Function at 0x6e7aa0
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x80b4db
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
mov edx, dword [ebp + 8]
push ebx
push esi
push edi
lea eax, [ecx + 0x1086]
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], eax
mov esi, edx
mov bl, byte [eax]
mov cl, bl
cmp bl, byte [esi]
jne 0x6e7af6
test cl, cl
je 0x6e7af2
mov bl, byte [eax + 1]
mov cl, bl
cmp bl, byte [esi + 1]
jne 0x6e7af6
add eax, 2
add esi, 2
test cl, cl
jne 0x6e7ad2
xor eax, eax
jmp 0x6e7afb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x6e7cb7
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
push 0
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x80
mov eax, ecx
mov esi, edi
mov edi, dword [ebp - 0x14]
push 3
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 0
and ecx, 3
push 1
push SysReAllocStringLen
push edx
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
mov dword [ebp - 0x20], edi
je 0x6e7cb7
push 0
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
cmp esi, 0xffffffff
je 0x6e7cb0
lea ecx, [esi + 1]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
test eax, eax
mov dword [ebp - 0x14], eax
je 0x6e7cb0
lea edx, [ebp - 0x1c]
push 0
push edx
push esi
xor bl, bl
push eax
push edi
mov dword [ebp - 0x1c], 0
mov byte [ebp + 0xb], bl
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x6e7ca6
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], 0
cmp dword [eax], 0
je 0x6e7c80
push 0xc
call sub.MFC42.DLL_operatornew
mov esi, eax
add esp, 4
mov dword [ebp - 0x24], esi
test esi, esi
mov byte [ebp - 4], 1
je 0x6e7beb
mov ecx, dword [ebp - 0x14]
mov dword [esi + 4], 0
push ecx
mov dword [esi + 8], 1
call fcn.0072d166
test eax, eax
mov dword [esi], eax
jne 0x6e7bed
push 0x8007000e
call fcn.0072ca70
jmp 0x6e7bed
xor esi, esi
test esi, esi
mov byte [ebp - 4], 0
mov dword [ebp - 0x24], esi
jne 0x6e7c02
push 0x8007000e
call fcn.0072ca70
push ecx
mov eax, esp
mov dword [ebp - 0x28], esp
test esi, esi
mov dword [eax], esi
je 0x6e7c18
lea edx, [esi + 8]
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov ebx, dword [ebp - 0x18]
mov byte [ebp - 4], 3
mov ecx, ebx
call fcn.006e8930
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.006e94b0
mov ecx, ebx
call fcn.006e7700
test esi, esi
mov bl, 1
je 0x6e7c80
lea eax, [esi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x6e7c80
mov eax, dword [esi]
test eax, eax
je 0x6e7c59
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x6e7c69
push eax
call sub.MFC42.DLL_operatordelete
add esp, 4
push esi
call sub.MFC42.DLL_operatordelete
add esp, 4
jmp 0x6e7c80
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
xor al, al
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4