Function at 0x428acb
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.00428acb
xor esi, esi
xor edi, edi
mov ecx, 0x1e6
push esi
dec ecx
jne 0x428ae7
mov ebx, 0x45fa18
call fcn.0045ce8d
mov edx, 0x1862e9c
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp - 0x2e0]
mov ecx, 0x104
call fcn.0045ced6
lea ebx, [ebp - 0x2e0]
push ebx
call fcn.00423f66
call fcn.0045c2a2
mov dword [ebp - 0xb4], eax
fild dword [0x186d87c]
fimul dword [0x186d87c]
fimul dword [0x186d94c]
mov eax, dword [ebp - 0xb4]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
jae 0x428c39
push 0
push pe_nt_image_headers32
push 3
push 0
fild dword [0x186cd28]
fild dword [0x186cd24]
call fcn.0045c11c
call fcn.0045c2a2
push eax
push 1
lea ebx, [ebp - 0x2e0]
push ebx
call dword [sym.imp.KERNEL32.DLL_CreateFileA]
fldcw word [ebp - 0x10]
mov dword [ebp - 0x2e4], eax
fild qword [0x186cd80]
mov eax, dword [ebp - 0x2e4]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
je 0x428c34
mov eax, dword [ebp - 0xb4]
call fcn.00456d47
lea ebx, [ebp - 0x2ec]
call fcn.0045c2a9
push 0
lea ebx, [ebp - 0x2e8]
push ebx
push dword [ebp - 0xb4]
lea ebx, [ebp - 0x2ec]
call fcn.0045d1af
push ebx
push dword [ebp - 0x2e4]
call dword [sym.imp.KERNEL32.DLL_ReadFile]
fldcw word [ebp - 0x10]
test eax, eax
je 0x428c25
mov eax, dword [ebp - 0x2e8]
test eax, eax
je 0x428c25
mov edx, dword [ebp - 0x2ec]
call fcn.0045d0a3
mov ecx, 1
mov eax, dword [ebp - 0x2e8]
call fcn.00454232
lea ebx, [ebp - 0x9c]
call fcn.0045c2a9
push dword [ebp - 0x2e4]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
fldcw word [ebp - 0x10]
jmp 0x428c4e
mov edx, 0x1863180
call fcn.0045d0ba
lea ebx, [ebp - 0x9c]
call fcn.0045c2a9
mov ebx, 0x45fa18
call fcn.0045ce8d
mov edx, 0x1860b4c
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp - 0x2e0]
mov ecx, 0x104
call fcn.0045ced6
lea ebx, [ebp - 0x2e0]
push ebx
call fcn.00423f66
call fcn.0045c2a2
mov dword [ebp - 0xb4], eax
fild dword [0x186d87c]
fimul dword [0x186d87c]
fimul dword [0x186d894]
mov eax, dword [ebp - 0xb4]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
jae 0x428d9c
push 0
push pe_nt_image_headers32
push 3
push 0
fild dword [0x186cd28]
fild dword [0x186cd24]
call fcn.0045c11c
call fcn.0045c2a2
push eax
push 1
lea ebx, [ebp - 0x2e0]
push ebx
call dword [sym.imp.KERNEL32.DLL_CreateFileA]
fldcw word [ebp - 0x10]
mov dword [ebp - 0x2e4], eax
fild qword [0x186cd80]
mov eax, dword [ebp - 0x2e4]
call fcn.0045c27b
fcompp
fnstsw ax
sahf
je 0x428d97
mov eax, dword [ebp - 0xb4]
call fcn.00456d47
lea ebx, [ebp - 0x2ec]
call fcn.0045c2a9
push 0
lea ebx, [ebp - 0x2e8]
push ebx
push dword [ebp - 0xb4]
lea ebx, [ebp - 0x2ec]
