Function at 0x41c5d0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x5f4cf8
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
push ebx
push ebp
push esi
mov eax, dword [0x64c874]
xor eax, esp
push eax
lea eax, [esp + 0x3c]
mov dword fs:[0], eax
lea ecx, [edi + 0x20]
mov dword [esp + 0x1c], ecx
call fcn.0040c670
mov eax, dword [edi + 4]
test al, 0x40
mov ecx, 0x60fe98
je 0x41c615
mov ecx, 0x60fea0
jmp 0x41c61e
test al, 0x20
je 0x41c61e
mov ecx, 0x60fea8
mov eax, dword [esp + 0x4c]
push ecx
push eax
mov dword [edi], 0
call fcn.005ba173
add esp, 8
test eax, eax
mov dword [edi], eax
jne 0x41c653
push edi
call fcn.0041c420
mov ecx, dword [esp + 0x3c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebp
pop ebx
add esp, 0x38
ret 4
mov ecx, dword [edi + 4]
xor ebp, ebp
test cl, 0x10
mov bl, 1
mov dword [edi + 0x18], 1
je 0x41c848
push 2
push ebp
push eax
call fcn.005b9a8d
mov ecx, dword [edi]
add esp, 0xc
push ecx
call fcn.005ba31e
mov edx, dword [edi]
add esp, 4
push ebp
push ebp
push edx
mov dword [edi + 0x10], eax
call fcn.005b9a8d
mov eax, dword [edi + 0x10]
mov esi, 0x400
add esp, 0xc
cmp eax, esi
jge 0x41c6a7
mov esi, eax
test esi, esi
je 0x41c8f2
push esi
call fcn.0059b872
mov ebx, eax
mov eax, dword [edi]
add esp, 4
push eax
push 1
push esi
push ebx
mov dword [esp + 0x24], ebx
call fcn.005ba628
add esp, 0x10
cmp eax, 1
sete al
test al, al
mov byte [esp + 0x4c], al
je 0x41c83a
and dword [edi + 4], 0xfffffffa
xor ecx, ecx
cmp dword [0x64f0f0], ecx
je 0x41c75f
xor eax, eax
jmp 0x41c6f0
mov edx, dword [eax + 0x64f0f4]
test edx, edx
jle 0x41c71d
cmp ebp, esi
jge 0x41c71d
mov ebx, dword [esp + 0x14]
mov edx, dword [eax + 0x64f0f0]
mov bl, byte [ebx + ebp]
cmp bl, byte [edx + ebp]
mov edx, dword [eax + 0x64f0f4]
jne 0x41c71d
add ebp, 1
cmp ebp, edx
jl 0x41c6fa
cmp ebp, edx
je 0x41c735
add ecx, 1
mov eax, ecx
xor ebp, ebp
shl eax, 4
cmp dword [eax + 0x64f0f0], ebp
jne 0x41c6f0
jmp 0x41c75b
shl ecx, 4
mov eax, dword [ecx + 0x64f0fc]
or eax, dword [edi + 4]
cmp ebp, 2
mov dword [edi + 4], eax
jne 0x41c74c
mov dword [edi + 0x18], ebp
mov ecx, dword [ecx + 0x64f0f8]
push ecx
lea ecx, [edi + 0x24]
call fcn.0040c910
mov ebx, dword [esp + 0x14]
cmp esi, ebp
jle 0x41c771
mov edx, dword [edi]
push 0
push ebp
push edx
call fcn.005b9a8d
add esp, 0xc
test ebp, ebp
jne 0x41c81f
lea ecx, [esp + 0x14]
call fcn.00402fb0
push esi
push ebx
push ecx
mov eax, esp
mov dword [esp + 0x50], ebp
mov dword [eax], 0x60ccb0
lea eax, [esp + 0x2c]
mov dword [esp + 0x24], esp
push eax
call fcn.0041ac60
push esi
lea ecx, [esp + 0x18]
mov byte [esp + 0x48], 1
call fcn.0040c7e0
push ecx
mov ecx, esp
mov dword [esp + 0x34], esi
mov dword [esp + 0x1c], esp
mov dword [ecx], str.UTF_16
push eax
lea ecx, [esp + 0x28]
push ecx
call fcn.0041afa0
push eax
lea ecx, [esp + 0x18]
call fcn.0040c8c0
mov edx, dword [esp + 0x14]
push ecx
mov eax, esp
mov dword [esp + 0x1c], esp
mov dword [eax], edx
lea eax, [esp + 0x1c]
push eax
call fcn.0041f120
add esp, 8
push eax
lea ecx, [edi + 0x24]
mov byte [esp + 0x48], 2
call fcn.0041a4b0
lea ecx, [esp + 0x18]
call fcn.00402f90
lea esi, [esp + 0x20]
call fcn.0041c950
lea ecx, [esp + 0x14]
mov dword [esp + 0x44], 0xffffffff
call fcn.00402f90
mov edx, dword [edi + 0x24]
cmp dword [edx - 0xc], 0
lea ecx, [edi + 0x24]
jne 0x41c83a
cmp byte [ebx], 0x3c
jne 0x41c83a
push 0x60ccb0
call fcn.0040c910
push ebx
call fcn.0059b877
add esp, 4
jmp 0x41c8e3
test cl, 0x20
je 0x41c8f2
test cl, 0x40
je 0x41c871
push 2
push 0
push eax
call fcn.005b9a8d
mov eax, dword [edi]
add esp, 0xc
push eax
call fcn.005ba31e
add esp, 4
mov dword [edi + 0x10], eax
xor ecx, ecx
cmp dword [0x64f0f0], ecx
je 0x41c8f2
mov edx, dword [edi + 4]
xor eax, eax
test dword [eax + 0x64f0fc], edx
jne 0x41c89a
add ecx, 1
mov eax, ecx
shl eax, 4
cmp dword [eax + 0x64f0f0], ebp
jne 0x41c880
jmp 0x41c8f2
shl ecx, 4
mov esi, ecx
mov ebp, dword [esi + 0x64f0f4]
cmp ebp, 2
jne 0x41c8ad
mov dword [edi + 0x18], ebp
mov ecx, dword [esi + 0x64f0f8]
push ecx
lea ecx, [edi + 0x24]
call fcn.0040c910
cmp dword [edi + 0x10], 0
je 0x41c8c6
xor ebp, ebp
jmp 0x41c8f2
mov edx, dword [edi]
mov eax, dword [esi + 0x64f0f0]
push edx
push 1
push ebp
push eax
call fcn.005b9984
add esp, 0x10
cmp eax, 1
sete byte [esp + 0x4c]
cmp byte [esp + 0x4c], 0
je 0x41c638
mov bl, byte [esp + 0x4c]
test byte [edi + 4], 0x40
je 0x41c900
mov ecx, dword [edi + 0x10]
mov dword [edi + 0x14], ecx
jmp 0x41c903
mov dword [edi + 0x14], ebp
test ebp, ebp
je 0x41c934
mov edx, dword [esp + 0x1c]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push ecx
mov eax, esp
mov dword [esp + 0x5c], esp
push ecx
mov dword [eax], 0
mov eax, esp
mov dword [esp + 0x60], esp
push edx
mov dword [eax], 0x60feb0
call fcn.0041aaf0
add esp, 0x18
mov al, bl
mov ecx, dword [esp + 0x3c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebp
pop ebx
add esp, 0x38
ret 4