Function at 0x47b880
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5362db
mov eax, dword fs:[0]
push eax
sub esp, 0x2d8
mov eax, dword [0x5796f4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2dc], ecx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x2c8], ebx
call fcn.00431a30
push eax
lea ecx, [ebp - 0x94]
call fcn.0042b320
mov dword [ebp - 4], 0
call fcn.00431a40
mov ecx, eax
call fcn.0042bf70
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
test al, al
je 0x47b9b5
push ebx
lea ecx, [ebp - 0x94]
call fcn.0042b710
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [ebp - 0x94]
call fcn.0042bd00
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x47b939
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], eax
call fcn.0042b470
jmp 0x47bbe4
push 0
push ebx
call esi
mov esi, eax
test esi, esi
jne 0x47b95b
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b470
jmp 0x47bbde
push esi
mov dword [ebp - 0x2cc], 0
call fcn.004ee2a8
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2cc]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2cc], esi
je 0x47bbc4
push edi
call fcn.004edf84
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b470
jmp 0x47bbde
call fcn.00431d00
test al, al
jne 0x47bad2
call fcn.00431a40
push eax
lea ecx, [ebp - 0x94]
call fcn.0042b6f0
call fcn.00431cb0
test al, al
je 0x47b9e3
call fcn.00431a50
jmp 0x47b9fb
push 2
push 0
lea ecx, [ebp - 0x94]
call fcn.0042bd00
push eax
call fcn.00448ae0
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x47ba18
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b470
jmp 0x47bbe4
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2d4]
push eax
push 1
push dword [ebp - 0x2c8]
push ebx
call fcn.004483f0
add esp, 0x14
test eax, eax
je 0x47ba52
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b470
jmp 0x47bbe4
mov esi, dword [ebp - 0x98]
test esi, esi
jne 0x47ba73
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b470
jmp 0x47bbde
push esi
call fcn.004ee2a8
push 3
push esi
mov edi, eax
push edi
push dword [ebp - 0x2d4]
push ebx
call fcn.00448f70
add esp, 0x18
test eax, eax
je 0x47baba
cmp eax, 0x600
je 0x47baba
push edi
call fcn.004edf84
add esp, 4
call fcn.00431cb0
test al, al
jne 0x47b99e
push ebx
call fcn.004481d0
jmp 0x47b99b
call fcn.00431cb0
test al, al
jne 0x47bbc4
push ebx
call fcn.004481d0
jmp 0x47bbc1
call fcn.00431a40
push eax
lea ecx, [ebp - 0x94]
call fcn.0042b6f0
call fcn.00431cb0
test al, al
je 0x47baf3
call fcn.00431a50
jmp 0x47bb0b
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.0042bd00
push eax
call fcn.0044cfa0
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x47bb28
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b470
jmp 0x47bbe4
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x2d8]
push eax
push dword [ebp - 0x2c8]
push ebx
call fcn.0044c8a0
add esp, 0x10
test eax, eax
je 0x47bb60
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b470
jmp 0x47bbe4
mov esi, dword [ebp - 0x2e4]
test esi, esi
je 0x47b99e
push esi
call fcn.004ee2a8
mov edi, eax
push edi
push dword [ebp - 0x2d8]
push ebx
call fcn.0044d210
add esp, 0x10
test eax, eax
je 0x47bbb2
cmp eax, 0x600
je 0x47bbb2
push edi
call fcn.004edf84
add esp, 4
call fcn.00431cb0
test al, al
jne 0x47b99e
push ebx
call fcn.0044c7b0
jmp 0x47b99b
call fcn.00431cb0
test al, al
jne 0x47bbc4
push ebx
call fcn.0044c7b0
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b470
test edi, edi
jne 0x47bc5f
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push dword [ebp - 0x2c8]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x47bc5b
push 0
push ebx
call esi
mov esi, eax
test esi, esi
je 0x47bc5b
push esi
mov dword [ebp - 0x2d0], 0
call fcn.004ee2a8
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2d0]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2d0], esi
je 0x47bc57
push edi
call fcn.004edf84
add esp, 4
xor eax, eax
jmp 0x47bc7b
test edi, edi
jne 0x47bc5f
xor eax, eax
jmp 0x47bc7b
mov ecx, dword [ebp - 0x2dc]
push esi
push edi
call fcn.0047bca0
push 1
push edi
mov esi, eax
call fcn.004edc9b
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004edc8a
mov esp, ebp
pop ebp
ret 4