Function at 0x41bf80
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a33f4
mov eax, dword fs:[0]
push eax
sub esp, 0x444
mov eax, dword [0x4c3014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
cmp dword [esi + 0x120e], 0
jne 0x41bfd5
push 0xb05e0
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [esi + 0x120e], eax
test eax, eax
je 0x41c598
lea ecx, [ebp - 0x448]
call dword [sym.imp.mfc140u.dll_Ordinal_296]
mov edi, dword [ebp + 8]
mov dword [ebp - 4], 0
cmp dword [0x4c6270], 0
mov ebx, dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
je 0x41c043
mov ecx, dword [0x4c6278]
push 0x4b7c54
push 0x12
push edi
call dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
cmp dword [esi + 0x452], 0x115
jne 0x41c058
push 0xb05e0
push dword [0x4c5290]
push dword [esi + 0x120e]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [0x4c5294]
add esp, 0xc
mov dword [esi + 0x1216], eax
jmp 0x41c2bc
push 0xb05e0
push 0
push dword [esi + 0x120e]
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x400
lea eax, [ebp - 0x444]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
cmp dword [0x4c5c90], 0
jne 0x41c0d6
cmp dword [0x4c6264], 0
jne 0x41c146
cmp dword [0x4c6214], 0
jne 0x41c146
push dword [esi + 0x452]
lea eax, [ebp - 0x444]
push 0x4c5c98
push 0x4b7c90
push eax
call fcn.0041fb60
push dword [esi + 0x452]
movzx eax, byte [esi + 0x577]
push eax
movzx eax, byte [esi + 0x575]
push eax
lea eax, [ebp - 0x448]
push 0x4b7ca4
push eax
call ebx
add esp, 0x24
jmp 0x41c12e
cmp dword [0x4c6264], 0
jne 0x41c146
cmp dword [0x4c6214], 0
jne 0x41c146
push dword [esi + 0x452]
lea eax, [ebp - 0x444]
push 0x4c5c98
push 0x4b7cbc
push eax
call fcn.0041fb60
movzx eax, byte [esi + 0x577]
add esp, 0x10
push dword [esi + 0x452]
push eax
movzx eax, byte [esi + 0x575]
push eax
lea eax, [ebp - 0x448]
push 0x4b7ca4
push eax
call ebx
add esp, 0x14
push dword [ebp - 0x448]
mov ecx, dword [0x4c6278]
mov eax, dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
push 0x12
push edi
call eax
jmp 0x41c199
push dword [esi + 0x452]
movzx eax, byte [esi + 0x577]
push eax
movzx eax, byte [esi + 0x575]
push eax
push 0x4c5c98
lea eax, [ebp - 0x444]
push 0x4b7c5c
push eax
call fcn.0041fb60
push dword [esi + 0x452]
movzx eax, byte [esi + 0x577]
push eax
movzx eax, byte [esi + 0x575]
push eax
lea eax, [ebp - 0x448]
push 0x4b7c78
push eax
call ebx
add esp, 0x2c
push 0x32
lea eax, [ebp - 0x44]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [esi + 0x452]
lea edx, [ebp - 0x44]
add esp, 0xc
call fcn.004276a0
push 0
push 0
push 3
push 0
push 3
push 0xc0000000
lea eax, [ebp - 0x444]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x41c219
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x450]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov byte [ebp - 4], 1
push dword [eax]
movzx eax, byte [esi + 0x577]
push dword [esi + 0x452]
push eax
movzx eax, byte [esi + 0x575]
push eax
lea eax, [ebp - 0x448]
push 0x4b7ccc
push eax
call ebx
jmp 0x41c561
lea eax, [ebp - 0x44c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
mov ebx, eax
lea eax, [ebp - 0x44c]
push eax
push ebx
push dword [esi + 0x120e]
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push edi
cmp dword [ebp - 0x44c], ebx
je 0x41c254
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x41c58c
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x41c523
cmp dword [esi + 0x120e], 0
je 0x41c523
mov eax, 0xfe03f81
mul ebx
shr edx, 6
mov dword [esi + 0x1216], edx
cmp edx, 0x32
jge 0x41c2b3
cmp dword [0x4c6250], 0
je 0x41c2a4
cmp byte [esi + 0x5fd], 0
je 0x41c2a4
mov ecx, esi
call fcn.00414030
mov ecx, esi
call fcn.00414030
mov dword [esi + 0x416], 1
