Function at 0x50b1a0
Capabilities:
Get file size
Read file on windows

Disassembly:
sub esp, 0x30
push ebx
push ebp
push esi
mov esi, dword [esp + 0x44]
test esi, esi
push edi
jne 0x50b1b9
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x30
ret
push esi
call fcn.0050f600
add esp, 4
test eax, eax
jne 0x50b1ce
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret
mov ebx, dword [esp + 0x5c]
test ebx, ebx
je 0x50b1e8
mov eax, dword [esp + 0x54]
test eax, eax
jg 0x50b1e8
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x30
ret
mov eax, dword [esi]
mov dword [esp + 0x10], 0
cmp eax, 1
jne 0x50b412
mov ebp, dword [esi + 4]
mov edi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
push eax
push 0
push 0
push ebp
call edi
mov esi, eax
cmp esi, 0xffffffff
mov dword [esp + 0x1c], esi
jne 0x50b22a
push 2
push 0
push 0
push ebp
call edi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x30
ret
xor edi, edi
cmp ebx, edi
jne 0x50b242
push edi
push ebp
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebx, eax
sub ebx, esi
mov dword [esp + 0x14], ebx
jmp 0x50b24c
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
mov ebx, eax
mov cl, byte [esp + 0x48]
xor eax, eax
test ebx, ebx
mov byte [esp + 0x30], cl
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x24], eax
jle 0x50b3b4
mov esi, ebx
mov dword [esp + 0x48], esi
jmp 0x50b27e
mov esi, dword [esp + 0x48]
push 0x1000
call sub.MSVCRT.dll_malloc
add esp, 4
cmp esi, 0x1000
mov dword [esp + 0x28], eax
mov ecx, esi
jl 0x50b29e
mov ecx, 0x1000
lea edx, [esp + 0x18]
push 0
push edx
push ecx
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x50b3ef
mov edx, dword [esp + 0x18]
xor esi, esi
xor eax, eax
test edx, edx
jbe 0x50b2f1
mov ebx, dword [esp + 0x28]
mov cl, byte [eax + ebx]
test cl, cl
je 0x50b2d9
cmp cl, 0x1a
je 0x50b2d9
inc eax
cmp eax, edx
jb 0x50b2c6
jmp 0x50b2ed
mov edx, eax
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], eax
mov esi, 1
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x38]
lea eax, [esp + 0x28]
push eax
push 1
push ecx
lea ecx, [esp + 0x3c]
mov dword [esp + 0x38], edx
add edi, edx
call fcn.0050b700
test esi, esi
jne 0x50b339
mov eax, dword [esp + 0x18]
mov ecx, 0x1000
cmp eax, ecx
jne 0x50b339
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x48]
add eax, ecx
sub edx, ecx
cmp eax, ebx
mov dword [esp + 0x24], eax
mov dword [esp + 0x48], edx
jl 0x50b27a
mov dword [esp + 0x48], edi
test edi, edi
jle 0x50b3b0
lea eax, [edi + 1]
push eax
call fcn.00508850
mov ecx, dword [esp + 0x20]
add esp, 4
mov ebx, eax
push 0
lea edx, [edi + ecx]
push 0
push edx
push ebp
mov dword [esp + 0x20], ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ebp, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
cmp ebp, eax
je 0x50b3ac
mov ecx, dword [ebp + 4]
mov esi, dword [ebp]
mov eax, ecx
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp]
mov edi, dword [ebp + 4]
push ecx
add ebx, edi
call sub.MSVCRT.dll_free
mov eax, dword [esp + 0x3c]
add ebp, 8
add esp, 4
cmp ebp, eax
jne 0x50b372
mov ebx, dword [esp + 0x10]
mov edi, dword [esp + 0x48]
mov byte [edi + ebx], 0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
cmp eax, eax
mov edx, eax
je 0x50b3d2
mov esi, dword [eax]
add eax, 8
mov dword [ecx], esi
mov esi, dword [eax - 4]
mov dword [ecx + 4], esi
add ecx, 8
cmp eax, edx
jne 0x50b3be
mov edx, dword [esp + 0x34]
mov dword [esp + 0x38], ecx
push edx
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
mov eax, dword [esp + 0x14]
add esp, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret
push 2
push 0
push 0
push ebp
mov dword [esp + 0x58], edi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, dword [esp + 0x28]
push edx
call sub.MSVCRT.dll_free
add esp, 4
jmp 0x50b33d
cmp eax, 2
jne 0x50b49d
mov edi, dword [esi + 4]
mov ecx, edi
mov eax, dword [edi]
call dword [eax + 0x14]
test ebx, ebx
mov ebp, eax
jne 0x50b430
or eax, 0xffffffff
jmp 0x50b434
mov eax, dword [esp + 0x54]
mov edx, dword [edi]
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x28]
push ecx
push eax
push 0
mov ecx, edi
call dword [edx + 0x30]
