Function at 0x409390
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov eax, 0x199c
push edi
push esi
push ebx
call fcn.00428e10
sub esp, eax
movzx eax, word [0x45634c]
movzx edx, word [0x45634e]
movzx ecx, word [0x456352]
lea ebx, [esp + 0x70]
mov dword [esp + 4], 0x840
mov dword [esp + 0x20], eax
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x19b0]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0xc], eax
mov eax, dword [0x450484]
mov dword [esp + 0x18], edx
add eax, 0x1198
mov dword [esp + 0x14], edx
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.004090b0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0x80000000
mov dword [esp], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
sub esp, 0x1c
cmp eax, 0xffffffff
je 0x409534
mov dword [esp + 0xc], 0
mov esi, eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x58
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
sub esp, 0x10
cmp eax, 0xffffffff
je 0x409528
lea ebp, [esp + 0x8b0]
lea edi, [esp + 0x50]
lea ebx, [esp + 0x4c]
jmp 0x4094f6
cmp dword [esp + 0x50], 2
jne 0x409528
movzx eax, byte [esp + 0x4c]
cmp al, 0x40
jle 0x40949e
movsx edx, byte [esp + 0x4d]
cmp dl, 0x60
jg 0x4094d7
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edi
mov dword [esp + 8], 2
mov dword [esp + 4], ebx
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x409528
cmp dword [esp + 0x50], 2
jne 0x409528
movsx edx, byte [esp + 0x4d]
movzx eax, byte [esp + 0x4c]
sub eax, 0x41
sub edx, 0x61
add ebp, 1
and eax, 0xf
shl edx, 4
or eax, edx
mov byte [ebp - 1], al
lea eax, [esp + 0x1990]
cmp ebp, eax
je 0x40954f
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edi
mov dword [esp + 8], 2
mov dword [esp + 4], ebx
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
jne 0x409480
lea esi, [esi]
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov edx, 0x457380
mov ecx, 0x438
xor eax, eax
mov edi, edx
rep stosd dword es:[edi], eax
add esp, 0x199c
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebp, edi
lea edi, [esp + 0x48]
jmp 0x4095d3
cmp dword [esp + 0x4c], 2
jne 0x409528
movzx eax, byte [esp + 0x48]
cmp al, 0x40
jle 0x40957a
movsx edx, byte [esp + 0x49]
cmp dl, 0x60
jg 0x4095b7
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 2
mov dword [esp + 4], edi
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x409528
cmp dword [esp + 0x4c], 2
jne 0x409528
movsx edx, byte [esp + 0x49]
movzx eax, byte [esp + 0x48]
sub eax, 0x41
sub edx, 0x61
add ebp, 1
and eax, 0xf
shl edx, 4
or eax, edx
mov byte [ebp - 1], al
lea eax, [esp + 0x60]
cmp ebp, eax
je 0x409604
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 2
mov dword [esp + 4], edi
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
jne 0x409560
jmp 0x409528
lea ebp, [esp + 0x46]
jmp 0x409687
cmp dword [esp + 0x4c], 2
jne 0x409528
movzx eax, byte [esp + 0x46]
cmp al, 0x40
jle 0x40962e
movsx edx, byte [esp + 0x47]
cmp dl, 0x60
jg 0x40966f
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 2
mov dword [esp + 4], ebp
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
je 0x409528
cmp dword [esp + 0x4c], 2
jne 0x409528
movsx edx, byte [esp + 0x47]
movzx eax, byte [esp + 0x46]
sub eax, 0x41
sub edx, 0x61
add edi, 1
and eax, 0xf
shl edx, 4
or eax, edx
mov byte [edi - 1], al
cmp edi, ebx
je 0x4096b8
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 2
mov dword [esp + 4], ebp
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
test eax, eax
jne 0x409610
jmp 0x409528
xor edi, edi
mov dword [esp + 0x30], 0
xor ebp, ebp
lea eax, [esp + 0x8b0]
mov dword [esp + 0x34], 0
lea edx, [esp + 0x1990]
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], ebp
mov ebp, esi
lea esi, [esi]
mov esi, dword [eax + 8]
mov ecx, dword [eax]
xor edi, edi
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x10]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x18]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x20]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x28]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x30]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x38]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x40]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x48]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x50]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x58]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x60]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x68]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x70]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x78]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x80]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x88]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x90]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x98]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0xa0]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0xa8]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0xb0]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0xb8]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0xc0]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0xc8]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0xd0]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0xd8]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0xe0]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0xe8]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0xf0]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0xf8]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x100]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x108]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x110]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x118]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x120]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x128]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x130]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x138]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x140]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x148]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x150]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x158]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x160]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x168]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x170]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x178]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x180]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x188]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x190]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x198]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x1a0]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x1a8]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x1b0]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x1b8]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x1c0]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x1c8]
adc edi, ebx
xor ebx, ebx
add ecx, esi
mov esi, dword [eax + 0x1d0]
adc ebx, edi
xor edi, edi
add esi, ecx
mov ecx, dword [eax + 0x1d8]
adc edi, ebx
xor ebx, ebx
add ecx, esi
adc ebx, edi
add dword [esp + 0x30], ecx
adc dword [esp + 0x34], ebx
mov esi, dword [eax + 0xc]
xor edi, edi
xor ebx, ebx
mov ecx, dword [eax + 4]
add ecx, esi
mov esi, dword [eax + 0x14]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x1c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x24]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x2c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x34]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x3c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x44]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x4c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x54]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x5c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x64]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x6c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x74]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x7c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x84]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x8c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x94]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x9c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0xa4]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0xac]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0xb4]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0xbc]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0xc4]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0xcc]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0xd4]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0xdc]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0xe4]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0xec]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0xf4]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0xfc]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x104]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x10c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x114]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x11c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x124]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x12c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x134]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x13c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x144]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x14c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x154]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x15c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x164]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x16c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x174]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x17c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x184]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x18c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x194]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x19c]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x1a4]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x1ac]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x1b4]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x1bc]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x1c4]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x1cc]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x1d4]
adc ebx, edi
xor edi, edi
add ecx, esi
mov esi, dword [eax + 0x1dc]
adc ebx, edi
xor edi, edi
add ecx, esi
adc ebx, edi
add dword [esp + 0x38], ecx
adc dword [esp + 0x3c], ebx
add eax, 0x1e0
cmp eax, edx
jne 0x4096e8
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
mov esi, ebp
mov edi, dword [esp + 0x38]
mov ebp, dword [esp + 0x3c]
mov dword [esp + 0x60], eax
xor eax, dword [esp + 0x50]
mov dword [esp + 0x64], edx
xor edx, dword [esp + 0x54]
or eax, edx
mov dword [esp + 0x68], edi
mov dword [esp + 0x6c], ebp
jne 0x409528
mov eax, edi
mov edx, ebp
xor eax, dword [esp + 0x58]
xor edx, dword [esp + 0x5c]
or eax, edx
jne 0x409528
mov eax, dword [esp + 0x48]
mov dword [esp + 0xc], 0x10e0
mov dword [esp + 4], 0x10e0
mov dword [0x456348], eax
lea eax, [esp + 0x8b0]
mov dword [esp + 8], eax
mov dword [esp], 0x457380
call dword [0x42a308]
mov dword [esp], esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
mov eax, 1
jmp 0x409544