Function at 0x4a2980
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5553ab
mov eax, dword fs:[0]
push eax
sub esp, 0x2d8
mov eax, dword [0x5a7464]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2dc], ecx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x2c8], ebx
call fcn.00458b20
push eax
lea ecx, [ebp - 0x94]
call fcn.004524b0
mov dword [ebp - 4], 0
call fcn.00458b30
mov ecx, eax
call fcn.004530f0
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
test al, al
je 0x4a2ab5
push ebx
lea ecx, [ebp - 0x94]
call fcn.004528c0
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [ebp - 0x94]
call fcn.00452ea0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x4a2a39
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], eax
call fcn.00452600
jmp 0x4a2ce4
push 0
push ebx
call esi
mov esi, eax
test esi, esi
jne 0x4a2a5b
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452600
jmp 0x4a2cde
push esi
mov dword [ebp - 0x2cc], 0
call fcn.00508ab2
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2cc]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2cc], esi
je 0x4a2cc4
push edi
call fcn.0050878e
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452600
jmp 0x4a2cde
call fcn.00458df0
test al, al
jne 0x4a2bd2
call fcn.00458b30
push eax
lea ecx, [ebp - 0x94]
call fcn.004528a0
call fcn.00458da0
test al, al
je 0x4a2ae3
call fcn.00458b40
jmp 0x4a2afb
push 2
push 0
lea ecx, [ebp - 0x94]
call fcn.00452ea0
push eax
call fcn.0046fc00
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x4a2b18
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452600
jmp 0x4a2ce4
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2d4]
push eax
push 1
push dword [ebp - 0x2c8]
push ebx
call fcn.0046f510
add esp, 0x14
test eax, eax
je 0x4a2b52
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452600
jmp 0x4a2ce4
mov esi, dword [ebp - 0x98]
test esi, esi
jne 0x4a2b73
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452600
jmp 0x4a2cde
push esi
call fcn.00508ab2
push 3
push esi
mov edi, eax
push edi
push dword [ebp - 0x2d4]
push ebx
call fcn.00470090
add esp, 0x18
test eax, eax
je 0x4a2bba
cmp eax, 0x600
je 0x4a2bba
push edi
call fcn.0050878e
add esp, 4
call fcn.00458da0
test al, al
jne 0x4a2a9e
push ebx
call fcn.0046f2f0
jmp 0x4a2a9b
call fcn.00458da0
test al, al
jne 0x4a2cc4
push ebx
call fcn.0046f2f0
jmp 0x4a2cc1
call fcn.00458b30
push eax
lea ecx, [ebp - 0x94]
call fcn.004528a0
call fcn.00458da0
test al, al
je 0x4a2bf3
call fcn.00458b40
jmp 0x4a2c0b
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.00452ea0
push eax
call fcn.004740c0
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x4a2c28
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452600
jmp 0x4a2ce4
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x2d8]
push eax
push dword [ebp - 0x2c8]
push ebx
call fcn.004739c0
add esp, 0x10
test eax, eax
je 0x4a2c60
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452600
jmp 0x4a2ce4
mov esi, dword [ebp - 0x2e4]
test esi, esi
je 0x4a2a9e
push esi
call fcn.00508ab2
mov edi, eax
push edi
push dword [ebp - 0x2d8]
push ebx
call fcn.00474330
add esp, 0x10
test eax, eax
je 0x4a2cb2
cmp eax, 0x600
je 0x4a2cb2
push edi
call fcn.0050878e
add esp, 4
call fcn.00458da0
test al, al
jne 0x4a2a9e
push ebx
call fcn.004738d0
jmp 0x4a2a9b
call fcn.00458da0
test al, al
jne 0x4a2cc4
push ebx
call fcn.004738d0
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452600
test edi, edi
jne 0x4a2d5f
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push dword [ebp - 0x2c8]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4a2d5b
push 0
push ebx
call esi
mov esi, eax
test esi, esi
je 0x4a2d5b
push esi
mov dword [ebp - 0x2d0], 0
call fcn.00508ab2
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2d0]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2d0], esi
je 0x4a2d57
push edi
call fcn.0050878e
add esp, 4
xor eax, eax
jmp 0x4a2d7b
test edi, edi
jne 0x4a2d5f
xor eax, eax
jmp 0x4a2d7b
mov ecx, dword [ebp - 0x2dc]
push esi
push edi
call fcn.004a2da0
push 1
push edi
mov esi, eax
call fcn.005084c8
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00508494
mov esp, ebp
pop ebp
ret 4