Function at 0x49ccd0
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53ac6b
mov eax, dword fs:[0]
push eax
sub esp, 0x2d8
mov eax, dword [0x58a464]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2dc], ecx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x2c8], ebx
call fcn.00452e30
push eax
lea ecx, [ebp - 0x94]
call fcn.0044c7d0
mov dword [ebp - 4], 0
call fcn.00452e40
mov ecx, eax
call fcn.0044d410
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
test al, al
je 0x49ce05
push ebx
lea ecx, [ebp - 0x94]
call fcn.0044cbe0
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [ebp - 0x94]
call fcn.0044d1c0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x49cd89
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], eax
call fcn.0044c920
jmp 0x49d034
push 0
push ebx
call esi
mov esi, eax
test esi, esi
jne 0x49cdab
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044c920
jmp 0x49d02e
push esi
mov dword [ebp - 0x2cc], 0
call fcn.004f09aa
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2cc]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2cc], esi
je 0x49d014
push edi
call fcn.004f076d
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044c920
jmp 0x49d02e
call fcn.00453100
test al, al
jne 0x49cf22
call fcn.00452e40
push eax
lea ecx, [ebp - 0x94]
call fcn.0044cbc0
call fcn.004530b0
test al, al
je 0x49ce33
call fcn.00452e50
jmp 0x49ce4b
push 2
push 0
lea ecx, [ebp - 0x94]
call fcn.0044d1c0
push eax
call fcn.00469ea0
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x49ce68
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044c920
jmp 0x49d034
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2d4]
push eax
push 1
push dword [ebp - 0x2c8]
push ebx
call fcn.004697b0
add esp, 0x14
test eax, eax
je 0x49cea2
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044c920
jmp 0x49d034
mov esi, dword [ebp - 0x98]
test esi, esi
jne 0x49cec3
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044c920
jmp 0x49d02e
push esi
call fcn.004f09aa
push 3
push esi
mov edi, eax
push edi
push dword [ebp - 0x2d4]
push ebx
call fcn.0046a330
add esp, 0x18
test eax, eax
je 0x49cf0a
cmp eax, 0x600
je 0x49cf0a
push edi
call fcn.004f076d
add esp, 4
call fcn.004530b0
test al, al
jne 0x49cdee
push ebx
call fcn.00469590
jmp 0x49cdeb
call fcn.004530b0
test al, al
jne 0x49d014
push ebx
call fcn.00469590
jmp 0x49d011
call fcn.00452e40
push eax
lea ecx, [ebp - 0x94]
call fcn.0044cbc0
call fcn.004530b0
test al, al
je 0x49cf43
call fcn.00452e50
jmp 0x49cf5b
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.0044d1c0
push eax
call fcn.0046e350
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x49cf78
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044c920
jmp 0x49d034
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x2d8]
push eax
push dword [ebp - 0x2c8]
push ebx
call fcn.0046dc50
add esp, 0x10
test eax, eax
je 0x49cfb0
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044c920
jmp 0x49d034
mov esi, dword [ebp - 0x2e4]
test esi, esi
je 0x49cdee
push esi
call fcn.004f09aa
mov edi, eax
push edi
push dword [ebp - 0x2d8]
push ebx
call fcn.0046e5c0
add esp, 0x10
test eax, eax
je 0x49d002
cmp eax, 0x600
je 0x49d002
push edi
call fcn.004f076d
add esp, 4
call fcn.004530b0
test al, al
jne 0x49cdee
push ebx
call fcn.0046db60
jmp 0x49cdeb
call fcn.004530b0
test al, al
jne 0x49d014
push ebx
call fcn.0046db60
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044c920
test edi, edi
jne 0x49d0af
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push dword [ebp - 0x2c8]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x49d0ab
push 0
push ebx
call esi
mov esi, eax
test esi, esi
je 0x49d0ab
push esi
mov dword [ebp - 0x2d0], 0
call fcn.004f09aa
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2d0]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2d0], esi
je 0x49d0a7
push edi
call fcn.004f076d
add esp, 4
xor eax, eax
jmp 0x49d0cb
test edi, edi
jne 0x49d0af
xor eax, eax
jmp 0x49d0cb
mov ecx, dword [ebp - 0x2dc]
push esi
push edi
call fcn.0049d0f0
push 1
push edi
mov esi, eax
call fcn.004f04b6
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004f0482
mov esp, ebp
pop ebp
ret 4