Function at 0x438910
Capabilities:
Delete file
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55d7e9
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push ebx
push esi
push edi
mov eax, dword [0x5b3680]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
push 0x68
call fcn.00529b2d
mov esi, eax
add esp, 4
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], 0
test esi, esi
je 0x438992
mov dword [esi], vtable.SecC::CSerialObject.0
mov byte [ebp - 4], 1
xor eax, eax
mov dword [esi], vtable.CFilePart.0
mov dword [esi + 4], 0
mov dword [esi + 8], eax
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], eax
mov byte [ebp - 4], 2
lea ecx, [esi + 0x34]
call fcn.0041d7b0
mov byte [ebp - 4], 0
jmp 0x438994
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], 4
movdqu xmm0, xmmword [ebp + 0xc]
movdqu xmmword [esi + 4], xmm0
mov dword [esi + 0x14], 1
mov dword [esi + 0x18], 0
mov dword [ebp - 0x20], 0
mov byte [ebp - 4], 5
mov dword [ebp - 0x1c], 0
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x1c]
mov ebx, dword [ebp + 8]
test ecx, ecx
je 0x4389ef
sub esp, 0x10
push 1
push closesocket
push ebx
call fcn.00416040
jmp 0x438a08
push 0
push 0x80
push 3
push 0
push 1
push closesocket
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
jne 0x438a16
call fcn.004160c0
mov edi, eax
jmp 0x438a1b
mov dword [ebp - 0x20], eax
xor edi, edi
xor eax, eax
test edi, edi
setns al
test eax, eax
je 0x438b10
push 0x80000
call fcn.0052d28b
add esp, 4
mov dword [esi + 0x28], eax
test eax, eax
je 0x438a45
mov dword [esi + 0x30], 0x80000
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x2c], eax
cmp eax, 0xffffffff
jne 0x438a68
call fcn.004160c0
mov edi, eax
test edi, edi
js 0x438a73
mov eax, dword [ebp - 0x2c]
mov dword [esi + 0x20], eax
xor edi, edi
mov eax, dword [ebp - 0x28]
mov dword [esi + 0x24], eax
xor eax, eax
test edi, edi
setns al
test eax, eax
je 0x438b10
mov ecx, 0x80000
lea eax, [ebp + 8]
cmp dword [esi + 0x30], ecx
push 0
cmovb ecx, dword [esi + 0x30]
push eax
push ecx
mov dword [esi + 0x2c], ecx
push dword [esi + 0x28]
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x438ab1
call fcn.004160c0
mov edi, eax
jmp 0x438ab3
xor edi, edi
xor eax, eax
test edi, edi
setns al
test eax, eax
je 0x438b10
mov ecx, dword [ebp + 8]
cmp ecx, dword [esi + 0x30]
cmova ecx, dword [esi + 0x30]
mov dword [esi + 0x2c], ecx
cmp dword [ebp + 8], 0
jne 0x438ad8
mov dword [esi + 0x18], 1
mov ecx, dword [ebp - 0x14]
push esi
call fcn.00438b60
test eax, eax
js 0x438af2
mov dword [esi + 0x14], 0
cmp dword [ebp + 8], 0
jne 0x438a82
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x438b07
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x20], 0
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor edi, edi
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x438b29
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x20], 0
mov dword [ebp - 4], 0xffffffff
mov ecx, esi
mov edx, dword [esi]
push 1
call dword [edx + 4]
mov dword [ebp - 0x18], 0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14