Function at 0x411c76
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [ebp + 8]
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
mov eax, dword [ebp + 0xc]
and eax, 1
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
sub esp, 0xc
push dword [ebp - 4]
call sub.msvcrt.dll_strlen
add esp, 0x10
cmp eax, 0xb
jbe 0x411cd9
sub esp, 4
push 0xb
push str.gnupg_ring:
push dword [ebp - 4]
call sub.msvcrt.dll_strncmp
add esp, 0x10
test eax, eax
jne 0x411cd9
mov dword [ebp - 0x14], 1
lea eax, [ebp - 4]
add dword [eax], 0xb
mov eax, dword [ebp - 4]
cmp byte [eax], 0x5c
je 0x411d25
sub esp, 8
push 0x5c
push dword [ebp - 4]
call sub.msvcrt.dll_strchr
add esp, 0x10
test eax, eax
je 0x411d0a
sub esp, 8
push 0
push dword [ebp - 4]
call fcn.0049dbc3
add esp, 0x10
mov dword [ebp - 8], eax
jmp 0x411d36
sub esp, 4
push 0
push dword [ebp - 4]
push dword [0x4fe078]
call fcn.0049dbc3
add esp, 0x10
mov dword [ebp - 8], eax
jmp 0x411d36
sub esp, 0xc
push dword [ebp - 4]
call fcn.004a2fe0
add esp, 0x10
mov dword [ebp - 8], eax
cmp dword [ebp - 0xc], 0
jne 0x411d72
cmp dword [ebp + 0x10], 0
je 0x411d58
cmp dword [0x4fc0f0], 0
sete al
mov edx, 0
mov dl, al
mov dword [ebp - 0x24], edx
jmp 0x411d6c
cmp dword [0x4fc100], 0
sete al
mov edx, 0
mov dl, al
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x14], 0
jne 0x411de5
sub esp, 8
push 0x4d8bf3
push dword [ebp - 8]
call sub.msvcrt.dll_fopen
add esp, 0x10
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x411dde
push dword [ebp - 0x1c]
push 1
push 4
lea eax, [ebp - 0x20]
push eax
call sub.msvcrt.dll_fread
add esp, 0x10
cmp eax, 1
jne 0x411dc7
cmp dword [ebp - 0x20], 0x13579ace
je 0x411dce
cmp dword [ebp - 0x20], 0xce9a5713
je 0x411dce
mov dword [ebp - 0x14], 1
jmp 0x411dce
mov dword [ebp - 0x14], 1
sub esp, 0xc
push dword [ebp - 0x1c]
call sub.msvcrt.dll_fclose
add esp, 0x10
jmp 0x411de5
mov dword [ebp - 0x14], 1
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0
je 0x411dfc
cmp dword [ebp - 0x28], 1
je 0x411e1b
jmp 0x411ee1
sub esp, 8
push dword [ebp + 8]
push str.unknown_type_of_key_resource___s_n
call fcn.0049d87b
add esp, 0x10
mov dword [ebp - 0x10], 1
jmp 0x411efb
sub esp, 8
push dword [ebp - 0xc]
push dword [ebp - 8]
call fcn.00411a00
add esp, 0x10
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x411e3a
jmp 0x411efb
sub esp, 4
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 0x10]
push dword [ebp - 8]
call fcn.00412d1b
add esp, 0x10
test eax, eax
je 0x411ecd
cmp dword [0x4fc3a0], 0x27
jle 0x411e68
mov dword [ebp - 0x10], 0x1f
jmp 0x411efb
mov eax, dword [ebp + 0xc]
and eax, 2
test eax, eax
je 0x411e7a
mov eax, dword [ebp - 0x18]
mov dword [0x4fc0d0], eax
mov eax, dword [0x4fc3a0]
mov edx, eax
shl edx, 4
mov eax, dword [ebp - 0x14]
mov dword [edx + 0x4fc120], eax
mov eax, dword [0x4fc3a0]
shl eax, 4
mov dword [eax + 0x4fc124], 0
mov eax, dword [0x4fc3a0]
mov edx, eax
shl edx, 4
mov eax, dword [ebp - 0x18]
mov dword [edx + 0x4fc128], eax
mov eax, dword [0x4fc3a0]
mov edx, eax
shl edx, 4
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x4fc12c], eax
inc dword [0x4fc3a0]
jmp 0x411efb
mov eax, dword [ebp + 0xc]
and eax, 2
test eax, eax
je 0x411efb
mov eax, dword [ebp - 0x18]
mov dword [0x4fc0d0], eax
jmp 0x411efb
sub esp, 8
push dword [ebp + 8]
push str.resource_type_of___s_not_supported_n
call fcn.0049d87b
add esp, 0x10
mov dword [ebp - 0x10], 1
cmp dword [ebp - 0x10], 0
je 0x411f6b
mov eax, dword [ebp + 0xc]
and eax, 4
test eax, eax
je 0x411f3e
cmp dword [ebp + 0x10], 0
je 0x411f3e
sub esp, 4
sub esp, 8
push dword [ebp - 0x10]
call fcn.004a8910
add esp, 0xc
push eax
push dword [ebp - 8]
push str.keyblock_resource___s:__s_n
call fcn.004a7e84
add esp, 4
push eax
call fcn.0049d7de
add esp, 0x10
jmp 0x411f87
sub esp, 4
sub esp, 8
push dword [ebp - 0x10]
call fcn.004a8910
add esp, 0xc
push eax
push dword [ebp - 8]
push str.keyblock_resource___s:__s_n
call fcn.004a7e84
add esp, 4
push eax
call fcn.0049d87b
add esp, 0x10
jmp 0x411f87
cmp dword [ebp + 0x10], 0
je 0x411f7d
mov dword [0x4fc0f0], 1
jmp 0x411f87
mov dword [0x4fc100], 1
sub esp, 0xc
push dword [ebp - 8]
call fcn.004a2f78
add esp, 0x10
mov eax, dword [ebp - 0x10]
leave
ret