Function at 0x41072d
Capabilities:
Get file size
Read file on windows

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
xor ebp, ebp
push edi
mov dword [esp + 0x14], ebp
call fcn.00410b13
mov ebx, dword [esp + 0x20]
cmp ebx, ebp
jne 0x41074c
mov ebx, 0x43500f
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileA]
push ebp
mov edi, pe_nt_image_headers32
push edi
push 3
push ebp
push 1
push 0xc0000000
push ebx
mov dword [0x43fcd8], ebp
call esi
mov dword [0x43fccc], eax
cmp eax, 0xffffffff
jne 0x4107b7
push ebp
push edi
push 3
push ebp
push 1
mov ebp, 0x80000000
push ebp
push ebx
call esi
mov dword [0x43fccc], eax
cmp eax, 0xffffffff
jne 0x4107a2
push 0
push edi
push 3
push 0
push 3
push ebp
push ebx
call esi
mov dword [0x43fccc], eax
mov dword [0x43fcd8], 1
cmp eax, 0xffffffff
je 0x4109ad
xor ebp, ebp
push ebp
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
push 3
mov edi, eax
mov eax, dword [esp + 0x28]
pop ebx
mov dword [0x43fce4], ebp
mov dword [0x43fcf8], eax
cmp edi, ebx
jl 0x41082b
push ebp
lea eax, [esp + 0x1c]
push eax
push ebx
lea eax, [esp + 0x1c]
push eax
push dword [0x43fccc]
call esi
cmp dword [esp + 0x18], ebx
jne 0x41081c
push ebx
lea eax, [esp + 0x14]
push 0x4350d8
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x41081c
mov dword [0x43fce4], 0xfde9
sub edi, ebx
jmp 0x41082b
push ebp
push ebp
push ebp
push dword [0x43fccc]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp edi, ebp
jle 0x410861
lea eax, [edi + 2]
push eax
push ebp
push dword [0x43f0b0]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [0x43fcdc], eax
cmp eax, ebp
je 0x4109ec
push ebp
lea ecx, [esp + 0x1c]
push ecx
push edi
push eax
push dword [0x43fccc]
call esi
mov edi, dword [esp + 0x18]
mov eax, dword [0x43fcdc]
cmp eax, ebp
je 0x4109ec
xor ecx, ecx
mov word [eax + edi], cx
mov esi, dword [0x43fcdc]
lea eax, [esi + edi]
mov dword [0x43fce0], eax
mov edi, 0x43fce8
mov bl, 0xa
cmp esi, eax
jae 0x4109ec
mov al, byte [esi]
cmp al, 0x20
je 0x41089b
cmp al, 9
jne 0x41089e
inc esi
jmp 0x410891
mov al, byte [esi]
cmp al, 0x3b
jne 0x4108de
inc esi
cmp byte [esi], 0x20
jne 0x4108ab
inc esi
push esi
push 2
push dword [esp + 0x1c]
push edi
call fcn.004106fd
add esp, 0x10
mov dword [esp + 0x14], eax
jmp 0x4108d4
mov al, byte [esi]
cmp al, bl
je 0x410991
cmp al, 0xd
je 0x410991
inc esi
cmp byte [esi], 0
jne 0x4108c1
jmp 0x410991
cmp al, 0x5b
jne 0x410928
inc esi
push esi
push 1
push dword [esp + 0x1c]
push edi
call fcn.004106fd
add esp, 0x10
mov dword [esp + 0x14], eax
jmp 0x410908
mov al, byte [esi]
cmp al, 0x5d
je 0x410912
cmp al, bl
je 0x41090d
cmp al, 0xd
je 0x41090d
inc esi
cmp byte [esi], 0
jne 0x4108f9
cmp byte [esi], 0x5d
jne 0x410991
mov byte [esi], 0
jmp 0x41091f
cmp al, bl
je 0x410994
cmp al, 0xd
je 0x410995
inc esi
mov al, byte [esi]
test al, al
jne 0x410917
jmp 0x410995
cmp al, bl
je 0x410995
cmp al, 0xd
je 0x410995
mov edx, esi
jmp 0x410943
cmp al, 0x3d
je 0x410947
cmp al, 0xd
je 0x410947
cmp al, bl
je 0x410947
inc esi
mov al, byte [esi]
test al, al
jne 0x410934
lea eax, [esi - 1]
jmp 0x410959
mov cl, byte [eax]
cmp cl, 0x20
je 0x410958
cmp cl, 9
jne 0x41095d
dec eax
cmp eax, edx
ja 0x41094c
mov byte [eax + 1], 0
inc esi
mov al, byte [esi]
cmp al, 0x20
je 0x410961
cmp al, 9
je 0x410961
push esi
push edx
push dword [esp + 0x1c]
push edi
call fcn.004106fd
add esp, 0x10
mov dword [esp + 0x14], eax
jmp 0x41098c
mov al, byte [esi]
cmp al, bl
je 0x410991
cmp al, 0xd
je 0x410991
inc esi
cmp byte [esi], 0
jne 0x410981
mov byte [esi], 0
inc esi
mov al, byte [esi]
cmp al, bl
je 0x410994
cmp al, 0xd
je 0x410994
cmp esi, dword [0x43fce0]
jb 0x410891
jmp 0x4109ec
mov eax, dword [esp + 0x24]
xor esi, esi
push ebx
mov dword [0x43fccc], esi
mov dword [0x43fcf8], eax
mov dword [0x43fce4], esi
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
push esi
push dword [0x43f0b0]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [0x43fcd0], eax
cmp eax, esi
je 0x4109ec
push ebx
push eax
call sub.MSVCRT.dll_strcpy
pop ecx
pop ecx
mov eax, dword [0x43fccc]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 8