Function at 0x41d170
Capabilities:
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x499bb8
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4ba700]
xor eax, esp
push eax
lea eax, [esp + 0x2c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x3c]
mov eax, dword [ebp]
mov edx, dword [eax + 0x24]
mov ecx, ebp
mov byte [esp + 0x17], 1
call edx
mov ebx, eax
push ebx
mov dword [esp + 0x1c], ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [esp + 0x34], 0
cmp byte [ebp + 0x46e], 0
je 0x41d334
cmp byte [ebp + 0x45c], 0
jne 0x41d32d
cmp byte [ebp + 0x46d], 0
jne 0x41d32d
mov eax, dword [ebp + 0x2f0]
mov ecx, dword [ebp + 0x458]
push 0
lea esi, [ebp + 0x460]
push esi
push 0x2000
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov esi, dword [esi]
test eax, eax
jne 0x41d2c0
test esi, esi
je 0x41d21d
mov byte [ebp + 0x46d], 1
mov ecx, dword [ebp + 0x470]
test ecx, ecx
je 0x41d2d8
mov eax, dword [ebp + 0x474]
cmp eax, dword [ebp + 0x478]
jge 0x41d2d8
mov ebx, dword [eax + ecx]
test ebx, ebx
je 0x41d2d4
mov edx, dword [ebp + 0x2f0]
add eax, 4
mov dword [ebp + 0x474], eax
mov eax, esi
mov ecx, 1
call fcn.0045e7b0
cmp eax, ebx
jne 0x41d2d4
mov edx, esi
mov eax, esi
shl edx, 0x10
and eax, 0xff00
or edx, eax
movzx eax, byte [ebp + 0x463]
shr esi, 8
shl edx, 8
and esi, 0xff00
or edx, esi
or edx, eax
mov eax, dword [ebp + 0xec]
mov cl, 7
mov esi, 0xc
lea ebx, [esp + 0x20]
mov byte [esp + 0x20], cl
mov byte [esp + 0x21], 5
mov dword [esp + 0x24], 0x2000000
mov dword [esp + 0x28], edx
call fcn.004539c0
mov bl, byte [esp + 0x17]
jmp 0x41d428
test esi, esi
jne 0x41d21d
mov byte [ebp + 0x45c], 1
jmp 0x41d43c
mov ebx, dword [esp + 0x18]
cmp byte [ebp + 0x46c], 0
mov edi, 0x2400
mov dword [esp + 0x1c], edi
mov byte [esp + 0x3c], 0
je 0x41d35c
mov eax, dword [ebp + 0x2f0]
mov edx, dword [ebp + 0x2f4]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
call fcn.0045ea90
add esp, 4
test eax, eax
je 0x41d353
push eax
push str.._vncclient.cpp_:_Compress_returned_error_in_File_Send_:_d_n
mov ecx, 9
mov eax, 0x4bc990
call fcn.00401110
add esp, 8
mov byte [ebp + 0x46d], 1
mov ecx, ebp
call fcn.0041d460
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, 1
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 4
mov edi, dword [esp + 0x1c]
mov byte [esp + 0x3c], 1
mov eax, dword [ebp + 0x460]
cmp edi, eax
jbe 0x41d36b
mov byte [esp + 0x3c], 0
mov dl, byte [esp + 0x3c]
movzx esi, dl
neg esi
sbb esi, esi
and esi, 0x1000000
mov cl, 7
mov byte [esp + 0x20], cl
mov byte [esp + 0x21], 5
mov dword [esp + 0x24], esi
test dl, dl
je 0x41d3b5
mov edx, edi
and edx, 0xff0000
mov eax, edi
shr eax, 0x10
or edx, eax
mov eax, edi
mov esi, edi
shl eax, 0x10
and esi, 0xff00
or eax, esi
shr edx, 8
shl eax, 8
jmp 0x41d3d8
mov edx, eax
mov esi, eax
shl edx, 0x10
and esi, 0xff00
shr eax, 8
or edx, esi
and eax, 0xff00
shl edx, 8
or edx, eax
movzx eax, byte [ebp + 0x463]
or edx, eax
mov eax, dword [ebp + 0xec]
mov esi, 0xc
lea ebx, [esp + 0x20]
mov dword [esp + 0x28], edx
call fcn.004539c0
cmp eax, 0xffffffff
sete bl
mov byte [esp + 0x17], bl
test bl, bl
je 0x41d428
cmp byte [esp + 0x3c], 0
je 0x41d411
mov eax, dword [ebp + 0x2f4]
mov ecx, edi
jmp 0x41d41d
mov ecx, dword [ebp + 0x460]
mov eax, dword [ebp + 0x2f0]
mov edi, dword [ebp + 0xec]
call fcn.00453a00
mov ecx, dword [ebp + 0x460]
add dword [ebp + 0x464], ecx
test bl, bl
mov ebx, dword [esp + 0x18]
je 0x41d44e
mov edx, dword [0x4f385c]
push 0
push ebp
push edx
call fcn.00451670
add esp, 0xc
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, byte [esp + 0x17]
jmp 0x41d33d