Function at 0x419350
Capabilities:
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x471fd8
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push ebp
push esi
push edi
mov eax, dword [0x48a348]
xor eax, esp
push eax
lea eax, [esp + 0x2c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x3c]
mov eax, dword [ebp]
mov edx, dword [eax + 0x24]
mov ecx, ebp
mov byte [esp + 0x17], 1
call edx
mov ebx, eax
push ebx
mov dword [esp + 0x1c], ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [esp + 0x34], 0
cmp byte [ebp + 0x452], 0
je 0x419514
cmp byte [ebp + 0x440], 0
jne 0x41950d
cmp byte [ebp + 0x451], 0
jne 0x41950d
mov eax, dword [ebp + 0x2d4]
mov ecx, dword [ebp + 0x43c]
push 0
lea esi, [ebp + 0x444]
push esi
push 0x2000
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov esi, dword [esi]
test eax, eax
jne 0x4194a0
test esi, esi
je 0x4193fd
mov byte [ebp + 0x451], 1
mov ecx, dword [ebp + 0x454]
test ecx, ecx
je 0x4194b8
mov eax, dword [ebp + 0x458]
cmp eax, dword [ebp + 0x45c]
jge 0x4194b8
mov ebx, dword [eax + ecx]
test ebx, ebx
je 0x4194b4
mov edx, dword [ebp + 0x2d4]
add eax, 4
mov dword [ebp + 0x458], eax
mov eax, esi
mov ecx, 1
call fcn.00456260
cmp eax, ebx
jne 0x4194b4
mov edx, esi
mov eax, esi
shl edx, 0x10
and eax, 0xff00
or edx, eax
movzx eax, byte [ebp + 0x447]
shr esi, 8
shl edx, 8
and esi, 0xff00
or edx, esi
or edx, eax
mov eax, dword [ebp + 0xec]
mov cl, 7
mov esi, 0xc
lea ebx, [esp + 0x20]
mov byte [esp + 0x20], cl
mov byte [esp + 0x21], 5
mov dword [esp + 0x24], 0x2000000
mov dword [esp + 0x28], edx
call fcn.0044b4b0
mov bl, byte [esp + 0x17]
jmp 0x419608
test esi, esi
jne 0x4193fd
mov byte [ebp + 0x440], 1
jmp 0x41961c
mov ebx, dword [esp + 0x18]
cmp byte [ebp + 0x450], 0
mov edi, 0x2400
mov dword [esp + 0x1c], edi
mov byte [esp + 0x3c], 0
je 0x41953c
mov eax, dword [ebp + 0x2d4]
mov edx, dword [ebp + 0x2d8]
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
call fcn.00456540
add esp, 4
test eax, eax
je 0x419533
push eax
push str.._vncclient.cpp_:_Compress_returned_error_in_File_Send_:_d_n
mov ecx, 9
mov eax, 0x48c4e8
call fcn.00401000
add esp, 8
mov byte [ebp + 0x451], 1
mov ecx, ebp
call fcn.00419640
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, 1
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 4
mov edi, dword [esp + 0x1c]
mov byte [esp + 0x3c], 1
mov eax, dword [ebp + 0x444]
cmp edi, eax
jbe 0x41954b
mov byte [esp + 0x3c], 0
mov dl, byte [esp + 0x3c]
movzx esi, dl
neg esi
sbb esi, esi
and esi, 0x1000000
mov cl, 7
mov byte [esp + 0x20], cl
mov byte [esp + 0x21], 5
mov dword [esp + 0x24], esi
test dl, dl
je 0x419595
mov edx, edi
and edx, 0xff0000
mov eax, edi
shr eax, 0x10
or edx, eax
mov eax, edi
mov esi, edi
shl eax, 0x10
and esi, 0xff00
or eax, esi
shr edx, 8
shl eax, 8
jmp 0x4195b8
mov edx, eax
mov esi, eax
shl edx, 0x10
and esi, 0xff00
shr eax, 8
or edx, esi
and eax, 0xff00
shl edx, 8
or edx, eax
movzx eax, byte [ebp + 0x447]
or edx, eax
mov eax, dword [ebp + 0xec]
mov esi, 0xc
lea ebx, [esp + 0x20]
mov dword [esp + 0x28], edx
call fcn.0044b4b0
cmp eax, 0xffffffff
sete bl
mov byte [esp + 0x17], bl
test bl, bl
je 0x419608
cmp byte [esp + 0x3c], 0
je 0x4195f1
mov eax, dword [ebp + 0x2d8]
mov ecx, edi
jmp 0x4195fd
mov ecx, dword [ebp + 0x444]
mov eax, dword [ebp + 0x2d4]
mov edi, dword [ebp + 0xec]
call fcn.0044b4f0
mov ecx, dword [ebp + 0x444]
add dword [ebp + 0x448], ecx
test bl, bl
mov ebx, dword [esp + 0x18]
je 0x41962e
mov edx, dword [0x4a78c0]
push 0
push ebp
push edx
call fcn.00449330
add esp, 0xc
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, byte [esp + 0x17]
jmp 0x41951d