Function at 0x410e979a
Capabilities:
Get file size
Read file on windows

Disassembly:
push esi
push edi
push ebx
push ebp
sub esp, 0x20
mov ebx, 0x411bbb08
mov eax, dword [ebx + 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, eax
mov eax, dword [ebx + 0x10]
push eax
push 0
push edx
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ebp, eax
mov eax, ebp
push eax
push eax
mov edx, dword [ebx + 0x10]
call fcn.410e99ca
push 0x104
push ebp
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movzx esi, word [ebp]
xor edx, edx
mov ecx, dword [ebx + 0x34]
test esi, esi
je 0x410e97fe
inc edx
lea eax, [ebp + edx*2]
movzx esi, word [eax]
test esi, esi
jne 0x410e97f0
jmp 0x410e9800
mov eax, ebp
movzx esi, word [eax - 2]
jmp 0x410e9813
xor esi, esi
mov word [ebp + edx*2], si
dec edx
movzx esi, word [ebp + edx*2 - 2]
cmp esi, 0x5c
jne 0x410e9806
cmp byte [ecx], 0
je 0x410e9830
xor esi, esi
movsx eax, byte [esi + ecx]
inc esi
mov word [ebp + edx*2], ax
inc edx
cmp byte [esi + ecx], 0
jne 0x410e981f
xor edx, edx
xor ecx, ecx
inc ecx
push edx
push 0x80
push 3
push edx
push ecx
push ecx
push ebp
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x410e99b8
invalid
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, eax
mov eax, dword [ebx + 0x28]
push eax
push 0
push edx
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ebp, eax
mov eax, ebp
push eax
push eax
mov edx, dword [ebx + 0x28]
call fcn.410e99ca
xor edx, edx
lea ecx, [esp + 0x18]
mov dword [ecx], edx
push edx
push ecx
push dword [esp + 8]
je 0x410e98b2
or byte [ebp + 0x56], dl
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x410e99b8
mov eax, dword [ebx + 0x38]
mov edx, dword [esp + 0x18]
add edx, ebp
mov dword [esp + 0x14], edx
lea edx, [ebp + eax]
mov ecx, dword [edx]
lea eax, [edx + 8]
mov esi, dword [edx + 4]
test ecx, ecx
jbe 0x410e98c8
xor ebp, ebp
inc ebp
add dword [eax], esi
add eax, 4
cmp ebp, ecx
jb 0x410e98be
mov eax, dword [ebx + 0x20]
lea esi, [edx + eax]
lea edx, [eax + edx + 1]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
je 0x410e98ee
inc ecx
mov ebp, eax
test ebp, ebp
je 0x410e99b8
movsx edx, byte [esi]
lea ecx, [esi + edx + 1]
lea eax, [esi + edx]
mov dword [esp], eax
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x410e99b8
mov edx, dword [esp]
movsx ecx, byte [edx]
lea edi, [edx + ecx + 1]
lea eax, [edx + ecx]
mov dword [esp + 8], eax
push edi
call ebp
mov ebp, eax
test ebp, ebp
je 0x410e99b8
mov edx, dword [esp + 8]
lea ecx, [esp]
movsx eax, byte [edx]
lea edi, [edx + eax + 0xc]
mov dword [ecx + 0x1c], edi
jns 0x410e994e
mov edi, dword [eax + edx + 4]
mov eax, dword [eax + edx + 8]
mov edx, dword [ebp + 0x3c]
mov dword [ecx + 4], eax
add ebp, dword [edx + ebp + 0x2c]
mov dword [ecx], 0
push ecx
push 0x40
push eax
push ebp
call esi
add esp, 0xfffffff4
mov eax, ebp
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
call fcn.410e9a26
lea edx, [esp]
push edx
push dword [esp + 4]
push dword [esp + 0xc]
push ebp
call esi
mov ecx, dword [ebx + 0x1c]
xor edx, edx
cmp byte [ecx], 0
je 0x410e9995
mov ecx, dword [ebx + 0x1c]
movsx esi, byte [ecx + edx]
mov ecx, dword [esp + 0x14]
mov word [ecx + edx*2], si
inc edx
mov ecx, dword [ebx + 0x1c]
cmp byte [ecx + edx], 0
jne 0x410e997c
mov ebx, dword [esp + 0x14]
xor ecx, ecx
add edi, ebp
invalid
inc esp
invalid