Function at 0x434c04
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1cbc
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov edi, str.RecoverOperaMailPassword
push edi
push 0x66c4b8
call fcn.00449974
push ebx
call fcn.00631510
add esp, 0xc
cmp eax, 1
jae 0x434c6c
lea eax, [ebp - 0x71c]
push 0x3e8
push eax
call fcn.00411966
pop ecx
pop ecx
test eax, eax
jne 0x434d03
push edi
push str._s_Failed_to_find_OperaMail_default_profile_path
call fcn.00449974
pop ecx
pop ecx
jmp 0x435300
mov esi, str.wand.dat
lea edi, [ebp - 0x1c]
push 5
pop ecx
lea eax, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
push eax
push ebx
lea eax, [ebp - 0x71c]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.Opera_Mailwand.dat
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov esi, 0x66c218
mov edi, 0x3e8
push esi
push edi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x71c]
push eax
call fcn.00449791
add esp, 0x18
test eax, eax
jne 0x434ce9
lea eax, [ebp - 0x40]
push eax
push ebx
push esi
lea eax, [ebp - 0x71c]
push edi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x71c]
push eax
call fcn.00449791
add esp, 0x18
test eax, eax
jne 0x434ce9
push str.RecoverOperaMailPassword
push str._s_Failed_to_find_OperaMail_Wand_file_in_the_specified_custom_profile_path
jmp 0x434c60
lea eax, [ebp - 0x71c]
mov edi, str.RecoverOperaMailPassword
push eax
push edi
push str._s_Final_custom_opera_mail_wand_file_path_is__s
call fcn.00449974
add esp, 0xc
xor ebx, ebx
lea eax, [ebp - 0x333]
push 0x1f3
push ebx
push eax
mov dword [ebp - 0x1ca8], ebx
mov dword [ebp - 0x1ca4], ebx
mov byte [ebp - 0x334], bl
call fcn.00626f50
push 0x670244
lea eax, [ebp - 0x71c]
mov dword [ebp - 0x10], 0xffc7d83
push eax
lea eax, [ebp - 0x1ca4]
mov dword [ebp - 0xc], 0x69e8b38e
push eax
mov word [ebp - 8], 0xaf73
mov byte [ebp - 6], 0xff
call fcn.00632119
add esp, 0x18
cmp dword [ebp - 0x1ca4], ebx
je 0x4352ea
test eax, eax
jne 0x4352ea
push str._nSuccessfully_opened_opera_wand_file..._n_n
call fcn.00449974
push 2
push ebx
push dword [ebp - 0x1ca4]
call fcn.00637e4f
push dword [ebp - 0x1ca4]
call fcn.006384ae
mov esi, eax
push esi
mov dword [ebp - 0x1cac], esi
call fcn.0063d3c4
add esp, 0x18
mov dword [ebp - 0x1ca0], eax
push dword [ebp - 0x1ca4]
test eax, eax
jne 0x434dcc
call fcn.00637603
push edi
push str._s___Memory_allocation_failed
call fcn.00449974
add esp, 0xc
jmp 0x435300
call fcn.006388c3
push dword [ebp - 0x1ca4]
push 1
push esi
push dword [ebp - 0x1ca0]
call fcn.00637a2b
push dword [ebp - 0x1ca4]
call fcn.00637603
lea eax, [ebp - 0x1ca0]
mov edi, ebx
push eax
push str._n_Read_the_wand_data_at_address_0x_.8x
call fcn.00449974
add esp, 0x20
mov dword [ebp - 0x1cb0], ebx
test esi, esi
je 0x4352e2
push edi
push str._n_n_Next_reading_entry_at_offset_0x_.8x
call fcn.00449974
mov ecx, dword [ebp - 0x1ca0]
sub esi, edi
push esi
add ecx, edi
push 8
push ecx
call fcn.006252a0
mov ebx, eax
add esp, 0x14
test ebx, ebx
je 0x4352b2
sub eax, dword [ebp - 0x1ca0]
push eax
push str._n_Found_key_at_offset_0x_.8x
call fcn.00449974
inc dword [ebp - 0x1cb0]
inc ebx
mov esi, dword [ebp - 0x1ca0]
mov edi, ebx
pop ecx
pop ecx
lea eax, [ebx - 8]
mov dword [ebp - 0x1cbc], ebx
lea ecx, [ebx + 8]
mov dword [ebp - 0x1cb4], eax
mov ebx, eax
sub edi, esi
cmp ebx, esi
jb 0x43529f
mov eax, dword [ebp - 0x1cac]
add eax, esi
cmp ecx, eax
ja 0x43529f
movzx edx, byte [ebx]
movzx eax, byte [ebx + 1]
add ebx, 2
shl eax, 0x10
mov dword [ebp - 0x1cb4], ebx
movzx ebx, byte [ecx]
shl edx, 0x18
or edx, eax
shl ebx, 0x18
movzx eax, byte [ecx + 1]
add ecx, 2
shl eax, 0x10
or ebx, eax
mov dword [ebp - 0x1cb8], ecx
mov eax, dword [ebp - 0x1cb8]
movzx ecx, byte [ecx + 1]
movzx eax, byte [eax]
shl eax, 8
or ecx, eax
mov eax, dword [ebp - 0x1cb4]
or ebx, ecx
movzx ecx, byte [eax]
movzx eax, byte [eax + 1]
shl ecx, 8
or ecx, eax
lea eax, [ebx + 0x10]
or ecx, edx
cmp ecx, eax
jne 0x43529f
mov eax, dword [ebp - 0x1cac]
sub eax, edi
sub eax, 0xc
cmp ebx, eax
ja 0x43529f
cmp ebx, 8
jb 0x43529f
test bl, 7
jne 0x43529f
push edi
push str._n_Reading_wand_key_for_this_entry_at_location_0x_.8x
call fcn.00449974
push 0xb
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.006269d0
mov esi, dword [ebp - 0x1cbc]
lea eax, [ebp - 0x135]
push 8
push esi
push eax
call fcn.006269d0
push 0x10
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x140]
push 0x13
push eax
call fcn.00448eb5
push 0x10
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.006269d0
push 0xb
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.006269d0
add esp, 0x48
lea eax, [ebp - 0x125]
push 8
push esi
push eax
call fcn.006269d0
push 0x10
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x140]
push 0x23
push eax
call fcn.00448eb5
lea eax, [ebp - 0x1c9c]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0044b735
lea eax, [ebp - 0x1c1c]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0044b735
lea eax, [ebp - 0x1b9c]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0044b735
push 8
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.006269d0
add esp, 0x40
add esi, 0xc
mov eax, esi
sub eax, dword [ebp - 0x1ca0]
push ebx
push eax
push str._n_Encrypted_data_is_at_0x_.8x___d_
call fcn.00449974
lea eax, [ebp - 0x1c]
mov byte [ebp - 0xf1c], 0
push 0
push eax
lea eax, [ebp - 0x1b9c]
push eax
lea eax, [ebp - 0x1c1c]
push eax
lea eax, [ebp - 0x1c9c]
push eax
push ebx
lea eax, [ebp - 0xf1c]
push eax
push esi
call fcn.0044af14
mov al, byte [ebp - 0xf1c]
add esp, 0x2c
test al, al
je 0x435289
cmp al, 8
je 0x435289
lea ecx, [ebp + ebx - 0xf1d]
movzx eax, byte [ecx]
push eax
sub ecx, eax
inc ecx
push 0
push ecx
call fcn.00626f50
lea eax, [ebp - 0xf1c]
push eax
push str._n__Decrypted_data__S
call fcn.00449974
add esp, 0x14
lea eax, [ebp - 0x131c]
mov esi, 0x400
push 0
push 0
push esi
push eax
lea eax, [ebp - 0xf1c]
push eax
call fcn.00630ba0
pop ecx
push eax
lea eax, [ebp - 0xf1c]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0xf1c]
push eax
call fcn.00630ba0
pop ecx
cmp eax, esi
jae 0x435311
push str.opera:mail_
mov byte [ebp + eax - 0x131c], 0
call fcn.00631510
push eax
lea eax, [ebp - 0x131c]
push str.opera:mail_
push eax
call fcn.006317d8
add esp, 0x10
test eax, eax
jne 0x435109
lea eax, [ebp - 0x131c]
push eax
lea eax, [ebp - 0xb1c]
push esi
push eax
call fcn.006311ec
add esp, 0xc
mov dword [ebp - 0x1ca8], 1
jmp 0x435294
mov eax, dword [ebp - 0x1ca8]
sub eax, 1
je 0x435256
sub eax, 1
je 0x435124
xor eax, eax
jmp 0x435281
lea eax, [ebp - 0x131c]
push eax
push str._n__Password___s
call fcn.00449974
lea eax, [ebp - 0x131c]
push eax
lea eax, [ebp - 0x171c]
push esi
push eax
call fcn.006311ec
xor eax, eax
push 0x6809c0
mov dword [ebp - 0x1ca8], eax
call fcn.00449974
lea eax, [ebp - 0xb1c]
push eax
push str._n_Website_:___s
call fcn.00449974
lea eax, [ebp - 0x1b1c]
push eax
push str._n_Username:___s
call fcn.00449974
lea eax, [ebp - 0x171c]
push eax
push str._n_Password:___s_n_n
call fcn.00449974
lea eax, [ebp - 0xb1c]
push eax
call fcn.00631510
inc eax
push eax
lea eax, [ebp - 0xb1c]
push eax
call fcn.00631711
lea eax, [ebp - 0xb1c]
push str._pop
push eax
call fcn.00627320
add esp, 0x44
test eax, eax
je 0x4351c7
mov ecx, str.POP3
jmp 0x4351e9
lea eax, [ebp - 0xb1c]
push str._imap
push eax
call fcn.00627320
pop ecx
pop ecx
test eax, eax
mov ecx, str.IMAP
mov edx, str.SMTP
cmove ecx, edx
push ecx
lea eax, [ebp - 0x334]
push 0x1f4
push eax
call fcn.006311ec
lea eax, [ebp - 0xb1c]
push 0x2f
push eax
call fcn.006270b0
add esp, 0x14
test eax, eax
je 0x435222
inc eax
push eax
lea eax, [ebp - 0xb1c]
push esi
push eax
call fcn.006311ec
add esp, 0xc
push 0xffffffffffffffff
push 0x66ae5d
lea eax, [ebp - 0x171c]
push eax
lea eax, [ebp - 0x1b1c]
push eax
lea eax, [ebp - 0xb1c]
push eax
lea eax, [ebp - 0x334]
push eax
push 0x100
push 2
call fcn.00412c85
add esp, 0x20
jmp 0x435294
lea eax, [ebp - 0x131c]
push eax
push str._n__User_Name___s
call fcn.00449974
lea eax, [ebp - 0x131c]
push eax
lea eax, [ebp - 0x1b1c]
push esi
push eax
call fcn.006311ec
add esp, 0x14
push 2
pop eax
mov dword [ebp - 0x1ca8], eax
jmp 0x435294
push str._n_DES_ede3_cbc_encrypt_Failed
call fcn.00449974
pop ecx
mov esi, dword [ebp - 0x1ca0]
add edi, 0xc
add edi, ebx
cmp edi, dword [ebp - 0x1cac]
jae 0x4352c3
mov esi, dword [ebp - 0x1cac]
jmp 0x434e14
push str._n_breaking_out_as_did_not_find_key
call fcn.00449974
mov esi, dword [ebp - 0x1ca0]
pop ecx
mov ebx, dword [ebp - 0x1cb0]
push esi
call fcn.0063d3a9
push ebx
push str._n_Finished_OperaPassCrack_operation__total_passwords_found__d
call fcn.00449974
xor eax, eax
add esp, 0xc
inc eax
jmp 0x435302
mov esi, dword [ebp - 0x1ca0]
jmp 0x4352c9
push eax
lea eax, [ebp - 0x71c]
push eax
push edi
push str._s___Failed_to_open_Opera_wand_file__s__Error0x_.8x
call fcn.00449974
add esp, 0x10
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret
call fcn.005fe87a
int3