Function at 0x47b870
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53632b
mov eax, dword fs:[0]
push eax
sub esp, 0x2d8
mov eax, dword [0x5796f4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2dc], ecx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x2c8], ebx
call fcn.004319d0
push eax
lea ecx, [ebp - 0x94]
call fcn.0042b350
mov dword [ebp - 4], 0
call fcn.004319e0
mov ecx, eax
call fcn.0042bf80
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
test al, al
je 0x47b9a5
push ebx
lea ecx, [ebp - 0x94]
call fcn.0042b740
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [ebp - 0x94]
call fcn.0042bd30
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x47b929
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], eax
call fcn.0042b4a0
jmp 0x47bbd4
push 0
push ebx
call esi
mov esi, eax
test esi, esi
jne 0x47b94b
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b4a0
jmp 0x47bbce
push esi
mov dword [ebp - 0x2cc], 0
call fcn.004ee290
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2cc]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2cc], esi
je 0x47bbb4
push edi
call fcn.004edf4f
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b4a0
jmp 0x47bbce
call fcn.00431ca0
test al, al
jne 0x47bac2
call fcn.004319e0
push eax
lea ecx, [ebp - 0x94]
call fcn.0042b720
call fcn.00431c50
test al, al
je 0x47b9d3
call fcn.004319f0
jmp 0x47b9eb
push 2
push 0
lea ecx, [ebp - 0x94]
call fcn.0042bd30
push eax
call fcn.00448a80
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x47ba08
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b4a0
jmp 0x47bbd4
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2d4]
push eax
push 1
push dword [ebp - 0x2c8]
push ebx
call fcn.00448390
add esp, 0x14
test eax, eax
je 0x47ba42
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b4a0
jmp 0x47bbd4
mov esi, dword [ebp - 0x98]
test esi, esi
jne 0x47ba63
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b4a0
jmp 0x47bbce
push esi
call fcn.004ee290
push 3
push esi
mov edi, eax
push edi
push dword [ebp - 0x2d4]
push ebx
call fcn.00448f10
add esp, 0x18
test eax, eax
je 0x47baaa
cmp eax, 0x600
je 0x47baaa
push edi
call fcn.004edf4f
add esp, 4
call fcn.00431c50
test al, al
jne 0x47b98e
push ebx
call fcn.00448170
jmp 0x47b98b
call fcn.00431c50
test al, al
jne 0x47bbb4
push ebx
call fcn.00448170
jmp 0x47bbb1
call fcn.004319e0
push eax
lea ecx, [ebp - 0x94]
call fcn.0042b720
call fcn.00431c50
test al, al
je 0x47bae3
call fcn.004319f0
jmp 0x47bafb
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.0042bd30
push eax
call fcn.0044cf40
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x47bb18
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b4a0
jmp 0x47bbd4
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x2d8]
push eax
push dword [ebp - 0x2c8]
push ebx
call fcn.0044c840
add esp, 0x10
test eax, eax
je 0x47bb50
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b4a0
jmp 0x47bbd4
mov esi, dword [ebp - 0x2e4]
test esi, esi
je 0x47b98e
push esi
call fcn.004ee290
mov edi, eax
push edi
push dword [ebp - 0x2d8]
push ebx
call fcn.0044d1b0
add esp, 0x10
test eax, eax
je 0x47bba2
cmp eax, 0x600
je 0x47bba2
push edi
call fcn.004edf4f
add esp, 4
call fcn.00431c50
test al, al
jne 0x47b98e
push ebx
call fcn.0044c750
jmp 0x47b98b
call fcn.00431c50
test al, al
jne 0x47bbb4
push ebx
call fcn.0044c750
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b4a0
test edi, edi
jne 0x47bc4f
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push dword [ebp - 0x2c8]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x47bc4b
push 0
push ebx
call esi
mov esi, eax
test esi, esi
je 0x47bc4b
push esi
mov dword [ebp - 0x2d0], 0
call fcn.004ee290
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2d0]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2d0], esi
je 0x47bc47
push edi
call fcn.004edf4f
add esp, 4
xor eax, eax
jmp 0x47bc6b
test edi, edi
jne 0x47bc4f
xor eax, eax
jmp 0x47bc6b
mov ecx, dword [ebp - 0x2dc]
push esi
push edi
call fcn.0047bc90
push 1
push edi
mov esi, eax
call fcn.004edc83
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004edc72
mov esp, ebp
pop ebp
ret 4