jmp 0x41c58c
mov ebx, dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
mov edi, dword [ebp + 8]
push 0x2328
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [esi + 0x1216], 0
mov dword [esi + 0x121a], 0
jle 0x41c51a
nop
cmp dword [esi + 0x120e], 0
je 0x41c51a
cmp byte [esi + 0x555], 0
jne 0x41c51a
cmp dword [0x4c6280], 0
je 0x41c51a
cmp byte [esi + 0x5f6], 0
je 0x41c51a
cmp byte [esi + 0x5ad], 0
je 0x41c51a
cmp dword [esi + 0x514], 0
je 0x41c51a
cmp dword [0x4c6264], 0
jne 0x41c376
cmp dword [0x4c6214], 0
jne 0x41c376
cmp byte [esi + 0x5d6], 0
jne 0x41c58c
push dword [esi + 0x121a]
movzx eax, byte [esi + 0x561]
push dword [esi + 0x1216]
push eax
push dword [esi + 0x452]
movzx eax, byte [esi + 0x5d3]
push eax
push 0x4b7d18
jmp 0x41c39d
push dword [esi + 0x121a]
movzx eax, byte [esi + 0x577]
push dword [esi + 0x1216]
push dword [esi + 0x452]
push eax
movzx eax, byte [esi + 0x575]
push eax
push 0x4b7cf4
lea eax, [ebp - 0x448]
push eax
call ebx
mov ecx, dword [0x4c6278]
add esp, 0x1c
push dword [ebp - 0x448]
push 0x12
push edi
call dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
mov eax, dword [esi + 0x120e]
test eax, eax
je 0x41c502
push 4
push eax
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x41c502
imul ebx, dword [esi + 0x121a], 0x408
mov eax, 0xaaaaaaab
add ebx, dword [esi + 0x120e]
mul dword [ebx]
mov eax, 0xaaaaaaab
mov ecx, edx
mul dword [ebx + 4]
shr ecx, 1
mov edi, edx
shr edi, 1
cmp ecx, 0x7b
jne 0x41c449
cmp byte [esi + 0x5d4], 0
je 0x41c424
cmp dword [0x4c5c8c], 0
je 0x41c424
cmp dword [0x4c622c], 0
jne 0x41c439
cmp dword [0x4c6210], 0
jne 0x41c439
push edi
lea eax, [ebx + 8]
mov ecx, esi
push eax
call fcn.0041e8b0
push 0xfa0
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41c4f9
cmp dword [0x4c6264], 0
jne 0x41c4a7
cmp ecx, 0x77
jne 0x41c468
push edi
lea eax, [ebx + 8]
mov ecx, esi
push eax
call fcn.0041bda0
jmp 0x41c4f9
cmp ecx, 0x4e81
jne 0x41c47e
push edi
lea eax, [ebx + 8]
mov ecx, esi
push eax
call fcn.0041be90
jmp 0x41c4af
cmp ecx, 0xa5
jne 0x41c494
push edi
lea eax, [ebx + 8]
mov ecx, esi
push eax
call fcn.0041cd30
jmp 0x41c4f9
cmp ecx, 0x7c
jne 0x41c4a7
push edi
lea eax, [ebx + 8]
mov ecx, esi
push eax
call fcn.0041cc40
jmp 0x41c4f9
cmp ecx, 0x4e81
jne 0x41c4cf
imul ecx, dword [esi + 0x121a], 0x408
mov eax, dword [esi + 0x120e]
push edi
add ecx, 8
add eax, ecx
mov ecx, esi
push eax
call fcn.0041be90
jmp 0x41c4f9
cmp ecx, 0x3a6
jne 0x41c4e5
push edi
lea eax, [ebx + 8]
mov ecx, esi
push eax
call fcn.0041ce20
jmp 0x41c4f9
cmp ecx, 0x6040
jne 0x41c4f9
push edi
lea eax, [ebx + 8]
mov ecx, esi
push eax
call fcn.0041bcb0
mov edi, dword [ebp + 8]
mov ebx, dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
inc dword [esi + 0x121a]
mov eax, dword [esi + 0x121a]
cmp eax, dword [esi + 0x1216]
jl 0x41c2e0
mov byte [esi + 0x5d8], 1
jmp 0x41c58c
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x450]
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__4]
mov byte [ebp - 4], 2
push dword [eax]
movzx eax, byte [esi + 0x577]
push dword [esi + 0x452]
push eax
movzx eax, byte [esi + 0x575]
push eax
lea eax, [ebp - 0x448]
push 0x4b7ccc
push eax
call dword [sym.imp.mfc140u.dll_ATL::CStringT_wchar_t_StrTraitMFC_DLL_wchar_t_ATL::ChTraitsCRT_wchar_t__9]
add esp, 0x18
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x450]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push dword [ebp - 0x448]
mov eax, dword [ebp + 8]
mov ecx, dword [0x4c6278]
push 0x12
push eax
call dword [sym.imp.mfc140u.dll_CListCtrl::SetItemText]
lea ecx, [ebp - 0x448]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0044632d
mov esp, ebp
pop ebp
ret 4