Function at 0x402bd1
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x9e34
call fcn.00427630
push edi
mov dword [ebp - 0x9e34], ecx
mov al, byte [0x45fb7c]
mov byte [ebp - 0x7e90], al
mov ecx, 0x7e7
xor eax, eax
lea edi, [ebp - 0x7e8f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x45fb80]
mov byte [ebp - 0x3f48], cl
mov ecx, 0x7e7
xor eax, eax
lea edi, [ebp - 0x3f47]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x45fb84]
mov byte [ebp - 0x5ef0], dl
mov ecx, 0x7e7
xor eax, eax
lea edi, [ebp - 0x5eef]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x45fb88]
mov byte [ebp - 0x9e30], al
mov ecx, 0x7e7
xor eax, eax
lea edi, [ebp - 0x9e2f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x3f4c], 0
push 0
push 0x80
push 4
push 0
push 3
push 0x80000000
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xffffffff
jne 0x402c8f
jmp 0x402ed1
mov edx, 1
test edx, edx
je 0x402e91
push 0
lea eax, [ebp - 0x3f50]
push eax
push 1
mov ecx, dword [ebp - 0x3f4c]
lea edx, [ebp + ecx - 0x1fa8]
push edx
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x402cc8
jmp 0x402e91
cmp dword [ebp - 0x3f50], 0
jne 0x402cd6
jmp 0x402e91
mov ecx, dword [ebp - 0x3f4c]
movsx edx, byte [ebp + ecx - 0x1fa8]
cmp edx, 0xa
jne 0x402e7d
mov eax, dword [ebp - 0x3f4c]
mov byte [ebp + eax - 0x1fa9], 0
movsx ecx, byte [ebp - 0x1fa8]
cmp ecx, 0x5b
jne 0x402d8f
movsx edx, byte [ebp - 0x3f48]
test edx, edx
je 0x402d41
lea eax, [ebp - 0x9e30]
push eax
lea ecx, [ebp - 0x5ef0]
push ecx
push 0
push 0
lea edx, [ebp - 0x7e90]
push edx
lea eax, [ebp - 0x3f48]
push eax
mov ecx, dword [ebp - 0x9e34]
call fcn.004024f3
mov byte [ebp - 0x7e90], 0
mov byte [ebp - 0x3f48], 0
mov byte [ebp - 0x5ef0], 0
mov byte [ebp - 0x9e30], 0
lea ecx, [ebp - 0x1fa8]
push ecx
call fcn.004270a0
add esp, 4
mov byte [ebp + eax - 0x1fa9], 0
lea edx, [ebp - 0x1fa7]
push edx
lea eax, [ebp - 0x7e90]
push eax
call fcn.00426fb0
add esp, 8
jmp 0x402e6e
push str.DialParamsUID
lea ecx, [ebp - 0x1fa8]
push ecx
call fcn.00427a00
add esp, 8
test eax, eax
je 0x402ddc
push 0x3d
lea edx, [ebp - 0x1fa8]
push edx
call fcn.00427940
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x402dd7
mov eax, dword [ebp - 4]
add eax, 1
push eax
lea ecx, [ebp - 0x3f48]
push ecx
call fcn.00426fb0
add esp, 8
jmp 0x402e6e
push str.PhoneNumber
lea edx, [ebp - 0x1fa8]
push edx
call fcn.00427a00
add esp, 8
test eax, eax
je 0x402e26
push 0x3d
lea eax, [ebp - 0x1fa8]
push eax
call fcn.00427940
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x402e24
mov ecx, dword [ebp - 4]
add ecx, 1
push ecx
lea edx, [ebp - 0x5ef0]
push edx
call fcn.00426fb0
add esp, 8
jmp 0x402e6e
push str.PreferredDevice
lea eax, [ebp - 0x1fa8]
push eax
call fcn.00427a00
add esp, 8
test eax, eax
je 0x402e6e
push 0x3d
lea ecx, [ebp - 0x1fa8]
push ecx
call fcn.00427940
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x402e6e
mov edx, dword [ebp - 4]
add edx, 1
push edx
lea eax, [ebp - 0x9e30]
push eax
call fcn.00426fb0
add esp, 8
mov dword [ebp - 0x3f4c], 0
jmp 0x402c8f
mov ecx, dword [ebp - 0x3f4c]
add ecx, 1
mov dword [ebp - 0x3f4c], ecx
jmp 0x402c8f
movsx edx, byte [ebp - 0x3f48]
test edx, edx
je 0x402ec7
lea eax, [ebp - 0x9e30]
push eax
lea ecx, [ebp - 0x5ef0]
push ecx
push 0
push 0
lea edx, [ebp - 0x7e90]
push edx
lea eax, [ebp - 0x3f48]
push eax
mov ecx, dword [ebp - 0x9e34]
call fcn.004024f3
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov esp, ebp
pop ebp
ret 4