Function at 0x42eb80
Capabilities:
Get file attributes
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc5c
mov eax, dword [0x43e270]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xc5c], ecx
mov byte [ebp - 0x815], 0
mov dword [ebp - 0xc30], 0
mov dword [ebp - 0x814], 0
mov dword [ebp - 0xc34], 0xffffffff
mov eax, dword [ebp - 0xc5c]
cmp dword [eax + 0x800], 0
jne 0x42ebd4
xor al, al
jmp 0x42ef03
cmp dword [ebp + 8], 0
je 0x42ebea
mov ecx, dword [ebp + 8]
push ecx
call fcn.0040d97b
add esp, 4
test eax, eax
jne 0x42ebf1
xor al, al
jmp 0x42ef03
mov edx, dword [ebp + 8]
push edx
call fcn.0040d97b
add esp, 4
cmp eax, 0x400
jb 0x42ec0b
xor al, al
jmp 0x42ef03
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xc34], eax
cmp dword [ebp - 0xc34], 0xffffffff
jne 0x42ec40
jmp 0x42eeb3
push 0
mov ecx, dword [ebp - 0xc34]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 0xffffffff
jne 0x42ec68
jmp 0x42eeb3
cmp dword [ebp - 0x814], 0
je 0x42ecda
mov edx, dword [ebp - 0x814]
add edx, 1
mov dword [ebp - 0x814], edx
mov eax, dword [ebp - 0x814]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0xc30], eax
cmp dword [ebp - 0xc30], 0
jne 0x42eca8
jmp 0x42eeb3
push 0
lea ecx, [ebp - 0x814]
push ecx
mov edx, dword [ebp - 0x814]
push edx
mov eax, dword [ebp - 0xc30]
push eax
mov ecx, dword [ebp - 0xc34]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x42ecda
jmp 0x42eeb3
xor edx, edx
mov word [ebp - 0xc28], dx
xor eax, eax
mov dword [ebp - 0xc26], eax
mov dword [ebp - 0xc22], eax
mov dword [ebp - 0xc1e], eax
mov word [ebp - 0xc1a], ax
lea ecx, [ebp - 8]
push ecx
push 0
push 0
mov edx, dword [ebp - 0xc34]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
test eax, eax
je 0x42ed28
lea eax, [ebp - 0xc28]
push eax
lea ecx, [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov dword [ebp - 0xc3c], 0
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0xc38], eax
mov dword [ebp - 0xc40], 0
movzx eax, word [ebp - 0xc28]
mov dword [ebp - 0xc44], eax
movzx ecx, word [ebp - 0xc26]
mov dword [ebp - 0xc48], ecx
movzx edx, word [ebp - 0xc22]
mov dword [ebp - 0xc4c], edx
movzx eax, word [ebp - 0xc20]
mov dword [ebp - 0xc50], eax
movzx ecx, word [ebp - 0xc1e]
mov dword [ebp - 0xc54], ecx
movzx edx, word [ebp - 0xc1c]
mov dword [ebp - 0xc58], edx
mov dword [ebp - 0xc2c], 0
push 0x800
push 0
lea eax, [ebp - 0x810]
push eax
call fcn.0040d9a0
add esp, 0xc
push 0x400
push 0
lea ecx, [ebp - 0xc18]
push ecx
call fcn.0040d9a0
add esp, 0xc
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x810]
call fcn.00402990
mov edx, dword [ebp - 0xc5c]
push edx
call fcn.0040d97b
add esp, 4
lea eax, [ebp + eax*2 - 0x810]
mov dword [ebp - 0xc2c], eax
mov ecx, dword [ebp - 0xc2c]
movzx edx, word [ecx]
cmp edx, 0x5c
jne 0x42ee17
mov eax, dword [ebp - 0xc2c]
add eax, 2
mov dword [ebp - 0xc2c], eax
push 0
push 0
push 0x400
lea ecx, [ebp - 0xc18]
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0xc2c]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jne 0x42ee42
jmp 0x42eeb3
push 0xffffffffffffffff
push 8
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xc58]
push eax
lea ecx, [ebp - 0xc18]
push ecx
mov edx, dword [ebp - 0xc5c]
mov eax, dword [edx + 0x800]
push eax
call fcn.0042c310
add esp, 0x28
test eax, eax
jne 0x42eeac
cmp dword [ebp - 0xc30], 0
je 0x42eeac
cmp dword [ebp - 0x814], 0
je 0x42eeac
mov ecx, dword [ebp - 0x814]
push ecx
mov edx, dword [ebp - 0xc30]
push edx
mov eax, dword [ebp - 0xc5c]
mov ecx, dword [eax + 0x800]
push ecx
call fcn.0042af30
add esp, 0xc
mov byte [ebp - 0x815], 1
cmp dword [ebp - 0xc34], 0
je 0x42eed2
cmp dword [ebp - 0xc34], 0xffffffff
je 0x42eed2
mov edx, dword [ebp - 0xc34]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0xc30], 0
je 0x42eee8
mov eax, dword [ebp - 0xc30]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov ecx, dword [ebp - 0xc5c]
mov edx, dword [ecx + 0x800]
push edx
call fcn.0042b7a0
add esp, 4
mov al, byte [ebp - 0x815]
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.0040c641
mov esp, ebp
pop ebp
ret 4