Function at 0x417920
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x445c87
mov eax, dword fs:[0]
push eax
sub esp, 0x8ac
mov eax, dword [0x45a400]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor ebx, ebx
mov edi, 0xf
mov dword [ebp - 0x8b0], eax
mov esi, ecx
mov dword [ebp - 0x878], edi
mov dword [ebp - 0x87c], ebx
mov byte [ebp - 0x88c], bl
mov ecx, dword [ebp + 0xc]
push ebx
push ebx
push ecx
push eax
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0x3ff
lea edx, [ebp - 0x40f]
push ebx
push edx
mov byte [ebp - 0x410], bl
call fcn.0042a4a0
add esp, 0xc
push 0x3ff
lea eax, [ebp - 0x80f]
push ebx
push eax
mov dword [ebp - 0x894], 0x400
mov dword [ebp - 0x8a0], ebx
mov byte [ebp - 0x810], bl
call fcn.0042a4a0
add esp, 0xc
lea ecx, [ebp - 0x810]
push ecx
mov edx, esi
lea ecx, [ebp - 0x898]
mov dword [ebp - 0x898], ebx
call fcn.00417d70
test al, al
jne 0x417a6c
push 0x28
push str.Cannot_retrieve_the_service_information.
lea ecx, [ebp - 0x82c]
mov dword [ebp - 0x818], edi
mov dword [ebp - 0x81c], ebx
mov byte [ebp - 0x82c], al
call fcn.0040366e
push 0xffffffffffffffff
mov byte [ebp - 4], 1
push ebx
lea edx, [ebp - 0x82c]
push edx
lea ecx, [ebp - 0x86c]
mov dword [ebp - method.CLightInstallerException.virtual_0], vtable.CLightInstallerException.0
mov dword [ebp - 0x858], edi
mov dword [ebp - 0x85c], ebx
mov byte [ebp - 0x86c], bl
call fcn.00403978
push 0x455268
lea eax, [ebp - 0x870]
push eax
mov dword [ebp - 0x83c], edi
mov dword [ebp - 0x840], ebx
mov byte [ebp - 0x850], bl
mov dword [ebp - 0x834], ebx
call fcn.0042a64b
mov esi, dword [ebp - 0x898]
push esi
call fcn.0042824d
add esp, 4
mov dword [ebp - 0x898], eax
mov byte [ebp - 4], 2
cmp eax, ebx
jne 0x417b12
push 0xe
push str.Out_of_memory.
lea ecx, [ebp - 0x82c]
mov dword [ebp - 0x818], edi
mov dword [ebp - 0x81c], ebx
mov byte [ebp - 0x82c], 0
call fcn.0040366e
push 0xffffffffffffffff
mov byte [ebp - 4], 3
push ebx
lea ecx, [ebp - 0x82c]
push ecx
lea ecx, [ebp - 0x86c]
mov dword [ebp - method.CLightInstallerException.virtual_0], vtable.CLightInstallerException.0
mov dword [ebp - 0x858], edi
mov dword [ebp - 0x85c], ebx
mov byte [ebp - 0x86c], 0
call fcn.00403978
push 0x455268
lea edx, [ebp - 0x870]
push edx
mov dword [ebp - 0x83c], edi
mov dword [ebp - 0x840], ebx
mov byte [ebp - 0x850], 0
mov dword [ebp - 0x834], ebx
call fcn.0042a64b
push esi
push ebx
push eax
call fcn.0042a4a0
xor edi, edi
add esp, 0xc
cmp dword [ebp - 0x894], 0x400
mov dword [ebp - 0x8ac], edi
mov dword [ebp - 0x89c], 0xffffffff
jne 0x417c12
nop
mov edx, dword [ebp - 0x8b0]
push ebx
lea eax, [ebp - 0x894]
push eax
push 0x400
lea ecx, [ebp - 0x410]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x417d1a
mov ecx, dword [ebp - 0x894]
lea eax, [edi + ecx]
cmp eax, esi
jl 0x417c00
lea eax, [esi - 1]
lea edx, [ecx - 1]
lea ebx, [ebp - 0x410]
mov byte [ebp - 0x88d], 0
cmp eax, edx
jg 0x417cd6
mov eax, ebx
lea edx, [ebp - 0x810]
sub eax, edx
mov dword [ebp - 0x8a8], 0
mov dword [ebp - 0x8a4], eax
nop
test edi, edi
jne 0x417c5a
lea ecx, [esi - 1]
xor eax, eax
test ecx, ecx
js 0x417bec
jmp 0x417bd0
mov edx, dword [ebp - 0x8a4]
lea ecx, [ebp + eax - 0x810]
mov dl, byte [edx + ecx]
cmp dl, byte [ecx]
jne 0x417c45
inc eax
lea ecx, [esi - 1]
cmp eax, ecx
jle 0x417bd0
lea edx, [ebp - 0x410]
sub ebx, edx
add ebx, dword [ebp - 0x8a0]
mov dword [ebp - 0x89c], ebx
cmp dword [ebp - 0x89c], 0xffffffff
je 0x417c12
mov ecx, dword [ebp + 0xc]
add dword [ebp - 0x89c], ecx
mov edx, dword [ebp - 0x898]
push edx
call fcn.00428258
mov eax, dword [ebp - 0x89c]
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00428263
mov esp, ebp
pop ebp
ret 8
mov eax, 1
add dword [ebp - 0x8a4], eax
add ebx, eax
add dword [ebp - 0x8a8], eax
jmp 0x417ca4
jle 0x417caa
lea eax, [ebp - 0x8b4]
push eax
mov eax, dword [ebp - 0x8a0]
lea ecx, [ebp - 0x410]
push ecx
lea edx, [ebp - 0x88d]
push edx
mov edx, dword [ebp - 0x898]
push eax
lea ecx, [ebp - 0x89c]
push ecx
push edx
lea eax, [ebp - 0x8ac]
push eax
lea ecx, [ebp - 0x810]
push ecx
push ebx
call fcn.00418550
test al, al
jne 0x417cc3
mov edi, dword [ebp - 0x8ac]
mov ecx, dword [ebp - 0x894]
mov edx, dword [ebp - 0x8a8]
sub edx, edi
lea eax, [edx + esi - 1]
lea edx, [ecx - 1]
cmp eax, edx
jle 0x417bb0
jmp 0x417cc9
mov ecx, dword [ebp - 0x894]
cmp byte [ebp - 0x88d], 0
jne 0x417c00
mov eax, dword [ebp - 0x898]
sub ecx, ebx
lea edi, [ebp + ecx - 0x410]
push edi
sub eax, edi
lea ecx, [eax + esi - 1]
push ebx
push ecx
mov dword [ebp - 0x8ac], edi
call fcn.00429e20
mov eax, dword [ebp - 0x894]
add dword [ebp - 0x8a0], eax
add esp, 0xc
cmp eax, 0x400
jne 0x417c00
xor ebx, ebx
jmp 0x417b40
push 0x28
push str.Cannot_retrieve_the_service_information.
lea ecx, [ebp - 0x82c]
mov dword [ebp - 0x818], 0xf
mov dword [ebp - 0x81c], ebx
mov byte [ebp - 0x82c], 0
call fcn.0040366e
lea eax, [ebp - 0x82c]
lea esi, [ebp - 0x870]
mov byte [ebp - 4], 4
call fcn.00416a20
push 0x455268
mov eax, esi
push eax
call fcn.0042a64b
int3