Function at 0x4273b9
Capabilities:
Get file size
Read file on windows

Disassembly:
mov eax, 0x446f39
call sub.MSVCRT.dll__EH_prolog
sub esp, 0x28
push ebx
push esi
xor ebx, ebx
push edi
push ebx
push ebx
push 3
push ebx
push 3
push 0x10000000
push dword [ebp + 0xc]
mov dword [ebp - 0x20], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], eax
cmp eax, 0xffffffff
mov dword [ebp - 4], 1
mov dword [ebp + 0xc], ebx
je 0x42743a
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
cmp esi, ebx
jbe 0x42743a
lea edi, [esi + 1]
push edi
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
cmp eax, ebx
pop ecx
mov dword [ebp + 0xc], eax
je 0x42743a
push edi
mov edi, eax
push ebx
push edi
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], ebx
push ebx
push eax
push esi
push edi
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov byte [edi + esi], bl
cmp dword [ebp + 0xc], ebx
mov dword [ebp - 0x10], ebx
je 0x4274c7
mov esi, 0x45b738
push esi
push dword [ebp + 0xc]
call dword [sym.imp.MSVCRT.dll_strstr]
mov edi, eax
pop ecx
cmp edi, ebx
pop ecx
je 0x4274c7
push esi
call sub.MSVCRT.dll_strlen
pop ecx
lea esi, [eax + edi]
push ebx
push ebx
push esi
mov dword [ebp - 0x18], esi
call sub.MSVCRT.dll_strlen
pop ecx
push eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push ebx
push ebx
call esi
mov edi, eax
cmp edi, ebx
jle 0x4274c7
lea eax, [edi + 1]
add eax, eax
push eax
mov dword [ebp - 0x1c], eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
cmp eax, ebx
pop ecx
mov dword [ebp - 0x10], eax
je 0x4274c7
push dword [ebp - 0x1c]
push ebx
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [edi + 1]
push eax
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call sub.MSVCRT.dll_strlen
pop ecx
push eax
push dword [ebp - 0x18]
push ebx
push ebx
call esi
mov eax, dword [ebp - 0x10]
mov word [eax + edi*2], bx
mov al, byte [ebp + 0xf]
push ebx
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x34], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov edi, dword [sym.imp.MSVCRT.dll_wcslen]
mov esi, 0x45d0f4
push esi
call edi
pop ecx
push eax
push esi
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov esi, dword [ebp - 0x10]
mov byte [ebp - 4], 2
cmp esi, ebx
je 0x42750b
push esi
call edi
pop ecx
push eax
push esi
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
cmp dword [ebp + 0xc], ebx
je 0x427519
push dword [ebp + 0xc]
call fcn.0042c9ee
pop ecx
cmp esi, ebx
je 0x427524
push esi
call fcn.0042c9ee
pop ecx
mov esi, dword [ebp + 8]
mov al, byte [ebp - 0x34]
push ebx
mov ecx, esi
mov byte [esi], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
mov ecx, esi
push dword [eax]
lea eax, [ebp - 0x34]
push ebx
push eax
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int___const___unsigned_int__unsigned_int_]
push 1
pop eax
mov dword [ebp - 0x20], eax
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
cmp dword [ebp - 0x14], 0xffffffff
je 0x42756b
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 8