call fcn.0045d1af
push ebx
push dword [ebp - 0x2e4]
call dword [sym.imp.KERNEL32.DLL_ReadFile]
fldcw word [ebp - 0x10]
test eax, eax
je 0x428d88
mov eax, dword [ebp - 0x2e8]
test eax, eax
je 0x428d88
mov edx, dword [ebp - 0x2ec]
call fcn.0045d0a3
mov ecx, 1
mov eax, dword [ebp - 0x2e8]
call fcn.00454232
lea ebx, [ebp - 0xa0]
call fcn.0045c2a9
push dword [ebp - 0x2e4]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
fldcw word [ebp - 0x10]
jmp 0x428db1
mov edx, 0x1863180
call fcn.0045d0ba
lea ebx, [ebp - 0xa0]
call fcn.0045c2a9
mov eax, dword [0x45f83c]
test eax, eax
je 0x429243
mov dword [ebp - 0x71c], 0x2a
mov dword [ebp - 0x718], 0xaefc1327
mov dword [ebp - 0x714], 0x41c
lea ebx, [ebp - 0x2f4]
push ebx
push 0
push 0
push 0x428
lea ebx, [ebp - 0x71c]
push ebx
push dword [0x45f83c]
call dword [sym.imp.FLTLIB.DLL_FilterSendMessage]
fldcw word [ebp - 0x10]
mov eax, dword [ebp - 0x2f4]
test eax, eax
je 0x429003
fild dword [0x186d6e8]
fild dword [0x186d914]
fiadd dword [0x186d87c]
fmulp st(1)
mov eax, dword [ebp - 0x2f4]
call fcn.0045c27b
faddp st(1)
fistp qword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
call fcn.00456d47
lea ebx, [ebp - 0x2f0]
call fcn.0045c2a9
lea ebx, [ebp - 0x2f4]
push ebx
mov edx, dword [ebp - 0x2f0]
call fcn.0045d0a3
call fcn.0045d088
push eax
lea ebx, [ebp - 0x2f0]
call fcn.0045d1af
push ebx
push 0x428
lea ebx, [ebp - 0x71c]
push ebx
push dword [0x45f83c]
call dword [sym.imp.FLTLIB.DLL_FilterSendMessage]
fldcw word [ebp - 0x10]
mov eax, 0x878
call fcn.0045c274
mov eax, dword [ebp - 0x2f4]
call fcn.0045c27b
call fcn.0045c195
fistp qword [ebp - 0x6c]
mov esi, dword [ebp - 0x6c]
mov eax, esi
test eax, eax
je 0x429003
lea ebx, [ebp - 0x7a8]
mov eax, 2
call fcn.00450535
push 1
mov eax, esi
push eax
push 0x878
push 0x1280009
lea ebx, [ebp - 0x2f0]
call fcn.0045d1af
mov eax, ebx
push eax
lea ebx, [ebp - 0x7a8]
call fcn.004501f1
mov dword [ebp - 0x724], esi
mov edi, 1
jmp 0x428ff5
mov eax, edi
sub eax, dword [ebp - 0x790]
imul eax, eax, 0x878
add eax, dword [ebp - 0x7a8]
mov ebx, eax
lea ebx, [ebx + 0x830]
mov ecx, 0x44
call fcn.0045ce15
xor eax, eax
call fcn.004571b8
lea ebx, [ebp - 0xd8]
mov ecx, 0x21
call fcn.0045ced6
mov eax, 0x20
lea ebx, [ebp - 0xd8]
call fcn.0045ce8d
mov dword [ebp - 0x30], eax
call fcn.0045d088
cmp eax, dword [ebp - 0x30]
jne 0x428ff3
mov eax, edi
sub eax, dword [ebp - 0x790]
imul eax, eax, 0x878
add eax, dword [ebp - 0x7a8]
mov ebx, eax
lea ebx, [ebx + 0x30]
mov ecx, 0x800
call fcn.0045ce15
xor eax, eax
call fcn.004571b8
xor eax, eax
call fcn.0045305e
lea ebx, [ebp - 0x1dc]
mov ecx, 0x104
call fcn.0045ced6
mov edx, dword [ebp - 0xa8]
