Function at 0x4492e4
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
xor ebx, ebx
push esi
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
cmp dword [ebp + 0xc], ebx
jne 0x449315
mov eax, 0x80070057
push eax
push 0x347
push str.c:_agent_work18_swix_srclibsdutil_fileutil.cpp
mov esi, eax
call fcn.00403953
jmp 0x449596
cmp dword [ebp + 8], ebx
jne 0x449327
mov eax, 0x80070057
push eax
push 0x348
jmp 0x449304
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x44933b
mov eax, 0x80070057
push eax
push 0x349
jmp 0x449304
xor ecx, ecx
cmp cx, word [eax]
jne 0x44934f
mov eax, 0x80070057
push eax
push 0x34a
jmp 0x449304
push edi
push ebx
push 0x8000080
push 3
push ebx
push 5
push SysReAllocString
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov edi, 0x80070000
mov dword [ebp - 0xc], esi
cmp esi, 0xffffffff
jne 0x4493c1
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
mov edx, eax
or ecx, edi
test eax, eax
jle 0x449389
mov edx, ecx
mov esi, 0x80070002
cmp edx, esi
je 0x449595
test eax, eax
je 0x4493be
mov esi, eax
jle 0x4493a0
mov esi, ecx
test esi, esi
js 0x4493a9
mov esi, 0x80004005
push esi
push 0x354
push str.c:_agent_work18_swix_srclibsdutil_fileutil.cpp
call fcn.00403953
jmp 0x449595
mov esi, dword [ebp - 0xc]
lea eax, [ebp - 0x18]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x4493ff
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x4493e3
movzx esi, si
or esi, edi
test esi, esi
js 0x4493ea
mov esi, 0x80004005
push esi
push 0x359
push str.c:_agent_work18_swix_srclibsdutil_fileutil.cpp
call fcn.00403953
jmp 0x449586
cmp dword [ebp + 0x14], ebx
je 0x44944e
mov edi, dword [ebp + 0x18]
cmp ebx, dword [ebp - 0x14]
jl 0x44941d
jg 0x449413
cmp edi, dword [ebp - 0x18]
jbe 0x44941d
mov esi, 0x80070057
jmp 0x449586
push 1
push ebx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x449450
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x449444
movzx esi, si
or esi, 0x80070000
test esi, esi
jns 0x449450
push esi
push 0x367
jmp 0x4493f0
mov edi, ebx
cmp dword [ebp + 0x20], ebx
je 0x44947b
mov ebx, dword [ebp + 0x1c]
xor edi, edi
mov esi, dword [ebp + 8]
cmp dword [esi], 0
je 0x4494c9
test ebx, ebx
jne 0x4494a7
push dword [esi]
call fcn.00403b3d
mov dword [esi], edi
mov eax, dword [ebp + 0xc]
mov esi, edi
mov dword [eax], edi
jmp 0x449586
mov ecx, dword [ebp - 0x18]
mov ebx, ecx
mov eax, dword [ebp - 0x14]
sub ebx, edi
sub ecx, edi
push 0
pop edi
sbb eax, edi
cmp edi, eax
jg 0x44945a
jl 0x449497
cmp dword [ebp + 0x1c], ecx
jae 0x44945a
mov esi, 0x8007007a
push esi
push 0x379
jmp 0x4493f0
push 1
push ebx
push dword [esi]
call fcn.00403c17
mov edi, eax
test edi, edi
jne 0x4494ed
mov eax, 0x8007000e
push eax
mov esi, eax
push 0x387
jmp 0x4493f0
test ebx, ebx
je 0x44946f
push 1
push ebx
call fcn.00403a78
mov edi, eax
test edi, edi
jne 0x4494ed
mov eax, 0x8007000e
push eax
mov esi, eax
push 0x394
jmp 0x4493f0
xor eax, eax
and dword [ebp - 8], eax
mov dword [ebp - 4], eax
and dword [ebp - 0x10], 0
lea ecx, [ebp - 0x10]
push ecx
push eax
push ebx
call fcn.004439ca
mov esi, eax
test esi, esi
js 0x44957c
mov ecx, dword [ebp - 4]
lea eax, [ebp - 8]
push 0
push eax
push dword [ebp - 0x10]
add ecx, edi
push ecx
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x44954e
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
cmp dword [ebp - 8], 0
mov dword [ebp - 4], eax
jne 0x4494f5
cmp eax, ebx
je 0x449540
mov esi, 0x8000ffff
jmp 0x44957c
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor edi, edi
mov eax, dword [ebp + 0xc]
mov dword [eax], ebx
jmp 0x44957c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x449565
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x44956c
mov esi, 0x80004005
push esi
push 0x3a1
push str.c:_agent_work18_swix_srclibsdutil_fileutil.cpp
call fcn.00403953
test edi, edi
je 0x449586
push edi
call fcn.00403b3d
mov eax, dword [ebp - 0xc]
cmp eax, 0xffffffff
je 0x449595
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0x1c