Function at 0x416d4c
Capabilities:
Get file size
Read file on windows

Disassembly:
push ecx
push ecx
push ebx
push ebp
push esi
push edi
push dword [0x4b6704]
xor ebp, ebp
call fcn.004217f3
mov ebx, eax
call fcn.00416c24
mov esi, dword [esp + 0x1c]
test esi, esi
jne 0x416d73
mov esi, 0x493478
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
xor eax, eax
push eax
push 0x80
push 3
push eax
push 1
push 0xc0000000
push esi
mov dword [ebx + 0xc], eax
call edi
mov dword [ebx], eax
cmp eax, 0xffffffff
jne 0x416ddb
push 0
push 0x80
push 3
push 0
push 1
push accept
push esi
call edi
mov dword [ebx], eax
cmp eax, 0xffffffff
jne 0x416dcb
push 0
push 0x80
push 3
push 0
push 3
push accept
push esi
call edi
mov dword [ebx], eax
mov dword [ebx + 0xc], 1
cmp eax, 0xffffffff
je 0x41709d
push 0
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp dword [esp + 0x24], 2
mov edi, eax
jne 0x416df4
mov eax, 0xfde9
jmp 0x416df6
xor eax, eax
mov dword [ebx + 0x18], eax
mov eax, dword [esp + 0x20]
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebx + 0x2c], eax
cmp edi, 3
jl 0x416e4e
push 0
lea eax, [esp + 0x18]
push eax
push 3
lea eax, [esp + 0x1c]
push eax
push dword [ebx]
call esi
cmp dword [esp + 0x14], 3
jne 0x416f07
push 3
lea eax, [esp + 0x14]
push 0x495680
push eax
call fcn.00413114
add esp, 0xc
test eax, eax
jne 0x416f07
mov dword [ebx + 0x18], 0xfde9
sub edi, 3
test edi, edi
jle 0x416f37
lea eax, [edi + 2]
xor ecx, ecx
push eax
push ecx
push dword [0x4b55a0]
cmp dword [ebx + 0x18], ecx
jne 0x416f19
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov esi, eax
mov dword [esp + 0x20], esi
test esi, esi
je 0x416f37
lea eax, [edi*4 + 2]
push eax
push 0
push dword [0x4b55a0]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebx + 0x10], eax
test eax, eax
je 0x416f37
push 0
lea eax, [esp + 0x18]
push eax
push edi
push esi
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [esp + 0x14]
push esi
mov byte [esi + eax], 0
call fcn.004730c0
mov edi, eax
push edi
call fcn.004731e0
mov esi, eax
push esi
push dword [ebx + 0x10]
call fcn.00477480
pop ecx
pop ecx
push esi
call fcn.00473140
push edi
call fcn.00473140
push dword [ebx + 0x10]
call fcn.00477580
pop ecx
push dword [esp + 0x20]
mov dword [ebx + 0x18], 0xfde9
mov edi, eax
push 0
push dword [0x4b55a0]
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x416f37
xor eax, eax
push eax
push eax
push eax
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
jmp 0x416e56
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebx + 0x10], eax
test eax, eax
je 0x416f37
push 0
lea ecx, [esp + 0x18]
push ecx
push edi
push eax
push dword [ebx]
call esi
mov edi, dword [esp + 0x14]
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x4170da
xor ecx, ecx
mov word [eax + edi], cx
mov esi, dword [ebx + 0x10]
lea eax, [esi + edi]
mov dword [ebx + 0x14], eax
cmp esi, eax
jae 0x4170da
push 0x10
pop edi
mov al, byte [esi]
cmp al, 0x20
je 0x416f66
cmp al, 9
jne 0x416f69
inc esi
jmp 0x416f5c
cmp al, 0x3b
jne 0x416fb7
inc esi
cmp byte [esi], 0x20
jne 0x416f74
inc esi
push edi
test ebp, ebp
je 0x416f81
push ebp
call fcn.00421fad
jmp 0x416f8a
lea eax, [ebx + 0x1c]
push eax
call fcn.00421f3e
lea ebp, [eax - 8]
pop ecx
pop ecx
mov dword [ebp + 8], 2
mov dword [ebp + 0xc], esi
jmp 0x416fac
cmp al, 0xa
je 0x417084
cmp al, 0xd
je 0x417084
inc esi
mov al, byte [esi]
test al, al
jne 0x416f9b
jmp 0x417084
cmp al, 0x5b
jne 0x41701e
inc esi
push edi
test ebp, ebp
je 0x416fc9
push ebp
call fcn.00421fad
jmp 0x416fd2
lea eax, [ebx + 0x1c]
push eax
call fcn.00421f3e
lea ebp, [eax - 8]
mov dword [ebp + 8], 1
mov dword [ebp + 0xc], esi
mov al, byte [esi]
pop ecx
pop ecx
test al, al
je 0x417003
mov cl, al
mov al, cl
cmp cl, 0x5d
je 0x417003
cmp cl, 0xa
je 0x417003
cmp cl, 0xd
je 0x417003
inc esi
mov al, byte [esi]
mov cl, al
test al, al
jne 0x416fe9
mov byte [esi], 0
inc esi
cmp al, 0x5d
jne 0x417088
jmp 0x417016
cmp al, 0xa
je 0x417088
cmp al, 0xd
je 0x417088
inc esi
mov al, byte [esi]
test al, al
jne 0x41700d
jmp 0x417088
cmp al, 0xa
je 0x417088
cmp al, 0xd
je 0x417088
mov edx, esi
jmp 0x417039
cmp al, 0x3d
je 0x41703d
cmp al, 0xd
je 0x41703d
cmp al, 0xa
je 0x41703d
inc esi
mov al, byte [esi]
test al, al
jne 0x41702a
lea eax, [esi - 1]
jmp 0x41704f
mov cl, byte [eax]
cmp cl, 0x20
je 0x41704e
cmp cl, 9
jne 0x417053
dec eax
cmp eax, edx
ja 0x417042
mov byte [eax + 1], 0
inc esi
mov al, byte [esi]
cmp al, 0x20
je 0x417057
cmp al, 9
je 0x417057
push esi
push edx
lea eax, [ebx + 0x1c]
push ebp
push eax
call fcn.004170f5
add esp, 0x10
mov ebp, eax
jmp 0x41707e
cmp al, 0xa
je 0x417084
cmp al, 0xd
je 0x417084
inc esi
mov al, byte [esi]
test al, al
jne 0x417075
mov byte [esi], 0
inc esi
mov al, byte [esi]
cmp al, 0xa
je 0x417087
cmp al, 0xd
je 0x417087
cmp esi, dword [ebx + 0x14]
jb 0x416f5c
jmp 0x4170da
mov eax, dword [esp + 0x20]
and dword [ebx], ebp
push esi
mov dword [ebx + 0x2c], eax
mov dword [ebx + 0x18], 0xfde9
call fcn.0040acd9
pop ecx
lea eax, [eax*2 + 2]
push eax
push 0
push dword [0x4b55a0]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebx + 4], eax
test eax, eax
je 0x4170da
push esi
push eax
call fcn.00477459
pop ecx
pop ecx
mov eax, dword [ebx]
pop edi
pop esi
pop ebp
pop ebx
pop ecx
pop ecx
ret 0xc