Function at 0x411bc0
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6ac
mov eax, dword [0x5bd254]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
mov esi, dword [ebp + 8]
mov ecx, 0xc7
lea edi, [ebp - 0x330]
rep movsd dword es:[edi], dword [esi]
push 0x31c
push 0
mov eax, dword [ebp + 8]
push eax
call fcn.00511e90
add esp, 0xc
push 0x5a7914
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.00515a07
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x411c2c
mov dword [ebp - 4], 0xffffff9c
jmp 0x411e32
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 8]
mov dword [edx + 0x104], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0x10]
mov dword [ecx + 0x10c], edx
push 0x104
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00513780
add esp, 0xc
mov edx, dword [ebp + 8]
mov byte [edx + 0x103], 0
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call sym.convertifd.exe_UtGetExt
add esp, 8
push 0x5a7918
lea edx, [ebp - 0xc]
push edx
call fcn.0051e073
add esp, 8
test eax, eax
jne 0x411e23
mov dword [0x6a294c], 0
mov eax, dword [ebp - 8]
push eax
push 1
push 0xf8
lea ecx, [ebp - 0x430]
push ecx
call fcn.00515cb6
add esp, 0x10
cmp eax, 1
je 0x411cc1
mov dword [ebp - 4], 0xfffffffb
jmp 0x411e32
movsx edx, byte [ebp - 0x430]
cmp edx, 0x69
jne 0x411cf1
movsx eax, byte [ebp - 0x42f]
cmp eax, 0x4d
jne 0x411cf1
movsx ecx, byte [ebp - 0x42e]
cmp ecx, 0x66
jne 0x411cf1
movsx edx, byte [ebp - 0x42d]
cmp edx, 0x20
je 0x411d15
push 0
push 0
mov eax, dword [ebp - 8]
push eax
call fcn.00515def
add esp, 0xc
mov ecx, dword [ebp + 8]
push ecx
call sym.convertifd.exe_ReadIFDHeader
add esp, 4
mov dword [ebp - 4], eax
jmp 0x411e32
lea edx, [ebp - 0x334]
push edx
push 0x5a791c
lea eax, [ebp - 0x376]
push eax
call fcn.00511af7
add esp, 0xc
cmp eax, 1
jne 0x411d3e
cmp dword [ebp - 0x334], 0
jg 0x411d4a
mov dword [ebp - 4], 0xfffffff4
jmp 0x411e32
movsx ecx, byte [ebp - 0x340]
test ecx, ecx
je 0x411df4
lea edx, [ebp - 0x6ac]
push edx
push 0x5a7920
lea eax, [ebp - 0x340]
push eax
call fcn.00511af7
add esp, 0xc
cmp eax, 1
je 0x411d85
mov dword [ebp - 4], 0xfffffff4
jmp 0x411e32
push 0
mov ecx, dword [ebp - 0x6ac]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.00515def
add esp, 0xc
push 0
push 1
push 3
movzx eax, byte [ebp - 0x419]
push eax
push 0
push 0xffffffffffffffff
mov ecx, dword [ebp - 8]
push ecx
lea edx, [ebp - 0x6a8]
push edx
call sym.convertifd.exe_UtObjRead
add esp, 0x20
cmp eax, 1
je 0x411dcd
mov dword [ebp - 4], 0xfffffffb
jmp 0x411e32
push 0x6a294c
push 0x5a7924
lea eax, [ebp - 0x680]
push eax
call fcn.00511af7
add esp, 0xc
cmp eax, 1
je 0x411df4
mov dword [ebp - 4], 0xfffffffb
jmp 0x411e32
cmp dword [ebp + 0x14], 0
je 0x411e0e
mov ecx, dword [0x6a294c]
and ecx, 1
jne 0x411e0e
mov dword [ebp - 4], 0xfffffc05
jmp 0x411e32
push 0
mov edx, dword [ebp - 0x334]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.00515def
add esp, 0xc
mov ecx, dword [ebp + 8]
push ecx
call sym.convertifd.exe_ReadIFDHeader
add esp, 4
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x411e74
mov ecx, 0xc7
lea esi, [ebp - 0x330]
mov edi, dword [ebp + 8]
rep movsd dword es:[edi], dword [esi]
cmp dword [ebp - 8], 0
je 0x411e5a
mov edx, dword [ebp - 8]
push edx
call fcn.005158c7
add esp, 4
mov eax, dword [ebp + 8]
mov dword [eax + 0x104], 0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x10c], 0
mov eax, dword [ebp - 4]
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00511a80
mov esp, ebp
pop ebp
ret