Function at 0x48d9c0
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x529adb
mov eax, dword fs:[0]
push eax
sub esp, 0x2d8
mov eax, dword [0x575464]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2dc], ecx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x2c8], ebx
call fcn.00441290
push eax
lea ecx, [ebp - 0x94]
call fcn.0043d430
mov dword [ebp - 4], 0
call fcn.004412a0
mov ecx, eax
call fcn.0043e080
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
test al, al
je 0x48daf5
push ebx
lea ecx, [ebp - 0x94]
call fcn.0043d830
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [ebp - 0x94]
call fcn.0043de20
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x48da79
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], eax
call fcn.0043d580
jmp 0x48dd24
push 0
push ebx
call esi
mov esi, eax
test esi, esi
jne 0x48da9b
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d580
jmp 0x48dd1e
push esi
mov dword [ebp - 0x2cc], 0
call fcn.004e17f1
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2cc]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2cc], esi
je 0x48dd04
push edi
call fcn.004e15bc
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d580
jmp 0x48dd1e
call fcn.00441560
test al, al
jne 0x48dc12
call fcn.004412a0
push eax
lea ecx, [ebp - 0x94]
call fcn.0043d810
call fcn.00441510
test al, al
je 0x48db23
call fcn.004412b0
jmp 0x48db3b
push 2
push 0
lea ecx, [ebp - 0x94]
call fcn.0043de20
push eax
call fcn.0045c170
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x48db58
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d580
jmp 0x48dd24
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2d4]
push eax
push 1
push dword [ebp - 0x2c8]
push ebx
call fcn.0045ba80
add esp, 0x14
test eax, eax
je 0x48db92
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d580
jmp 0x48dd24
mov esi, dword [ebp - 0x98]
test esi, esi
jne 0x48dbb3
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d580
jmp 0x48dd1e
push esi
call fcn.004e17f1
push 3
push esi
mov edi, eax
push edi
push dword [ebp - 0x2d4]
push ebx
call fcn.0045c600
add esp, 0x18
test eax, eax
je 0x48dbfa
cmp eax, 0x600
je 0x48dbfa
push edi
call fcn.004e15bc
add esp, 4
call fcn.00441510
test al, al
jne 0x48dade
push ebx
call fcn.0045b860
jmp 0x48dadb
call fcn.00441510
test al, al
jne 0x48dd04
push ebx
call fcn.0045b860
jmp 0x48dd01
call fcn.004412a0
push eax
lea ecx, [ebp - 0x94]
call fcn.0043d810
call fcn.00441510
test al, al
je 0x48dc33
call fcn.004412b0
jmp 0x48dc4b
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.0043de20
push eax
call fcn.00460630
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x48dc68
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d580
jmp 0x48dd24
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x2d8]
push eax
push dword [ebp - 0x2c8]
push ebx
call fcn.0045ff30
add esp, 0x10
test eax, eax
je 0x48dca0
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d580
jmp 0x48dd24
mov esi, dword [ebp - 0x2e4]
test esi, esi
je 0x48dade
push esi
call fcn.004e17f1
mov edi, eax
push edi
push dword [ebp - 0x2d8]
push ebx
call fcn.004608a0
add esp, 0x10
test eax, eax
je 0x48dcf2
cmp eax, 0x600
je 0x48dcf2
push edi
call fcn.004e15bc
add esp, 4
call fcn.00441510
test al, al
jne 0x48dade
push ebx
call fcn.0045fe40
jmp 0x48dadb
call fcn.00441510
test al, al
jne 0x48dd04
push ebx
call fcn.0045fe40
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d580
test edi, edi
jne 0x48dd9f
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push dword [ebp - 0x2c8]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x48dd9b
push 0
push ebx
call esi
mov esi, eax
test esi, esi
je 0x48dd9b
push esi
mov dword [ebp - 0x2d0], 0
call fcn.004e17f1
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2d0]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2d0], esi
je 0x48dd97
push edi
call fcn.004e15bc
add esp, 4
xor eax, eax
jmp 0x48ddbb
test edi, edi
jne 0x48dd9f
xor eax, eax
jmp 0x48ddbb
mov ecx, dword [ebp - 0x2dc]
push esi
push edi
call fcn.0048dde0
push 1
push edi
mov esi, eax
call fcn.004e0fe2
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e0fae
mov esp, ebp
pop ebp
ret 4