Function at 0x42cda0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push 0x40
mov eax, 0x4333e7
call fcn.00430dc8
xor ebx, ebx
mov dword [ebp - 4], 1
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp + 8]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov dword [ebp - 0x10], esi
test esi, esi
jne 0x42cdd2
mov eax, ebx
jmp 0x42cdd9
push esi
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push 0x5c
pop edi
cmp word [esi + eax*2 - 2], di
je 0x42ce08
push 0x40e5b8
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
push esi
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push esi
lea ecx, [ebp - 0x10]
call fcn.004176dd
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp + 0x10]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
push esi
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push esi
lea ecx, [ebp - 0x10]
call fcn.004176dd
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp + 0xc]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov dword [ebp - 0x14], esi
test esi, esi
jne 0x42ce48
mov eax, ebx
jmp 0x42ce4f
push esi
call dword [sym.imp.OLEAUT32.dll_VariantInit]
cmp word [esi + eax*2 - 2], di
je 0x42ce7b
push 0x40e5b8
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
push esi
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push esi
lea ecx, [ebp - 0x14]
call fcn.004176dd
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp + 0x10]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
push esi
call dword [sym.imp.OLEAUT32.dll_VariantInit]
push eax
push esi
lea ecx, [ebp - 0x14]
call fcn.004176dd
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [ebp + 0x14]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x42cea4
sub ecx, edx
sar ecx, 1
jne 0x42cec7
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x10]
push esi
push edi
call fcn.00428aa8
jmp 0x42d0aa
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
push dword [ebp + 0x14]
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 2
push eax
call fcn.0042e7c7
mov edi, dword [ebp - 0x10]
push edi
push 0x40c540
call sub.msvcrt.dll_wprintf
mov esi, dword [ebp - 0x14]
pop ecx
pop ecx
push esi
call fcn.00428bf7
push ebx
push ebx
push 3
push ebx
push 1
push SysReAllocStringLen
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x38], 0x40e59c
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 3
cmp eax, 0xffffffff
jne 0x42cf5d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
test ebx, ebx
jle 0x42cf37
movzx ebx, bx
or ebx, 0x80070000
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x42cf49
movzx eax, ax
or eax, 0x80070000
push ebx
push 0x40c578
push eax
call fcn.00424ce6
add esp, 0xc
jmp 0x42d0a2
push ebx
push ebx
push 2
push ebx
push 3
push 0xc0000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x40], 0x40e59c
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 4
cmp eax, 0xffffffff
jne 0x42cfaa
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x42cf98
movzx eax, ax
or eax, 0x80070000
push 0x40c610
push eax
call fcn.00424ce6
pop ecx
pop ecx
jmp 0x42d099
push 0x100000
call fcn.00430827
mov dword [ebp - 0x1c], eax
pop ecx
test eax, eax
jne 0x42cfcd
push 0x40c680
push 0x8007000e
call fcn.004241bf
pop ecx
pop ecx
cmp dword [ebp - 0x48], 0
mov dword [ebp - 0x30], ebx
jle 0x42d07e
push ebx
lea ecx, [ebp - 0x4c]
call fcn.00427b1a
push 0
push 0
push dword [eax]
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
je 0x42d0fe
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x4c]
and dword [ebp - 0x2c], 0
push ebx
call fcn.00427b1a
mov ebx, dword [eax + 8]
test ebx, ebx
je 0x42d06e
mov eax, 0x100000
cmp ebx, eax
jae 0x42d023
mov eax, ebx
mov dword [ebp - 0x28], ebx
jmp 0x42d026
mov dword [ebp - 0x28], eax
push 0
lea ecx, [ebp - 0x18]
push ecx
push eax
push dword [ebp - 0x1c]
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x42d0e5
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x28]
jae 0x42d04b
mov ebx, eax
push 0
lea ecx, [ebp - 0x2c]
push ecx
push eax
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x42d0cc
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x2c]
jne 0x42d0c0
sub ebx, eax
jne 0x42d013
mov ebx, dword [ebp - 0x30]
inc ebx
mov dword [ebp - 0x30], ebx
cmp ebx, dword [ebp - 0x48]
jl 0x42cfda
push dword [ebp - 0x1c]
call fcn.00430822
pop ecx
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x4c]
call fcn.00429ae9
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
call fcn.00430d96
ret 0x10
mov eax, 0x8000ffff
mov ecx, 0x40c7e8
jmp 0x42d115
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x42d0de
movzx eax, ax
or eax, 0x80070000
mov ecx, 0x40c778
jmp 0x42d115
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x42d0f7
movzx eax, ax
or eax, 0x80070000
mov ecx, 0x40c710
jmp 0x42d115
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x42d110
movzx eax, ax
or eax, 0x80070000
mov ecx, 0x40c6a0
push ecx
push eax
call fcn.00424ce6
pop ecx
pop ecx
jmp 0x42d090