Function at 0x41aa10
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0
mov dword [ebp - 0xb0], 0x493b
mov dword [ebp - 0x98], 0x33da
mov dword [ebp - 0x94], 0x11834
mov dword [ebp - 0x18], 0x17a97
mov dword [ebp - 0x1c], 0x16695
mov dword [ebp - 0x4c], 0x14014
mov dword [ebp - 4], 0x182db
mov dword [ebp - 0x80], 0x181f3
mov dword [ebp - 8], 0xcd0f
mov dword [ebp - 0x9c], 0x125cd
mov dword [ebp - 0x74], 0x89f2
mov dword [ebp - 0x3c], 0x14d42
mov dword [ebp - 0x38], 0x7904
mov dword [ebp - 0xa8], 0xb110
mov dword [ebp - 0xac], 0x10924
mov dword [ebp - 0x14], 0xec1d
mov dword [ebp - 0x24], 0xb850
mov dword [ebp - 0x48], 0x14eb5
mov dword [ebp - 0xc], 0x13788
mov dword [ebp - 0x10], 0xb1ee
mov dword [ebp - 0x40], 0x220e
mov dword [ebp - 0x34], 0x1c42
mov dword [ebp - 0x20], 0xcbc7
mov dword [ebp - 0x44], 0x3e25
mov dword [ebp - 0x28], 0
jmp 0x41aae5
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0xb1ed
cmp dword [ebp - 0x28], ecx
jge 0x41ac18
mov edx, dword [ebp - 0x80]
cmp edx, dword [ebp - 0x18]
jge 0x41ac13
mov eax, dword [ebp + 0x18]
sub eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x40]
jge 0x41ab17
mov dword [ebp - 0x50], 1
jmp 0x41ab1e
mov dword [ebp - 0x50], 0
mov ecx, dword [ebp + 0x14]
cmp ecx, dword [ebp + 0xc]
jge 0x41ab2f
mov dword [ebp - 0x54], 1
jmp 0x41ab36
mov dword [ebp - 0x54], 0
mov edx, dword [ebp - 0x50]
and edx, dword [ebp - 0x54]
je 0x41ac13
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x34]
jge 0x41ab56
mov dword [ebp - 0x58], 1
jmp 0x41ab5d
mov dword [ebp - 0x58], 0
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0x74]
jge 0x41ab6e
mov dword [ebp - 0x5c], 1
jmp 0x41ab75
mov dword [ebp - 0x5c], 0
mov edx, dword [ebp + 0x24]
xor edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x58]
and eax, dword [ebp - 0x5c]
or edx, eax
je 0x41ac13
mov ecx, dword [ebp - 0x48]
cmp ecx, dword [ebp + 0x10]
jne 0x41ac13
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp - 0x20]
jne 0x41ac13
push 0x1e21
push 0x12033
push 0x5a27
push 0x148a4
push 0xe3f8
push 0xd2c7
call dword [sym.imp.KERNEL32.dll_GetThreadPriorityBoost]
add esp, 0x18
mov eax, dword [ebp + 0xc]
sub eax, 1
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp - 0x40]
jge 0x41abdd
mov dword [ebp - 0x60], 1
jmp 0x41abe4
mov dword [ebp - 0x60], 0
mov edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 0x34]
jge 0x41abf5
mov dword [ebp - 0x64], 1
jmp 0x41abfc
mov dword [ebp - 0x64], 0
mov eax, dword [ebp - 0x24]
and eax, dword [ebp - 0x1c]
or eax, dword [ebp - 0x60]
or eax, dword [ebp - 0x64]
je 0x41ac13
mov ecx, dword [ebp + 0x20]
sub ecx, 1
mov dword [ebp + 0x20], ecx
jmp 0x41aadc
mov edx, dword [ebp - 0x20]
add edx, 1
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x2c], 0
jmp 0x41ac33
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0xb84f
cmp dword [ebp - 0x2c], ecx
jge 0x41ad29
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 0xc]
jge 0x41ad24
mov eax, dword [ebp + 8]
cmp eax, dword [ebp - 4]
jne 0x41ad24
mov ecx, dword [ebp + 0x20]
cmp ecx, dword [ebp - 0x10]
jne 0x41ad24
mov edx, dword [ebp - 0x10]
cmp edx, dword [ebp - 4]
jne 0x41ad24
mov eax, dword [ebp + 0x18]
cmp eax, dword [ebp - 0x38]
jne 0x41ad24
mov ecx, dword [ebp - 8]
mov dword [ebp - 0xa0], ecx
mov edx, dword [ebp + 0x14]
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xa0]
cmp ecx, dword [ebp - 0xa4]
jge 0x41acb3
mov dword [ebp - 0x68], 1
