Function at 0x41ab0a
Capabilities:
Read file on windows

Disassembly:
push ebp
sub esp, 0x254
lea ebp, [esp - 4]
mov eax, dword [0x4a4b60]
xor eax, ebp
mov dword [ebp + 0x254], eax
push 0x24
mov eax, 0x47f171
call fcn.00462bd7
call fcn.004459aa
push eax
lea ecx, [ebp - 0x18]
call fcn.00402668
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
xor ebx, ebx
push str.Entering_ReadExtendedData__...
mov dword [ebp - 4], ebx
call fcn.00403303
call fcn.00418a32
mov dword [esp], 0x4a8e68
lea eax, [ebp]
push 0x104
push eax
call fcn.00464388
add esp, 0xc
push ebx
push ebx
push 3
push ebx
push 3
push closesocket
lea eax, [ebp]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1c], eax
cmp eax, ebx
je 0x41abbf
mov esi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
push ebx
push ebx
push 0x1b0
push eax
call esi
push ebx
lea eax, [ebp - 0x28]
push eax
push 4
pop edi
push edi
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebp - 0x28], edi
je 0x41abef
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0040112d
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x254]
xor ecx, ebp
call fcn.00461b8a
add ebp, 0x258
leave
ret
cmp dword [ebp - 0x20], ebx
jne 0x41abfa
push 2
push ebx
push ebx
jmp 0x41abff
push ebx
push ebx
push dword [ebp - 0x20]
push dword [ebp - 0x1c]
call esi
push 1
push ebx
push 0xfffffffffffffffc
push dword [ebp - 0x1c]
call esi
push ebx
lea eax, [ebp - 0x28]
push eax
push edi
push 0x4a8e64
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebp - 0x28], edi
jne 0x41abb6
push ebx
push ebx
push dword [0x4a8e64]
push dword [ebp - 0x1c]
call esi
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
lea eax, [ebp - 0x28]
push eax
push edi
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x1c]
call esi
cmp dword [ebp - 0x28], edi
jne 0x41abb6
mov eax, dword [ebp - 0x2c]
lea ecx, [eax + 4]
push eax
mov dword [0x4a8e1c], ecx
call fcn.00462114
pop ecx
mov dword [ebp - 0x24], eax
cmp eax, ebx
je 0x41abb6
push ebx
lea ecx, [ebp - 0x28]
push ecx
push dword [ebp - 0x2c]
push eax
push dword [ebp - 0x1c]
call esi
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x2c]
je 0x41ac94
push dword [ebp - 0x24]
call fcn.00461ccb
pop ecx
jmp 0x41abb6
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x2c]
push dword [ebp - 0x24]
call fcn.004185db
add esp, 0xc
push dword [ebp - 0x24]
mov dword [0x4a91a8], eax
cmp eax, ebx
jne 0x41acc6
call fcn.00461ccb
pop ecx
jmp 0x41abbf
call fcn.00461ccb
push edi
push dword [0x4a91a8]
lea eax, [ebp - 0x30]
push eax
call fcn.00461d60
mov esi, dword [0x4a91a8]
push edi
add esi, 4
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.00461d60
push dword [ebp - 0x10]
add esi, edi
call fcn.00462114
push dword [ebp - 0x10]
mov dword [0x4a8d58], eax
push esi
push eax
call fcn.00461d60
add esi, dword [ebp - 0x10]
push 8
push esi
push 0x4a8e14
call fcn.00461d60
add esp, 0x38
add esi, 8
xor ecx, ecx
lea eax, [ecx + 0x4a8e14]
or dl, 0xff
sub dl, byte [eax]
inc ecx
cmp ecx, 8
mov byte [eax], dl
jl 0x41ad20
push edi
push 0x4a8e14
push 0x4a8e00
call fcn.00461d60
push edi
push 0x4a8e18
push 0x4a8dfc
call fcn.00461d60
add esp, 0x18
cmp dword [0x4a8e00], ebx
je 0x41af18
cmp dword [0x4a8dfc], ebx
je 0x41af18
push 2
lea eax, [ebp - 0x14]
push esi
push eax
mov dword [0x4a8d6c], 1
call fcn.00461d60
movzx eax, word [ebp - 0x14]
inc esi
push 2
inc esi
mov dword [0x4a8e10], eax
lea eax, [ebp - 0x14]
push esi
push eax
call fcn.00461d60
movzx eax, word [ebp - 0x14]
add esp, 0x18
inc esi
mov ecx, 0x3e8
inc esi
cmp eax, ecx
mov dword [0x4a8e08], ebx
mov dword [0x4a8e04], eax
jle 0x41adc9
sub eax, ecx
mov dword [0x4a8e08], 1
mov dword [0x4a8e04], eax
push edi
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.00461d60
push dword [ebp - 0x10]
add esi, edi
call fcn.00462114
push dword [ebp - 0x10]
mov dword [0x4a8d68], eax
push esi
push eax
call fcn.00461d60
add esi, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.00461d60
push dword [ebp - 0x10]
add esi, edi
call fcn.00462114
push dword [ebp - 0x10]
mov dword [0x4a8d64], eax
push esi
push eax
call fcn.00461d60
add esi, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.00461d60
add esp, 0x44
push dword [ebp - 0x10]
add esi, edi
call fcn.00462114
push dword [ebp - 0x10]
mov dword [0x4a8d60], eax
push esi
push eax
call fcn.00461d60
add esi, dword [ebp - 0x10]
add esp, 0x10
push dword [0x4a8d60]
lea ecx, [ebp - 0x18]
call fcn.00402dd6
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], ebx
je 0x41ae98
lea eax, [ebp - 0x18]
push eax
call fcn.00419f07
lea eax, [ebp - 0x18]
push eax
call fcn.0041a187
push dword [0x4a8d60]
call fcn.00461ccb
mov eax, dword [ebp - 0x18]
mov eax, dword [eax - 0xc]
inc eax
push eax
mov dword [ebp - 0x10], eax
call fcn.00462114
push dword [ebp - 0x18]
mov dword [0x4a8d60], eax
push eax
call fcn.00461a10
add esp, 0x18
push edi
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.00461d60
push dword [ebp - 0x10]
add esi, edi
call fcn.00462114
push dword [ebp - 0x10]
mov dword [0x4a8d5c], eax
push esi
push eax
call fcn.00461d60
add esi, dword [ebp - 0x10]
add esp, 0x1c
push dword [0x4a8d5c]
lea ecx, [ebp - 0x18]
call fcn.00402dd6
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], ebx
je 0x41af2a
lea eax, [ebp - 0x18]
push eax
call fcn.00419f07
lea eax, [ebp - 0x18]
push eax
call fcn.0041a187
push dword [0x4a8d5c]
call fcn.00461ccb
mov eax, dword [ebp - 0x18]
mov eax, dword [eax - 0xc]
inc eax
push eax
mov dword [ebp - 0x10], eax
call fcn.00462114
push dword [ebp - 0x18]
mov dword [0x4a8d5c], eax
push eax
call fcn.00461a10
add esp, 0x18
jmp 0x41af2a
mov dword [0x4a8d6c], ebx
mov dword [0x4a8d14], ebx
mov dword [0x4a8d10], ebx
push edi
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.00461d60
push dword [ebp - 0x10]
add esi, edi
call fcn.00462114
push dword [ebp - 0x10]
mov dword [0x4a8d40], eax
push esi
push eax
call fcn.00461d60
mov eax, dword [0x4a8d40]
add esi, dword [ebp - 0x10]
add esp, 0x1c
cmp byte [eax], bl
je 0x41afeb
lea eax, [ebp + 0x104]
push str.SOFTWARE_
push eax
call fcn.00461a10
push dword [0x4a8d40]
lea eax, [ebp + 0x104]
push eax
call fcn.00461a20
lea eax, [ebp + 0x104]
push 0x482aac
push eax
call fcn.00461a20
push dword [0x4a8d58]
lea eax, [ebp + 0x104]
push eax
call fcn.00461a20
lea eax, [ebp + 0x204]
push eax
push str.AppLanguage
lea eax, [ebp + 0x104]
push eax
push closesocket
mov byte [ebp + 0x204], bl
call fcn.004019ea
add esp, 0x30
cmp byte [ebp + 0x204], bl
je 0x41afeb
lea eax, [ebp + 0x204]
push eax
call fcn.004631d2
pop ecx
cmp eax, ebx
je 0x41afeb
mov dword [0x4a8f68], eax
push edi
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.00461d60
push dword [ebp - 0x10]
add esi, edi
call fcn.00462114
push dword [ebp - 0x10]
mov dword [0x4a8d54], eax
push esi
push eax
call fcn.00461d60
add esi, dword [ebp - 0x10]
push 0x7c
push dword [0x4a8d54]
call fcn.00463ba0
add esp, 0x24
mov dword [ebp - 0x24], eax
cmp eax, ebx
je 0x41b04d
mov byte [eax], bl
push dword [ebp - 0x10]
call fcn.00462114
mov dword [0x4a8d3c], eax
mov byte [eax], bl
mov eax, dword [ebp - 0x24]
inc eax
push eax
push dword [0x4a8d3c]
call fcn.00461a10
add esp, 0xc
push edi
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.00461d60
push dword [ebp - 0x10]
add esi, edi
call fcn.00462114
push dword [ebp - 0x10]
mov dword [0x4a8d50], eax
push esi
push eax
call fcn.00461d60
add esi, dword [ebp - 0x10]
push 0x7c
push dword [0x4a8d50]
call fcn.00463ba0
add esp, 0x24
mov dword [ebp - 0x24], eax
cmp eax, ebx
je 0x41b0cc
mov dword [0x4a8bd0], 1
mov byte [eax], bl
push dword [ebp - 0x10]
call fcn.00462114
mov dword [0x4a8d4c], eax
pop ecx
mov ecx, dword [ebp - 0x24]
mov byte [eax], bl
lea eax, [ecx + 1]
cmp byte [eax], 0x2a
jne 0x41b0be
add ecx, 2
mov dword [0x4a8bd0], ebx
push ecx
jmp 0x41b0bf
push eax
push dword [0x4a8d4c]
call fcn.00461a10
pop ecx
pop ecx
push edi
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.00461d60
push dword [ebp - 0x10]
add esi, edi
call fcn.00462114
push dword [ebp - 0x10]
mov dword [0x4a8d44], eax
push esi
push eax
call fcn.00461d60
add esi, dword [ebp - 0x10]
add esp, 0x1c
push dword [0x4a8d44]
lea ecx, [ebp - 0x18]
call fcn.00402dd6
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], ebx
je 0x41b14a
lea eax, [ebp - 0x18]
push eax
call fcn.00419f07
lea eax, [ebp - 0x18]
push eax
call fcn.0041a187
push dword [0x4a8d44]
call fcn.00461ccb
mov eax, dword [ebp - 0x18]
mov eax, dword [eax - 0xc]
inc eax
push eax
mov dword [ebp - 0x10], eax
call fcn.00462114
push dword [ebp - 0x18]
mov dword [0x4a8d44], eax
push eax
call fcn.00461a10
add esp, 0x18
push edi
lea eax, [ebp - 0x20]
push esi
push eax
call fcn.00461d60
mov eax, dword [ebp - 0x20]
push edi
add esi, edi
mov dword [0x4a8d38], eax
lea eax, [ebp - 0x20]
push esi
push eax
call fcn.00461d60
mov eax, dword [ebp - 0x20]
push 2
add esi, edi
mov dword [0x4a8d0c], eax
lea eax, [ebp - 0x14]
push esi
push eax
call fcn.00461d60
movzx eax, word [ebp - 0x14]
inc esi
push edi
inc esi
mov dword [0x4a8c7c], eax
lea eax, [ebp - 0x20]
push esi
push eax
call fcn.00461d60
mov eax, dword [ebp - 0x20]
push 2
add esi, edi
mov dword [0x4a8d34], eax
lea eax, [ebp - 0x14]
push esi
push eax
call fcn.00461d60
movzx eax, word [ebp - 0x14]
inc esi
push 2
inc esi
mov dword [0x4a8d30], eax
lea eax, [ebp - 0x14]
push esi
push eax
call fcn.00461d60
movzx eax, word [ebp - 0x14]
add esp, 0x48
inc esi
push 2
inc esi
mov dword [0x4a8d2c], eax
lea eax, [ebp - 0x14]
push esi
push eax
call fcn.00461d60
movzx eax, word [ebp - 0x14]
inc esi
push edi
inc esi
mov dword [0x4a8d28], eax
lea eax, [ebp - 0x20]
push esi
push eax
call fcn.00461d60
mov eax, dword [ebp - 0x20]
push 2
add esi, edi
mov dword [0x4a8d20], eax
lea eax, [ebp - 0x14]
push esi
push eax
call fcn.00461d60
movzx eax, word [ebp - 0x14]
push 2
add esi, 2
mov dword [0x4a8d1c], eax
push esi
lea eax, [ebp - 0x14]
push eax
call fcn.00461d60
movzx eax, word [ebp - 0x14]
push dword [0x4a91a8]
mov dword [0x4a8d18], eax
call fcn.00461ccb
add esp, 0x34
cmp dword [0x4a8d6c], ebx
je 0x41b27c
call fcn.004191f4
mov dword [0x4a8d10], ebx
test eax, eax
je 0x41b257
mov dword [0x4a8d14], ebx
jmp 0x41b27c
xor esi, esi
inc esi
mov dword [0x4a8d14], esi
cmp dword [0x4a8e08], ebx
jne 0x41b27c
call fcn.00418de6
mov dword [0x4a8e0c], eax
cmp eax, ebx
jne 0x41b27c
mov dword [0x4a8d10], esi
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0040112d
xor eax, eax
inc eax
jmp 0x41abcc