Function at 0x41b37c
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x4c
mov eax, dword [ebp + 0xc]
cmp dword [eax + 0x18], 0xf
ja 0x41b393
add eax, 4
jmp 0x41b396
mov eax, dword [eax + 4]
mov esi, dword [ebp + 8]
sub esp, 4
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push eax
call sub.KERNEL32.DLL_CreateFileA
add esp, 4
mov ebx, eax
mov dword [ebp - 0x3c], 0x45e02c
mov dword [ebp - 0x38], 0x4640c0
mov dword [ebp - 0x34], ebp
mov dword [ebp - 0x2c], esp
mov dword [ebp - 0x34], 0x41b58b
lea edi, [ebp - 0x58]
mov eax, edi
call fcn.0045ec95
cmp ebx, 0xffffffff
je 0x41b41a
mov dword [ebp - 0x50], 0xffffffff
sub esp, 8
push 0
push ebx
call sub.KERNEL32.DLL_GetFileSize
add esp, 8
test eax, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], eax
je 0x41b434
cmp eax, 0xffffffff
jne 0x41b43a
mov dword [ebp - 0x50], 0xffffffff
sub esp, 0xc
push ebx
call sub.KERNEL32.DLL_CloseHandle
add esp, 0xc
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
jmp 0x41b569
xor edi, edi
xor esi, esi
jmp 0x41b49c
cmp eax, 0x1000
jb 0x41b46d
cmp eax, 0xffffffdd
jae 0x41b57f
lea eax, [eax + 0x23]
mov dword [ebp - 0x50], 2
sub esp, 0xc
push eax
call fcn.00442df0
add esp, 0x10
mov esi, eax
add esi, 0x23
and esi, 0xffffffe0
mov dword [esi - 4], eax
jmp 0x41b482
mov dword [ebp - 0x50], 3
sub esp, 0xc
push eax
call fcn.00442df0
add esp, 0x10
mov esi, eax
sub esp, 4
mov ebx, dword [ebp - 0x1c]
push ebx
push 0
push esi
lea edi, [esi + ebx]
call fcn.0044d15b
mov eax, ebx
add esp, 0x10
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x14], edi
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x50], 4
sub esp, 0xc
lea ecx, [ebp - 0x20]
push 0
push ecx
push eax
push edx
push ebx
call sub.KERNEL32.DLL_ReadFile
add esp, 0xc
test eax, eax
je 0x41b510
mov dword [ebp - 0x50], 6
sub esp, 0xc
push dword [ebp - 0x18]
call sub.KERNEL32.DLL_CloseHandle
add esp, 0xc
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], eax
mov esi, dword [ebp + 8]
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
jne 0x41b53d
mov eax, dword [ebp - 0x10]
mov dword [esi + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x14]
mov dword [esi + 0xc], eax
lea edi, [ebp - 0x58]
jmp 0x41b569
mov dword [ebp - 0x50], 5
sub esp, 0xc
push dword [ebp - 0x18]
call sub.KERNEL32.DLL_CloseHandle
add esp, 0xc
mov esi, dword [ebp + 8]
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
cmp dword [ebp - 0x10], 0
lea edi, [ebp - 0x58]
je 0x41b569
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x10]
cmp ecx, 0x1000
jb 0x41b55d
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 4]
sub esp, 0xc
push eax
call fcn.00440ea4
add esp, 0x10
sub esp, 0xc
push edi
call fcn.0045ecb6
add esp, 0x10
mov eax, esi
add esp, 0x4c
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x50], 1
call fcn.00446838
mov eax, dword [ebp - 0x54]
cmp eax, 6
jbe 0x41b597
ud2
sub eax, 1
jmp dword [eax*4 + 0x41b5f0]
mov esi, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
jmp 0x41b5da
mov esi, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x10], 0
je 0x41b5da
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x10]
cmp ecx, 0x1000
jb 0x41b5ce
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 4]
sub esp, 0xc
push eax
call fcn.00440ea4
add esp, 0x10
mov dword [ebp - 0x50], 0xffffffff
sub esp, 0xc
push esi
call fcn.0045ec34
add esp, 0xc
nop dword [eax]
mov dword [0xa30041b5], eax
mov ch, 65
add byte [ebx - 0x54ffbe4b], ah
mov ch, 0x41
add byte [ebx - 0x54ffbe4b], ch
mov ch, 0x41
add byte [edi + 0x56], dl
push edi
push esi