Function at 0x40beb0
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x58
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
xor esi, esi
mov edi, dword [0x42b5f0]
xor edi, ebp
mov dword [ebp - 0xc], edi
mov edi, dword [ebp + 8]
mov dword [esp], edi
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x34], esi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], 0xaa5df081
mov eax, dword [ebp - 0x24]
mov ecx, eax
sub ecx, 0xaa5df081
mov dword [ebp - 0x38], eax
je 0x40bff2
jmp 0x40bf42
mov eax, dword [ebp - 0x38]
sub eax, 0xb028a04f
je 0x40c021
jmp 0x40bf55
mov eax, dword [ebp - 0x38]
sub eax, 0xb031b6a5
je 0x40c078
jmp 0x40bf68
mov eax, dword [ebp - 0x38]
sub eax, 0xd7b4d481
je 0x40c011
jmp 0x40bf7b
mov eax, dword [ebp - 0x38]
sub eax, 0xe862ff12
je 0x40c12c
jmp 0x40bf8e
mov eax, dword [ebp - 0x38]
sub eax, 0xf0bfbcec
je 0x40c0f6
jmp 0x40bfa1
mov eax, dword [ebp - 0x38]
sub eax, 0xb0279d0
je 0x40c0d3
jmp 0x40bfb4
mov eax, dword [ebp - 0x38]
sub eax, 0xc1e0e6e
je 0x40c059
jmp 0x40bfc7
mov eax, dword [ebp - 0x38]
sub eax, 0x563bbe23
je 0x40c14b
jmp 0x40bfda
mov eax, dword [ebp - 0x38]
sub eax, 0x67446dc9
je 0x40c10d
jmp 0x40bfed
jmp 0x40c16a
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffffff
cmp eax, ecx
mov eax, 0xd7b4d481
mov ecx, 0xb028a04f
cmove ecx, eax
mov dword [ebp - 0x24], ecx
jmp 0x40c16a
mov byte [ebp - 0x15], 0
mov dword [ebp - 0x24], 0x563bbe23
jmp 0x40c16a
xor eax, eax
mov ecx, dword [ebp - 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [ebp - 0x3c], eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
sub esp, 8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
mov eax, 0xc1e0e6e
mov ecx, 0xb031b6a5
cmove ecx, eax
mov dword [ebp - 0x24], ecx
jmp 0x40c16a
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov byte [ebp - 0x15], 0
mov dword [ebp - 0x24], 0x563bbe23
jmp 0x40c16a
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
call fcn.00414233
xor ecx, ecx
mov edx, dword [ebp + 0xc]
mov dword [edx], eax
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
mov esi, dword [ebp + 0xc]
mov esi, dword [esi]
mov edi, dword [ebp - 0x1c]
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
mov dword [ebp - 0x40], ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
cmp eax, 0
mov eax, 0xe862ff12
mov ecx, 0xb0279d0
cmovne ecx, eax
mov dword [ebp - 0x24], ecx
jmp 0x40c16a
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
mov eax, 0x67446dc9
mov ecx, 0xf0bfbcec
cmove ecx, eax
mov dword [ebp - 0x24], ecx
jmp 0x40c16a
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.0041423c
mov dword [ebp - 0x24], 0x67446dc9
jmp 0x40c16a
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov byte [ebp - 0x15], 0
mov dword [ebp - 0x24], 0x563bbe23
jmp 0x40c16a
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov byte [ebp - 0x15], 1
mov dword [ebp - 0x24], 0x563bbe23
jmp 0x40c16a
mov al, byte [ebp - 0x15]
and al, 1
movzx eax, al
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
mov dword [ebp - 0x44], eax
call fcn.00414241
mov eax, dword [ebp - 0x44]
add esp, 0x58
pop esi
pop edi
pop ebp
ret
jmp 0x40bf29