Function at 0x4529c8
Capabilities:
Read file on windows

Disassembly:
push 0x1a4
mov eax, 0x46847d
call fcn.0045f4d4
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x154], eax
xor esi, esi
inc esi
mov dword [ebp - 4], esi
xor ebx, ebx
cmp dword [ebp + 0x3c], ebx
jne 0x452a12
mov byte [ebp - 4], bl
push ebx
push esi
lea ecx, [ebp + 8]
call fcn.00411dad
or dword [ebp - 4], 0xffffffff
push ebx
push esi
lea ecx, [ebp + 0x28]
call fcn.00411dad
xor al, al
call fcn.0045f566
ret 0x3c
cmp dword [ebp + 0x40], 8
mov eax, dword [ebp + 0x2c]
jae 0x452a1e
lea eax, [ebp + 0x2c]
push ebx
push 0x80
push 3
push ebx
push esi
push SysReAllocString
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x148], eax
cmp eax, 0xffffffff
jne 0x452a9e
cmp dword [ebp + 0x40], 8
mov eax, dword [ebp + 0x2c]
jae 0x452a4b
lea eax, [ebp + 0x2c]
push eax
lea ecx, [ebp - 0x130]
call fcn.0045179a
mov byte [ebp - 4], 2
push dword [ebp - 0x130]
lea ecx, [ebp - 0x2c]
call fcn.004132cd
mov byte [ebp - 4], 2
push ebx
push esi
lea ecx, [ebp - 0x2c]
call fcn.00411dad
mov byte [ebp - 4], 1
lea eax, [ebp - 0x12c]
cmp dword [ebp - 0x130], eax
je 0x4529ed
push dword [ebp - 0x130]
call fcn.0043e815
pop ecx
jmp 0x4529ed
push 0x800
call fcn.0043e65e
mov edi, 0x2000
push edi
mov esi, eax
call fcn.0043e65e
push edi
mov dword [ebp - 0x138], eax
call fcn.0043e65e
add esp, 0xc
mov edi, eax
xor eax, eax
mov dword [ebp - 0x13c], edi
stosd dword es:[edi], eax
push ebx
lea eax, [ebp - 0x14c]
push eax
push 0x7fe
jmp 0x452d02
mov eax, dword [ebp - 0x14c]
cmp eax, ebx
jbe 0x452d17
mov edi, dword [ebp - 0x13c]
push esi
mov byte [eax + esi], bl
mov eax, dword [ebp - 0x14c]
push 0x1000
push edi
mov byte [eax + esi + 1], bl
call fcn.004516b1
test eax, eax
jl 0x452d5f
push 0x40eab8
push edi
mov dword [ebp - 0x140], edi
call fcn.0043f33a
mov edi, eax
pop ecx
pop ecx
cmp edi, ebx
je 0x452c9f
jmp 0x452b3b
mov edi, dword [ebp - 0x144]
xor eax, eax
mov word [edi], ax
add edi, 4
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x144], edi
call fcn.00413387
mov byte [ebp - 4], 4
cmp dword [ebp + 0x20], 8
mov eax, dword [ebp + 0xc]
jae 0x452b64
lea eax, [ebp + 0xc]
push 1
push eax
lea ecx, [ebp - 0x188]
call fcn.004133c7
cmp eax, ebx
jne 0x452d93
push pe_nt_image_headers32
lea ecx, [ebp - 0x1b0]
call fcn.00413b25
mov byte [ebp - 4], 5
push ebx
lea eax, [ebp - 0x1b0]
push eax
push dword [ebp - 0x140]
lea ecx, [ebp - 0x188]
call fcn.004134b0
test eax, eax
je 0x452c60
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
mov byte [ebp - 4], 6
xor edi, edi
cmp dword [ebp - 0x1b0], ebx
jbe 0x452c39
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x150]
push eax
push edi
lea ecx, [ebp - 0x1b0]
call fcn.00451708
lea ecx, [ebp - 0x2c]
call fcn.00411d68
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x158]
sub eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x2c]
sar eax, 1
push eax
push dword [ebp - 0x150]
call fcn.00413f3c
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x168]
call fcn.004524b4
mov byte [ebp - 4], 6
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.00411dad
inc edi
cmp edi, dword [ebp - 0x1b0]
jb 0x452bcf
mov ecx, dword [ebp - 0x154]
lea eax, [ebp - 0x168]
push eax
call fcn.00452984
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x168]
call fcn.0044f7a7
mov edi, dword [ebp - 0x144]
mov dword [ebp - 0x140], edi
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1b0]
call fcn.00412e79
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x188]
call fcn.00412e53
push 0x40eab8
push edi
call fcn.0043f33a
pop ecx
pop ecx
mov dword [ebp - 0x144], eax
cmp eax, ebx
jne 0x452b35
mov edi, dword [ebp - 0x138]
push dword [ebp - 0x140]
xor eax, eax
stosd dword es:[edi], eax
mov edi, 0x1000
push edi
push dword [ebp - 0x138]
call fcn.00451677
test eax, eax
jl 0x452dc3
push dword [ebp - 0x138]
push edi
push dword [ebp - 0x13c]
call fcn.00451677
test eax, eax
jl 0x452ddc
push dword [ebp - 0x13c]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test al, 1
je 0x452cf2
inc eax
push ebx
lea ecx, [ebp - 0x14c]
push ecx
mov ecx, 0x7fe
sub ecx, eax
push ecx
push esi
push dword [ebp - 0x148]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x452ae1
push dword [ebp - 0x148]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call fcn.0043e6e2
push dword [ebp - 0x138]
call fcn.0043e6e2
push dword [ebp - 0x13c]
call fcn.0043e6e2
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 8]
sub ecx, dword [eax + 4]
add esp, 0xc
sar ecx, 4
test ecx, ecx
seta byte [ebp - 0x131]
jmp 0x452e01
push esi
call fcn.0043e6e2
push dword [ebp - 0x138]
call fcn.0043e6e2
push edi
call fcn.0043e6e2
add esp, 0xc
mov byte [ebp - 4], bl
push ebx
push 1
lea ecx, [ebp + 8]
call fcn.00411dad
or dword [ebp - 4], 0xffffffff
push ebx
push 1
jmp 0x452a00
push esi
call fcn.0043e6e2
push dword [ebp - 0x138]
call fcn.0043e6e2
push dword [ebp - 0x13c]
call fcn.0043e6e2
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x188]
call fcn.00412e53
jmp 0x452d79
push esi
call fcn.0043e6e2
push dword [ebp - 0x138]
call fcn.0043e6e2
push dword [ebp - 0x13c]
jmp 0x452d71
push esi
call fcn.0043e6e2
push dword [ebp - 0x138]
call fcn.0043e6e2
push dword [ebp - 0x13c]
call fcn.0043e6e2
add esp, 0xc
mov byte [ebp - 0x131], bl
mov byte [ebp - 4], bl
push ebx
push 1
lea ecx, [ebp + 8]
call fcn.00411dad
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea ecx, [ebp + 0x28]
call fcn.00411dad
mov al, byte [ebp - 0x131]
jmp 0x452a0a