Function at 0x41cf10
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a337c
mov eax, dword fs:[0]
push eax
sub esp, 0x40c
mov eax, dword [0x4c3014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
cmp dword [esi + 0x1211], 0
jne 0x41cf65
push 0xb10d0
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [esi + 0x1211], eax
test eax, eax
je 0x41d518
lea ecx, [ebp - 0x414]
call dword [sym.imp.mfc140u.dll_Ordinal_296]
mov ebx, dword [ebp + 8]
mov dword [ebp - 4], 0
cmp dword [0x4c6134], 0
mov edi, dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
je 0x41cfcf
mov ecx, dword [0x4c613c]
push 0x4b7c7c
push 0x12
push ebx
call edi
cmp dword [esi + 0x452], 0x115
jne 0x41cfe4
push 0xb10d0
push dword [0x4c5290]
push dword [esi + 0x1211]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [0x4c5294]
add esp, 0xc
mov dword [esi + 0x1215], eax
jmp 0x41d1c1
push 0xb10d0
push 0
push dword [esi + 0x1211]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x400
lea eax, [ebp - 0x410]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp dword [0x4c6128], 0
jne 0x41d06a
cmp dword [0x4c60d8], 0
jne 0x41d06a
push dword [esi + 0x452]
lea eax, [ebp - 0x410]
push 0x4c5c88
push 0x4b7d5c
push eax
call fcn.004203f0
movzx eax, byte [esi + 0x577]
add esp, 0x10
push dword [esi + 0x452]
push eax
movzx eax, byte [esi + 0x575]
push eax
lea eax, [ebp - 0x414]
push 0x4b7ccc
push eax
mov eax, dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
call eax
mov ecx, dword [0x4c613c]
add esp, 0x14
push dword [ebp - 0x414]
push 0x12
push ebx
call edi
jmp 0x41d0c2
push dword [esi + 0x452]
movzx eax, byte [esi + 0x577]
push eax
movzx eax, byte [esi + 0x575]
push eax
push 0x4c5c88
lea eax, [ebp - 0x410]
push 0x4b7c84
push eax
call fcn.004203f0
push dword [esi + 0x452]
movzx eax, byte [esi + 0x577]
push eax
movzx eax, byte [esi + 0x575]
push eax
lea eax, [ebp - 0x414]
push 0x4b7ca0
push eax
mov eax, dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
call eax
add esp, 0x2c
push 0
push 0
push 3
push 0
push 3
push 0xc0000000
lea eax, [ebp - 0x410]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x41d11e
push dword [esi + 0x452]
movzx eax, byte [esi + 0x577]
push eax
movzx eax, byte [esi + 0x575]
push eax
lea eax, [ebp - 0x414]
push 0x4b7cf4
push eax
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
add esp, 0x14
push dword [ebp - 0x414]
push 0x12
push ebx
jmp 0x41d4ff
lea eax, [ebp - 0x418]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
mov ebx, eax
lea eax, [ebp - 0x418]
push eax
push ebx
push dword [esi + 0x1211]
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push edi
cmp dword [ebp - 0x418], ebx
je 0x41d159
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x41d50c
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x41d4c9
cmp dword [esi + 0x1211], 0
je 0x41d4c9
mov eax, 0xfd08e551
mul ebx
shr edx, 0xa
mov dword [esi + 0x1215], edx
cmp edx, 0x32
jge 0x41d1b8
cmp dword [0x4c6114], 0
je 0x41d1a9
cmp byte [esi + 0x5fc], 0
je 0x41d1a9
mov ecx, esi
call fcn.004147a0
mov ecx, esi
call fcn.004147a0
mov dword [esi + 0x416], 1
jmp 0x41d50c
mov ebx, dword [ebp + 8]
mov edi, dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
push 0x2328
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x4c60f0], 0
je 0x41d1dd
push ecx
mov ecx, esi
call fcn.00412350
cmp dword [esi + 0x1215], 0
mov dword [esi + 0x1219], 0
jle 0x41d4c0
nop dword [eax]
nop dword [eax + eax]
cmp dword [esi + 0x1211], 0
je 0x41d4c0
cmp byte [esi + 0x555], 0
jne 0x41d4c0
cmp dword [0x4c6140], 0
je 0x41d4c0
cmp byte [esi + 0x5f6], 0
je 0x41d4c0
cmp byte [esi + 0x5ad], 0
je 0x41d4c0
cmp dword [esi + 0x514], 0
je 0x41d4c0
cmp dword [0x4c6128], 0
push dword [esi + 0x1219]
push dword [esi + 0x1215]
je 0x41d280
push dword [esi + 0x452]
movzx eax, byte [esi + 0x577]
push eax
movzx eax, byte [esi + 0x575]
push eax
push 0x4b7d14
jmp 0x41d2a2
movzx eax, byte [esi + 0x561]
push eax
push dword [esi + 0x452]
movzx eax, byte [esi + 0x5d3]
push eax
mov byte [esi + 0x5d6], 0
push 0x4b7d38
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
mov ecx, dword [0x4c613c]
add esp, 0x1c
push dword [ebp - 0x414]
push 0x12
push ebx
call edi
mov eax, dword [esi + 0x1211]
test eax, eax
je 0x41d4a8
push 1
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x41d4a8
imul ecx, dword [esi + 0x1219], 0x40c
mov eax, 0xaaaaaaab
add ecx, dword [esi + 0x1211]
mul dword [ecx]
mov eax, 0xaaaaaaab
mov edi, edx
mul dword [ecx + 4]
shr edi, 1
mov ebx, edx
shr ebx, 1
cmp edi, 0x7b
jne 0x41d376
cmp byte [esi + 0x5d4], 0
je 0x41d32d
cmp dword [0x4c5b54], 0
je 0x41d32d
cmp dword [0x4c60f0], 0
jne 0x41d485
cmp dword [0x4c60d4], 0
jne 0x41d485
cmp dword [0x4c5b50], 0
je 0x41d365
mov eax, dword [esi + 0x4c7]
test eax, eax
je 0x41d485
cmp eax, 1
jb 0x41d485
cmp eax, 0x7d0
jae 0x41d485
lea eax, [ecx + 0xc]
mov ecx, esi
push ebx
push eax
call fcn.0041f1b0
jmp 0x41d485
cmp dword [0x4c6128], 0
jne 0x41d437
cmp dword [ecx], 0x27c
jne 0x41d397
lea eax, [ecx + 0xc]
mov ecx, esi
push ebx
push eax
call fcn.0041c510
cmp edi, 0x77
jne 0x41d3bf
imul ecx, dword [esi + 0x1219], 0x40c
mov eax, dword [esi + 0x1211]
push ebx
add ecx, 0xc
add eax, ecx
mov ecx, esi
push eax
call fcn.0041c6f0
jmp 0x41d485
cmp edi, 0x4e81
jne 0x41d3ea
imul ecx, dword [esi + 0x1219], 0x40c
mov eax, dword [esi + 0x1211]
push ebx
add ecx, 0xc
add eax, ecx
mov ecx, esi
push eax
call fcn.0041c7e0
jmp 0x41d485
cmp edi, 0xa5
jne 0x41d412
imul ecx, dword [esi + 0x1219], 0x40c
mov eax, dword [esi + 0x1211]
push ebx
add ecx, 0xc
add eax, ecx
mov ecx, esi
push eax
call fcn.0041d630
jmp 0x41d485
cmp edi, 0x7c
jne 0x41d437
imul ecx, dword [esi + 0x1219], 0x40c
mov eax, dword [esi + 0x1211]
push ebx
add ecx, 0xc
add eax, ecx
mov ecx, esi
push eax
call fcn.0041d540
jmp 0x41d485
cmp edi, 0x3a6
jne 0x41d45f
imul ecx, dword [esi + 0x1219], 0x40c
mov eax, dword [esi + 0x1211]
push ebx
add ecx, 0xc
add eax, ecx
mov ecx, esi
push eax
call fcn.0041d720
jmp 0x41d485
cmp edi, 0x6040
jne 0x41d485
imul ecx, dword [esi + 0x1219], 0x40c
mov eax, dword [esi + 0x1211]
push ebx
add ecx, 0xc
add eax, ecx
mov ecx, esi
push eax
call fcn.0041c600
imul ecx, dword [esi + 0x1219], 0x40c
mov eax, dword [esi + 0x1211]
push dword [ecx + eax + 8]
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, dword [ebp + 8]
mov edi, dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
inc dword [esi + 0x1219]
mov eax, dword [esi + 0x1219]
cmp eax, dword [esi + 0x1215]
jl 0x41d200
mov byte [esi + 0x5d8], 1
jmp 0x41d50c
push dword [esi + 0x452]
movzx eax, byte [esi + 0x577]
push eax
movzx eax, byte [esi + 0x575]
push eax
lea eax, [ebp - 0x414]
push 0x4b7cf4
push eax
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
add esp, 0x14
push dword [ebp - 0x414]
push 0x12
push dword [ebp + 8]
mov ecx, dword [0x4c613c]
mov eax, dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
call eax
lea ecx, [ebp - 0x414]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0044627d
mov esp, ebp
pop ebp
ret 4