Function at 0x453a50
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
mov eax, dword [0x4eceb0]
push ebx
push esi
push edi
push 1
push 0
push 0xffffffffffffffff
mov dword [esp + 0x20], ecx
mov ecx, eax
push 0
mov dword [esp + 0x20], eax
call fcn.004a2730
mov esi, dword [ebp + 8]
or eax, 0xffffffff
mov dword [esp + 0x1c], eax
mov eax, dword [0x4e88cc]
mov byte [esp + 0xe], 0
mov byte [esp + 0xd], 0
mov dword [esp + 0x20], 0xffffffff
mov ebx, dword [eax + 0xdc]
and ebx, 0x7fffffff
mov dword [esp + 0x24], ebx
nop dword [eax]
mov edi, esi
mov al, byte [edi]
cmp al, 0x20
je 0x453abc
cmp al, 9
jne 0x453abf
inc edi
jmp 0x453ab2
cmp al, 0x2a
jne 0x453bfa
mov bl, byte [edi + 1]
lea esi, [edi + 1]
movzx eax, bl
test eax, 0xffffff80
je 0x453adb
xor edx, edx
jmp 0x453ae8
push 2
push eax
call fcn.004b8e5e
add esp, 8
mov edx, eax
mov al, bl
and al, 0xdf
test edx, edx
movzx ecx, al
movzx eax, bl
cmove ecx, eax
movsx eax, cl
add eax, 0xffffffbd
cmp eax, 0x11
ja case.0x453b0d.68
movzx eax, byte [eax + 0x454098]
jmp dword [eax*4 + 0x454084]
mov byte [esp + 0xd], 1
jmp case.0x453b0d.68
lea ecx, [edi + 2]
call fcn.004404a0
mov bl, byte [esi]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], edx
test bl, bl
je 0x453b54
mov ecx, 0x4d9e7c
mov al, 0x20
nop dword [eax + eax]
cmp bl, al
je 0x453b88
mov al, byte [ecx + 1]
inc ecx
test al, al
jne 0x453b40
mov bl, byte [esi + 1]
inc esi
test bl, bl
jne 0x453b34
mov eax, dword [0x4e88cc]
mov dword [eax + 0x30], 0x57
test byte [eax + 0xe0], 1
jne 0x453bdc
mov ecx, dword [0x4eb720]
push 1
push 0
push 0xffffffffffffffff
push 0x4d9c00
call fcn.004a2730
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
dec esi
jmp case.0x453b0d.68
lea eax, [edi + 2]
push eax
call fcn.004b9548
mov dl, byte [esi]
add esp, 4
mov dword [esp + 0x24], eax
test dl, dl
je 0x453b54
mov ecx, 0x4d9e7c
mov al, 0x20
cmp dl, al
je 0x453b88
mov al, byte [ecx + 1]
inc ecx
test al, al
jne 0x453ba8
mov dl, byte [esi + 1]
inc esi
test dl, dl
jne 0x453ba1
jmp 0x453b54
mov byte [esp + 0xe], 1
cmp byte [esi], 0
je 0x453ab0
inc esi
cmp byte [esi], 0
je 0x453ab0
inc esi
jmp 0x453ab0
mov ecx, dword [esp + 0x14]
push 0x4d5231
push 0
push 0x4d9c00
call fcn.0043e650
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0
push 0x8000000
push 3
push 0
push 3
push SysReAllocString
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x453c35
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x4e88cc]
test byte [ecx + 0xe0], 1
mov dword [ecx + 0x30], eax
jmp 0x453b67
lea eax, [esp + 0x2c]
xorps xmm0, xmm0
push eax
push ebx
movq qword [esp + 0x30], xmm0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [esp + 0x28], esi
cmp esi, 0xffffffff
jne 0x453c65
call edi
test eax, eax
jne 0x453c72
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov eax, esi
