Function at 0x4a3970
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55668b
mov eax, dword fs:[0]
push eax
sub esp, 0x2d8
mov eax, dword [0x5aa464]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2dc], ecx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x2c8], ebx
call fcn.00459bb0
push eax
lea ecx, [ebp - 0x94]
call fcn.004534b0
mov dword [ebp - 4], 0
call fcn.00459bc0
mov ecx, eax
call fcn.004540f0
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
test al, al
je 0x4a3aa5
push ebx
lea ecx, [ebp - 0x94]
call fcn.004538c0
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [ebp - 0x94]
call fcn.004537c0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x4a3a29
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], eax
call fcn.00453600
jmp 0x4a3cd4
push 0
push ebx
call esi
mov esi, eax
test esi, esi
jne 0x4a3a4b
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00453600
jmp 0x4a3cce
push esi
mov dword [ebp - 0x2cc], 0
call fcn.00509a51
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2cc]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2cc], esi
je 0x4a3cb4
push edi
call fcn.0050972d
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00453600
jmp 0x4a3cce
call fcn.00459e80
test al, al
jne 0x4a3bc2
call fcn.00459bc0
push eax
lea ecx, [ebp - 0x94]
call fcn.004538a0
call fcn.00459e30
test al, al
je 0x4a3ad3
call fcn.00459bd0
jmp 0x4a3aeb
push 2
push 0
lea ecx, [ebp - 0x94]
call fcn.004537c0
push eax
call fcn.00470c00
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x4a3b08
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00453600
jmp 0x4a3cd4
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2d4]
push eax
push 1
push dword [ebp - 0x2c8]
push ebx
call fcn.00470510
add esp, 0x14
test eax, eax
je 0x4a3b42
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00453600
jmp 0x4a3cd4
mov esi, dword [ebp - 0x98]
test esi, esi
jne 0x4a3b63
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00453600
jmp 0x4a3cce
push esi
call fcn.00509a51
push 3
push esi
mov edi, eax
push edi
push dword [ebp - 0x2d4]
push ebx
call fcn.00471090
add esp, 0x18
test eax, eax
je 0x4a3baa
cmp eax, 0x600
je 0x4a3baa
push edi
call fcn.0050972d
add esp, 4
call fcn.00459e30
test al, al
jne 0x4a3a8e
push ebx
call fcn.004702f0
jmp 0x4a3a8b
call fcn.00459e30
test al, al
jne 0x4a3cb4
push ebx
call fcn.004702f0
jmp 0x4a3cb1
call fcn.00459bc0
push eax
lea ecx, [ebp - 0x94]
call fcn.004538a0
call fcn.00459e30
test al, al
je 0x4a3be3
call fcn.00459bd0
jmp 0x4a3bfb
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.004537c0
push eax
call fcn.004750b0
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x4a3c18
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00453600
jmp 0x4a3cd4
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x2d8]
push eax
push dword [ebp - 0x2c8]
push ebx
call fcn.004749b0
add esp, 0x10
test eax, eax
je 0x4a3c50
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00453600
jmp 0x4a3cd4
mov esi, dword [ebp - 0x2e4]
test esi, esi
je 0x4a3a8e
push esi
call fcn.00509a51
mov edi, eax
push edi
push dword [ebp - 0x2d8]
push ebx
call fcn.00475320
add esp, 0x10
test eax, eax
je 0x4a3ca2
cmp eax, 0x600
je 0x4a3ca2
push edi
call fcn.0050972d
add esp, 4
call fcn.00459e30
test al, al
jne 0x4a3a8e
push ebx
call fcn.004748c0
jmp 0x4a3a8b
call fcn.00459e30
test al, al
jne 0x4a3cb4
push ebx
call fcn.004748c0
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00453600
test edi, edi
jne 0x4a3d4f
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push dword [ebp - 0x2c8]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4a3d4b
push 0
push ebx
call esi
mov esi, eax
test esi, esi
je 0x4a3d4b
push esi
mov dword [ebp - 0x2d0], 0
call fcn.00509a51
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2d0]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2d0], esi
je 0x4a3d47
push edi
call fcn.0050972d
add esp, 4
xor eax, eax
jmp 0x4a3d6b
test edi, edi
jne 0x4a3d4f
xor eax, eax
jmp 0x4a3d6b
mov ecx, dword [ebp - 0x2dc]
push esi
push edi
call fcn.004a3d90
push 1
push edi
mov esi, eax
call fcn.00509478
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00509444
mov esp, ebp
pop ebp
ret 4