Function at 0x47b7e0
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53627b
mov eax, dword fs:[0]
push eax
sub esp, 0x2d8
mov eax, dword [0x5796f4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2dc], ecx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x2c8], ebx
call fcn.00431940
push eax
lea ecx, [ebp - 0x94]
call fcn.0042b2c0
mov dword [ebp - 4], 0
call fcn.00431950
mov ecx, eax
call fcn.0042bef0
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
test al, al
je 0x47b915
push ebx
lea ecx, [ebp - 0x94]
call fcn.0042b6b0
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [ebp - 0x94]
call fcn.0042bca0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x47b899
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], eax
call fcn.0042b410
jmp 0x47bb44
push 0
push ebx
call esi
mov esi, eax
test esi, esi
jne 0x47b8bb
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b410
jmp 0x47bb3e
push esi
mov dword [ebp - 0x2cc], 0
call fcn.004ee1f4
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2cc]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2cc], esi
je 0x47bb24
push edi
call fcn.004edeb3
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b410
jmp 0x47bb3e
call fcn.00431c10
test al, al
jne 0x47ba32
call fcn.00431950
push eax
lea ecx, [ebp - 0x94]
call fcn.0042b690
call fcn.00431bc0
test al, al
je 0x47b943
call fcn.00431960
jmp 0x47b95b
push 2
push 0
lea ecx, [ebp - 0x94]
call fcn.0042bca0
push eax
call fcn.00448a30
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x47b978
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b410
jmp 0x47bb44
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2d4]
push eax
push 1
push dword [ebp - 0x2c8]
push ebx
call fcn.00448340
add esp, 0x14
test eax, eax
je 0x47b9b2
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b410
jmp 0x47bb44
mov esi, dword [ebp - 0x98]
test esi, esi
jne 0x47b9d3
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b410
jmp 0x47bb3e
push esi
call fcn.004ee1f4
push 3
push esi
mov edi, eax
push edi
push dword [ebp - 0x2d4]
push ebx
call fcn.00448ec0
add esp, 0x18
test eax, eax
je 0x47ba1a
cmp eax, 0x600
je 0x47ba1a
push edi
call fcn.004edeb3
add esp, 4
call fcn.00431bc0
test al, al
jne 0x47b8fe
push ebx
call fcn.00448120
jmp 0x47b8fb
call fcn.00431bc0
test al, al
jne 0x47bb24
push ebx
call fcn.00448120
jmp 0x47bb21
call fcn.00431950
push eax
lea ecx, [ebp - 0x94]
call fcn.0042b690
call fcn.00431bc0
test al, al
je 0x47ba53
call fcn.00431960
jmp 0x47ba6b
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.0042bca0
push eax
call fcn.0044cee0
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x47ba88
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b410
jmp 0x47bb44
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x2d8]
push eax
push dword [ebp - 0x2c8]
push ebx
call fcn.0044c7e0
add esp, 0x10
test eax, eax
je 0x47bac0
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b410
jmp 0x47bb44
mov esi, dword [ebp - 0x2e4]
test esi, esi
je 0x47b8fe
push esi
call fcn.004ee1f4
mov edi, eax
push edi
push dword [ebp - 0x2d8]
push ebx
call fcn.0044d150
add esp, 0x10
test eax, eax
je 0x47bb12
cmp eax, 0x600
je 0x47bb12
push edi
call fcn.004edeb3
add esp, 4
call fcn.00431bc0
test al, al
jne 0x47b8fe
push ebx
call fcn.0044c6f0
jmp 0x47b8fb
call fcn.00431bc0
test al, al
jne 0x47bb24
push ebx
call fcn.0044c6f0
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b410
test edi, edi
jne 0x47bbbf
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push dword [ebp - 0x2c8]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x47bbbb
push 0
push ebx
call esi
mov esi, eax
test esi, esi
je 0x47bbbb
push esi
mov dword [ebp - 0x2d0], 0
call fcn.004ee1f4
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2d0]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2d0], esi
je 0x47bbb7
push edi
call fcn.004edeb3
add esp, 4
xor eax, eax
jmp 0x47bbdb
test edi, edi
jne 0x47bbbf
xor eax, eax
jmp 0x47bbdb
mov ecx, dword [ebp - 0x2dc]
push esi
push edi
call fcn.0047bc00
push 1
push edi
mov esi, eax
call fcn.004edbdd
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004edbcc
mov esp, ebp
pop ebp
ret 4