Function at 0x47b810
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5362db
mov eax, dword fs:[0]
push eax
sub esp, 0x2d8
mov eax, dword [0x5796f4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2dc], ecx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x2c8], ebx
call fcn.00431960
push eax
lea ecx, [ebp - 0x94]
call fcn.0042b2e0
mov dword [ebp - 4], 0
call fcn.00431970
mov ecx, eax
call fcn.0042bf10
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
test al, al
je 0x47b945
push ebx
lea ecx, [ebp - 0x94]
call fcn.0042b6d0
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [ebp - 0x94]
call fcn.0042bcc0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x47b8c9
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], eax
call fcn.0042b430
jmp 0x47bb74
push 0
push ebx
call esi
mov esi, eax
test esi, esi
jne 0x47b8eb
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b430
jmp 0x47bb6e
push esi
mov dword [ebp - 0x2cc], 0
call fcn.004ee25a
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2cc]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2cc], esi
je 0x47bb54
push edi
call fcn.004edf19
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b430
jmp 0x47bb6e
call fcn.00431c30
test al, al
jne 0x47ba62
call fcn.00431970
push eax
lea ecx, [ebp - 0x94]
call fcn.0042b6b0
call fcn.00431be0
test al, al
je 0x47b973
call fcn.00431980
jmp 0x47b98b
push 2
push 0
lea ecx, [ebp - 0x94]
call fcn.0042bcc0
push eax
call fcn.00448a50
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x47b9a8
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b430
jmp 0x47bb74
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2d4]
push eax
push 1
push dword [ebp - 0x2c8]
push ebx
call fcn.00448360
add esp, 0x14
test eax, eax
je 0x47b9e2
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b430
jmp 0x47bb74
mov esi, dword [ebp - 0x98]
test esi, esi
jne 0x47ba03
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b430
jmp 0x47bb6e
push esi
call fcn.004ee25a
push 3
push esi
mov edi, eax
push edi
push dword [ebp - 0x2d4]
push ebx
call fcn.00448ee0
add esp, 0x18
test eax, eax
je 0x47ba4a
cmp eax, 0x600
je 0x47ba4a
push edi
call fcn.004edf19
add esp, 4
call fcn.00431be0
test al, al
jne 0x47b92e
push ebx
call fcn.00448140
jmp 0x47b92b
call fcn.00431be0
test al, al
jne 0x47bb54
push ebx
call fcn.00448140
jmp 0x47bb51
call fcn.00431970
push eax
lea ecx, [ebp - 0x94]
call fcn.0042b6b0
call fcn.00431be0
test al, al
je 0x47ba83
call fcn.00431980
jmp 0x47ba9b
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.0042bcc0
push eax
call fcn.0044cf00
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x47bab8
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b430
jmp 0x47bb74
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x2d8]
push eax
push dword [ebp - 0x2c8]
push ebx
call fcn.0044c800
add esp, 0x10
test eax, eax
je 0x47baf0
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b430
jmp 0x47bb74
mov esi, dword [ebp - 0x2e4]
test esi, esi
je 0x47b92e
push esi
call fcn.004ee25a
mov edi, eax
push edi
push dword [ebp - 0x2d8]
push ebx
call fcn.0044d170
add esp, 0x10
test eax, eax
je 0x47bb42
cmp eax, 0x600
je 0x47bb42
push edi
call fcn.004edf19
add esp, 4
call fcn.00431be0
test al, al
jne 0x47b92e
push ebx
call fcn.0044c710
jmp 0x47b92b
call fcn.00431be0
test al, al
jne 0x47bb54
push ebx
call fcn.0044c710
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0042b430
test edi, edi
jne 0x47bbef
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push dword [ebp - 0x2c8]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x47bbeb
push 0
push ebx
call esi
mov esi, eax
test esi, esi
je 0x47bbeb
push esi
mov dword [ebp - 0x2d0], 0
call fcn.004ee25a
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2d0]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2d0], esi
je 0x47bbe7
push edi
call fcn.004edf19
add esp, 4
xor eax, eax
jmp 0x47bc0b
test edi, edi
jne 0x47bbef
xor eax, eax
jmp 0x47bc0b
mov ecx, dword [ebp - 0x2dc]
push esi
push edi
call fcn.0047bc30
push 1
push edi
mov esi, eax
call fcn.004edc4d
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004edc3c
mov esp, ebp
pop ebp
ret 4