Function at 0x415380
Capabilities:
Get file size
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44ef10
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x34
push ebx
push esi
push edi
mov eax, dword [0x46ab5c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x24], 0x100000
cmp dword [ebp + 8], 0
je 0x4153f0
cmp dword [ebp + 0xc], 0
jne 0x4153f7
xor eax, eax
jmp 0x41568f
push 0
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.MSVCR80.dll__waccess]
add esp, 8
test eax, eax
je 0x41540f
jmp 0x41561e
push 0
push 0x80
push 3
push 0
push 1
push closesocket
mov ecx, dword [ebp + 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x415439
jmp 0x41561e
push 0
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
jne 0x415453
jmp 0x41561e
cmp dword [0x46af6c], 0
je 0x415468
mov eax, dword [0x46af6c]
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.MSVCR80.dll_malloc]
add esp, 4
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x415483
jmp 0x41561e
mov dword [ebp - 0x40], 0
push 0
lea edx, [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [0x46af6c], 0
je 0x4154b7
mov eax, dword [0x46af6c]
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp + 0x10], 0x100000
jae 0x4154c9
mov dword [ebp - 0x44], 0x100000
jmp 0x4154cf
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0
mov ecx, 1
test ecx, ecx
je 0x415591
cmp dword [ebp - 0x18], 0
je 0x415509
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.MSVCR80.dll_free]
add esp, 4
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
push ecx
call dword [sym.imp.MSVCR80.dll_malloc]
add esp, 4
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x34]
push ecx
mov edx, dword [ebp - 0x18]
push edx
call sub.zlib.dll_uncompress
add esp, 0x10
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x415542
jmp 0x415591
cmp dword [ebp - 0x3c], 0
je 0x41555d
cmp dword [ebp - 0x2c], 0x3200000
jbe 0x41555d
mov dword [ebp - 4], 0xffffffff
jmp 0x41561e
cmp dword [ebp - 0x3c], 0xfffffffb
je 0x41556f
mov dword [ebp - 4], 0xffffffff
jmp 0x41561e
cmp dword [0x46af6c], 0
je 0x415584
mov eax, dword [0x46af6c]
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x2c]
shl ecx, 1
mov dword [ebp - 0x2c], ecx
jmp 0x4154e9
jmp 0x4155a6
mov dword [ebp - 4], 0xffffffff
jmp 0x4155b1
mov dword [ebp - 0x38], 0
push 0
push 0x80
push 2
push 0
push 1
push 0x40000000
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffff
jne 0x4155df
jmp 0x41561e
push 0
lea eax, [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x34]
push ecx
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x38]
cmp ecx, dword [ebp - 0x34]
je 0x415601
jmp 0x41561e
cmp dword [0x46af6c], 0
je 0x415617
mov edx, dword [0x46af6c]
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x14], 0
je 0x415638
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.MSVCR80.dll_free]
add esp, 4
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x18], 0
je 0x415652
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.MSVCR80.dll_free]
add esp, 4
mov dword [ebp - 0x18], 0
cmp dword [ebp - 0x30], 0
je 0x41566f
cmp dword [ebp - 0x30], 0xffffffff
je 0x41566f
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x30], 0
cmp dword [ebp - 0x28], 0
je 0x41568c
cmp dword [ebp - 0x28], 0xffffffff
je 0x41568c
mov eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret