Function at 0x4926c0
Capabilities:
Get file size
Read file on windows

Disassembly:
sub esp, 0x14
push ebx
mov eax, dword [esp + 0x20]
push ebp
push esi
xor ebx, ebx
push edi
push ebx
push 0x80
push 3
push ebx
push 1
push 0x80000000
push eax
mov dword [esp + 0x2c], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebp, eax
cmp ebp, 0xffffffff
je 0x4928ac
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
push ebx
push ebp
call esi
shr eax, 9
push ebx
push ebp
mov dword [esp + 0x24], eax
call esi
mov edi, eax
push ebx
shr edi, 0x10
push ebp
mov dword [esp + 0x28], edi
call esi
mov ecx, edi
mov esi, eax
shl ecx, 0x10
sub esi, ecx
push ebx
shr esi, 9
push ebp
mov dword [esp + 0x34], esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edx, edi
shl edx, 7
add edx, esi
shl edx, 9
cmp eax, edx
jbe 0x492740
inc esi
mov dword [esp + 0x2c], esi
test edi, edi
jbe 0x49283c
push 0x10000
call dword [sym.imp.MSVCRT.dll_malloc]
add esp, 4
mov esi, eax
test edi, edi
mov dword [esp + 0x14], 0
jbe 0x4927e3
mov ecx, 0x4000
xor eax, eax
mov edi, esi
push eax
rep stosd dword es:[edi], eax
lea eax, [esp + 0x1c]
push eax
push 0x10000
push esi
push ebp
call dword [sym.imp.KERNEL32.dll_ReadFile]
push esi
push 0x80
mov ecx, ebx
push 0x80
push 0
and ecx, 0xff
push 0
xor edx, edx
push ecx
xor eax, eax
mov al, byte [esp + 0x2a]
mov dl, bh
mov ecx, ebx
push edx
mov edx, dword [esp + 0x44]
push eax
shr ecx, 0x18
push ecx
push 0
push 0xf7
push edx
call fcn.0048fda0
add esp, 0x30
test eax, eax
je 0x49289c
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x20]
add ebx, 0x80
inc eax
cmp eax, ecx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], eax
jb 0x492764
mov ecx, 0x4000
xor eax, eax
mov edi, esi
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x2c]
test edi, edi
jbe 0x4928b9
push eax
mov ecx, edi
lea eax, [esp + 0x1c]
shl ecx, 9
push eax
push ecx
push esi
push ebp
call dword [sym.imp.KERNEL32.dll_ReadFile]
push esi
push edi
mov edx, ebx
push edi
xor eax, eax
push 0
and edx, 0xff
xor ecx, ecx
mov cl, byte [esp + 0x22]
push 0
mov al, bh
push edx
mov edx, dword [esp + 0x40]
push eax
shr ebx, 0x18
push ecx
push ebx
push 0
push 0xf7
push edx
jmp 0x492890
mov ebx, esi
shl ebx, 9
push ebx
call dword [sym.imp.MSVCRT.dll_malloc]
mov ecx, ebx
mov esi, eax
mov edx, ecx
xor eax, eax
mov edi, esi
add esp, 4
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push 0
and ecx, 3
rep stosb byte es:[edi], al
lea eax, [esp + 0x1c]
push eax
push ebx
push esi
push ebp
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [esp + 0x2c]
push esi
push eax
mov ecx, dword [esp + 0x30]
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0xf7
push ecx
call fcn.0048fda0
add esp, 0x30
test eax, eax
jne 0x4928b9
push esi
call sub.MFC42.DLL_operatordelete
add esp, 4
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebp
mov eax, 0xe9
pop ebx
add esp, 0x14
ret
push esi
call sub.MFC42.DLL_operatordelete
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 4
push ebp
call ebx
cmp dword [esp + 0x30], 0x80
jb 0x492950
push 0x10000
call dword [sym.imp.MSVCRT.dll_malloc]
mov esi, eax
xor eax, eax
push esi
push 0x80
mov ecx, 0x4000
mov edi, esi
push 0x80
push eax
rep stosd dword es:[edi], eax
push eax
mov eax, dword [esp + 0x34]
mov edx, eax
xor ecx, ecx
and edx, 0xff
mov cl, ah
push edx
xor edx, edx
mov dl, byte [esp + 0x3a]
push ecx
shr eax, 0x18
push edx
push eax
mov eax, dword [esp + 0x50]
push 0
push 0xf7
push eax
call fcn.0048fda0
add esp, 0x34
test eax, eax
push esi
jne 0x492948
call sub.MFC42.DLL_operatordelete
add esp, 4
push ebp
call ebx
pop edi
pop esi
pop ebp
mov eax, 0xe9
pop ebx
add esp, 0x14
ret
call sub.MFC42.DLL_operatordelete
add esp, 4
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x14
ret