Function at 0x40cbf2
Capabilities:
Delete file
Enumerate files on windows
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x370
push ebx
push esi
push edi
mov dword [ebp - 0x36c], 0
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x210], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x364], 0
mov dword [ebp - 4], 0
xor eax, eax
mov al, byte [0x704c40]
test eax, eax
jne 0x40cd09
mov edi, 0x9a3940
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov edx, edi
mov edi, 0x704c40
mov esi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x704c40
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
lea eax, [ecx - 1]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
je 0x40cce5
dec dword [ebp - 0x214]
mov eax, dword [ebp - 0x214]
xor ecx, ecx
mov cl, byte [eax + 0x704c40]
cmp ecx, 0x5c
je 0x40cce5
mov edi, 0x704c40
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
mov ax, word [0x46c7e8]
mov word [edi - 1], ax
mov edx, 0x46c7ec
mov edi, 0x704c40
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
dec edi
mov eax, dword [edx]
mov dword [edi], eax
mov eax, dword [edx + 4]
mov dword [edi + 4], eax
mov al, byte [edx + 8]
mov byte [edi + 8], al
push 0x704c40
push str._s.lwa
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
cmp dword [0x45e03c], 0
je 0x40cd4f
lea eax, [ebp - 0x208]
push eax
push 0
call fcn.00452990
add esp, 4
push eax
push str._r_n__X_J:SCANNING_OFFLINE_USAGE_UPL_r_n____s__
call fcn.00452380
add esp, 0xc
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0xffffffff
jne 0x40cd9a
cmp dword [0x45e03c], 0
je 0x40cd90
push str._r_nJ:Zero_offline_files_found
call fcn.00452380
add esp, 4
jmp 0x40d5d8
mov eax, dword [ebp - 0x370]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edi, 0x482660
xor eax, eax
mov ecx, 0x25
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov byte [0x482660], 0x29
mov dword [ebp - 0x214], 0x32
mov dword [ebp - 0x218], 0
cmp dword [0x462198], 0
je 0x40cf11
mov eax, dword [0x4620e0]
push eax
call fcn.00437f47
add esp, 4
mov dword [ebp - 0x368], 0
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 8]
push eax
push 0x3e8
push 0x5f8fe0
mov eax, dword [ebp - 0x214]
push eax
push 0x482660
mov eax, dword [0x462198]
push eax
call fcn.00408950
add esp, 0x20
test eax, eax
jne 0x40ceae
mov eax, dword [0x4620e0]
push eax
call fcn.00437f6e
add esp, 4
cmp dword [ebp - 0x20c], 0
jne 0x40ce5d
cmp dword [ebp - 0x368], 0
je 0x40ce9f
mov dword [ebp - 0x218], 0
cmp dword [ebp - 0x20c], 0
je 0x40ce9a
cmp dword [0x45e03c], 0
je 0x40ce95
mov eax, dword [ebp - 0x368]
push eax
push 0x46c850
call fcn.00452380
add esp, 8
jmp 0x40d5d8
jmp 0x40cea9
mov dword [ebp - 0x218], 1
jmp 0x40cf0c
mov eax, dword [0x4620e0]
push eax
call fcn.00437f6e
add esp, 4
mov dword [ebp - 0x218], 0
cmp dword [ebp - 0x20c], 0
je 0x40cf0c
mov eax, dword [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x370]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [0x45e03c], 0
je 0x40cf07
push str._r_nJ:OFFLINE_XFER_SERVER_UNAVAILABLE___EARLY_EXIT_EW3.1
call fcn.00452380
add esp, 4
jmp 0x40d5d8
jmp 0x40cf30
cmp dword [0x45e03c], 0
je 0x40cf2b
push str._r_nJ:NO_SERVER_IP__UNABLE_TO_UPLOAD_JZ4JNL
call fcn.00452380
add esp, 4
jmp 0x40d5d8
cmp dword [ebp - 0x218], 0
jne 0x40cf5c
cmp dword [0x45e03c], 0
je 0x40cf57
push str._r_nJ:OFFLINE_SEND_NOT_OK__EXIT_EW52
call fcn.00452380
add esp, 4
jmp 0x40d5d8
movsx eax, byte [0x5f9460]
test eax, eax
je 0x40cfa0
push 0xb4bcc0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
call fcn.00452990
add esp, 4
push eax
push str._X.lwa
push 0x64
push 0x5f9460
call fcn.00452660
add esp, 0x10
push 0xb4bcc0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x370], eax
mov dword [0x462360], 0
cmp dword [ebp - 0x370], 0xffffffff
jne 0x40cff5
cmp dword [0x45e03c], 0
je 0x40cfeb
push str._r_nJx1:Zero_offline_files_found
call fcn.00452380
add esp, 4
jmp 0x40d5d8
cmp dword [ebp - 0x370], 0xffffffff
je 0x40d083
test byte [ebp - 0x360], 0x10
jne 0x40d04b
lea eax, [ebp - 0x334]
push eax
push 0x704c40
push 0x46c93c
push 0xd4
mov eax, dword [0x462360]
mov ecx, eax
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
lea eax, [ecx + eax*4]
lea eax, [eax*4 + 0x9a3b40]
push eax
call fcn.00452660
add esp, 0x14
inc dword [0x462360]
lea eax, [ebp - 0x360]
push eax
mov eax, dword [ebp - 0x370]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x40d07e
mov eax, dword [ebp - 0x370]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 0x370], 0xffffffff
jmp 0x40cff5
cmp dword [0x462360], 1
jle 0x40d0ad
push 0x40cbd2
push 0xd4
mov eax, dword [0x462360]
push eax
push 0x9a3b40
call fcn.00453390
add esp, 0x10
mov dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
cmp dword [0x462360], eax
jle 0x40d5d8
cmp dword [0x4622c8], 0
je 0x40d0db
jmp 0x40d5d8
cmp dword [0x45e03c], 0
je 0x40d10e
mov eax, dword [ebp - 0x220]
mov ecx, eax
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
lea eax, [ecx + eax*4]
lea eax, [eax*4 + 0x9a3b40]
push eax
push str._r_nJ:FOUND_OFFLINE_USAGE_FILE___s_
call fcn.00452380
add esp, 8
push 0
push 0
push 3
push 0
push 1
push bind
mov eax, dword [ebp - 0x220]
mov ecx, eax
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
lea eax, [ecx + eax*4]
lea eax, [eax*4 + 0x9a3b40]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x21c], eax
cmp dword [0x45e03c], 0
je 0x40d16a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [ebp - 0x21c]
push eax
push str._r_n_J:Open___X__GLE_d
call fcn.00452380
add esp, 0xc
cmp dword [ebp - 0x21c], 0xffffffff
je 0x40d5cd
push 0
mov eax, dword [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x40d19d
cmp dword [ebp - 4], 0xffffffff
jne 0x40d1ce
mov eax, dword [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x220]
mov ecx, eax
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
lea eax, [ecx + eax*4]
lea eax, [eax*4 + 0x9a3b40]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x40d5cd
mov dword [ebp - 0x210], 1
cmp dword [ebp - 0x210], 0
je 0x40d5a1
mov dword [ebp - 0x214], 0
push 0
lea eax, [ebp - 0x214]
push eax
push 4
lea eax, [ebp - 0x364]
push eax
mov eax, dword [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x214], 4
je 0x40d230
mov dword [ebp - 0x210], 0
jmp 0x40d282
cmp dword [ebp - 0x214], 0
jne 0x40d24c
mov dword [ebp - 0x210], 0
jmp 0x40d282
cmp dword [ebp - 0x364], 0x7d000
jbe 0x40d26b
mov dword [ebp - 0x210], 0
jmp 0x40d282
cmp dword [ebp - 0x364], 0
jne 0x40d282
mov dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 0
je 0x40d55e
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0
push 0
lea eax, [ebp - 0x214]
push eax
mov eax, dword [ebp - 0x364]
push eax
push 0x482660
mov eax, dword [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x214], eax
jne 0x40d502
cmp dword [0x462198], 0
je 0x40d4e3
mov eax, dword [0x4620e0]
push eax
call fcn.00437f47
add esp, 4
mov dword [ebp - 0x368], 0
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 8]
push eax
push 0x3e8
push 0x5f8fe0
mov eax, dword [ebp - 0x214]
push eax
push 0x482660
mov eax, dword [0x462198]
push eax
call fcn.00408950
add esp, 0x20
test eax, eax
jne 0x40d459
mov eax, dword [0x4620e0]
push eax
call fcn.00437f6e
add esp, 4
cmp dword [ebp - 0x20c], 0
jne 0x40d368
cmp dword [ebp - 0x368], 0
je 0x40d44a
mov dword [ebp - 0x218], 0
cmp dword [ebp - 0x20c], 0
je 0x40d3eb
mov eax, dword [ebp - 0x220]
mov ecx, eax
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
lea eax, [ecx + eax*4]
lea eax, [eax*4 + 0x9a3b40]
push eax
mov eax, dword [ebp - 0x21c]
push eax
push 0x482660
mov eax, dword [ebp - 0x364]
push eax
call fcn.0040c930
add esp, 0x10
mov eax, dword [ebp - 0x370]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [0x45e03c], 0
je 0x40d3e1
mov eax, dword [ebp - 0x368]
push eax
push str._r_nJ:OFFLINE_XFER_SERVER_UNAVAILABLE___EARLY_EXIT_EW3.00._d
call fcn.00452380
add esp, 8
jmp 0x40d5d8
mov eax, dword [ebp - 0x220]
mov ecx, eax
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
lea eax, [ecx + eax*4]
lea eax, [eax*4 + 0x9a3b40]
push eax
mov eax, dword [ebp - 0x21c]
push eax
push 0x482660
mov eax, dword [ebp - 0x364]
push eax
call fcn.0040c930
add esp, 0x10
cmp dword [0x45e03c], 0
je 0x40d440
mov eax, dword [ebp - 0x368]
push eax
push str._r_nJ:OFFLINE_XFER_SERVER_UNAVAILABLE___EARLY_EXIT_EW3.30._d
call fcn.00452380
add esp, 8
jmp 0x40d5d8
mov dword [ebp - 0x218], 1
jmp 0x40d4de
mov eax, dword [0x4620e0]
push eax
call fcn.00437f6e
add esp, 4
mov dword [ebp - 0x218], 0
cmp dword [ebp - 0x20c], 0
je 0x40d4de
mov eax, dword [ebp - 0x220]
mov ecx, eax
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
lea eax, [ecx + eax*4]
lea eax, [eax*4 + 0x9a3b40]
push eax
mov eax, dword [ebp - 0x21c]
push eax
push 0x482660
mov eax, dword [ebp - 0x364]
push eax
call fcn.0040c930
add esp, 0x10
mov eax, dword [ebp - 0x370]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp dword [0x45e03c], 0
je 0x40d4d9
push str._r_nj:OFFLINE_XFER_SERVER_UNAVAILABLE___EARLY_EXIT_EW3.1
call fcn.00452380
add esp, 4
jmp 0x40d5d8
jmp 0x40d4fd
cmp dword [0x45e03c], 0
je 0x40d4fd
push str._r_nNO_SERVER_IP__UNABLE_TO_UPLOAD_JZ4
call fcn.00452380
add esp, 4
jmp 0x40d526
cmp dword [ebp - 0x214], 0
jne 0x40d526
cmp dword [ebp - 0x210], 0
je 0x40d526
mov dword [ebp - 0x218], 1
cmp dword [ebp - 0x218], 0
je 0x40d559
xor eax, eax
mov ax, word [0x462330]
test eax, eax
jne 0x40d559
cmp dword [ebp - 0x368], 0
jne 0x40d559
mov word [0x462324], 0
jmp 0x40d55e
cmp dword [0x4622c8], 0
je 0x40d59c
mov eax, dword [ebp - 0x220]
mov ecx, eax
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
lea eax, [ecx + eax*4]
lea eax, [eax*4 + 0x9a3b40]
push eax
mov eax, dword [ebp - 0x21c]
push eax
push 0
push 0
call fcn.0040c930
add esp, 0x10
jmp 0x40d5d8
jmp 0x40d1d8
mov eax, dword [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x220]
mov ecx, eax
lea eax, [eax + eax*2]
lea eax, [ecx + eax*4]
lea eax, [ecx + eax*4]
lea eax, [eax*4 + 0x9a3b40]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
inc dword [ebp - 0x220]
jmp 0x40d0b7
pop edi
pop esi
pop ebx
leave
ret