test eax, eax
jne 0x41db77
movzx edx, byte [0x786e84]
push edx
push 8
call fcn.00431e40
add esp, 8
test eax, eax
je 0x41dab4
push 0x20
mov ecx, eax
call fcn.004398b0
jmp 0x41dab6
xor eax, eax
push eax
lea ecx, [esp + 0x18]
call fcn.0041d080
mov esi, dword [esp + 0x14]
mov eax, dword [esi]
mov eax, dword [eax + 0xc]
lea ecx, [esp + 0x94]
push ecx
lea edx, [esp + 0xdc]
push edx
mov ecx, esi
call eax
movzx ecx, byte [0x786e84]
push ecx
push 8
call fcn.00431e40
mov edi, eax
add esp, 8
test edi, edi
je 0x41db0c
mov edx, dword [esp + 0x10]
mov ecx, dword [edx]
call fcn.004464f0
push eax
mov ecx, edi
call fcn.00446480
mov edi, eax
jmp 0x41db0e
xor edi, edi
mov eax, dword [esp + 0x10]
mov ecx, dword [eax]
mov ebx, dword [esi]
call fcn.004464f0
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx]
push eax
call fcn.00446500
push eax
mov ecx, edi
call fcn.00446510
mov edx, dword [ebx + 4]
push eax
mov ecx, esi
call edx
mov ebx, dword [esp + 0x10]
mov eax, dword [ebx]
push eax
call fcn.0041ce40
push 0
mov dword [ebx], edi
call fcn.0041ce40
push esi
call fcn.0041c8f0
add esp, 0xc
lea ecx, [esp + 0x34]
call fcn.0041d340
lea ecx, [esp + 0x20]
call fcn.0041d1b0
mov ebx, dword [esp + 0x15c]
mov edi, dword [esp + 0x1c]
jmp 0x41d7d1
push ebp
call dword [sym.imp.MSVCR90.dll_fclose]
push 0
call fcn.0041c8f0
add esp, 8
lea ecx, [esp + 0x34]
call fcn.0041d340
lea ecx, [esp + 0x20]
call fcn.0041d1b0
jmp 0x41d735
mov ecx, dword [esp + 0x140]
pop edi
pop esi
xor ecx, esp
mov eax, 0xfffffffc
call fcn.00466e0a
add esp, 0x13c
ret