call fcn.0045d0a3
lea ebx, [ebp - 0xd8]
call fcn.0045ce8d
call fcn.0045c56d
mov edx, 0x1860814
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp - 0x1dc]
call fcn.0045ce8d
call fcn.0045c56d
mov edx, 0x1860824
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp - 0xa8]
call fcn.0045c2a9
inc edi
mov eax, edi
cmp eax, dword [ebp - 0x724]
jbe 0x428f00
mov dword [ebp - 0x71c], 0x2b
mov dword [ebp - 0x718], 0xaefc1327
mov dword [ebp - 0x714], 0x41c
lea ebx, [ebp - 0x72c]
push ebx
push 0
push 0
push 0x428
lea ebx, [ebp - 0x71c]
push ebx
push dword [0x45f83c]
call dword [sym.imp.FLTLIB.DLL_FilterSendMessage]
fldcw word [ebp - 0x10]
mov eax, dword [ebp - 0x72c]
test eax, eax
je 0x429243
fild dword [0x186d6e8]
fild dword [0x186d914]
fiadd dword [0x186d87c]
fmulp st(1)
mov eax, dword [ebp - 0x72c]
call fcn.0045c27b
faddp st(1)
fistp qword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
call fcn.00456d47
lea ebx, [ebp - 0x728]
call fcn.0045c2a9
lea ebx, [ebp - 0x72c]
push ebx
mov edx, dword [ebp - 0x728]
call fcn.0045d0a3
call fcn.0045d088
push eax
lea ebx, [ebp - 0x728]
call fcn.0045d1af
push ebx
push 0x428
lea ebx, [ebp - 0x71c]
push ebx
push dword [0x45f83c]
call dword [sym.imp.FLTLIB.DLL_FilterSendMessage]
fldcw word [ebp - 0x10]
mov eax, 0x858
call fcn.0045c274
mov eax, dword [ebp - 0x72c]
call fcn.0045c27b
call fcn.0045c195
fistp qword [ebp - 0x6c]
mov esi, dword [ebp - 0x6c]
mov eax, esi
test eax, eax
je 0x429243
lea ebx, [ebp - 0x81c]
mov eax, 2
call fcn.00450535
push 1
mov eax, esi
push eax
push 0x858
push 0x1280009
lea ebx, [ebp - 0x728]
call fcn.0045d1af
mov eax, ebx
push eax
lea ebx, [ebp - 0x81c]
call fcn.004501f1
mov dword [ebp - 0x724], esi
mov edi, 1
jmp 0x429235
mov eax, edi
sub eax, dword [ebp - 0x804]
imul eax, eax, 0x858
add eax, dword [ebp - 0x81c]
mov ebx, eax
lea ebx, [ebx + 0x810]
mov ecx, 0x44
call fcn.0045ce15
xor eax, eax
call fcn.004571b8
lea ebx, [ebp - 0xd8]
mov ecx, 0x21
call fcn.0045ced6
mov eax, 0x20
lea ebx, [ebp - 0xd8]
call fcn.0045ce8d
mov dword [ebp - 0x30], eax
call fcn.0045d088
cmp eax, dword [ebp - 0x30]
jne 0x429233
mov eax, edi
sub eax, dword [ebp - 0x804]
imul eax, eax, 0x858
add eax, dword [ebp - 0x81c]
mov ebx, eax
lea ebx, [ebx + 0x10]
mov ecx, 0x800
call fcn.0045ce15
xor eax, eax
call fcn.004571b8
xor eax, eax
call fcn.0045305e
lea ebx, [ebp - 0x1dc]
mov ecx, 0x104
call fcn.0045ced6
mov edx, dword [ebp - 0xa4]
call fcn.0045d0a3
lea ebx, [ebp - 0xd8]
call fcn.0045ce8d
call fcn.0045c56d
mov edx, 0x1860814
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp - 0x1dc]
call fcn.0045ce8d
call fcn.0045c56d
mov edx, 0x1860824
