Function at 0x4c3fe0
Capabilities:
Get file size
Read file on windows
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x59ffa8
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x61e69c]
xor eax, esp
mov dword [esp + 0x2c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x61e69c]
xor eax, esp
push eax
lea eax, [esp + 0x44]
mov dword fs:[0], eax
xor esi, esi
mov dword [esp + 0x4c], esi
mov ebx, 0xf
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], esi
mov byte [esp + 0x28], 0
push esi
push esi
push 3
push esi
push 1
mov byte [esp + 0x60], 3
mov eax, dword [esp + 0x68]
push bind
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x4c406e
cmp dword [esp + 0x3c], 0x10
jb 0x4c4061
mov ecx, dword [esp + 0x28]
push ecx
call fcn.004f6734
add esp, 4
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x38], esi
jmp 0x4c42dc
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebp, eax
lea ebx, [ebp + 1]
push ebx
call fcn.004f499a
mov esi, eax
add esp, 4
test esi, esi
je 0x4c40d4
push ebx
push 0
push esi
call fcn.004fe380
add esp, 0xc
push 0
lea ecx, [esp + 0x1c]
push ecx
push ebp
push esi
push edi
mov dword [esp + 0x2c], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x4c40cb
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4c40b7
sub eax, edx
push eax
push esi
lea ecx, [esp + 0x2c]
call fcn.00409ea0
push esi
call fcn.004f744f
add esp, 4
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x28]
mov ebp, 0x10
mov eax, edi
cmp esi, ebp
jae 0x4c40f2
lea eax, [esp + 0x28]
mov ecx, 0x5daf60
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4c4119
test dl, dl
je 0x4c4113
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4c4119
add eax, 2
add ecx, 2
test dl, dl
jne 0x4c40f7
xor ebx, ebx
xor eax, eax
jmp 0x4c4120
sbb eax, eax
sbb eax, 0xffffffff
xor ebx, ebx
cmp eax, ebx
jne 0x4c4132
cmp esi, ebp
jb 0x4c42d0
push edi
jmp 0x4c42c8
mov eax, dword [esp + 0x5c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
call fcn.004073f0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x50], 4
mov eax, dword [esp + 0x5c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x24], esp
mov esi, esp
call fcn.004073f0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x54], 5
mov ecx, dword [esp + 0x30]
cmp dword [esp + 0x44], ebp
jae 0x4c417a
lea ecx, [esp + 0x30]
push ecx
mov edx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.004104a0
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x5c], 3
call fcn.004c3c00
add esp, 0x10
mov byte [esp + 0x4c], 6
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 0xc], ebx
je 0x4c4298
mov edx, dword [esp + 0x54]
push ebx
push ebx
push 2
push ebx
push ebx
push 0x40000000
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x4c4298
mov eax, dword [esp + 0x14]
mov dword [esp + 0x18], ebx
mov ebp, dword [eax - 0xc]
push ebp
call fcn.004f499a
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx - 0xc]
add esp, 4
push ecx
lea esi, [esp + 0x18]
mov ebx, eax
call fcn.004108c0
push eax
push ebx
call fcn.00500790
mov edx, dword [esp + 0x20]
mov eax, dword [edx - 0xc]
add esp, 0xc
call fcn.00444a00
push 0
lea eax, [esp + 0x1c]
push eax
push ebp
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x4c425a
cmp dword [esp + 0x18], ebp
je 0x4c425a
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
call fcn.004b8a70
lea ecx, [esp + 0x24]
call fcn.00409b60
lea ecx, [esp + 0x54]
call fcn.00406760
lea ecx, [esp + 0x58]
call fcn.00406760
lea ecx, [esp + 0x5c]
call fcn.00406760
jmp 0x4c4353
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [esp + 0x14]
call fcn.004b8a70
lea ecx, [esp + 0x24]
call fcn.00409b60
lea ecx, [esp + 0x54]
call fcn.00406760
lea ecx, [esp + 0x58]
call fcn.00406760
lea ecx, [esp + 0x5c]
call fcn.00406760
mov eax, 1
jmp 0x4c4355
mov byte [esp + 0x4c], 3
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4c42bd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x3c], ebp
jb 0x4c42d0
mov ecx, dword [esp + 0x28]
push ecx
call fcn.004f6734
add esp, 4
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], 0xf
mov byte [esp + 0x4c], 1
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
mov byte [esp + 0x28], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4c4306
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x4c], 0
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4c432b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x4c], 0xffffffff
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4c4353
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
mov ecx, dword [esp + 0x44]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2c]
xor ecx, esp
call fcn.004f673f
add esp, 0x3c
ret