Function at 0x44e55e
Capabilities:
Get file size
Read file on windows

Disassembly:
push 0x73c
mov eax, 0x49c096
call fcn.00481105
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x508]
call fcn.0042ba65
xor ebx, ebx
push ebx
push ebx
push esi
lea ecx, [ebp - 0x508]
mov dword [ebp - 4], ebx
call fcn.0042bad5
lea eax, [ebp - 0x400]
push eax
lea ecx, [ebp - 0x19c]
call fcn.004292ac
mov byte [ebp - 4], 1
mov dword [ebp - 0x73c], ebx
xor esi, esi
call fcn.00429bf3
push eax
lea ecx, [ebp - 0x94]
call fcn.004292ac
mov byte [ebp - 4], 2
call fcn.00429bf9
mov ecx, eax
call fcn.00428f98
test al, al
je 0x44e67d
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0x94]
call fcn.00429014
push ebx
push 0x80
push 3
push ebx
push 1
push Ordinal_1
lea ecx, [ebp - 0x94]
call fcn.00428e17
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x44e624
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 1
call fcn.00428e6d
jmp 0x44e807
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
cmp esi, ebx
je 0x44e610
push esi
mov dword [ebp - 0x744], ebx
call fcn.00479152
pop ecx
push ebx
lea ecx, [ebp - 0x744]
push ecx
push esi
push eax
push edi
mov dword [ebp - 0x73c], eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x744], esi
je 0x44e7f0
push dword [ebp - 0x73c]
call fcn.0047af65
pop ecx
mov dword [ebp - 0x73c], ebx
jmp 0x44e610
call fcn.00429bf9
push eax
lea ecx, [ebp - 0x94]
call fcn.00429014
call fcn.00429c05
test al, al
je 0x44e6a0
call fcn.00429c0b
mov edi, eax
jmp 0x44e705
call fcn.00429bff
push eax
lea ecx, [ebp - 0x220]
call fcn.004292ac
push ebx
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 3
call fcn.00428e17
push eax
call fcn.00459d58
pop ecx
pop ecx
mov edi, eax
push edi
lea ecx, [ebp - 0x94]
call fcn.00428e17
push eax
call fcn.004553a9
pop ecx
pop ecx
mov dword [ebp - 0x740], eax
cmp edi, ebx
je 0x44e6f0
push edi
call fcn.0047af65
pop ecx
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 2
call fcn.00428e6d
mov edi, dword [ebp - 0x740]
cmp edi, ebx
je 0x44e610
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x748], ebx
call fcn.004292ac
push 0x4bae28
push 0x4bae2c
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 4
call fcn.0042940c
lea eax, [ebp - 0x738]
push eax
lea eax, [ebp - 0x748]
push eax
push 1
lea ecx, [ebp - 0x118]
call fcn.00428e17
push eax
push edi
call fcn.00453923
add esp, 0x14
test eax, eax
je 0x44e77b
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 2
call fcn.00428e6d
jmp 0x44e610
mov esi, dword [ebp - 0x50c]
cmp esi, ebx
je 0x44e767
push esi
call fcn.00479152
push esi
push eax
push dword [ebp - 0x748]
mov dword [ebp - 0x73c], eax
push edi
call fcn.00455410
add esp, 0x14
cmp eax, ebx
je 0x44e7d1
cmp eax, 0x600
je 0x44e7d1
push dword [ebp - 0x73c]
call fcn.0047af65
pop ecx
mov dword [ebp - 0x73c], ebx
call fcn.00429c05
test al, al
jne 0x44e767
push edi
call fcn.0045542b
pop ecx
jmp 0x44e767
call fcn.00429c05
test al, al
jne 0x44e7e1
push edi
call fcn.0045542b
pop ecx
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 2
call fcn.00428e6d
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 1
call fcn.00428e6d
cmp dword [ebp - 0x73c], ebx
jne 0x44e883
push ebx
push 0x80
push 3
push ebx
push 1
push Ordinal_1
lea ecx, [ebp - 0x19c]
call fcn.00428e17
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x44e883
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
cmp esi, ebx
je 0x44e883
push esi
mov dword [ebp - 0x740], ebx
call fcn.00479152
pop ecx
push ebx
lea ecx, [ebp - 0x740]
push ecx
push esi
push eax
push edi
mov dword [ebp - 0x73c], eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x740], esi
je 0x44e883
push dword [ebp - 0x73c]
call fcn.0047af65
pop ecx
mov dword [ebp - 0x73c], ebx
xor edi, edi
cmp dword [ebp - 0x73c], ebx
je 0x44e8a9
push esi
push dword [ebp - 0x73c]
call fcn.0044d2c6
push dword [ebp - 0x73c]
mov edi, eax
call fcn.0047af65
add esp, 0xc
lea ecx, [ebp - 0x19c]
mov byte [ebp - 4], bl
call fcn.00428e6d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x508]
call fcn.00429a8d
mov eax, edi
call fcn.00481188
ret