call fcn.0045d0ba
call fcn.0045c56d
lea ebx, [ebp - 0xa4]
call fcn.0045c2a9
inc edi
mov eax, edi
cmp eax, dword [ebp - 0x724]
jbe 0x429140
call fcn.00416fea
call fcn.0045d0d1
mov edx, 0x1860824
call fcn.0045d0ba
call fcn.0045c56d
mov edx, 0x186319c
call fcn.0045d0ba
call fcn.0045c56d
mov edx, 0x1860824
call fcn.0045d0ba
call fcn.0045c56d
mov edx, 0x18631fc
call fcn.0045d0ba
call fcn.0045c56d
mov edx, 0x1860824
call fcn.0045d0ba
call fcn.0045c56d
mov edx, dword [ebp - 0xa4]
call fcn.0045d0a3
call fcn.0045c56d
mov edx, 0x1860824
call fcn.0045d0ba
call fcn.0045c56d
mov edx, 0x186319c
call fcn.0045d0ba
call fcn.0045c56d
mov edx, 0x1860824
call fcn.0045d0ba
call fcn.0045c56d
mov edx, 0x186320c
call fcn.0045d0ba
call fcn.0045c56d
mov edx, 0x1860824
call fcn.0045d0ba
call fcn.0045c56d
mov edx, dword [ebp - 0xa8]
call fcn.0045d0a3
call fcn.0045c56d
mov edx, 0x1860824
call fcn.0045d0ba
call fcn.0045c56d
mov edx, 0x186319c
call fcn.0045d0ba
call fcn.0045c56d
mov edx, 0x1860824
call fcn.0045d0ba
call fcn.0045c56d
mov edx, 0x186321c
call fcn.0045d0ba
call fcn.0045c56d
mov edx, 0x1860824
call fcn.0045d0ba
call fcn.0045c56d
mov edx, dword [ebp - 0xa0]
call fcn.0045d0a3
call fcn.0045c56d
mov edx, 0x1860824
call fcn.0045d0ba
call fcn.0045c56d
mov edx, 0x186319c
call fcn.0045d0ba
call fcn.0045c56d
mov edx, 0x1860824
call fcn.0045d0ba
call fcn.0045c56d
mov edx, 0x1863230
call fcn.0045d0ba
call fcn.0045c56d
mov edx, dword [ebp - 0x9c]
call fcn.0045d0a3
call fcn.0045c56d
lea ebx, [ebp - 0x730]
call fcn.0045c2a9
lea ebx, [ebp - 0x730]
push ebx
call fcn.00413ea0
mov edx, dword [ebp - 0x730]
call fcn.0045d0a3
call fcn.0045d088
mov dword [ebp - 0xb4], eax
mov eax, 0x24
call fcn.00456d47
lea ebx, [ebp - 0x734]
call fcn.0045c2a9
lea ebx, [ebp - 0x734]
call fcn.0045d1af
mov eax, ebx
mov edx, 0x1863240
call fcn.0045d0ba
call fcn.00457dc1
mov eax, 0x12
lea ebx, [ebp - 0x734]
call fcn.0045d1af
mov dword [ebp - 0x30], eax
mov eax, ebx
mov ecx, dword [ebp - 0x30]
add eax, ecx
mov ebx, 0x45feb8
call fcn.0045ce8d
call fcn.00457dc1
mov eax, 0x20
lea ebx, [ebp - 0x734]
call fcn.0045d1af
mov dword [ebp - 0x30], eax
mov eax, ebx
mov ecx, dword [ebp - 0x30]
add eax, ecx
mov ebx, dword [ebp - 0xb4]
mov dword [eax], ebx
mov edx, dword [ebp - 0x734]
call fcn.0045d0a3
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0043e4bc
mov edx, dword [ebp - 0x730]
call fcn.0045d0a3
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0043e4bc
mov edx, 0x1863258
call fcn.0045d0ba
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0043e4bc
call fcn.0045cf2c
mov eax, dword [ebp - 0x98]
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret