Function at 0x432fa0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x613f1e
mov eax, dword fs:[0]
push eax
sub esp, 0x70
push ebx
push esi
push edi
mov eax, dword [0x69e3d4]
xor eax, esp
push eax
lea eax, [esp + 0x80]
mov dword fs:[0], eax
mov ebx, ecx
mov edi, edx
test byte [0x6be970], 1
jne 0x433010
or dword [0x6be970], 1
push 0x6be7b0
mov dword [esp + 0x8c], 0
call fcn.004318e0
push 0x620a40
call fcn.005a5c9a
add esp, 4
mov dword [esp + 0x88], 0xffffffff
mov eax, dword [0x6be7d0]
test eax, eax
je 0x43302e
push eax
call dword [sym.imp.user32.dll_IsWindow]
test eax, eax
je 0x43302e
mov ecx, 0x6be7b0
call fcn.00568303
mov esi, dword [ebp + 8]
test esi, esi
mov dword [0x6be94c], 0
jne 0x43308e
call fcn.0056efb5
test eax, eax
je 0x433055
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x74]
call eax
mov esi, eax
jmp 0x433057
xor esi, esi
call dword [sym.imp.user32.dll_GetActiveWindow]
cmp eax, dword [esi + 0x20]
jne 0x43308b
call fcn.005702dd
mov eax, dword [eax + 4]
push 8
push 0
mov ecx, eax
call fcn.0057b799
mov ecx, dword [esp + 0x80]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp + 8]
push esi
push str._08X.rtf
push 0x6be8f8
mov dword [0x6be8d0], 1
mov dword [0x6be8d4], 0
call fcn.005a5a2e
add esp, 0xc
cmp dword [0x6be948], 0
je 0x4330df
push esi
mov esi, 0x6be7b0
call fcn.00432a40
mov ecx, dword [esp + 0x80]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test edi, edi
jne 0x4330e7
xor eax, eax
jmp 0x4330fb
mov eax, edi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x4330f0
sub eax, edx
push eax
push edi
mov ecx, 0x6be8f0
call fcn.004014d0
test ebx, ebx
jne 0x43310f
xor eax, eax
jmp 0x43311f
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x433114
sub eax, edx
push eax
push ebx
mov ecx, 0x6be8f4
call fcn.004014d0
mov ecx, dword [0x6be8f0]
push 0x641d28
push ecx
call fcn.005a58c6
add esp, 8
test eax, eax
setg al
test al, al
je 0x43333c
push 0x645b40
lea edx, [esp + 0x1c]
push 0x6be8f0
push edx
call fcn.00401c10
add esp, 0xc
push 0x6be8f8
push eax
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x94], 1
call fcn.00401c10
mov eax, dword [eax]
add esp, 0xc
push 0x649a48
push eax
call fcn.005a6c42
mov esi, eax
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
add esp, 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4331b3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x88], 0xffffffff
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4331de
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
call fcn.0056d592
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4331f8
push 0x80004005
call fcn.004012f0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea ebx, [eax + 0x10]
mov dword [esp + 0x28], ebx
test esi, esi
mov dword [esp + 0x88], 2
jne 0x4332c4
cmp dword [0x6be950], esi
jne 0x43322f
push 0x6be7b0
xor ecx, ecx
call fcn.00432da0
mov esi, dword [ebp + 8]
lea ecx, [esp + 0x1c]
push ecx
push esi
mov ecx, 0x6be954
call fcn.0058c259
test eax, eax
je 0x43330c
mov eax, dword [esp + 0x1c]
push eax
push str._08X.rtf
push 0x6be8f8
mov dword [0x6be94c], esi
mov dword [ebp + 8], eax
call fcn.005a5a2e
add esp, 0xc
push 0x645b40
lea edx, [esp + 0x28]
push 0x6be8f0
push edx
call fcn.00401c10
add esp, 0xc
push 0x6be8f8
push eax
lea eax, [esp + 0x28]
push eax
mov byte [esp + 0x94], 3
call fcn.00401c10
mov eax, dword [eax]
add esp, 0xc
push 0x649a48
push eax
call fcn.005a6c42
add esp, 8
lea ecx, [esp + 0x20]
mov esi, eax
call fcn.00401280
lea ecx, [esp + 0x24]
call fcn.00401280
test esi, esi
je 0x43330c
push 2
push 0
push esi
call fcn.005a931a
add esp, 0xc
push esi
call fcn.005a9537
add esp, 4
push 0
push 0
push esi
mov edi, eax
call fcn.005a931a
add esp, 0xc
lea ecx, [edi + 2]
push 1
push ecx
call fcn.005a997a
push esi
push edi
push 1
push eax
mov dword [0x6be8cc], eax
call fcn.005a9841
push esi
call fcn.005a6e16
add esp, 0x1c
lea eax, [ebx - 0x10]
mov dword [esp + 0x88], 0xffffffff
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x433453
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x433453
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.004ef150
add esp, 4
mov esi, eax
test esi, esi
push 0
jne 0x433371
push eax
push str.Popup_help_file_missing_
call fcn.00572369
mov ecx, dword [esp + 0x80]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x6be8f8
push esi
call fcn.004ef690
mov edi, eax
add esp, 0xc
test edi, edi
je 0x4333e7
cmp dword [0x6be950], 0
jne 0x43339a
push 0x6be7b0
mov ecx, esi
call fcn.00432da0
mov ebx, dword [ebp + 8]
lea edx, [esp + 0x24]
push edx
push ebx
mov ecx, 0x6be954
call fcn.0058c259
test eax, eax
je 0x4333e3
mov eax, dword [esp + 0x24]
push eax
push str._08X.rtf
push 0x6be8f8
mov dword [0x6be94c], ebx
mov dword [ebp + 8], eax
call fcn.005a5a2e
add esp, 0xc
push 0
push 0x6be8f8
push esi
call fcn.004ef690
add esp, 0xc
mov edi, eax
test edi, edi
jne 0x43344a
push 0x50
lea eax, [esp + 0x30]
push 0
push eax
call fcn.005ab440
add esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0
lea ecx, [esp + 0x44]
push ecx
push esi
call fcn.004ef1a0
mov edx, dword [esp + 0x68]
add edx, 2
push 1
push edx
call fcn.005a997a
push esi
mov dword [0x6be8cc], eax
call fcn.004efb50
mov eax, dword [esp + 0x74]
mov ecx, dword [0x6be8cc]
add esp, 0x2c
push eax
push ecx
push esi
call fcn.004efb70
add esp, 0xc
push esi
call fcn.004efd70
add esp, 4
push esi
call fcn.004ef160
add esp, 4
xor ebx, ebx
cmp dword [0x6be8cc], ebx
jne 0x433559
push 1
push 0x100
call fcn.005a997a
lea edx, [esp + 0x28]
push edx
mov edi, 0xbb
mov dword [0x6be8cc], eax
call fcn.004e09d0
mov ecx, dword [eax]
mov edx, dword [0x6be8cc]
add esp, 0xc
lea esp, [esp]
mov al, byte [ecx]
mov byte [edx], al
add ecx, 1
add edx, 1
test al, al
jne 0x433490
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4334be
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [0x6be8f0]
push 0x641d28
push ecx
mov dword [0x6be8d0], ebx
mov dword [0x6be8d4], 1
call fcn.005a58c6
add esp, 8
cmp eax, ebx
setg al
test al, al
je 0x433559
mov edx, dword [0x6be8cc]
mov eax, edx
lea esi, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x4334f6
sub eax, esi
mov esi, dword [ebp + 8]
push esi
add eax, edx
push str.___X_
push eax
call fcn.005a5a2e
add esp, 0xc
lea ecx, [esp + 0x14]
call fcn.004014a0
push esi
lea edx, [esp + 0x18]
push 0x64a5c0
push edx
mov dword [esp + 0x94], 4
call fcn.00413f70
mov eax, dword [esp + 0x20]
add esp, 0xc
call fcn.004e1000
lea ecx, [esp + 0x14]
mov dword [esp + 0x88], 0xffffffff
call fcn.00401280
push ebx
push 0x812
mov ecx, 0x6be7b0
call fcn.0056c75d
push 5
mov ecx, 0x6be7b0
call fcn.0056cc4d
push 3
push ebx
push ebx
push ebx
push ebx
push 0x6b02c8
mov ecx, 0x6be7b0
call fcn.0056ce58
mov eax, dword [0x6be8cc]
cmp eax, ebx
je 0x43359c
push eax
call fcn.005a8a7b
add esp, 4
mov dword [0x6be8cc], ebx
mov ecx, dword [esp + 0x80]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret