Function at 0x41e9d0
Capabilities:
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x463221
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x478ec8]
xor eax, esp
push eax
lea eax, [esp + 0x60]
mov dword fs:[0], eax
xor edi, edi
lea ecx, [esp + 0x24]
mov dword [esp + 0x68], edi
mov dword [esp + 0x18], edi
call fcn.0041d4c0
mov eax, dword [0x47aaac]
mov edx, dword [eax + 0xc]
mov esi, 1
mov ecx, 0x47aaac
mov dword [esp + 0x68], esi
call edx
add eax, 0x10
mov dword [esp + 0x14], eax
mov eax, dword [0x47aaac]
mov edx, dword [eax + 0xc]
mov ecx, 0x47aaac
mov byte [esp + 0x68], 2
call edx
mov ebp, dword [esp + 0x70]
add eax, 0x10
mov dword [ebp], eax
push 0xe
push str.no_timenumber_
mov ecx, ebp
mov dword [esp + 0x20], esi
call fcn.00416ac0
lea eax, [esp + 0x20]
push eax
call fcn.0041b600
push str.appsoft.xml
push eax
lea ecx, [esp + 0x28]
mov bl, 3
push ecx
mov byte [esp + 0x78], bl
call fcn.00419f70
add esp, 0x10
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x6c], 4
call fcn.00416a40
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x68], bl
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41eaaf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0x68], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ead4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push 0x467b58
push ecx
call fcn.00442931
mov esi, eax
add esp, 8
cmp esi, edi
mov dword [esp + 0x1c], esi
je 0x41ec5c
push 2
push edi
push esi
call fcn.00444011
push esi
call fcn.00443f1c
push edi
push edi
push esi
mov ebx, eax
call fcn.00444011
add esp, 0x1c
cmp ebx, edi
je 0x41ec53
push ebx
call fcn.0042ff51
push esi
push 1
mov ebp, eax
push ebx
push ebp
call fcn.00443d69
add esp, 0x14
push edi
push edi
push ebx
push ebp
push edi
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov esi, eax
xor ecx, ecx
lea eax, [esi + 1]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0042ff51
add esp, 4
push esi
mov edi, eax
push edi
push ebx
push ebp
push 0
push 0xfde9
mov word [edi + esi*2], 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push ebp
call fcn.004410ea
add esp, 4
push 0
push 0
push 0
push 0
push esi
push edi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ebp, eax
lea eax, [ebp + 1]
push eax
call fcn.0042ff51
mov ebx, eax
lea eax, [ebp + 1]
push eax
push 0
push ebx
call fcn.00441070
add esp, 0x10
push 0
push 0
push ebp
push ebx
push esi
push edi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push edi
call fcn.004410ea
add esp, 4
push ebx
lea ecx, [esp + 0x28]
call fcn.0042bdf0
test al, al
je 0x41ec42
push str.ALLApps
lea ecx, [esp + 0x28]
call fcn.00429230
lea ecx, [esp + 0x24]
call fcn.00428980
push str.hostPcInfo
lea ecx, [esp + 0x28]
call fcn.00429230
push str.timeNum
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x2c]
call fcn.00419a30
mov ecx, dword [esp + 0x70]
push eax
mov byte [esp + 0x6c], 5
call fcn.00416a40
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0x68], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ec42
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push ebx
call fcn.004410ea
mov esi, dword [esp + 0x20]
mov ebp, dword [esp + 0x74]
add esp, 4
push esi
call fcn.0044264a
add esp, 4
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x68], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ec81
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x68], 0
call fcn.0041d550
mov eax, ebp
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret 4