Function at 0x435720
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55cf99
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x5b3680]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
push 0x68
call fcn.00529b2d
mov esi, eax
add esp, 4
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], 0
test esi, esi
je 0x4357a1
mov dword [esi], vtable.SecC::CSerialObject.0
mov byte [ebp - 4], 1
xor eax, eax
mov dword [esi], vtable.CFilePart.0
mov dword [esi + 4], 0
mov dword [esi + 8], eax
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], eax
mov byte [ebp - 4], 2
lea ecx, [esi + 0x34]
call fcn.0041d7b0
mov byte [ebp - 4], 0
jmp 0x4357a3
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], 4
movdqu xmm0, xmmword [ebp + 0xc]
movdqu xmmword [esi + 4], xmm0
mov dword [esi + 0x14], 1
mov dword [esi + 0x18], 0
mov dword [ebp - 0x1c], 0
mov byte [ebp - 4], 5
mov dword [ebp - 0x18], 0
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x4357fd
sub esp, 0x10
push 1
push closesocket
push dword [ebp + 8]
call fcn.00416040
jmp 0x435818
push 0
push 0x80
push 3
push 0
push 1
push closesocket
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
jne 0x435826
call fcn.004160c0
mov edi, eax
jmp 0x43582b
mov dword [ebp - 0x1c], eax
xor edi, edi
xor eax, eax
test edi, edi
setns al
test eax, eax
je 0x43591c
push 0x400000
call fcn.0052d28b
add esp, 4
mov dword [esi + 0x28], eax
test eax, eax
je 0x435855
mov dword [esi + 0x30], 0x400000
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x24], eax
cmp eax, 0xffffffff
jne 0x435878
call fcn.004160c0
mov edi, eax
test edi, edi
js 0x435883
mov eax, dword [ebp - 0x24]
mov dword [esi + 0x20], eax
xor edi, edi
mov eax, dword [ebp - 0x20]
mov dword [esi + 0x24], eax
xor eax, eax
test edi, edi
setns al
test eax, eax
je 0x43591c
mov ecx, 0x400000
lea eax, [ebp + 8]
cmp dword [esi + 0x30], ecx
push 0
cmovb ecx, dword [esi + 0x30]
push eax
push ecx
mov dword [esi + 0x2c], ecx
push dword [esi + 0x28]
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x4358c1
call fcn.004160c0
mov edi, eax
jmp 0x4358c3
xor edi, edi
xor eax, eax
test edi, edi
setns al
test eax, eax
je 0x43591c
mov ecx, dword [ebp + 8]
cmp ecx, dword [esi + 0x30]
cmova ecx, dword [esi + 0x30]
mov dword [esi + 0x2c], ecx
cmp dword [ebp + 8], 0
jne 0x4358e8
mov dword [esi + 0x18], 1
push esi
mov ecx, ebx
call fcn.00435620
test eax, eax
js 0x435901
mov dword [esi + 0x14], 0
cmp dword [ebp + 8], 0
jne 0x435892
mov eax, dword [ebp - 0x1c]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x435918
push eax
call ebx
mov dword [ebp - 0x1c], 0
xor edi, edi
jmp 0x435922
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x435937
push eax
call ebx
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0xffffffff
mov ecx, esi
mov edx, dword [esi]
push 1
call dword [edx + 4]
mov dword [ebp - 0x14], 0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14