Function at 0x470bf0
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e9f5d
mov eax, dword fs:[0]
push eax
mov eax, 0x4040
call fcn.0048f1d0
mov eax, dword [0x519220]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 0x4028]
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebp + 0x14]
push str.Content_Disposition:_form_data__name_message_
mov dword [ebp - 0x4048], eax
call fcn.0046ff50
and dword [ebp - 4], 0
push 0x4ee5ac
call fcn.004b0c40
pop ecx
push eax
push 0x4ee5ac
mov ecx, edi
call fcn.00465bf0
push dword [ebp - 0x4048]
mov ecx, edi
call fcn.00471573
push 0x4ee5b0
call fcn.004b0c40
pop ecx
push eax
push 0x4ee5b0
mov ecx, edi
call fcn.00465bf0
cmp dword [ebp - 0x4014], 0x10
lea eax, [ebp - 0x4028]
push dword [ebp - 0x4018]
cmovae eax, dword [ebp - 0x4028]
mov ecx, edi
push eax
call fcn.00465bf0
push 0x4ee5b4
call fcn.004b0c40
pop ecx
push eax
push 0x4ee5b4
mov ecx, edi
call fcn.00465bf0
push esi
mov ecx, edi
call fcn.00471573
mov esi, 0x4ee5b0
push esi
call fcn.004b0c40
pop ecx
push eax
push esi
mov ecx, edi
call fcn.00465bf0
mov esi, str.Content_Disposition:_form_data__name_report___filename_crashreport.zip_
push esi
call fcn.004b0c40
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4028]
call fcn.00465d40
push str.Content_Type:_application_octet_stream
lea ecx, [ebp - 0x4040]
call fcn.0046ff50
mov esi, 0x4ee5ac
mov byte [ebp - 4], 1
push esi
call fcn.004b0c40
pop ecx
push eax
push esi
mov ecx, edi
call fcn.00465bf0
push dword [ebp - 0x4048]
mov ecx, edi
call fcn.00471573
mov esi, 0x4ee5b0
push esi
call fcn.004b0c40
pop ecx
push eax
push esi
mov ecx, edi
call fcn.00465bf0
cmp dword [ebp - 0x4014], 0x10
lea eax, [ebp - 0x4028]
push dword [ebp - 0x4018]
cmovae eax, dword [ebp - 0x4028]
mov ecx, edi
push eax
call fcn.00465bf0
push esi
call fcn.004b0c40
pop ecx
push eax
push esi
mov ecx, edi
call fcn.00465bf0
cmp dword [ebp - 0x402c], 0x10
lea eax, [ebp - 0x4040]
push dword [ebp - 0x4030]
cmovae eax, dword [ebp - 0x4040]
mov ecx, edi
push eax
call fcn.00465bf0
mov esi, 0x4ee5b4
push esi
call fcn.004b0c40
pop ecx
push eax
push esi
mov ecx, edi
call fcn.00465bf0
cmp dword [ebx + 0x14], 0x10
jb 0x470db1
mov ebx, dword [ebx]
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x470e84
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x404c], eax
xor ebx, ebx
mov dword [ebp - 0x4044], 1
mov ecx, 0x4000
cmp ebx, eax
jge 0x470e46
sub eax, ebx
cmp eax, ecx
push 0
cmovg eax, ecx
lea ecx, [ebp - 0x4044]
push ecx
push eax
lea eax, [ebp - 0x4010]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push dword [ebp - 0x4044]
add ebx, dword [ebp - 0x4044]
lea eax, [ebp - 0x4010]
push eax
mov ecx, edi
call fcn.00465bf0
cmp dword [ebp - 0x4044], 0
mov ecx, 0x4000
mov eax, dword [ebp - 0x404c]
jg 0x470df5
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, str._r_n__
push esi
call fcn.004b0c40
pop ecx
push eax
push esi
mov ecx, edi
call fcn.00465bf0
push dword [ebp - 0x4048]
mov ecx, edi
call fcn.00471573
mov esi, str.___r_n
push esi
call fcn.004b0c40
pop ecx
push eax
push esi
mov ecx, edi
call fcn.00465bf0
lea ecx, [ebp - 0x4040]
call fcn.004659b0
lea ecx, [ebp - 0x4028]
call fcn.004659b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0048f1b0
mov esp, ebp
pop ebp
ret