Function at 0x41ab00
Capabilities:
Read file on windows

Disassembly:
sub esp, 0x10
push ebx
mov ebx, ecx
push ebp
push esi
mov eax, dword [ebx + 0x110]
mov esi, dword [esp + 0x24]
test eax, eax
push edi
mov dword [ebx + 0x120], esi
jne 0x41ab31
mov eax, dword [ebx + 0x114]
test eax, eax
jne 0x41ab31
mov eax, dword [ebx + 0x140]
test eax, eax
je 0x41ab38
mov ecx, ebx
call fcn.0041ad50
mov eax, dword [esp + 0x24]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
not esi
push 0
push 0x80
or esi, 0xfffffffe
push 3
push 0
push 0
shl esi, 0x1e
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebx + 0x10c], eax
je 0x41ad40
mov ecx, ebx
call fcn.0041aa30
test eax, eax
jne 0x41ad45
push eax
mov ecx, ebx
call fcn.0041a8f0
test eax, eax
jne 0x41ad45
mov esi, dword [ebx + 0x114]
test esi, esi
je 0x41ad27
cmp dword [esi], 0
je 0x41ad27
mov eax, dword [esi + 0x18]
test eax, eax
je 0x41acf7
mov ebp, dword [esi + 4]
mov ecx, eax
add ecx, 0x20
mov dword [esp + 0x28], 0
push ecx
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov edx, dword [esi + 0x10]
add esp, 4
mov edi, eax
mov eax, dword [ebx + 0x10c]
push 0
push 0
push edx
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, dword [esi + 0x18]
mov eax, dword [ebx + 0x10c]
lea ecx, [esp + 0x28]
push 0
add edx, 0x20
push ecx
push edx
push edi
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x41ad27
mov eax, dword [esi + 0x18]
mov edx, dword [ebx + 0x12c]
mov ecx, dword [esi + 0x10]
add edx, eax
sub esp, 0x10
mov dword [ebx + 0x12c], edx
mov edx, esp
mov word [esp + 0x2c], 0
push ebp
mov dword [edx], edi
mov dword [edx + 4], eax
mov eax, dword [esp + 0x30]
mov dword [edx + 8], ecx
lea ecx, [ebx + 0x138]
mov dword [edx + 0xc], eax
call fcn.0041bfc0
mov eax, dword [ebx + 0x168]
mov ecx, dword [ebx + 0x164]
mov ebp, dword [esi + 4]
cmp ecx, eax
jne 0x41acb0
mov edx, dword [ebx + 0x160]
lea ecx, [eax*8]
push ecx
push edx
call dword [sym.imp.MSVCRT.dll_realloc]
mov ecx, dword [ebx + 0x16c]
mov edx, dword [ebx + 0x170]
add esp, 8
cmp ecx, edx
mov dword [ebx + 0x160], eax
jg 0x41aca2
mov edx, dword [ebx + 0x168]
mov esi, eax
lea edi, [eax + edx*4]
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x168]
mov ecx, dword [ebx + 0x16c]
add ecx, eax
mov dword [ebx + 0x16c], ecx
mov ecx, dword [ebx + 0x168]
shl ecx, 1
mov dword [ebx + 0x168], ecx
mov edi, dword [ebx + 0x164]
mov edx, dword [ebx + 0x16c]
mov eax, dword [ebx + 0x160]
inc edi
mov dword [ebx + 0x164], edi
mov dword [eax + edx*4], ebp
mov esi, dword [ebx + 0x16c]
mov eax, dword [ebx + 0x168]
inc esi
mov ecx, esi
mov dword [ebx + 0x16c], esi
cmp ecx, eax
jne 0x41acf7
cmp dword [ebx + 0x164], eax
jge 0x41acf7
mov dword [ebx + 0x16c], 0
mov al, byte [ebx + 0x120]
mov ecx, 2
test cl, al
je 0x41ad34
mov esi, dword [ebx + 0x110]
lea edi, [ebx + 0x104]
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
je 0x41ad34
mov eax, 0xfffffffc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 8
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 8
mov eax, 0xfffffffd
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 8