Function at 0x417730
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x38
mov esi, esp
mov eax, dword [0x481340]
xor eax, ebp
mov dword [esi + 0x30], eax
mov eax, 0x6d63c7ab
jmp 0x417760
mov eax, dword [esi]
mov eax, 0xd1967270
nop word cs:[eax + eax]
cmp eax, 0x1e01f82d
jle 0x4177a0
cmp eax, 0x59066edf
jle 0x4177e0
cmp eax, 0x6d63c7aa
jg 0x41785d
cmp eax, 0x59066ee0
je 0x41794a
cmp eax, 0x5c7eef0e
je 0x41774f
cmp eax, 0x602aa1e1
jne 0x417760
mov eax, dword [ebp + 0x10]
mov dword [esi + 0x28], eax
mov eax, 0x1e01f82e
jmp 0x417760
cmp eax, 0xd196726f
jle 0x417820
cmp eax, 0xfd522e3c
jle 0x4178dc
cmp eax, 0xfd522e3d
je 0x417965
cmp eax, 0x5a9b3e1
je 0x4179c2
cmp eax, 0x6aa573c
jne 0x417760
mov eax, 0x78b4c449
jmp 0x417760
cmp eax, 0x284e0757
jle 0x4178fc
cmp eax, 0x284e0758
je 0x4179cf
cmp eax, 0x42fbf041
je 0x4179e2
cmp eax, 0x50fba22c
jne 0x417760
mov eax, dword [esi + 8]
mov eax, 0x5a9b3e1
jmp 0x417760
cmp eax, 0xaa11e796
jle 0x41791c
cmp eax, 0xaa11e797
je 0x4179f5
cmp eax, 0xadb774da
je 0x417a0b
cmp eax, 0xcbee2b57
jne 0x417760
mov eax, dword [esi]
mov eax, dword [eax]
mov dword [esi + 0x2c], eax
mov eax, 0x94379604
jmp 0x417760
cmp eax, 0x78b4c449
je 0x417a22
cmp eax, 0x6e8cebbd
je 0x417a2f
cmp eax, 0x6d63c7ab
jne 0x417760
push eax
mov eax, esp
mov dword [esi + 0xc], eax
push eax
mov eax, esp
mov dword [esi], eax
sub esp, 8
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov dword [esi + 8], eax
push eax
push eax
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov dword [esi + 0x10], eax
push eax
push eax
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov dword [esi + 0x14], eax
push eax
mov eax, esp
mov dword [esi + 4], eax
mov eax, dword [esi + 0xc]
mov ecx, dword [ebp + 8]
mov dword [eax], ecx
mov eax, dword [esi]
mov eax, dword [esi]
mov dword [eax], 0
mov eax, dword [ebp + 0x18]
mov dword [esi + 0x1c], eax
mov eax, dword [ebp + 0x14]
mov dword [esi + 0x18], eax
mov eax, 0x59066ee0
jmp 0x417760
cmp eax, 0xd79e59b4
je 0x417a44
cmp eax, 0xfbe72246
jne 0x417a85
mov eax, 0x602aa1e1
jmp 0x417760
cmp eax, 0x1e01f82e
je 0x417a52
cmp eax, 0x21d246e0
jne 0x417760
mov eax, 0x5c7eef0e
jmp 0x417760
cmp eax, 0x92523508
je 0x417a7b
cmp eax, 0x94379604
jne 0x417760
mov edi, dword [esi + 0x2c]
xor ebx, ebx
mov eax, dword [esi + 4]
mov dword [eax], 1
mov eax, 0x5c7eef0e
jmp 0x417760
mov eax, dword [esi + 0x18]
and eax, dword [esi + 0x1c]
cmp eax, 0xffffffff
mov eax, 0x50fba22c
mov ecx, 0x602aa1e1
cmove eax, ecx
jmp 0x417760
mov eax, dword [esi + 8]
mov ecx, dword [ebp + 0x14]
mov dword [eax], ecx
mov ecx, dword [ebp + 0x18]
mov dword [eax + 4], ecx
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0x14]
movsd xmm0, qword [eax]
movsd qword [ecx], xmm0
mov eax, dword [esi + 0xc]
mov eax, dword [eax]
mov ecx, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
sub esp, 0x14
movsd xmm0, qword [edx]
movsd qword [esp + 4], xmm0
mov dword [esp + 0xc], ecx
mov dword [esp], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
mov eax, 0x42fbf041
mov ecx, 0xd79e59b4
cmove eax, ecx
jmp 0x417760
mov eax, dword [esi + 0x10]
mov eax, 0xfd522e3d
jmp 0x417760
mov eax, dword [esi + 4]
mov dword [eax], 1
mov eax, 0x92523508
jmp 0x417760
mov eax, dword [esi + 4]
mov dword [eax], 0
mov eax, 0x6aa573c
jmp 0x417760
cmp dword [esi + 0x24], 0
mov eax, 0x5c7eef0e
mov ecx, 0xfbe72246
cmove eax, ecx
jmp 0x417760
mov eax, dword [esi + 4]
mov dword [eax], 1
xor edi, edi
mov eax, 0x21d246e0
xor ebx, ebx
jmp 0x417760
mov eax, dword [esi + 0x10]
mov eax, 0x6e8cebbd
jmp 0x417760
mov eax, dword [esi + 8]
mov eax, dword [esi + 4]
mov eax, dword [eax]
mov dword [esi + 0x24], eax
mov eax, 0xaa11e797
jmp 0x417760
xor edi, edi
mov eax, 0x284e0758
xor ebx, ebx
jmp 0x417760
mov eax, dword [esi + 0xc]
push 0
push dword [esi]
push dword [esi + 0x28]
push dword [ebp + 0xc]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
mov eax, 0xcbee2b57
mov ecx, 0xadb774da
cmove eax, ecx
jmp 0x417760
mov eax, 0x78b4c449
jmp 0x417760
cmp eax, 0xd1967270
jne 0x417760
mov ecx, dword [esi + 0x30]
xor ecx, ebp
call fcn.00446e61
mov eax, edi
mov edx, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret