Function at 0x48841c
Capabilities:
Get file size
Read file on windows

Disassembly:
push 0x3c
mov eax, 0x50bad3
call fcn.004d0cf3
mov eax, ecx
mov dword [ebp - 0x24], eax
xor ebx, ebx
push ebx
push 0x80
push 3
push ebx
push 1
push 0x80000000
push dword [eax + 0x20]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
mov dword [ebp - 0x38], edi
cmp edi, 0xffffffff
je 0x4885f1
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push eax
push ecx
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x2c], eax
call fcn.00488ee7
mov esi, dword [ebp - 0x14]
cmp dword [esi - 4], 1
jle 0x488482
push dword [esi - 0xc]
lea ecx, [ebp - 0x14]
call fcn.00451e0e
mov esi, dword [ebp - 0x14]
push ebx
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x2c]
push esi
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x4885e1
cmp dword [ebp - 0x30], ebx
je 0x4885e1
push esi
lea ecx, [ebp - 0x2c]
call fcn.00480431
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x48], 0x533ecc
push eax
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
call fcn.0048da67
test al, al
jne 0x4885c7
mov ecx, dword [ebp - 0x40]
mov edi, ebx
test ecx, ecx
jle 0x4884e7
push ebx
lea ecx, [ebp - 0x44]
call fcn.0048ddfa
mov ecx, dword [ebp - 0x40]
mov edi, eax
mov dword [ebp - 0x1c], ebx
mov eax, ebx
test ecx, ecx
jle 0x488502
lea eax, [ecx - 1]
push eax
lea ecx, [ebp - 0x44]
call fcn.0048ddfa
add eax, 0x10
mov dword [ebp - 0x1c], eax
cmp edi, eax
je 0x488582
mov ecx, dword [ebp - 0x24]
push edi
call fcn.004886c7
mov dword [ebp - 0x34], eax
test eax, eax
je 0x48857a
push 0x53206c
lea ecx, [ebp - 0x10]
call fcn.004093f6
lea eax, [ebp - 0x10]
mov ecx, edi
push eax
call fcn.0048d97f
mov dword [ebp - 0x20], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.00406dd3
cmp dword [ebp - 0x20], 0
je 0x48857a
push 0x5288d8
lea ecx, [ebp - 0x18]
call fcn.004093f6
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
call fcn.0048d97f
mov dword [ebp - 0x28], eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00406dd3
cmp dword [ebp - 0x28], 0
jne 0x488600
add edi, 0x10
cmp edi, dword [ebp - 0x1c]
jne 0x488506
cmp byte [0x5706cc], 0
je 0x4885c7
call fcn.00406cde
push eax
lea ecx, [ebp - 0x10]
call fcn.00406b09
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
push str.No_newer_version_found.
call fcn.004072a1
lea eax, [ebp - 0x10]
mov ecx, 0x57069c
push eax
call fcn.0048a377
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.00406dd3
lea ecx, [ebp - 0x44]
call fcn.0048028a
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx - 0x10]
call fcn.00406dd3
mov edi, dword [ebp - 0x38]
or dword [ebp - 4], 0xffffffff
lea ecx, [esi - 0x10]
call fcn.00406dd3
test edi, edi
je 0x4885f8
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, bl
call fcn.004d0cbc
ret
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add eax, 4
push eax
lea ecx, [ebx + 0x28]
call fcn.0044369a
mov eax, dword [ebp - 0x28]
push ecx
mov ecx, dword [eax + 4]
call fcn.00476730
lea ecx, [ebp - 0x28]
mov dword [ebx + 0x2c], eax
mov dword [esp], str.ServerFileName
call fcn.004093f6
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
call fcn.0048d97f
mov edi, eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.00406dd3
test edi, edi
je 0x48865c
lea eax, [edi + 4]
push eax
lea ecx, [ebx + 0x30]
call fcn.0044369a
mov eax, dword [ebp - 0x34]
lea ecx, [ebx + 0x24]
add eax, 4
push eax
call fcn.0044369a
cmp byte [0x5706cc], 0
je 0x4886c0
mov edi, dword [ebx + 0x24]
call fcn.00406cde
push eax
lea ecx, [ebp - 0x10]
call fcn.00406b09
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
push str.Found_a_newer_version_on_server._Version_found:
call fcn.004072a1
test edi, edi
je 0x4886a3
push edi
lea ecx, [ebp - 0x10]
call fcn.004072a1
lea eax, [ebp - 0x10]
mov ecx, 0x57069c
push eax
call fcn.0048a377
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.00406dd3
mov bl, 1
jmp 0x4885c7