Function at 0x401910
Capabilities:
Read file on windows

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x2c
mov ebx, dword [esp + 0x40]
mov dword [esp], str.LOADER:_archivename_is__s_n
lea edi, [ebx + 0x68]
mov dword [esp + 4], edi
call fcn.00401f60
mov eax, dword [ebx]
test eax, eax
je 0x401b52
mov dword [esp + 8], 2
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.msvcrt.dll_fseek
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_ftell
mov edx, eax
mov esi, eax
mov eax, ebx
call fcn.00401550
test eax, eax
js 0x401a43
mov eax, dword [ebx + 0x18]
mov edi, dword [sym.imp.WS2_32.dll_ntohl]
mov dword [ebx + 0x406c], 0
mov dword [esp], eax
call edi
sub esi, eax
mov eax, dword [ebx + 0x1c]
sub esp, 4
mov dword [ebx + 4], esi
mov dword [esp], eax
call edi
sub esp, 4
add eax, esi
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_fseek
mov eax, dword [ebx + 0x20]
mov dword [esp], eax
call edi
sub esp, 4
mov dword [esp], eax
call sub.msvcrt.dll_malloc
test eax, eax
mov dword [ebx + 8], eax
je 0x401c86
mov eax, dword [ebx + 0x20]
mov esi, dword [ebx]
mov dword [esp], eax
call edi
sub esp, 4
mov dword [esp + 0xc], esi
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov eax, dword [ebx + 8]
mov dword [esp], eax
call sub.msvcrt.dll_fread
test eax, eax
je 0x401c50
mov esi, dword [ebx + 8]
mov eax, dword [ebx + 0x20]
mov dword [esp], eax
call edi
add eax, esi
sub esp, 4
mov dword [ebx + 0xc], eax
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_ferror
test eax, eax
mov esi, eax
jne 0x401c70
mov eax, dword [ebx]
test eax, eax
je 0x401a39
mov dword [esp], eax
call sub.msvcrt.dll_fclose
mov dword [ebx], 0
add esp, 0x2c
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], str.LOADER:_pyi_arch_check_cookie_failed_n
lea esi, [esp + 0x1a]
call fcn.00401f60
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebx]
mov dword [esp + 0x1c], 0
mov dword [esp], eax
call sub.msvcrt.dll_fseek
mov eax, dword [ebx]
mov dword [esp + 8], 2
mov dword [esp + 4], 1
mov dword [esp], esi
mov dword [esp + 0xc], eax
call sub.msvcrt.dll_fread
cmp byte [esp + 0x1a], 0x4d
jne 0x401b43
cmp byte [esp + 0x1b], 0x5a
jne 0x401b43
mov dword [esp + 8], 0
mov dword [esp + 4], 0x3c
lea ebp, [esp + 0x1c]
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_fseek
mov eax, dword [ebx]
mov dword [esp + 8], 1
mov dword [esp + 4], 4
mov dword [esp], ebp
mov dword [esp + 0xc], eax
call sub.msvcrt.dll_fread
mov eax, dword [esp + 0x1c]
mov dword [esp + 8], 0
add eax, 0x18
mov dword [esp + 4], eax
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_fseek
mov eax, dword [ebx]
mov dword [esp + 8], 1
mov dword [esp + 4], 2
mov dword [esp], esi
mov dword [esp + 0xc], eax
call sub.msvcrt.dll_fread
movsx ecx, byte [esp + 0x1a]
movsx edx, byte [esp + 0x1b]
cmp cl, 0xb
je 0x401b84
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov dword [esp], str.LOADER:_Could_not_find_a_valid_magic_value__was__x__x_._n
call fcn.00401f60
mov esi, 0xffffffff
add esp, 0x2c
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 4], 0x40c02c
mov dword [esp], edi
call fcn.00403250
test eax, eax
mov dword [ebx], eax
jne 0x401938
mov dword [esp + 4], edi
mov dword [esp], str.LOADER:_Cannot_open_archive:__s_n
or esi, 0xffffffff
call fcn.00401f60
jmp 0x401a39
cmp dl, 1
je 0x401c45
cmp dl, 2
mov eax, 0xa8
jne 0x401b2f
add eax, dword [esp + 0x1c]
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_fseek
mov eax, dword [ebx]
mov dword [esp + 8], 1
mov dword [esp + 4], 4
mov dword [esp], ebp
mov dword [esp + 0xc], eax
call sub.msvcrt.dll_fread
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x401b43
mov dword [esp + 4], edi
mov dword [esp], str.LOADER:__s_contains_a_digital_signature_n
call fcn.00401f60
mov esi, dword [esp + 0x1c]
test esi, esi
jle 0x401b43
lea ebp, [esi - 8]
lea esi, [esi]
mov edx, esi
mov eax, ebx
call fcn.00401550
test eax, eax
jns 0x401c30
sub esi, 1
cmp esi, ebp
jne 0x401c00
mov dword [esp + 4], edi
mov dword [esp], str.LOADER:__s_does_not_contain_an_embedded_package__even_skipping_the_signature_n
mov esi, 0xffffffff
call fcn.00401f60
jmp 0x401b48
mov dword [esp + 4], edi
mov dword [esp], str.LOADER:_package_found_skipping_digital_signature_in__s_n
call fcn.00401f60
jmp 0x40196d
mov eax, 0x98
jmp 0x401b97
mov dword [esp], str.Could_not_read_from_file.
mov esi, 0xffffffff
call fcn.00401ea0
jmp 0x401a39
mov dword [esp], str.Error_on_file
mov esi, 0xffffffff
call fcn.00401ea0
jmp 0x401a39
mov dword [esp], str.Could_not_allocate_buffer_for_TOC.
mov esi, 0xffffffff
call fcn.00401ea0
jmp 0x401a39