Function at 0x411110
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1011c
call fcn.00423f50
mov eax, dword [0x46b880]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov dword [ebp - 0x10114], eax
or esi, 0xffffffff
mov eax, dword [ebp + 0xc]
mov ebx, esi
push edi
mov dword [ebp - 0x1010c], eax
xor edi, edi
mov eax, dword [ebp + 0x14]
push 0x80
mov dword [ebp - 0x1011c], eax
lea eax, [ebp - 0x10104]
push edi
push eax
call fcn.00425c30
push 0x80
lea eax, [ebp - 0x10084]
push edi
push eax
call fcn.00425c30
mov eax, dword [ebp - 0x10114]
add esp, 0x18
test eax, eax
je 0x411445
cmp dword [ebp - 0x1010c], edi
je 0x411445
push 0x8000
push eax
call fcn.0042fdf3
mov dword [ebp - 0x10108], eax
pop ecx
pop ecx
test eax, eax
js 0x41142a
push 0x80
lea ecx, [ebp - 0x10104]
push ecx
push eax
call fcn.0043ceb5
add esp, 0xc
cmp eax, 0x80
jne 0x411419
lea eax, [ebp - 0x10104]
push eax
call sym.FortiClientInstaller.exe_FCP_verify_object_hdr
pop ecx
test eax, eax
jne 0x411419
mov ecx, dword [ebp - 0x100bc]
mov eax, dword [ebp - 0x100d4]
push edi
push dword [ebp - 0x1010c]
add eax, ecx
mov dword [ebp - 0x10118], ecx
mov dword [ebp - 0x10110], eax
call fcn.0042f53f
pop ecx
pop ecx
test eax, eax
jne 0x4112c7
push dword [ebp - 0x1010c]
call sym.FortiClientInstaller.exe_FCP_get_file_size
pop ecx
cmp eax, 0x80
jbe 0x4112c7
push 0x8002
push dword [ebp - 0x1010c]
call fcn.0042fdf3
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
jns 0x411244
xor edi, edi
inc edi
jmp 0x411419
push 0x80
lea eax, [ebp - 0x10084]
push eax
push ebx
call fcn.0043ceb5
add esp, 0xc
cmp eax, 0x80
jne 0x411419
mov eax, dword [ebp - 0x1008c]
cmp eax, dword [ebp - 0x1000c]
jne 0x41123c
mov eax, dword [ebp - 0x100d8]
cmp eax, dword [ebp - 0x10058]
jne 0x41123c
mov eax, dword [ebp - 0x10110]
cmp eax, dword [ebp - 0x10014]
jne 0x41123c
mov eax, dword [ebp - 0x10118]
cmp dword [ebp - 0x10054], eax
jae 0x4112ac
push str.there_is_a_gap_between_new_partial_data_and_previous_partial_data__object_will_be_dropped._n
call fcn.00413387
pop ecx
jmp 0x411419
push edi
sub eax, 0xffffff80
push eax
push ebx
call fcn.0043c98c
add esp, 0xc
cmp eax, esi
jne 0x411351
jmp 0x41123c
cmp dword [ebp - 0x10118], edi
jne 0x411419
push 0x180
push 0x8102
push dword [ebp - 0x1010c]
call fcn.0042fdf3
mov ebx, eax
add esp, 0xc
test ebx, ebx
js 0x411419
push 0x80
lea eax, [ebp - 0x10104]
push eax
lea eax, [ebp - 0x10084]
push eax
call fcn.00425130
mov eax, dword [ebp - 0x10110]
mov dword [ebp - 0x10014], eax
lea eax, [ebp - 0x10084]
push eax
mov dword [ebp - 0x10054], edi
call sym.FortiClientInstaller.exe_FCP_calculate_obj_head_chksum
mov dword [ebp - 0x10008], eax
lea eax, [ebp - 0x10084]
push 0x80
push eax
push ebx
call fcn.0043d90d
add esp, 0x1c
cmp eax, 0x80
jne 0x41123c
mov dword [ebp - 0x10110], edi
jmp 0x41137e
push eax
lea eax, [ebp - 0x10004]
push eax
push ebx
call fcn.0043d90d
mov ecx, dword [ebp - 0x10114]
add esp, 0xc
cmp eax, ecx
jne 0x41123c
add dword [ebp - 0x10110], ecx
push 0x10000
lea eax, [ebp - 0x10004]
push eax
push dword [ebp - 0x10108]
call fcn.0043ceb5
add esp, 0xc
mov dword [ebp - 0x10114], eax
test eax, eax
jg 0x411359
mov eax, dword [ebp - 0x10118]
add eax, dword [ebp - 0x10110]
mov dword [ebp - 0x10054], eax
lea eax, [ebp - 0x10084]
push eax
call sym.FortiClientInstaller.exe_FCP_calculate_obj_head_chksum
push edi
push edi
push ebx
mov dword [ebp - 0x10008], eax
call fcn.0043c98c
add esp, 0x10
cmp eax, esi
je 0x41123c
push 0x80
lea eax, [ebp - 0x10084]
push eax
push ebx
call fcn.0043d90d
add esp, 0xc
cmp eax, 0x80
jne 0x41123c
mov eax, dword [ebp - 0x10054]
cmp eax, dword [ebp - 0x10014]
jne 0x411417
mov eax, dword [ebp - 0x1011c]
test eax, eax
je 0x411417
mov dword [eax], 1
mov esi, edi
mov eax, dword [ebp - 0x10108]
test eax, eax
js 0x41142a
push eax
call fcn.0043c528
pop ecx
test ebx, ebx
js 0x411435
push ebx
call fcn.0043c528
pop ecx
test edi, edi
je 0x411445
push dword [ebp - 0x1010c]
call fcn.0042f11b
pop ecx
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00423dc5
mov esp, ebp
pop ebp
ret