Function at 0x41c39c
Capabilities:
Get file size
Read file on windows

Disassembly:
mov eax, 0x4b7e29
call fcn.0049e324
sub esp, 0xc0
mov dword [ebp - 0xcc], ecx
mov eax, dword [ebp - 0xcc]
movzx eax, byte [eax + 4]
cmp eax, 0xdb
je 0x41c3cb
push 0
call fcn.0041c25e
pop ecx
mov eax, dword [ebp - 0xcc]
cmp dword [eax + 8], 0
je 0x41c40a
mov eax, dword [ebp - 0xcc]
movzx eax, byte [eax + 5]
test eax, eax
jne 0x41c400
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax + 8]
mov dword [ebp - 0xbc], eax
push dword [ebp - 0xbc]
call fcn.0047e950
pop ecx
mov eax, dword [ebp - 0xcc]
and dword [eax + 8], 0
mov eax, dword [ebp - 0xcc]
and dword [eax + 0xc], 0
mov eax, dword [ebp - 0xcc]
and dword [eax + 0x10], 0
mov eax, dword [ebp - 0xcc]
and byte [eax + 5], 0
lea ecx, [ebp - 0x7c]
call fcn.00418897
and dword [ebp - 4], 0
push dword [ebp + 8]
lea ecx, [ebp - 0x7c]
call fcn.00418c99
push dword [ebp + 0xc]
lea eax, [ebp - 0x7c]
push eax
call fcn.004306c3
pop ecx
pop ecx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
jne 0x41c474
and byte [ebp - 0xbd], 0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c]
call fcn.0041896f
mov al, byte [ebp - 0xbd]
jmp 0x41c63f
push 0
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
jne 0x41c4f8
cmp dword [ebp + 0xc], 0
je 0x41c4ce
lea ecx, [ebp - 0x9c]
call fcn.0041aa17
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x9c]
call fcn.0041bbf3
lea ecx, [ebp - 0x9c]
call fcn.00419db6
push eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov ecx, dword [ebp + 0xc]
call dword [eax + 0x10]
and byte [ebp - 4], 0
lea ecx, [ebp - 0x9c]
call fcn.0041aba9
push 0
push dword [ebp - 0x10]
call fcn.00436fc2
pop ecx
pop ecx
and byte [ebp - 0xbe], 0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c]
call fcn.0041896f
mov al, byte [ebp - 0xbe]
jmp 0x41c63f
cmp dword [ebp - 0x1c], 0
jne 0x41c528
push 0
push dword [ebp - 0x10]
call fcn.00436fc2
pop ecx
pop ecx
mov byte [ebp - 0xbf], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c]
call fcn.0041896f
mov al, byte [ebp - 0xbf]
jmp 0x41c63f
mov eax, dword [ebp - 0x1c]
add eax, 4
push eax
call fcn.0047e916
pop ecx
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xc4]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x1c]
add eax, 4
push eax
push 0
mov eax, dword [ebp - 0xcc]
push dword [eax + 8]
call fcn.0049ce00
add esp, 0xc
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0xc], ecx
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x1c]
mov dword [eax + 0x10], ecx
and dword [ebp - 0x80], 0
push 0
lea eax, [ebp - 0x80]
push eax
push dword [ebp - 0x1c]
mov eax, dword [ebp - 0xcc]
push dword [eax + 8]
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x14], eax
mov byte [ebp - 0x15], 1
cmp dword [ebp - 0x14], 0
jne 0x41c5f2
cmp dword [ebp + 0xc], 0
je 0x41c5ee
lea ecx, [ebp - 0xb8]
call fcn.0041aa17
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb8]
call fcn.0041bbf3
lea ecx, [ebp - 0xb8]
call fcn.00419db6
push eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov ecx, dword [ebp + 0xc]
call dword [eax + 0x10]
and byte [ebp - 4], 0
lea ecx, [ebp - 0xb8]
call fcn.0041aba9
and byte [ebp - 0x15], 0
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x1c]
je 0x41c614
cmp dword [ebp + 0xc], 0
je 0x41c610
push str.Failed_to_read_the_entire_file
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov ecx, dword [ebp + 0xc]
call dword [eax + 0x10]
and byte [ebp - 0x15], 0
push 0
push dword [ebp - 0x10]
call fcn.00436fc2
pop ecx
pop ecx
or dword [ebp - 0x10], 0xffffffff
mov al, byte [ebp - 0x15]
mov byte [ebp - 0xc5], al
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c]
call fcn.0041896f
mov al, byte [ebp - 0xc5]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
leave
ret 8