Function at 0x444807
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f61fa
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x63c
mov dword [ebp - 0x644], ecx
push 0
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x28]
call fcn.0043c230
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.00401900
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x88]
call fcn.00401900
mov byte [ebp - 4], 2
mov byte [ebp - 0x628], 0
mov dword [0x53a030], 1
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocStringLen
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x624], eax
cmp dword [ebp - 0x624], 0xffffffff
jne 0x4448d6
mov dword [ebp - 0x638], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x88]
call fcn.004e812c
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.004e812c
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00401840
mov eax, dword [ebp - 0x638]
jmp 0x444bdb
push 0
mov ecx, dword [ebp - 0x624]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x10], eax
push 0x1000
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jne 0x44493d
mov dword [ebp - 0x63c], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x88]
call fcn.004e812c
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.004e812c
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00401840
mov eax, dword [ebp - 0x63c]
jmp 0x444bdb
mov dword [ebp - 0x2c], 0
mov edx, 1
test edx, edx
je 0x444a7d
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x10]
jb 0x44495e
jmp 0x444a7d
cmp dword [ebp - 0x10], 0x1000
jae 0x444972
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x648], ecx
jmp 0x44497c
mov dword [ebp - 0x648], 0x1000
mov edx, dword [ebp - 0x648]
mov dword [ebp - 0x62c], edx
push 0
lea eax, [ebp - 0x8c]
push eax
mov ecx, dword [ebp - 0x62c]
push ecx
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x624]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x62c], ecx
mov edx, dword [ebp - 0x62c]
mov dword [ebp - 0x8c], edx
mov dword [ebp - 0x630], 0
jmp 0x4449df
mov eax, dword [ebp - 0x630]
add eax, 1
mov dword [ebp - 0x630], eax
mov ecx, dword [ebp - 0x630]
cmp ecx, dword [ebp - 0x62c]
jae 0x444a06
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x630]
mov al, byte [ebp - 0x628]
add al, byte [edx]
mov byte [ebp - 0x628], al
jmp 0x4449d0
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [ebp - 0x62c]
jae 0x444a6c
mov edx, dword [ebp - 0x62c]
sub edx, dword [ebp - 0x8c]
mov dword [ebp - 0x634], edx
mov eax, dword [ebp - 0x62c]
sub eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x634], eax
jae 0x444a5a
mov ecx, dword [ebp - 0x62c]
sub ecx, dword [ebp - 0x8c]
sub ecx, dword [ebp - 0x634]
mov edx, dword [ebp - 0x634]
add edx, ecx
mov dword [ebp - 0x634], edx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x634]
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x2c], ecx
jmp 0x444944
mov edx, dword [ebp - 0x624]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp + 0x10], 1
jle 0x444ad5
mov eax, dword [ebp - 0x628]
and eax, 0xff
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
push 0x522164
lea eax, [ebp - 0x620]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x52219c
push 0x5221a8
lea ecx, [ebp - 0x84]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x444aff
mov edx, dword [ebp - 0x628]
and edx, 0xff
push edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
push 0x5221c4
lea edx, [ebp - 0x620]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x90]
call fcn.004e819a
mov byte [ebp - 4], 3
cmp dword [ebp + 0x10], 1
jle 0x444b44
cmp dword [ebp + 0x14], 0
je 0x444b44
mov ecx, dword [ebp + 0x14]
push ecx
lea edx, [ebp - 0x84]
push edx
lea eax, [ebp - 0x620]
push eax
lea ecx, [ebp - 0x90]
push ecx
mov ecx, dword [ebp - 0x644]
call fcn.004442e9
jmp 0x444b63
mov edx, dword [ebp + 0x14]
push edx
push 0
lea eax, [ebp - 0x620]
push eax
lea ecx, [ebp - 0x90]
push ecx
mov ecx, dword [ebp - 0x644]
call fcn.004442e9
mov edx, dword [ebp + 8]
push edx
push 0x5221f8
call fcn.0044e760
add esp, 8
lea eax, [ebp - 0x220]
push eax
push 0x522218
call fcn.0044e760
add esp, 8
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [ebp - 0x640], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x90]
call fcn.004e812c
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x88]
call fcn.004e812c
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.004e812c
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00401840
mov eax, dword [ebp - 0x640]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10