mov ecx, dword [esp + 0x24]
xor esi, esi
test eax, eax
jle 0x50b463
mov dl, byte [ecx]
test dl, dl
je 0x50b463
cmp dl, 0x1a
je 0x50b463
inc esi
inc ecx
cmp esi, eax
jl 0x50b452
lea edx, [esi + 1]
push edx
call fcn.00508850
add esp, 4
lea ecx, [esi + ebp]
mov ebx, eax
mov eax, dword [edi]
push 0
push ecx
mov ecx, edi
mov dword [esp + 0x18], ebx
call dword [eax + 0x18]
mov edx, dword [esp + 0x24]
push esi
push edx
push ebx
call sub.MSVCRT.dll_strncpy
mov byte [esi + ebx], 0
mov esi, dword [esp + 0x54]
mov ebx, dword [esp + 0x68]
add esp, 0xc
cmp dword [esi], 3
jne 0x50b6c7
mov edi, dword [esi + 4]
mov esi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 1
push 0
push 0
push edi
call esi
mov ebp, eax
cmp ebp, 0xffffffff
mov dword [esp + 0x24], ebp
jne 0x50b4d6
push 2
push 0
push 0
push edi
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x30
ret
test ebx, ebx
jne 0x50b4ec
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebx, eax
sub ebx, ebp
mov dword [esp + 0x20], ebx
jmp 0x50b4f6
mov eax, dword [esp + 0x54]
mov dword [esp + 0x20], eax
mov ebx, eax
mov cl, byte [esp + 0x48]
xor ebp, ebp
xor eax, eax
mov dword [esp + 0x14], ebp
test ebx, ebx
mov byte [esp + 0x30], cl
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x14], ebp
jle 0x50b698
mov dword [esp + 0x1c], ebx
jmp 0x50b52e
mov esi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ebx, dword [esp + 0x1c]
push 0x1000
call sub.MSVCRT.dll_malloc
add esp, 4
mov dword [esp + 0x28], eax
push 1
push 0
push 0
push edi
call esi
mov esi, eax
cmp ebx, 0x1000
mov eax, ebx
jl 0x50b559
mov eax, 0x1000
lea edx, [esp + 0x18]
push 0
push edx
push eax
mov eax, dword [esp + 0x34]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x50b6d3
mov eax, dword [esp + 0x48]
xor ebx, ebx
mov edx, dword [eax + 0x130]
lea ecx, [eax + 0xc]
push ecx
mov ecx, dword [esp + 0x2c]
add eax, 0x2c
push edx
push eax
mov eax, dword [esp + 0x24]
push eax
push ecx
push esi
call fcn.0050e160
mov edx, dword [esp + 0x30]
add esp, 0x18
xor eax, eax
test edx, edx
jbe 0x50b5d2
mov esi, dword [esp + 0x28]
mov cl, byte [eax + esi]
test cl, cl
je 0x50b5be
cmp cl, 0x1a
je 0x50b5be
inc eax
cmp eax, edx
jb 0x50b5ab
jmp 0x50b5d2
mov edx, eax
mov eax, dword [esp + 0x24]
inc eax
mov dword [esp + 0x18], edx
mov dword [esp + 0x24], eax
mov ebx, 1
mov eax, dword [esp + 0x38]
mov dword [esp + 0x2c], edx
add ebp, edx
lea edx, [esp + 0x28]
push edx
push 1
push eax
lea ecx, [esp + 0x3c]
call fcn.0050b700
test ebx, ebx
jne 0x50b61e
mov eax, dword [esp + 0x18]
mov ecx, 0x1000
cmp eax, ecx
jne 0x50b61e
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
add eax, ecx
sub edx, ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x14], eax
cmp eax, ecx
mov dword [esp + 0x1c], edx
jl 0x50b524
mov dword [esp + 0x14], ebp
test ebp, ebp
jle 0x50b694
lea edx, [ebp + 1]
push edx
call fcn.00508850
add esp, 4
mov ebx, eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x10], ebx
push 0
add ebp, eax
push 0
push ebp
push edi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ebp, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
cmp ebp, eax
je 0x50b68c
mov ecx, dword [ebp + 4]
mov esi, dword [ebp]
mov edx, ecx
mov edi, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp]
mov edi, dword [ebp + 4]
push eax
add ebx, edi
call sub.MSVCRT.dll_free
mov eax, dword [esp + 0x3c]
add ebp, 8
add esp, 4
cmp ebp, eax
jne 0x50b656
mov ebx, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov byte [ecx + ebx], 0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
cmp eax, eax
mov edx, eax
je 0x50b6b6
mov esi, dword [eax]
add eax, 8
mov dword [ecx], esi
mov esi, dword [eax - 4]
mov dword [ecx + 4], esi
add ecx, 8
cmp eax, edx
jne 0x50b6a2
mov edx, dword [esp + 0x34]
mov dword [esp + 0x38], ecx
push edx
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 4
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret
push 2
push 0
push 0
push edi
mov dword [esp + 0x24], ebp
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ecx, dword [esp + 0x28]
push ecx
call sub.MSVCRT.dll_free
add esp, 4
jmp 0x50b622