Function at 0x41181f
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push edi
push 0x64
call fcn.0041a631
pop ecx
mov ecx, dword [ebp + 8]
mov dword [esi], eax
mov eax, dword [ecx + 4]
xor edi, edi
xor ebx, ebx
mov dword [ebp - 4], 0x64
mov dword [ebp - 0x14], eax
cmp eax, dword [ecx + 8]
jae 0x411a1e
lea ecx, [eax + 0x200]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx + 0x800]
dec ecx
je 0x411983
dec ecx
jne 0x411a05
push edi
push 0x8000080
push 3
push edi
push 1
push 0x80000000
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
push edi
push eax
mov dword [ebp - 0x20], eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0x96000
mov dword [ebp - 0x18], eax
call fcn.0041a631
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x10]
pop ecx
call fcn.00411aa5
push eax
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push str.__MULTI_PARTS_FORM_DATA_BOUNDARY
push str.___s_r_nContent_Disposition:_form_data__name__s___filename__s__r_nContent_Type:__s_r_n_r_n
push 0x96000
push dword [ebp - 0xc]
call fcn.00411fec
add esp, 0x1c
push edi
push edi
push edi
push edi
push 0xffffffffffffffff
push dword [ebp - 0xc]
push edi
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add dword [ebp - 4], eax
push dword [ebp - 4]
mov dword [ebp - 8], eax
push dword [esi]
call fcn.0041bf9a
pop ecx
pop ecx
mov dword [esi], eax
cmp eax, edi
je 0x411aa1
push edi
push edi
push dword [ebp - 8]
add eax, ebx
push eax
push 0xffffffffffffffff
push dword [ebp - 0xc]
push edi
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 8]
push dword [ebp - 0xc]
lea ebx, [ebx + eax - 1]
call fcn.0041a6c5
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x18]
lea eax, [eax + ecx + 2]
push eax
push dword [esi]
mov dword [ebp - 4], eax
call fcn.0041bf9a
add esp, 0xc
mov dword [esi], eax
cmp eax, edi
je 0x411aa1
push edi
lea ecx, [ebp - 0x1c]
push ecx
push dword [ebp - 0x18]
add eax, ebx
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push dword [ebp - 0x20]
add ebx, dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi]
push 2
add eax, ebx
push 0x43aefc
push eax
call fcn.00419780
add esp, 0xc
add ebx, 2
jmp 0x411a02
push 0x4000
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
push dword [ebp - 0x14]
push str.__MULTI_PARTS_FORM_DATA_BOUNDARY
push str.___s_r_nContent_Disposition:_form_data__name__s__r_n_r_n_s_r_n
push 0x2000
push eax
call fcn.0041a84d
add esp, 0x18
push edi
push edi
push edi
push edi
push 0xffffffffffffffff
push dword [ebp - 0xc]
push edi
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add dword [ebp - 4], eax
push dword [ebp - 4]
mov dword [ebp - 8], eax
push dword [esi]
call fcn.0041bf9a
pop ecx
pop ecx
mov dword [esi], eax
cmp eax, edi
je 0x411aa1
push edi
push edi
push dword [ebp - 8]
add eax, ebx
push eax
push 0xffffffffffffffff
push dword [ebp - 0xc]
push edi
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 8]
lea ebx, [ebx + eax - 1]
mov eax, dword [ebp - 0x14]
mov ecx, 0xa04
add dword [ebp - 0x10], ecx
add eax, ecx
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x14], eax
cmp eax, dword [ecx + 8]
jb 0x411857
mov eax, dword [esi]
push 2
add eax, ebx
push 0x43af00
push eax
call fcn.00419780
add esp, 0xc
push edi
push edi
push edi
push edi
push 0xffffffffffffffff
push str.__MULTI_PARTS_FORM_DATA_BOUNDARY
push edi
push 0xfde9
add ebx, 2
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 8], eax
add eax, dword [ebp - 4]
push eax
push dword [esi]
call fcn.0041bf9a
pop ecx
pop ecx
mov dword [esi], eax
cmp eax, edi
je 0x411aa1
push edi
push edi
push dword [ebp - 8]
add eax, ebx
push eax
push 0xffffffffffffffff
push str.__MULTI_PARTS_FORM_DATA_BOUNDARY
push edi
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov eax, dword [ebp - 8]
lea edi, [ebx + eax - 1]
mov eax, dword [esi]
push 5
add eax, edi
push str.___r_n
push eax
call fcn.00419780
add esp, 0xc
lea eax, [edi + 5]
pop edi
pop ebx
leave
ret 4
xor eax, eax
jmp 0x411a9b