and eax, ecx
cmp eax, 0xffffffff
jne 0x453c8e
call edi
mov ecx, dword [0x4e88cc]
push ebx
mov dword [ecx + 0x30], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x4e88cc]
jmp 0x453b60
mov edx, dword [esp + 0x20]
cmp ecx, edx
jb 0x453ca4
mov eax, dword [esp + 0x1c]
ja 0x453ca0
cmp esi, eax
jbe 0x453ca4
mov esi, eax
mov ecx, edx
test ecx, ecx
jne 0x454065
cmp esi, 0xfffffffd
ja 0x454065
mov eax, esi
or eax, ecx
jne 0x453ced
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x4e88cc]
mov dword [eax + 0x30], 0
mov ecx, dword [0x4eb720]
push 1
push 0
push 0xffffffffffffffff
push 0x4d5290
call fcn.004a2730
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp byte [esp + 0xd], 0
je 0x453dc4
mov edi, dword [esp + 0x10]
mov al, byte [edi + 0x17]
test al, al
jne 0x453d09
mov eax, dword [edi + 0xc]
mov al, byte [eax + 0x17]
cmp al, 2
je 0x453dc4
push 0
push 1
lea eax, [esi + 1]
mov byte [esp + 0x17], 1
push eax
push 0
mov ecx, edi
call fcn.004a2730
cmp eax, 1
jne 0x453df3
push 0
push eax
mov ecx, edi
call fcn.00401550
mov edi, eax
test edi, edi
je 0x453df3
push 0
lea eax, [esp + 0x1c]
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov esi, eax
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x4e88cc]
push ebx
mov dword [ecx + 0x30], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x453fbd
cmp byte [esp + 0xd], 0
jne 0x453f4c
mov ecx, dword [esp + 0x18]
cmp ecx, 3
jb 0x453e05
cmp byte [edi], 0xef
jne 0x453e05
cmp byte [edi + 1], 0xbb
jne 0x453e05
cmp byte [edi + 2], 0xbf
jne 0x453e05
mov esi, dword [esp + 0x10]
lea eax, [ecx - 3]
push 0xfde9
push eax
lea eax, [edi + 3]
mov ecx, esi
push eax
call fcn.004a3290
test eax, eax
jne 0x453e98
xor ebx, ebx
jmp 0x453e9c
lea eax, [esi + 2]
mov byte [esp + 0xf], 0
push eax
call fcn.004b6720
mov edi, eax
add esp, 4
test edi, edi
jne 0x453d44
mov ecx, dword [esp + 0x14]
push 0x4d5231
push eax
push str.Out_of_memory.
call fcn.0043ea30
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp ecx, 2
jb 0x453e45
cmp byte [edi], 0xff
jne 0x453e45
cmp byte [edi + 1], 0xfe
jne 0x453e45
mov dl, 1
sub esp, 0xc
lea eax, [ecx - 2]
test dl, dl
cmove eax, ecx
mov ecx, dword [esp + 0x1c]
shr eax, 1
test dl, dl
push eax
lea eax, [edi + 2]
cmove eax, edi
push eax
call fcn.004a3360
neg eax
sbb eax, eax
and eax, esi
mov esi, dword [esp + 0x10]
mov ebx, eax
jmp 0x453e9c
mov ebx, dword [esp + 0x24]
xor dl, dl
cmp ebx, 0x4b0
je 0x453e17
test ebx, ebx
je 0x453e7e
call dword [sym.imp.KERNEL32.dll_GetACP]
cmp ebx, eax
je 0x453e7a
mov esi, dword [esp + 0x10]
mov ecx, esi
push ebx
push dword [esp + 0x1c]
push edi
call fcn.004a3290
test eax, eax
jne 0x453e98
xor ebx, ebx
jmp 0x453e9c
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x10]
mov byte [ecx + edi], 0
mov ecx, esi
