Function at 0x476b8f
Capabilities:
Get file size
Read file on windows

Disassembly:
push ecx
push ecx
push ebx
push ebp
push esi
push edi
push dword [0xd91284]
xor ebp, ebp
call fcn.0048657c
mov ebx, eax
call fcn.00476a37
mov esi, dword [esp + 0x1c]
test esi, esi
jne 0x476bb6
mov esi, 0x57f684
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
xor eax, eax
push eax
push 0x80
push 3
push eax
push 1
push 0xc0000000
push esi
mov dword [ebx + 0xc], eax
call edi
mov dword [ebx], eax
cmp eax, 0xffffffff
jne 0x476c1e
push 0
push 0x80
push 3
push 0
push 1
push closesocket
push esi
call edi
mov dword [ebx], eax
cmp eax, 0xffffffff
jne 0x476c0e
push 0
push 0x80
push 3
push 0
push 3
push closesocket
push esi
call edi
mov dword [ebx], eax
mov dword [ebx + 0xc], 1
cmp eax, 0xffffffff
je 0x476ee0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp dword [esp + 0x24], 2
mov edi, eax
jne 0x476c37
mov eax, 0xfde9
jmp 0x476c39
xor eax, eax
mov dword [ebx + 0x18], eax
mov eax, dword [esp + 0x20]
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebx + 0x2c], eax
cmp edi, 3
jl 0x476c91
push 0
lea eax, [esp + 0x18]
push eax
push 3
lea eax, [esp + 0x1c]
push eax
push dword [ebx]
call esi
cmp dword [esp + 0x14], 3
jne 0x476d4a
push 3
lea eax, [esp + 0x14]
push 0x57884c
push eax
call fcn.004ac54d
add esp, 0xc
test eax, eax
jne 0x476d4a
mov dword [ebx + 0x18], 0xfde9
sub edi, 3
test edi, edi
jle 0x476d7a
lea eax, [edi + 2]
xor ecx, ecx
push eax
push ecx
push dword [0xd8fb84]
cmp dword [ebx + 0x18], ecx
jne 0x476d5c
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov esi, eax
mov dword [esp + 0x20], esi
test esi, esi
je 0x476d7a
lea eax, [edi*4 + 2]
push eax
push 0
push dword [0xd8fb84]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebx + 0x10], eax
test eax, eax
je 0x476d7a
push 0
lea eax, [esp + 0x18]
push eax
push edi
push esi
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [esp + 0x14]
push esi
mov byte [esi + eax], 0
call fcn.004ade60
mov edi, eax
push edi
call fcn.004923e0
mov esi, eax
push esi
push dword [ebx + 0x10]
call fcn.004adbd0
pop ecx
pop ecx
push esi
call fcn.00492470
push edi
call fcn.00492470
push dword [ebx + 0x10]
call fcn.004adcd0
pop ecx
push dword [esp + 0x20]
mov dword [ebx + 0x18], 0xfde9
mov edi, eax
push 0
push dword [0xd8fb84]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x476d7a
xor eax, eax
push eax
push eax
push eax
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
jmp 0x476c99
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebx + 0x10], eax
test eax, eax
je 0x476d7a
push 0
lea ecx, [esp + 0x18]
push ecx
push edi
push eax
push dword [ebx]
call esi
mov edi, dword [esp + 0x14]
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x476f1d
xor ecx, ecx
mov word [eax + edi], cx
mov esi, dword [ebx + 0x10]
lea eax, [esi + edi]
mov dword [ebx + 0x14], eax
cmp esi, eax
jae 0x476f1d
push 0x10
pop edi
mov al, byte [esi]
cmp al, 0x20
je 0x476da9
cmp al, 9
jne 0x476dac
inc esi
jmp 0x476d9f
cmp al, 0x3b
jne 0x476dfa
inc esi
cmp byte [esi], 0x20
jne 0x476db7
inc esi
push edi
test ebp, ebp
je 0x476dc4
push ebp
call fcn.004adf24
jmp 0x476dcd
lea eax, [ebx + 0x1c]
push eax
call fcn.00492038
lea ebp, [eax - 8]
pop ecx
pop ecx
mov dword [ebp + 8], 2
mov dword [ebp + 0xc], esi
jmp 0x476def
cmp al, 0xa
je 0x476ec7
cmp al, 0xd
je 0x476ec7
inc esi
mov al, byte [esi]
test al, al
jne 0x476dde
jmp 0x476ec7
cmp al, 0x5b
jne 0x476e61
inc esi
push edi
test ebp, ebp
je 0x476e0c
push ebp
call fcn.004adf24
jmp 0x476e15
lea eax, [ebx + 0x1c]
push eax
call fcn.00492038
lea ebp, [eax - 8]
mov dword [ebp + 8], 1
mov dword [ebp + 0xc], esi
mov al, byte [esi]
pop ecx
pop ecx
test al, al
je 0x476e46
mov cl, al
mov al, cl
cmp cl, 0x5d
je 0x476e46
cmp cl, 0xa
je 0x476e46
cmp cl, 0xd
je 0x476e46
inc esi
mov al, byte [esi]
mov cl, al
test al, al
jne 0x476e2c
mov byte [esi], 0
inc esi
cmp al, 0x5d
jne 0x476ecb
jmp 0x476e59
cmp al, 0xa
je 0x476ecb
cmp al, 0xd
je 0x476ecb
inc esi
mov al, byte [esi]
test al, al
jne 0x476e50
jmp 0x476ecb
cmp al, 0xa
je 0x476ecb
cmp al, 0xd
je 0x476ecb
mov edx, esi
jmp 0x476e7c
cmp al, 0x3d
je 0x476e80
cmp al, 0xd
je 0x476e80
cmp al, 0xa
je 0x476e80
inc esi
mov al, byte [esi]
test al, al
jne 0x476e6d
lea eax, [esi - 1]
jmp 0x476e92
mov cl, byte [eax]
cmp cl, 0x20
je 0x476e91
cmp cl, 9
jne 0x476e96
dec eax
cmp eax, edx
ja 0x476e85
mov byte [eax + 1], 0
inc esi
mov al, byte [esi]
cmp al, 0x20
je 0x476e9a
cmp al, 9
je 0x476e9a
push esi
push edx
lea eax, [ebx + 0x1c]
push ebp
push eax
call fcn.00476b5f
add esp, 0x10
mov ebp, eax
jmp 0x476ec1
cmp al, 0xa
je 0x476ec7
cmp al, 0xd
je 0x476ec7
inc esi
mov al, byte [esi]
test al, al
jne 0x476eb8
mov byte [esi], 0
inc esi
mov al, byte [esi]
cmp al, 0xa
je 0x476eca
cmp al, 0xd
je 0x476eca
cmp esi, dword [ebx + 0x14]
jb 0x476d9f
jmp 0x476f1d
mov eax, dword [esp + 0x20]
and dword [ebx], ebp
push esi
mov dword [ebx + 0x2c], eax
mov dword [ebx + 0x18], 0xfde9
call fcn.004913cb
pop ecx
lea eax, [eax*2 + 2]
push eax
push 0
push dword [0xd8fb84]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebx + 4], eax
test eax, eax
je 0x476f1d
push esi
push eax
call fcn.004913a9
pop ecx
pop ecx
mov eax, dword [ebx]
pop edi
pop esi
pop ebp
pop ebx
pop ecx
pop ecx
ret 0xc