Function at 0x40fd80
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x210
push ebx
push ebp
push esi
push edi
push 0xf0000
mov esi, ecx
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
test eax, eax
mov dword [esi + 0x58], eax
jne 0x40fdab
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x210
ret
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov ebp, dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocStringLen
push str.HWEnsystem.dic
mov dword [esi + 0x64], eax
call ebp
mov edi, eax
cmp edi, 0xffffffff
jne 0x40fe03
mov eax, dword [esi + 0x58]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov ecx, dword [esi + 0x58]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [esi + 0x58], 0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x210
ret
push 2
push 0
push 0
push edi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
push 0
push 0
push edi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [esi + 0x64]
lea edx, [esp + 0x10]
push 0
push edx
push ebx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [esp + 0x10], ebx
je 0x40fe67
mov ecx, dword [esi + 0x58]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov edx, dword [esi + 0x58]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [esi + 0x58], 0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x210
ret
mov ecx, dword [esi + 0x64]
lea eax, [ebx + 3]
shr eax, 2
push 0
push 0x80
shl eax, 2
mov ebx, 0xf0000
push 3
push 0
sub ebx, eax
push 1
add eax, ecx
push SysReAllocStringLen
push str.HWEnConst.dic
mov dword [esi + 0x88], eax
call ebp
mov edi, eax
cmp edi, 0xffffffff
jne 0x40feca
mov eax, dword [esi + 0x58]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov ecx, dword [esi + 0x58]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [esi + 0x58], 0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x210
ret
push 2
push 0
push 0
push edi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
push 0
push 0
push edi
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [esi + 0x88]
lea edx, [esp + 0x10]
push 0
push edx
push ebp
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
cmp dword [esp + 0x10], ebp
je 0x40ff33
mov ecx, dword [esi + 0x58]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov edx, dword [esi + 0x58]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [esi + 0x58], 0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x210
ret
mov ecx, dword [esi + 0x88]
lea eax, [ebp + 3]
shr eax, 2
shl eax, 2
sub ebx, eax
add eax, ecx
test eax, eax
mov dword [esi + 0x68], eax
mov dword [esi + 0x6c], 0xa000
je 0x40ffcf
lea edx, [esp + 0x18]
push 0x45eee4
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [esp + 0x18]
push str.CYEng.DAT
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0
push 0x80
push 3
push 0
push 1
lea ecx, [esp + 0x2c]
push SysReAllocStringLen
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x40ffcf
mov eax, dword [esi + 0x6c]
mov ecx, dword [esi + 0x68]
lea edx, [esp + 0x14]
push 0
push edx
push eax
push ecx
push ebp
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebp
call edi
mov ecx, dword [esi + 0x6c]
mov eax, dword [esp + 0x14]
cmp eax, ecx
je 0x40ffcf
mov edi, dword [esi + 0x68]
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [esi + 0x68]
add ebx, 0xffff6000
add eax, 0xa000
mov dword [esi + 0x7c], ebx
mov dword [esi + 0x78], eax
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x210
ret