Function at 0x42bac0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb4c
mov eax, dword [0x451430]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push 0x104
lea eax, [ebp - 0x20c]
push eax
push str.vtp_catcache
push 0
mov ebx, ecx
mov byte [ebp - 0xb31], 0
call fcn.00424930
add esp, 0x10
push 0
push 0x80
push 3
push 0
push 0
push 0xc0000000
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0xb3c], eax
jne 0x42bb6f
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42be51
test byte [eax + 0x3c], 1
je 0x42be51
cmp byte [eax + 0x39], 5
jb 0x42be51
mov edx, dword [eax + 0x34]
mov eax, dword [eax + 0x30]
push 0x446c1c
push 0xa
push edx
push eax
call fcn.004170b0
mov al, byte [ebp - 0xb31]
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042d845
mov esp, ebp
pop ebp
ret
push 0
lea ecx, [ebp - 0xb38]
push ecx
push 0x10
lea edx, [ebp - 0xb4c]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x42bbc9
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42be44
test byte [eax + 0x3c], 1
je 0x42be44
cmp byte [eax + 0x39], 5
jb 0x42be44
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x446c1c
push 0xb
push ecx
push edx
call fcn.004170b0
jmp 0x42be44
cmp dword [ebp - 0xb38], 0x10
je 0x42bc0f
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42be44
test byte [eax + 0x3c], 1
je 0x42be44
cmp byte [eax + 0x39], 5
jb 0x42be44
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x446c1c
push 0xc
push ecx
push edx
call fcn.004170b0
jmp 0x42be44
cmp dword [ebp - 0xb4c], 5
je 0x42bc55
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42be44
test byte [eax + 0x3c], 1
je 0x42be44
cmp byte [eax + 0x39], 5
jb 0x42be44
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x446c1c
push 0xd
push ecx
push edx
call fcn.004170b0
jmp 0x42be44
cmp dword [ebp - 0xb40], 0
jne 0x42bc9b
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42be44
test byte [eax + 0x3c], 1
je 0x42be44
cmp byte [eax + 0x39], 5
jb 0x42be44
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x446c1c
push 0xe
push ecx
push edx
call fcn.004170b0
jmp 0x42be44
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42bcd5
test byte [eax + 0x3c], 1
je 0x42bcd5
cmp byte [eax + 0x39], 5
jb 0x42bcd5
mov ecx, dword [ebp - 0xb44]
mov edx, dword [ebp - 0xb48]
push ecx
mov ecx, dword [eax + 0x34]
push edx
mov edx, dword [eax + 0x30]
push 0x446c1c
push 0xf
push ecx
push edx
call fcn.0042c090
push esi
xor esi, esi
cmp dword [ebp - 0xb48], esi
jbe 0x42bda3
jmp 0x42bcf0
mov edx, dword [ebp - 0xb3c]
push 0
lea eax, [ebp - 0xb38]
push eax
push 0x81c
lea ecx, [ebp - 0xb30]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x42be66
cmp dword [ebp - 0xb38], 0x81c
jne 0x42be94
mov eax, dword [ebp - 0x318]
push eax
mov eax, dword [ebp - 0xb2c]
lea ecx, [ebp - 0x328]
push ecx
mov ecx, dword [ebp - 0xb30]
lea edx, [ebp - 0xb28]
push edx
push eax
push ecx
mov ecx, ebx
call fcn.0042b190
test eax, eax
je 0x42bec2
mov ecx, dword [0x44b008]
cmp ecx, 0x44b008
je 0x42bd94
test byte [ecx + 0x3c], 1
je 0x42bd94
cmp byte [ecx + 0x39], 5
jb 0x42bd94
mov edx, dword [eax]
mov eax, dword [ebp - 0xb30]
push edx
mov edx, dword [ecx + 0x34]
push eax
mov eax, dword [ecx + 0x30]
push 0x446c1c
push 0x13
push edx
push eax
call fcn.0042c090
add esi, 1
cmp esi, dword [ebp - 0xb48]
jb 0x42bcf0
xor esi, esi
cmp dword [ebp - 0xb44], esi
jbe 0x42be3c
mov edx, dword [ebp - 0xb3c]
push 0
lea eax, [ebp - 0xb38]
push eax
push 0x108
lea ecx, [ebp - 0x314]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x42beff
cmp dword [ebp - 0xb38], 0x108
jne 0x42bf3c
mov eax, dword [ebp - 0x210]
push eax
mov ecx, ebx
call fcn.0042b0a0
test eax, eax
mov ecx, dword [ebp - 0x210]
je 0x42bfb6
cmp dword [eax], ecx
jne 0x42bfb6
mov ecx, dword [ebp - 0x214]
push eax
push ecx
lea edx, [ebp - 0x314]
push edx
mov ecx, ebx
call fcn.0042b630
test al, al
je 0x42bf79
add esi, 1
cmp esi, dword [ebp - 0xb44]
jb 0x42bdb1
mov byte [ebp - 0xb31], 1
pop esi
mov eax, dword [ebp - 0xb3c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
mov al, byte [ebp - 0xb31]
xor ecx, ebp
pop ebx
call fcn.0042d845
mov esp, ebp
pop ebp
ret
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42be43
test byte [eax + 0x3c], 1
je 0x42be43
cmp byte [eax + 0x39], 5
jb 0x42be43
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x446c1c
push 0x10
push ecx
push edx
call fcn.004170b0
jmp 0x42be43
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42be43
test byte [eax + 0x3c], 1
je 0x42be43
cmp byte [eax + 0x39], 5
jb 0x42be43
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x446c1c
push 0x11
push ecx
push edx
call fcn.004170b0
jmp 0x42be43
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42be43
test byte [eax + 0x3c], 1
je 0x42be43
cmp byte [eax + 0x39], 5
jb 0x42be43
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x446c1c
push 0x12
push ecx
push edx
call fcn.004170b0
jmp 0x42be43
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42be43
test byte [eax + 0x3c], 1
je 0x42be43
cmp byte [eax + 0x39], 5
jb 0x42be43
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x446c1c
push 0x14
push ecx
push edx
call fcn.004170b0
jmp 0x42be43
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42be43
test byte [eax + 0x3c], 1
je 0x42be43
cmp byte [eax + 0x39], 5
jb 0x42be43
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x446c1c
push 0x15
push ecx
push edx
call fcn.004170b0
jmp 0x42be43
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42be43
test byte [eax + 0x3c], 1
je 0x42be43
cmp byte [eax + 0x39], 5
jb 0x42be43
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x446c1c
push 0x17
push ecx
push edx
call fcn.004170b0
jmp 0x42be43
mov eax, dword [0x44b008]
cmp eax, 0x44b008
je 0x42be43
test byte [eax + 0x3c], 1
je 0x42be43
cmp byte [eax + 0x39], 5
jb 0x42be43
mov edx, dword [eax + 0x30]
push ecx
mov ecx, dword [eax + 0x34]
push 0x446c1c
push 0x16
push ecx
push edx
call fcn.004198f0
jmp 0x42be43