Function at 0x41e8e0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10a8
call fcn.0053de80
push esi
push edi
push fcn.004221a0
lea eax, [ebp - 0x10]
lea edi, [ebp + 4]
push eax
add edi, 0xfffffffc
push edi
call fcn.00420780
mov dword [ebp - 0x10], eax
lea eax, [ebp - 4]
push 0x41e1c0
push eax
push edi
call fcn.00420780
add esp, 0x18
push dword [ebp + 8]
call fcn.0041a800
push eax
push 0x56a788
push dword [ebp - 4]
call fcn.004218d0
mov dword [ebp - 4], eax
lea eax, [ebp - 0xc]
push 0x41e1c0
push eax
push edi
call fcn.00420780
mov dword [ebp - 0xc], eax
lea eax, [ebp - 8]
push 0x41e1c0
push eax
push edi
call fcn.00420780
mov dword [ebp - 8], eax
lea eax, [ebp - 0x14]
push 0x41e1c0
push eax
push edi
call fcn.00420780
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
push dword [eax]
push dword [ebp - 0x10]
call fcn.004221d0
mov eax, dword [ebp - 4]
push dword [eax]
call fcn.00423560
add esp, 0x40
test eax, eax
mov eax, dword [ebp - 4]
jne 0x41e9b5
push dword [ebp + 0xc]
push str.dll_missing__s
mov esi, dword [eax]
push edi
call fcn.00420ae0
push 1
push 0
push 0
push 1
push esi
push dword [eax]
call fcn.00418b20
add esp, 0x24
or eax, 0xffffffff
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push dword [eax]
call fcn.00423ad0
add esp, 4
cmp eax, 0x7417f8
je 0x41ea03
push 0x7417f8
push eax
push str._d__d
push edi
call fcn.00420ae0
push dword [ebp + 0xc]
push str.dll_invalid_size__s
mov esi, dword [eax]
push edi
call fcn.00420ae0
push 1
push 0
push 0
push 1
push esi
push dword [eax]
call fcn.00418b20
add esp, 0x34
or eax, 0xffffffff
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 4]
push ebx
mov ebx, dword [ebp - 0xc]
push ebx
mov esi, dword [eax]
call fcn.004219c0
lea eax, [ebp - 0xa8]
push eax
call fcn.0044c7f0
push 0x56b688
push esi
call fcn.004235a0
add esp, 0x10
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x41ea51
mov eax, dword [ebx]
test eax, eax
je 0x41ead2
push eax
call fcn.005414d0
add esp, 4
mov dword [ebx], 0
jmp 0x41ead2
push eax
push 0x1000
lea eax, [ebp - 0x10a8]
push 1
push eax
call fcn.00541e3c
add esp, 0x10
test eax, eax
je 0x41eaa1
nop dword [eax]
push eax
lea eax, [ebp - 0x10a8]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.0044c870
push dword [ebp - 0x18]
lea eax, [ebp - 0x10a8]
push 0x1000
push 1
push eax
call fcn.00541e3c
add esp, 0x1c
test eax, eax
jne 0x41ea70
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.0044c510
push 0x20
lea eax, [ebp - 0x38]
push eax
push 0
push ebx
call fcn.004255f0
push dword [ebx]
call fcn.004220b0
lea eax, [ebp - 0x18]
push eax
call fcn.00423580
add esp, 0x20
cmp dword [ebx], 0
pop ebx
jne 0x41eae8
push dword [ebp + 0xc]
mov eax, dword [ebp - 4]
push str.dll_failed_open__s
jmp 0x41e991
mov eax, dword [ebp - 0xc]
push str.e6af11380eb3e0b60c616b57fb9376d831d530ca3f52af7c4aa5b1b7fde4e05f
push dword [eax]
call fcn.004216b0
add esp, 8
test eax, eax
je 0x41eb3f
mov eax, dword [ebp - 0xc]
push str.e6af11380eb3e0b60c616b57fb9376d831d530ca3f52af7c4aa5b1b7fde4e05f
push dword [eax]
push str._s__s
push edi
call fcn.00420ae0
push dword [ebp + 0xc]
push str.dll_invalid_hash__s
mov esi, dword [eax]
push edi
call fcn.00420ae0
push 1
push 0
push 0
push 1
push esi
push dword [eax]
call fcn.00418b20
add esp, 0x34
or eax, 0xffffffff
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
push dword [ebp - 8]
push dword [eax]
call fcn.0041ebc0
add esp, 0xc
test eax, eax
je 0x41eb66
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x14]
push str.dll_failed_verify__s
jmp 0x41e991
mov eax, dword [ebp - 8]
push str.CIL__PostalCode4250713__LNetanya__STREET3_Hamachshev_st__OLuminati_Networks_Ltd__CNLuminati_Networks_Ltd
push dword [eax]
call fcn.004216b0
add esp, 8
test eax, eax
je 0x41ebb8
mov eax, dword [ebp - 8]
push str.CIL__SCentral__OBright_Data_Ltd.__CNBright_Data_Ltd.
push dword [eax]
call fcn.004216b0
add esp, 8
test eax, eax
je 0x41ebb8
mov eax, dword [ebp - 8]
push str.OID.2.5.4.15Private_Organization__OID.1.3.6.1.4.1.311.60.2.1.3IL__SERIALNUMBER514114842__CIL__LNetanya__OBright_Data_Ltd__CNBright_Data_Ltd
push dword [eax]
call fcn.004216b0
add esp, 8
test eax, eax
je 0x41ebb8
push dword [ebp + 0xc]
mov eax, dword [ebp - 8]
push str.dll_invalid_signature__s
jmp 0x41e991
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret