Function at 0x41e0b4
Capabilities:
Get file size
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x47c
push 0
push 0x80
push 3
push 0
push 3
push 0x80000000
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0xffffffff
je 0x41e0f1
cmp dword [ebp - 0x448], 0
jne 0x41e0fb
mov eax, 1
jmp 0x41e4c8
push 0
push 0x80
push 2
push 0
push 3
push 0x40000000
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 0xffffffff
je 0x41e12f
cmp dword [ebp - 0x47c], 0
jne 0x41e146
mov edx, dword [ebp - 0x448]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 2
jmp 0x41e4c8
push 0x1e
push 0
lea eax, [ebp - 0x420]
push eax
call fcn.0041ecc0
add esp, 0xc
push 0x2e
push 0
lea ecx, [ebp - 0x478]
push ecx
call fcn.0041ecc0
add esp, 0xc
push 0x16
push 0
lea edx, [ebp - 0x444]
push edx
call fcn.0041ecc0
add esp, 0xc
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 0x4034b50
mov word [ebp - 0x41c], 0xa
mov ax, word [ebp - 0x41c]
mov word [ebp - 0x472], ax
mov word [ebp - 0x41a], 0
mov cx, word [ebp - 0x41a]
mov word [ebp - 0x470], cx
mov word [ebp - 0x418], 0
mov dx, word [ebp - 0x418]
mov word [ebp - 0x46e], dx
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x416]
push ecx
call fcn.0041e4cc
add esp, 8
mov dx, word [ebp - 0x416]
mov word [ebp - 0x46c], dx
mov ax, word [ebp - 0x414]
mov word [ebp - 0x46a], ax
mov ecx, dword [ebp - 0x448]
push ecx
call fcn.0041e5a9
add esp, 4
mov dword [ebp - 0x412], eax
mov edx, dword [ebp - 0x412]
mov dword [ebp - 0x468], edx
push 0
mov eax, dword [ebp - 0x448]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x40e], eax
mov ecx, dword [ebp - 0x40e]
mov dword [ebp - 0x464], ecx
push 0
mov edx, dword [ebp - 0x448]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x40a], eax
mov eax, dword [ebp - 0x40a]
mov dword [ebp - 0x460], eax
mov ecx, dword [ebp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov word [ebp - 0x406], ax
mov dx, word [ebp - 0x406]
mov word [ebp - 0x45c], dx
mov word [ebp - 0x404], 0
mov ax, word [ebp - 0x404]
mov word [ebp - 0x45a], ax
mov ecx, dword [ebp - 0x424]
mov dword [ebp - 0x44e], ecx
push 0
lea edx, [ebp - 0x428]
push edx
push 0x1e
lea eax, [ebp - 0x420]
push eax
mov ecx, dword [ebp - 0x47c]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [ebp - 0x424]
add edx, 0x1e
mov dword [ebp - 0x424], edx
push 0
lea eax, [ebp - 0x428]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp - 0x47c]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edx, dword [ebp - 0x424]
add edx, eax
mov dword [ebp - 0x424], edx
push 0
push 0
push 0
mov eax, dword [ebp - 0x448]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x428], 0
push 0
lea ecx, [ebp - 0x428]
push ecx
push 0x400
lea edx, [ebp - 0x400]
push edx
mov eax, dword [ebp - 0x448]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x41e35f
jmp 0x41e3a2
cmp dword [ebp - 0x428], 0
jne 0x41e36a
jmp 0x41e3a2
push 0
lea ecx, [ebp - 0x42c]
push ecx
mov edx, dword [ebp - 0x428]
push edx
lea eax, [ebp - 0x400]
push eax
mov ecx, dword [ebp - 0x47c]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [ebp - 0x424]
add edx, dword [ebp - 0x428]
mov dword [ebp - 0x424], edx
jmp 0x41e32d
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x478], 0x2014b50
mov word [ebp - 0x474], 0x14
mov word [ebp - 0x454], 0
mov dword [ebp - 0x452], 0x20
push 0
lea ecx, [ebp - 0x428]
push ecx
push 0x2e
lea edx, [ebp - 0x478]
push edx
mov eax, dword [ebp - 0x47c]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x424]
add ecx, 0x2e
mov dword [ebp - 0x424], ecx
push 0
lea edx, [ebp - 0x428]
push edx
mov eax, dword [ebp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x47c]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [ebp - 0x424]
add ecx, eax
mov dword [ebp - 0x424], ecx
mov dword [ebp - 0x444], 0x6054b50
mov word [ebp - 0x440], 0
mov word [ebp - 0x43e], 0
mov word [ebp - 0x43c], 1
mov dx, word [ebp - 0x43c]
mov word [ebp - 0x43a], dx
mov eax, dword [ebp - 0x424]
sub eax, dword [ebp - 0x434]
mov dword [ebp - 0x438], eax
mov word [ebp - 0x430], 0
push 0
lea ecx, [ebp - 0x428]
push ecx
push 0x16
lea edx, [ebp - 0x444]
push edx
mov eax, dword [ebp - 0x47c]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x47c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x448]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov esp, ebp
pop ebp
ret