Function at 0x404ad0
Capabilities:
Create directory
Read file on windows

Disassembly:
sub esp, 0xbdc
mov eax, dword [0x40d018]
xor eax, esp
mov dword [esp + 0xbd8], eax
push ebx
push ebp
push esi
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
push edi
xor ebx, ebx
push ebx
lea eax, [esp + 0x14]
push eax
mov edi, ecx
mov ebp, 4
push ebp
lea ecx, [esp + 0x2c]
push ecx
push edi
mov dword [esp + 0x38], edi
call esi
test eax, eax
je 0x404d33
cmp dword [esp + 0x10], ebp
jne 0x404d33
cmp dword [esp + 0x20], ebx
mov dword [esp + 0x1c], ebx
jg 0x404b5d
mov eax, 1
mov ecx, dword [esp + 0xbe8]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00405fb6
add esp, 0xbdc
ret
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
xor ebx, ebx
mov ebp, 4
push ebx
lea edx, [esp + 0x14]
push edx
push ebp
lea eax, [esp + 0x24]
push eax
push edi
call esi
test eax, eax
je 0x404d33
cmp dword [esp + 0x10], ebp
jne 0x404d33
mov edx, dword [esp + 0x18]
push ebx
lea ecx, [esp + 0x14]
push ecx
push edx
lea eax, [esp + 0x3c]
push eax
push edi
call esi
test eax, eax
je 0x404d33
mov ecx, dword [esp + 0x10]
cmp ecx, dword [esp + 0x18]
jne 0x404d33
push ebx
lea edx, [esp + 0x14]
push edx
push ebp
lea eax, [esp + 0x34]
push eax
push edi
call esi
test eax, eax
je 0x404d33
cmp dword [esp + 0x10], ebp
jne 0x404d33
push ebx
lea ecx, [esp + 0x14]
push ecx
push ebp
lea edx, [esp + 0x20]
push edx
push edi
call esi
test eax, eax
je 0x404d33
cmp dword [esp + 0x10], ebp
jne 0x404d33
mov eax, dword [esp + 0x14]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ebp, eax
mov dword [esp + 0x2c], ebp
cmp ebp, ebx
je 0x404d33
mov edx, dword [esp + 0x14]
push ebx
lea ecx, [esp + 0x14]
push ecx
push edx
push ebp
push edi
call esi
test eax, eax
je 0x404d2c
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x10], eax
jne 0x404d2c
lea eax, [esp + 0x30]
xor esi, esi
mov byte [esp + 0x418], bl
xor ebp, ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x404c40
sub eax, edx
cmp eax, ebx
jle 0x404cf1
mov al, byte [esp + ebp + 0x30]
cmp al, 0x5c
jne 0x404cca
lea eax, [esp + 0x800]
mov byte [esp + esi + 0x800], bl
mov ecx, eax
lea esp, [esp]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x404c70
lea edi, [esp + 0x418]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x404c83
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push ebx
lea ecx, [esp + 0x41c]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea edi, [esp + 0x418]
dec edi
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x404cb0
mov dx, word [0x408e30]
mov word [edi], dx
mov edi, dword [esp + 0x24]
xor esi, esi
jmp 0x404cd2
mov byte [esp + esi + 0x800], al
inc esi
lea eax, [esp + 0x30]
inc ebp
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x404ce0
sub eax, edx
cmp ebp, eax
jl 0x404c51
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
push eax
push esi
push ecx
lea ebx, [esp + 0x3c]
call fcn.00404d40
push esi
test eax, eax
je 0x404d2d
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [esp + 0x1c]
inc eax
cmp eax, dword [esp + 0x20]
mov dword [esp + 0x1c], eax
jl 0x404b50
jmp 0x404b26
push ebp
call dword [sym.imp.KERNEL32.dll_GlobalFree]
xor eax, eax
jmp 0x404b2b