Function at 0x4c911f
Capabilities:
Get file size
Read file on windows

Disassembly:
mov eax, 0x6ce513
call fcn.006b9c3c
push ecx
mov eax, 0x149c
call fcn.0068aad0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov byte [ebp - 4], 1
mov esi, dword [sym.imp.KERNEL32.DLL_GetTickCount64]
call esi
sub eax, dword [0x7a01d8]
sbb edx, dword [0x7a01dc]
cmp edx, ebx
ja 0x4c9180
jb 0x4c916a
cmp eax, 0x3e8
jae 0x4c9180
mov byte [ebp - 4], bl
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call esi
mov dword [0x7a01d8], eax
mov dword [0x7a01dc], edx
push dword [0x7a5260]
call dword [0x7a0968]
mov esi, 0x400
push esi
push ebx
lea eax, [ebp - 0x8ac]
push eax
call fcn.005077d5
add esp, 0xc
lea eax, [ebp - 0x8ac]
push eax
push ebx
push ebx
push 0x1a
push ebx
call dword [0x7a0934]
push dword [0x7a0a2c]
lea eax, [ebp - 0x8ac]
push eax
call dword [0x7a0938]
push esi
push ebx
lea eax, [ebp - 0xcac]
push eax
call fcn.005077d5
add esp, 0xc
lea eax, [ebp - 0x8ac]
push eax
lea eax, [ebp - 0xcac]
push eax
call dword [0x7a094c]
push dword [0x7a0a64]
lea eax, [ebp - 0xcac]
push eax
call dword [0x7a0938]
push ebx
push 0x80
push 3
push ebx
push 3
push 1
lea eax, [ebp - 0xcac]
push eax
call dword [sym.imp.KERNEL32.DLL_CreateFileA]
mov dword [ebp - 0x1c], eax
cmp eax, 0xffffffff
je 0x4c916a
push ebx
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileSize]
mov esi, eax
lea ecx, [esi + 1]
call fcn.005077cc
mov edi, eax
push ebx
lea eax, [ebp - 0x20]
push eax
push esi
push edi
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.DLL_ReadFile]
mov byte [edi + esi], bl
push dword [0x7a0a38]
push edi
call fcn.0068ddc0
pop ecx
pop ecx
test eax, eax
je 0x4c93f2
mov al, byte [eax + 0xb]
mov byte [ebp - 0x15], al
push dword [0x7a0a3c]
push edi
call fcn.0068ddc0
pop ecx
pop ecx
mov esi, eax
test esi, esi
je 0x4c93f2
push 0x73ba90
push esi
call fcn.0068ddc0
pop ecx
pop ecx
test eax, eax
je 0x4c93f2
mov byte [eax], bl
add esi, 5
push 0x400
push ebx
lea eax, [ebp - 0x10ac]
push eax
call fcn.005077d5
add esp, 0xc
cmp byte [ebp - 0x15], 0x31
jne 0x4c92d6
lea eax, [ebp - 0x8ac]
push eax
lea eax, [ebp - 0x10ac]
push eax
call dword [0x7a094c]
push esi
lea eax, [ebp - 0x10ac]
push eax
call dword [0x7a0938]
lea ecx, [ebp - 0xa8]
call fcn.005076ce
lea eax, [ebp - 0x8ac]
push eax
lea eax, [ebp - 0x14ac]
push eax
call dword [0x7a094c]
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x14ac]
push eax
call dword [0x7a0938]
lea edx, [ebp - 0x14ac]
lea ecx, [ebp - 0x10ac]
call fcn.00507803
push 0x400
push ebx
lea eax, [ebp - 0x4ac]
push eax
call fcn.005077d5
add esp, 0xc
push dword [0x7a0a34]
lea eax, [ebp - 0x4ac]
push eax
call dword [0x7a094c]
push dword [0x7a0a60]
lea eax, [ebp - 0x4ac]
push eax
call dword [0x7a0938]
push dword [0x7a0a68]
lea eax, [ebp - 0x4ac]
push eax
call dword [0x7a0938]
mov esi, 0x73ba8c
push esi
lea eax, [ebp - 0x4ac]
push eax
call dword [0x7a0938]
lea eax, [ebp - 0x14ac]
push eax
lea eax, [ebp - 0x4ac]
push eax
call dword [0x7a0938]
push esi
lea eax, [ebp - 0x4ac]
push eax
call dword [0x7a0938]
push 0x44
pop esi
push esi
push ebx
lea eax, [ebp - 0x84]
push eax
call fcn.005077d5
add esp, 0xc
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x7c], 0x7a4e58
xorps xmm0, xmm0
movups xmmword [ebp - 0x3c], xmm0
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x84]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x4ac]
push eax
push ebx
call dword [0x7a0930]
push dword [ebp - 0x1c]
call dword [0x7a0944]
push edi
call dword [0x7a0928]
pop ecx
mov byte [ebp - 4], bl
xor eax, eax
inc eax
jmp 0x4c916f