Function at 0x439be0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb4c
mov eax, dword [0x4703d0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push 0x104
lea eax, [ebp - 0x20c]
push eax
push str.vtp_catcache
push 0
mov ebx, ecx
mov byte [ebp - 0xb31], 0
call fcn.0042db90
add esp, 0x10
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0xb3c], eax
jne 0x439c8f
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x439f71
test byte [eax + 0x3c], 1
je 0x439f71
cmp byte [eax + 0x39], 5
jb 0x439f71
mov edx, dword [eax + 0x34]
mov eax, dword [eax + 0x30]
push 0x45fd34
push 0xa
push edx
push eax
call fcn.0041b140
mov al, byte [ebp - 0xb31]
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0043c015
mov esp, ebp
pop ebp
ret
push 0
lea ecx, [ebp - 0xb38]
push ecx
push 0x10
lea edx, [ebp - 0xb4c]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x439ce9
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x439f64
test byte [eax + 0x3c], 1
je 0x439f64
cmp byte [eax + 0x39], 5
jb 0x439f64
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x45fd34
push 0xb
push ecx
push edx
call fcn.0041b140
jmp 0x439f64
cmp dword [ebp - 0xb38], 0x10
je 0x439d2f
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x439f64
test byte [eax + 0x3c], 1
je 0x439f64
cmp byte [eax + 0x39], 5
jb 0x439f64
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x45fd34
push 0xc
push ecx
push edx
call fcn.0041b140
jmp 0x439f64
cmp dword [ebp - 0xb4c], 8
je 0x439d75
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x439f64
test byte [eax + 0x3c], 1
je 0x439f64
cmp byte [eax + 0x39], 5
jb 0x439f64
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x45fd34
push 0xd
push ecx
push edx
call fcn.0041b140
jmp 0x439f64
cmp dword [ebp - 0xb40], 0
jne 0x439dbb
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x439f64
test byte [eax + 0x3c], 1
je 0x439f64
cmp byte [eax + 0x39], 5
jb 0x439f64
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x45fd34
push 0xe
push ecx
push edx
call fcn.0041b140
jmp 0x439f64
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x439df5
test byte [eax + 0x3c], 1
je 0x439df5
cmp byte [eax + 0x39], 5
jb 0x439df5
mov ecx, dword [ebp - 0xb44]
mov edx, dword [ebp - 0xb48]
push ecx
mov ecx, dword [eax + 0x34]
push edx
mov edx, dword [eax + 0x30]
push 0x45fd34
push 0xf
push ecx
push edx
call fcn.0043a1b0
push esi
xor esi, esi
cmp dword [ebp - 0xb48], esi
jbe 0x439ec3
jmp 0x439e10
mov edx, dword [ebp - 0xb3c]
push 0
lea eax, [ebp - 0xb38]
push eax
push 0x81c
lea ecx, [ebp - 0xb30]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x439f86
cmp dword [ebp - 0xb38], 0x81c
jne 0x439fb4
mov eax, dword [ebp - 0x318]
push eax
mov eax, dword [ebp - 0xb2c]
lea ecx, [ebp - 0x328]
push ecx
mov ecx, dword [ebp - 0xb30]
lea edx, [ebp - 0xb28]
push edx
push eax
push ecx
mov ecx, ebx
call fcn.004392b0
test eax, eax
je 0x439fe2
mov ecx, dword [0x46500c]
cmp ecx, 0x46500c
je 0x439eb4
test byte [ecx + 0x3c], 1
je 0x439eb4
cmp byte [ecx + 0x39], 5
jb 0x439eb4
mov edx, dword [eax]
mov eax, dword [ebp - 0xb30]
push edx
mov edx, dword [ecx + 0x34]
push eax
mov eax, dword [ecx + 0x30]
push 0x45fd34
push 0x13
push edx
push eax
call fcn.0043a1b0
add esi, 1
cmp esi, dword [ebp - 0xb48]
jb 0x439e10
xor esi, esi
cmp dword [ebp - 0xb44], esi
jbe 0x439f5c
mov edx, dword [ebp - 0xb3c]
push 0
lea eax, [ebp - 0xb38]
push eax
push 0x108
lea ecx, [ebp - 0x314]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x43a01f
cmp dword [ebp - 0xb38], 0x108
jne 0x43a05c
mov eax, dword [ebp - 0x210]
push eax
mov ecx, ebx
call fcn.004391c0
test eax, eax
mov ecx, dword [ebp - 0x210]
je 0x43a0d6
cmp dword [eax], ecx
jne 0x43a0d6
mov ecx, dword [ebp - 0x214]
push eax
push ecx
lea edx, [ebp - 0x314]
push edx
mov ecx, ebx
call fcn.00439750
test al, al
je 0x43a099
add esi, 1
cmp esi, dword [ebp - 0xb44]
jb 0x439ed1
mov byte [ebp - 0xb31], 1
pop esi
mov eax, dword [ebp - 0xb3c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
mov al, byte [ebp - 0xb31]
xor ecx, ebp
pop ebx
call fcn.0043c015
mov esp, ebp
pop ebp
ret
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x439f63
test byte [eax + 0x3c], 1
je 0x439f63
cmp byte [eax + 0x39], 5
jb 0x439f63
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x45fd34
push 0x10
push ecx
push edx
call fcn.0041b140
jmp 0x439f63
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x439f63
test byte [eax + 0x3c], 1
je 0x439f63
cmp byte [eax + 0x39], 5
jb 0x439f63
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x45fd34
push 0x11
push ecx
push edx
call fcn.0041b140
jmp 0x439f63
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x439f63
test byte [eax + 0x3c], 1
je 0x439f63
cmp byte [eax + 0x39], 5
jb 0x439f63
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x45fd34
push 0x12
push ecx
push edx
call fcn.0041b140
jmp 0x439f63
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x439f63
test byte [eax + 0x3c], 1
je 0x439f63
cmp byte [eax + 0x39], 5
jb 0x439f63
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x45fd34
push 0x14
push ecx
push edx
call fcn.0041b140
jmp 0x439f63
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x439f63
test byte [eax + 0x3c], 1
je 0x439f63
cmp byte [eax + 0x39], 5
jb 0x439f63
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x45fd34
push 0x15
push ecx
push edx
call fcn.0041b140
jmp 0x439f63
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x439f63
test byte [eax + 0x3c], 1
je 0x439f63
cmp byte [eax + 0x39], 5
jb 0x439f63
mov ecx, dword [eax + 0x34]
mov edx, dword [eax + 0x30]
push 0x45fd34
push 0x17
push ecx
push edx
call fcn.0041b140
jmp 0x439f63
mov eax, dword [0x46500c]
cmp eax, 0x46500c
je 0x439f63
test byte [eax + 0x3c], 1
je 0x439f63
cmp byte [eax + 0x39], 5
jb 0x439f63
mov edx, dword [eax + 0x30]
push ecx
mov ecx, dword [eax + 0x34]
push 0x45fd34
push 0x16
push ecx
push edx
call fcn.00401230
jmp 0x439f63