jmp 0x41acba
mov dword [ebp - 0x68], 0
mov edx, dword [ebp - 0xa8]
add edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x1c]
jge 0x41acd1
mov dword [ebp - 0x6c], 1
jmp 0x41acd8
mov dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x9c]
jge 0x41acec
mov dword [ebp - 0x70], 1
jmp 0x41acf3
mov dword [ebp - 0x70], 0
mov ecx, dword [ebp - 0x68]
and ecx, dword [ebp - 0x6c]
or ecx, dword [ebp - 0x70]
je 0x41ad24
mov edx, dword [ebp - 0x18]
sub edx, 1
mov dword [ebp - 0x18], edx
push 0x12a21
push 0x4fdb
push 0x1101c
push 0x10ffe
call dword [sym.imp.KERNEL32.dll_CreateFileTransactedA]
add esp, 0x10
jmp 0x41ac2a
mov dword [ebp - 0x30], 0
jmp 0x41ad3b
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x74]
sub ecx, 0x89f1
cmp dword [ebp - 0x30], ecx
jge 0x41af20
mov edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 0xc]
jge 0x41ad5e
mov dword [ebp - 0x78], 1
jmp 0x41ad65
mov dword [ebp - 0x78], 0
mov eax, dword [ebp + 0x1c]
add eax, dword [ebp + 0x14]
cmp eax, dword [ebp - 0x10]
jge 0x41ad79
mov dword [ebp - 0x7c], 1
jmp 0x41ad80
mov dword [ebp - 0x7c], 0
mov ecx, dword [ebp - 0x78]
and ecx, dword [ebp - 0x7c]
and ecx, dword [ebp - 0x1c]
xor ecx, dword [ebp + 8]
je 0x41af1b
mov edx, dword [ebp - 0x80]
cmp edx, dword [ebp - 0x24]
jne 0x41af1b
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 8]
jne 0x41af1b
push 0x63e7
push 0x8396
push 0x18141
push 0x17ac9
push 0x9d8
push 0x8398
push 0x17403
push 0xfe2d
call dword [sym.imp.KERNEL32.dll_ReadFileEx]
add esp, 0x20
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x14]
jge 0x41adef
mov dword [ebp - 0x84], 1
jmp 0x41adf9
mov dword [ebp - 0x84], 0
mov edx, dword [ebp - 0x38]
cmp edx, dword [ebp + 0x14]
jge 0x41ae0d
mov dword [ebp - 0x88], 1
jmp 0x41ae17
mov dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x84]
or eax, dword [ebp - 0x88]
je 0x41af1b
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0xc]
jge 0x41ae3d
mov dword [ebp - 0x8c], 1
jmp 0x41ae47
mov dword [ebp - 0x8c], 0
mov edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x20]
jge 0x41ae5b
mov dword [ebp - 0x90], 1
jmp 0x41ae65
mov dword [ebp - 0x90], 0
mov eax, dword [ebp + 8]
sub eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x8c]
and ecx, dword [ebp - 0x90]
or eax, ecx
je 0x41aef9
mov edx, dword [ebp - 0x4c]
sub edx, dword [ebp - 0x1c]
cmp edx, dword [ebp - 0x3c]
jge 0x41aef9
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0xac]
jne 0x41aef9
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [ebp - 0x94]
jne 0x41aef9
mov edx, dword [ebp - 0x98]
cmp edx, dword [ebp - 4]
jne 0x41aef9
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x40]
jne 0x41aef9
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x44]
jne 0x41aef9
mov edx, dword [ebp - 0x24]
cmp edx, dword [ebp + 0x10]
jge 0x41aef9
mov eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0xc]
jne 0x41aef9
mov ecx, dword [ebp + 0x20]
cmp ecx, dword [ebp - 0x10]
jne 0x41aef9
mov edx, dword [ebp - 0x48]
cmp edx, dword [ebp + 0x14]
jne 0x41aef9
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp + 0x24]
jne 0x41aef9
mov ecx, dword [ebp - 0x14]
sub ecx, 1
mov dword [ebp - 0x14], ecx
push 0x15ad2
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
add esp, 4
push 0xad60
push 0xa58e
push 0x3573
push 0x2716
push 0x4976
call dword [sym.imp.KERNEL32.dll_EnumResourceLanguagesExA]
add esp, 0x14
jmp 0x41ad32
mov esp, ebp
pop ebp
ret