push dword [esp + 0x18]
push edi
call fcn.004a2e10
mov ebx, dword [esp + 0x1c]
jmp 0x453ea5
mov ebx, dword [esp + 0x1c]
push edi
call fcn.004b6427
add esp, 4
push 0
push 1
mov ecx, esi
call fcn.00401550
cmp byte [esp + 0xe], 0
mov edi, eax
je 0x45400c
cmp byte [esi + 0x17], 0
jne 0x453ec6
mov esi, dword [esi + 0xc]
cmp byte [esi + 0x17], 1
jne 0x453ede
test byte [esi + 0x15], 8
je 0x453ed9
mov ecx, esi
call fcn.004013b0
lea eax, [esi + 0xc]
jmp 0x453ee3
mov eax, 0x4ef2a8
mov eax, dword [eax]
mov edx, 0x4deca8
mov dword [esp + 0x24], eax
mov ecx, edi
lea eax, [esp + 0x24]
push eax
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
push 0x4df27c
call fcn.0049e8b0
mov eax, dword [esp + 0x28]
add esp, 0x18
cmp byte [eax + 0x17], 0
jne 0x453f19
mov esi, dword [eax + 0xc]
jmp 0x453f1b
mov esi, eax
cmp byte [esi + 0x17], 1
jne 0x453f3c
test byte [esi + 0x15], 8
je 0x453f2e
mov ecx, esi
call fcn.004013b0
mov eax, dword [esp + 0x24]
add esi, 0xc
mov dword [esi], eax
jmp 0x454008
mov eax, dword [esp + 0x24]
mov esi, 0x4ef2a8
mov dword [esi], eax
jmp 0x454008
mov ecx, dword [esp + 0x10]
mov al, byte [ecx + 0x17]
test al, al
jne 0x453f5d
mov eax, dword [ecx + 0xc]
mov al, byte [eax + 0x17]
cmp al, 2
jne 0x453f85
mov edx, dword [esp + 0x18]
mov ecx, edi
call fcn.004a2560
push edi
mov esi, eax
call fcn.004b6427
add esp, 4
cmp esi, 1
jne 0x454034
jmp 0x453cce
mov ebx, dword [esp + 0x18]
mov byte [ebx + edi], 0
cmp byte [ecx + 0x17], 0
jne 0x453f98
mov esi, dword [ecx + 0xc]
jmp 0x453f9a
mov esi, ecx
cmp byte [esi + 0x17], 1
jne 0x453fb4
test byte [esi + 0x15], 8
je 0x453fad
mov ecx, esi
call fcn.004013b0
add esi, 0xc
mov dword [esi], ebx
jmp 0x454004
mov esi, 0x4ef2a8
mov dword [esi], ebx
jmp 0x454004
mov eax, dword [esp + 0x10]
mov byte [edi], 0
cmp byte [eax + 0x17], 0
jne 0x453fcf
mov esi, dword [eax + 0xc]
jmp 0x453fd1
mov esi, eax
cmp byte [esi + 0x17], 1
jne 0x453fe9
test byte [esi + 0x15], 8
je 0x453fe4
mov ecx, esi
call fcn.004013b0
add esi, 0xc
jmp 0x453fee
mov esi, 0x4ef2a8
cmp byte [esp + 0xf], 0
mov dword [esi], 0
jne 0x454004
push edi
call fcn.004b6427
add esp, 4
mov ebx, dword [esp + 0x1c]
mov esi, dword [esp + 0x10]
cmp byte [esi + 0x17], 0
jne 0x454015
mov esi, dword [esi + 0xc]
cmp byte [esi + 0x17], 2
jne 0x45403f
cmp dword [0x4ed820], 0
je 0x45403f
push 1
mov ecx, 0x4ed814
call fcn.004056b0
test eax, eax
jne 0x454053
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov al, byte [esi + 0x15]
and al, 0x86
cmp byte [esp + 0xd], 0
mov byte [esi + 0x15], al
je 0x454053
or al, 1
mov byte [esi + 0x15], al
test ebx, ebx
jne 0x453cce
mov eax, dword [0x4e88cc]
jmp 0x453b60
mov ecx, dword [esp + 0x14]
push 0x4d5231
push 0
push str.Out_of_memory.
call fcn.0043ea30
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4