Function at 0x41a008
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
xor ebx, ebx
mov dword [ebp - 0x10], ebx
cmp dword [ebp + 0x1c], ebx
jne 0x41a020
xor eax, eax
jmp 0x41a2f7
cmp dword [ebp + 0x14], ebx
je 0x41a019
cmp dword [ebp + 0x18], ebx
jbe 0x41a019
push esi
push edi
push ebx
push dword [ebp + 0x1c]
call fcn.0043fbee
pop ecx
pop ecx
test eax, eax
jne 0x41a2c0
push ebx
push 0x80
push 3
push ebx
push 1
push SysReAllocString
push dword [ebp + 0x1c]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov dword [ebp + 0x1c], esi
cmp esi, 0xffffffff
je 0x41a2c0
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
cmp edi, ebx
je 0x41a2b9
cmp edi, 0xffffffff
je 0x41a2b9
mov esi, 0x487689
lea ebx, [edi + 2]
push esi
push ebx
call fcn.0043fb1a
pop ecx
pop ecx
mov dword [ebp - 4], eax
test eax, eax
jne 0x41a0a1
push dword [ebp + 0x1c]
jmp 0x41a2ba
push 0
lea ecx, [ebp - 0x10]
push ecx
push edi
push eax
push dword [ebp + 0x1c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push dword [ebp + 0x1c]
test eax, eax
jne 0x41a0c1
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x41a117
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x10], 0
je 0x41a117
and dword [ebp - 0xc], 0
cmp edi, 3
jb 0x41a0f7
mov eax, dword [ebp - 4]
cmp byte [eax], 0xff
jne 0x41a0f7
cmp byte [eax + 1], 0xfe
jne 0x41a0f7
add eax, 2
mov ecx, edi
shr ecx, 1
xor edx, edx
mov dword [ebp - 8], eax
mov word [eax + ecx*2 - 2], dx
jmp 0x41a162
push esi
xor ecx, ecx
push 2
pop edx
mov eax, ebx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0043fb1a
pop ecx
pop ecx
mov dword [ebp - 8], eax
test eax, eax
jne 0x41a11f
push dword [ebp - 4]
jmp 0x41a273
and dword [ebp - 0x14], 0
push edi
push dword [ebp - 4]
push ebx
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00441ceb
add esp, 0x14
test eax, eax
je 0x41a14f
push dword [ebp - 4]
call fcn.0043d83c
push dword [ebp - 8]
call fcn.0043d83c
pop ecx
jmp 0x41a278
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 8]
xor eax, eax
mov word [edx + ecx*2], ax
mov dword [ebp - 0xc], 1
push esi
xor ecx, ecx
push 2
pop edx
cmp dword [ebp + 0xc], ecx
jne 0x41a21b
mov eax, ebx
mul edx
mov byte [ebp + 0x1f], cl
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0043fb1a
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x41a234
push ebx
push edi
push dword [ebp + 8]
xor eax, eax
push dword [ebp - 8]
mov word [edi], ax
call fcn.00419ab3
mov esi, eax
add esp, 0x10
cmp dword [ebp + 0x18], esi
jae 0x41a1b4
mov esi, dword [ebp + 0x18]
mov byte [ebp + 0x1f], 1
cmp esi, 1
jbe 0x41a1dd
lea edx, [esi - 2]
test edx, edx
jbe 0x41a1d3
mov eax, dword [ebp + 0x14]
mov ecx, edi
sub ecx, eax
mov bx, word [ecx + eax]
mov word [eax], bx
inc eax
inc eax
dec edx
jne 0x41a1c7
mov ecx, dword [ebp + 0x14]
xor eax, eax
mov word [ecx + esi*2 - 4], ax
mov ecx, dword [ebp + 0x14]
xor eax, eax
push edi
mov word [ecx + esi*2 - 2], ax
call fcn.0043d83c
push dword [ebp - 4]
call fcn.0043d83c
cmp dword [ebp - 0xc], 1
pop ecx
pop ecx
jne 0x41a206
push dword [ebp - 8]
call fcn.0043d83c
pop ecx
cmp byte [ebp + 0x1f], 0
lea eax, [esi - 2]
jne 0x41a2f5
lea eax, [esi - 1]
jmp 0x41a2f5
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0043fb1a
mov esi, eax
pop ecx
pop ecx
test esi, esi
jne 0x41a23e
push dword [ebp - 4]
call fcn.0043d83c
jmp 0x41a269
push edi
push esi
push dword [ebp + 0xc]
xor eax, eax
push dword [ebp + 8]
mov word [esi], ax
push dword [ebp - 8]
call fcn.00419711
add esp, 0x14
push esi
test eax, eax
jne 0x41a27b
call fcn.0043d83c
push dword [ebp - 4]
call fcn.0043d83c
pop ecx
cmp dword [ebp - 0xc], 1
pop ecx
jne 0x41a2c0
push dword [ebp - 8]
call fcn.0043d83c
pop ecx
jmp 0x41a2c0
mov edi, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x14]
push 0x474e8c
push 0xffffffffffffffff
push edi
push ebx
call fcn.00441a19
xor eax, eax
push esi
mov word [ebx + edi*2 - 2], ax
call fcn.0043d83c
push dword [ebp - 4]
call fcn.0043d83c
add esp, 0x1c
cmp dword [ebp - 0xc], 1
jne 0x41a2b6
push dword [ebp - 8]
call fcn.0043d83c
pop ecx
push ebx
jmp 0x41a2ef
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp + 0x10], 0
mov esi, dword [ebp + 0x18]
push 0xffffffffffffffff
lea eax, [esi - 1]
jne 0x41a2d5
push 0x46bf48
jmp 0x41a2d8
push dword [ebp + 0x10]
push eax
push dword [ebp + 0x14]
call fcn.00441729
mov ecx, dword [ebp + 0x14]
add esp, 0x10
xor eax, eax
mov word [ecx + esi*2 - 2], ax
push ecx
call fcn.0043e43b
pop ecx
pop edi
pop esi
pop ebx
leave
ret