Function at 0x41f840
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4adb36
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x663068]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x14], 0
mov esi, dword [ebp + 8]
mov dword [esi], vtable.CVolObject.0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [ebp - 4], 1
mov dword [esi], vtable.CVolMem.0
mov dword [esi + 0xc], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x18], 0x40
mov dword [ebp - 4], 0
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x14], 1
mov ebx, dword [eax + 0x14]
mov dword [ebp - 0x10], ebx
test ebx, ebx
je 0x41fa5d
test edi, edi
jle 0x41fa5d
cmp dword [esi + 0xc], 0
mov eax, 0x40
mov dword [ebp + 0xc], 0
je 0x41f8fc
push edi
mov ecx, esi
call fcn.0042c0c0
jmp 0x41f93e
mov ebx, dword [esi + 0x18]
test ebx, ebx
cmovle ebx, eax
xor edx, edx
mov eax, edi
div ebx
mov eax, dword [esi]
sub ebx, edx
add ebx, edi
push ebx
mov eax, dword [eax]
cmp eax, method.CWString.virtual_0
jne 0x41f92e
mov ecx, 0x665ff8
call fcn.0042c9e0
test eax, eax
je 0x41fa73
jmp 0x41f932
mov ecx, esi
call eax
mov dword [esi + 0x10], ebx
mov ebx, dword [ebp - 0x10]
mov dword [esi + 0xc], eax
mov dword [esi + 0x14], edi
push 0
lea ecx, [ebp + 0xc]
push ecx
push edi
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x41fa50
mov edi, dword [ebp + 0xc]
cmp edi, dword [esi + 0x14]
je 0x41fa5d
mov ecx, dword [esi + 0xc]
test edi, edi
jne 0x41f9a3
test ecx, ecx
je 0x41f989
mov eax, dword [esi]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x41f985
mov ecx, 0x665ff8
call fcn.0042cad0
jmp 0x41f989
mov ecx, esi
call eax
mov dword [esi + 0xc], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x10], 0
jmp 0x41fa5d
mov ebx, dword [esi + 0x18]
mov eax, 0x40
test ecx, ecx
jne 0x41fa00
test ebx, ebx
mov ecx, edi
cmovle ebx, eax
mov eax, edi
cdq
idiv ebx
mov eax, dword [esi]
sub ecx, edx
add ecx, ebx
mov dword [ebp - 0x10], ecx
mov eax, dword [eax]
push ecx
cmp eax, method.CWString.virtual_0
jne 0x41f9ee
mov ecx, 0x665ff8
call fcn.0042c9e0
test eax, eax
je 0x41fa73
mov dword [esi + 0xc], eax
mov eax, dword [ebp - 0x10]
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], edi
jmp 0x41fa5d
mov ecx, esi
call eax
mov dword [esi + 0xc], eax
mov eax, dword [ebp - 0x10]
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], edi
jmp 0x41fa5d
test ebx, ebx
cmovle ebx, eax
mov eax, dword [esi + 0x10]
cmp eax, edi
jl 0x41fa12
sub eax, edi
cmp eax, ebx
jle 0x41fa4b
mov eax, edi
cdq
idiv ebx
mov eax, edi
sub eax, edx
add eax, ebx
mov dword [ebp - 0x10], eax
mov eax, dword [esi]
mov ebx, dword [ebp - 0x10]
push ebx
push ecx
mov eax, dword [eax + 8]
cmp eax, method.CWString.virtual_8
jne 0x41fa41
mov ecx, 0x665ff8
call fcn.0042ca40
test eax, eax
je 0x41fa73
jmp 0x41fa45
mov ecx, esi
call eax
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], edi
jmp 0x41fa5d
push 2
push 0
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0xffffffffffffffff
call fcn.00489ffe
int3