Function at 0x426a00
Capabilities:
Get file attributes
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc5c
mov eax, dword [0x43217c]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xc5c], ecx
mov byte [ebp - 0x815], 0
mov dword [ebp - 0xc30], 0
mov dword [ebp - 0x814], 0
mov dword [ebp - 0xc34], 0xffffffff
mov eax, dword [ebp - 0xc5c]
cmp dword [eax + 0x800], 0
jne 0x426a54
xor al, al
jmp 0x426d83
cmp dword [ebp + 8], 0
je 0x426a6a
mov ecx, dword [ebp + 8]
push ecx
call fcn.00408feb
add esp, 4
test eax, eax
jne 0x426a71
xor al, al
jmp 0x426d83
mov edx, dword [ebp + 8]
push edx
call fcn.00408feb
add esp, 4
cmp eax, 0x400
jb 0x426a8b
xor al, al
jmp 0x426d83
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xc34], eax
cmp dword [ebp - 0xc34], 0xffffffff
jne 0x426ac0
jmp 0x426d33
push 0
mov ecx, dword [ebp - 0xc34]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 0xffffffff
jne 0x426ae8
jmp 0x426d33
cmp dword [ebp - 0x814], 0
je 0x426b5a
mov edx, dword [ebp - 0x814]
add edx, 1
mov dword [ebp - 0x814], edx
mov eax, dword [ebp - 0x814]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0xc30], eax
cmp dword [ebp - 0xc30], 0
jne 0x426b28
jmp 0x426d33
push 0
lea ecx, [ebp - 0x814]
push ecx
mov edx, dword [ebp - 0x814]
push edx
mov eax, dword [ebp - 0xc30]
push eax
mov ecx, dword [ebp - 0xc34]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x426b5a
jmp 0x426d33
xor edx, edx
mov word [ebp - 0xc28], dx
xor eax, eax
mov dword [ebp - 0xc26], eax
mov dword [ebp - 0xc22], eax
mov dword [ebp - 0xc1e], eax
mov word [ebp - 0xc1a], ax
lea ecx, [ebp - 8]
push ecx
push 0
push 0
mov edx, dword [ebp - 0xc34]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x426ba8
lea eax, [ebp - 0xc28]
push eax
lea ecx, [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov dword [ebp - 0xc3c], 0
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0xc38], eax
mov dword [ebp - 0xc40], 0
movzx eax, word [ebp - 0xc28]
mov dword [ebp - 0xc44], eax
movzx ecx, word [ebp - 0xc26]
mov dword [ebp - 0xc48], ecx
movzx edx, word [ebp - 0xc22]
mov dword [ebp - 0xc4c], edx
movzx eax, word [ebp - 0xc20]
mov dword [ebp - 0xc50], eax
movzx ecx, word [ebp - 0xc1e]
mov dword [ebp - 0xc54], ecx
movzx edx, word [ebp - 0xc1c]
mov dword [ebp - 0xc58], edx
mov dword [ebp - 0xc2c], 0
push 0x800
push 0
lea eax, [ebp - 0x810]
push eax
call fcn.00409180
add esp, 0xc
push 0x400
push 0
lea ecx, [ebp - 0xc18]
push ecx
call fcn.00409180
add esp, 0xc
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x810]
call fcn.00402970
mov edx, dword [ebp - 0xc5c]
push edx
call fcn.00408feb
add esp, 4
lea eax, [ebp + eax*2 - 0x810]
mov dword [ebp - 0xc2c], eax
mov ecx, dword [ebp - 0xc2c]
movzx edx, word [ecx]
cmp edx, 0x5c
jne 0x426c97
mov eax, dword [ebp - 0xc2c]
add eax, 2
mov dword [ebp - 0xc2c], eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0xc18]
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0xc2c]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x426cc2
jmp 0x426d33
push 0xffffffffffffffff
push 8
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xc58]
push eax
lea ecx, [ebp - 0xc18]
push ecx
mov edx, dword [ebp - 0xc5c]
mov eax, dword [edx + 0x800]
push eax
call fcn.00423b10
add esp, 0x28
test eax, eax
jne 0x426d2c
cmp dword [ebp - 0xc30], 0
je 0x426d2c
cmp dword [ebp - 0x814], 0
je 0x426d2c
mov ecx, dword [ebp - 0x814]
push ecx
mov edx, dword [ebp - 0xc30]
push edx
mov eax, dword [ebp - 0xc5c]
mov ecx, dword [eax + 0x800]
push ecx
call fcn.00422730
add esp, 0xc
mov byte [ebp - 0x815], 1
cmp dword [ebp - 0xc34], 0
je 0x426d52
cmp dword [ebp - 0xc34], 0xffffffff
je 0x426d52
mov edx, dword [ebp - 0xc34]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0xc30], 0
je 0x426d68
mov eax, dword [ebp - 0xc30]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [ebp - 0xc5c]
mov edx, dword [ecx + 0x800]
push edx
call fcn.00422fa0
add esp, 4
mov al, byte [ebp - 0x815]
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.0040800b
mov esp, ebp
pop ebp
ret 4