Function at 0x420f70
Capabilities:
Get file size
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x42811b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x120
mov eax, dword [0x4313c0]
push esi
push edi
xor esi, esi
mov dword [esp + 0x124], eax
xor eax, eax
cmp edx, esi
mov ecx, 0x41
lea edi, [esp + 0x1d]
mov byte [esp + 0x1c], 0
mov dword [esp + 8], esi
rep stosd dword es:[edi], eax
je 0x420fcd
cmp byte [edx], 0
je 0x420fcd
push 0x105
push edx
lea eax, [esp + 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
jmp 0x42102d
push 0x105
lea ecx, [esp + 0x20]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea edx, [esp + 0x1c]
push 0x5c
push edx
call fcn.0041667d
add esp, 8
cmp eax, esi
je 0x420ff5
mov byte [eax + 1], 0
mov ecx, 0x105
lea eax, [esp + 0x1c]
mov edi, edi
cmp byte [eax], 0
je 0x42100b
inc eax
dec ecx
jne 0x421000
jmp 0x42102d
cmp ecx, esi
je 0x42102d
mov eax, 0x105
sub eax, ecx
push 0x42b99c
mov ecx, 0x105
sub ecx, eax
push ecx
lea edx, [esp + eax + 0x24]
push edx
call fcn.00401bc7
push esi
push esi
push 3
push esi
push 1
push SysReAllocString
lea eax, [esp + 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [esp + 0x14], eax
je 0x42139f
push ebx
push ebp
push esi
push eax
mov dword [esp + 0x28], esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
lea ebx, [esi + 1]
push ebx
call fcn.004179ab
mov edi, eax
mov ecx, ebx
mov edx, ecx
shr ecx, 2
xor eax, eax
mov dword [esp + 0x1c], edi
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
push ebx
rep stosb byte es:[edi], al
call fcn.004179ab
mov ebp, eax
mov ecx, ebx
mov edx, ecx
shr ecx, 2
xor eax, eax
mov edi, ebp
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov edi, dword [esp + 0x20]
add esp, 8
test edi, edi
mov dword [esp + 0x14], ebp
je 0x42138c
test ebp, ebp
je 0x42138c
mov ecx, dword [esp + 0x1c]
push 0
lea eax, [esp + 0x24]
push eax
push esi
push edi
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x42138c
push edi
push ebx
push ebp
call fcn.0040597b
add esp, 0xc
push ebp
call dword [sym.imp.USER32.dll_CharUpperA]
push 0x42b994
push ebp
call fcn.0041a220
add esp, 8
test eax, eax
je 0x421151
mov ecx, dword [esp + 0x144]
test ecx, ecx
je 0x421151
mov dl, byte [eax + 4]
add eax, 4
xor edi, edi
test dl, dl
je 0x42114d
mov ebp, ecx
mov esi, eax
sub ebp, eax
movsx edx, byte [esi]
push edx
push 0x42b98c
call fcn.00417b20
add esp, 8
test eax, eax
jne 0x421142
cmp edi, dword [esp + 0x150]
jge 0x421142
mov al, byte [esi]
mov byte [esi + ebp], al
mov al, byte [esi + 1]
inc edi
inc esi
test al, al
jne 0x421116
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x144]
mov byte [edi + ecx], 0
push 0x42b984
push ebp
call fcn.0041a220
add esp, 8
test eax, eax
je 0x4211bb
mov ecx, dword [esp + 0x148]
test ecx, ecx
je 0x4211bb
mov dl, byte [eax + 4]
add eax, 4
xor edi, edi
test dl, dl
je 0x4211b7
mov ebp, ecx
mov esi, eax
sub ebp, eax
movsx ecx, byte [esi]
push ecx
push 0x42b98c
call fcn.00417b20
add esp, 8
test eax, eax
jne 0x4211ac
cmp edi, dword [esp + 0x150]
jge 0x4211ac
mov dl, byte [esi]
mov byte [esi + ebp], dl
mov al, byte [esi + 1]
inc edi
inc esi
test al, al
jne 0x421180
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x148]
mov byte [edi + ecx], 0
push 0x42b978
push ebp
call fcn.0041a220
add esp, 8
test eax, eax
je 0x42122b
mov ecx, dword [esp + 0x14c]
test ecx, ecx
je 0x42122b
mov dl, byte [eax + 0xa]
add eax, 0xa
xor edi, edi
test dl, dl
je 0x421227
mov ebp, ecx
mov esi, eax
sub ebp, eax
lea ebx, [ebx]
movsx eax, byte [esi]
push eax
push 0x42b98c
call fcn.00417b20
add esp, 8
test eax, eax
jne 0x42121c
cmp edi, dword [esp + 0x150]
jge 0x42121c
mov cl, byte [esi]
mov byte [esi + ebp], cl
mov al, byte [esi + 1]
inc edi
inc esi
test al, al
jne 0x4211f0
mov ebp, dword [esp + 0x14]
mov ecx, dword [esp + 0x14c]
mov byte [edi + ecx], 0
push 0x42b970
push ebp
call fcn.0041a220
mov esi, eax
add esp, 8
test esi, esi
je 0x421371
mov eax, dword [esp + 0x140]
test eax, eax
je 0x421371
mov edx, dword [esp + 0x18]
push edx
push ebx
push ebp
add esi, 7
call fcn.0040597b
mov al, byte [esi]
add esp, 0xc
xor edi, edi
test al, al
je 0x42129c
mov ebp, dword [esp + 0x140]
sub ebp, esi
movsx eax, byte [esi]
push eax
push 0x42b96c
call fcn.00417b20
add esp, 8
test eax, eax
jne 0x421298
mov cl, byte [esi]
mov byte [esi + ebp], cl
mov al, byte [esi + 1]
inc edi
inc esi
test al, al
jne 0x421275
mov ebp, dword [esp + 0x14]
mov esi, dword [esp + 0x140]
push esi
lea ecx, [esp + 0x14]
mov byte [edi + esi], 0
call fcn.00403be0
push 0x4296ac
push 0x42b964
lea ecx, [esp + 0x18]
mov dword [esp + 0x140], 0
call fcn.004209a0
push 0x4296ac
push 0x42b958
lea ecx, [esp + 0x18]
call fcn.004209a0
push 0x4296ac
push 0x42b950
lea ecx, [esp + 0x18]
call fcn.004209a0
push 0x4296ac
push 0x42b948
lea ecx, [esp + 0x18]
call fcn.004209a0
push 0x4296ac
push 0x42b940
lea ecx, [esp + 0x18]
call fcn.004209a0
lea ecx, [esp + 0x10]
call fcn.00420c50
lea ecx, [esp + 0x10]
call fcn.00420c00
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x150]
push edx
push 0x42b93c
push eax
push esi
call fcn.004023bb
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
add esp, 0x10
mov dword [esp + 0x138], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x421371
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x18]
push eax
mov dword [esp + 0x14], 1
call fcn.004179a6
push ebp
call fcn.004179a6
add esp, 8
mov ecx, dword [esp + 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x10]
pop ebp
pop ebx
jmp 0x4213a1
mov eax, esi
mov ecx, dword [esp + 0x128]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x120]
pop esi
call fcn.0041d7e1
add esp, 0x12c
ret