Function at 0x471891
Capabilities:
Get file size
Read file on windows

Disassembly:
push 0x73c
mov eax, 0x4d6bc3
call fcn.004a8e62
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x508]
call fcn.00458e6d
xor edi, edi
lea ecx, [ebp - 0x508]
push edi
push edi
push esi
mov dword [ebp - 4], edi
call fcn.0045d44f
lea eax, [ebp - 0x400]
push eax
lea ecx, [ebp - 0x19c]
call fcn.00457b17
mov byte [ebp - 4], 1
mov esi, edi
mov ebx, edi
call fcn.0045a72f
push eax
lea ecx, [ebp - 0x94]
call fcn.00457b17
mov byte [ebp - 4], 2
call fcn.0045a735
mov ecx, eax
call fcn.004583ea
test al, al
je 0x4719ad
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0x94]
call fcn.00457ddd
push edi
push 0x80
push 3
push edi
push 1
push connect
lea ecx, [ebp - 0x94]
call fcn.00457da3
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x73c], eax
cmp eax, 0xffffffff
jne 0x471957
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 1
call fcn.00457c23
jmp 0x471b44
push edi
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebx, eax
test ebx, ebx
je 0x471943
push ebx
mov dword [ebp - 0x744], edi
call fcn.004a7f0e
pop ecx
push edi
mov esi, eax
lea eax, [ebp - 0x744]
push eax
push ebx
push esi
push dword [ebp - 0x73c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push dword [ebp - 0x73c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x744], ebx
je 0x471b2d
push esi
call fcn.004a7f17
pop ecx
mov esi, edi
jmp 0x471943
call fcn.0045a735
push eax
lea ecx, [ebp - 0x94]
call fcn.00457ddd
call fcn.0045a99e
test al, al
je 0x4719d4
call fcn.0045a73b
mov dword [ebp - 0x73c], eax
jmp 0x471a43
call fcn.0045a741
push eax
lea ecx, [ebp - 0x220]
call fcn.00457b17
push edi
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 3
call fcn.00457da3
push eax
call fcn.0045f7ce
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x740], eax
call fcn.00457da3
push eax
call fcn.00462ea6
mov dword [ebp - 0x73c], eax
mov eax, dword [ebp - 0x740]
pop ecx
pop ecx
test eax, eax
je 0x471a2e
push eax
call fcn.004a7f17
pop ecx
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 2
call fcn.00457c23
mov eax, dword [ebp - 0x73c]
test eax, eax
je 0x471943
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x748], edi
push eax
lea ecx, [ebp - 0x118]
call fcn.00457b17
push 0x4e8ea0
push 0x4e8ea4
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 4
call fcn.004585a8
lea eax, [ebp - 0x738]
push eax
lea eax, [ebp - 0x748]
push eax
push 1
lea ecx, [ebp - 0x118]
call fcn.00457da3
push eax
push dword [ebp - 0x73c]
call fcn.00462874
add esp, 0x14
test eax, eax
je 0x471aba
lea ecx, [ebp - 0x118]
call fcn.00457c23
jmp 0x471943
mov ebx, dword [ebp - 0x50c]
test ebx, ebx
je 0x471aaa
push ebx
call fcn.004a7f0e
push ebx
mov esi, eax
push esi
push dword [ebp - 0x748]
push dword [ebp - 0x73c]
call fcn.004632f8
add esp, 0x14
test eax, eax
je 0x471b0d
cmp eax, 0x600
je 0x471b0d
push esi
call fcn.004a7f17
pop ecx
mov esi, edi
call fcn.0045a99e
test al, al
jne 0x471aaa
push dword [ebp - 0x73c]
call fcn.00462659
pop ecx
jmp 0x471aaa
call fcn.0045a99e
test al, al
jne 0x471b22
push dword [ebp - 0x73c]
call fcn.00462659
pop ecx
lea ecx, [ebp - 0x118]
call fcn.00457c23
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 1
call fcn.00457c23
test esi, esi
jne 0x471bc5
push edi
push 0x80
push 3
push edi
push 1
push connect
lea ecx, [ebp - 0x19c]
call fcn.00457da3
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x73c], eax
cmp eax, 0xffffffff
je 0x471bc1
push edi
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebx, eax
test ebx, ebx
je 0x471bc1
push ebx
mov dword [ebp - 0x740], edi
call fcn.004a7f0e
pop ecx
push edi
mov esi, eax
lea eax, [ebp - 0x740]
push eax
push ebx
push esi
push dword [ebp - 0x73c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push dword [ebp - 0x73c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x740], ebx
je 0x471bc1
push esi
call fcn.004a7f17
pop ecx
jmp 0x471bd7
test esi, esi
je 0x471bd7
push ebx
push esi
call fcn.00471828
push esi
mov edi, eax
call fcn.004a7f17
add esp, 0xc
lea ecx, [ebp - 0x19c]
call fcn.00457c23
lea ecx, [ebp - 0x508]
call fcn.004592f9
mov eax, edi
call fcn.004a8e20
ret