Function at 0x449ef0
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
mov ecx, dword [0x4427c4]
mov ebp, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
xor ecx, esp
mov dword [esp + 0x18], ecx
push 0
push 0x80
push 3
push 0
push 0
push 0x80000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x432ef8cf
mov dword [esp + 8], eax
mov dword [esp + 4], eax
jmp 0x449f4d
push dword [esp + 8]
call esi
mov ecx, 0xeae56f83
mov al, 1
mov dword [esp], eax
cmp ecx, 0x12f69b8a
jg 0x449f78
jmp 0x449fc0
push dword [esp + 8]
call esi
mov ecx, 0xeae56f83
mov dword [esp], 0
nop dword [eax]
cmp ecx, 0x12f69b8a
jle 0x449fc0
cmp ecx, 0x1dee3112
jle 0x44a010
cmp ecx, 0x5ea5f4a3
jg 0x44a0d6
cmp ecx, 0x1dee3113
je 0x449f40
cmp ecx, 0x432ef8cf
jne 0x449f70
mov eax, dword [esp + 8]
mov ecx, 0x12f69b8b
cmp eax, 0xffffffff
je 0x449f70
mov ecx, 0x1c517f15
cmp ecx, 0x12f69b8a
jg 0x449f78
nop dword [eax + eax]
cmp ecx, 0xd4f0680e
jg 0x44a090
cmp ecx, 0x9b273947
jle 0x44a165
cmp ecx, 0x9b273948
je 0x44a182
cmp ecx, 0xc09ebca8
jne 0x449f70
cmp byte [esp + 0x13], 0
mov ecx, 0x17b9a939
jne 0x449f70
mov ecx, 0x9b273948
cmp ecx, 0x12f69b8a
jg 0x449f78
jmp 0x449fc0
cmp ecx, 0x12f69b8b
je 0x44a1c9
cmp ecx, 0x17b9a939
je 0x449f5a
cmp ecx, 0x1c517f15
jne 0x449f70
mov ecx, dword [0x4434c0]
mov eax, dword [0x4434c4]
mov edi, 0x6bd1e234
lea edx, [ecx - 1]
imul edx, ecx
mov ecx, 0x6bd1e234
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
mov edx, 0x94e31ce9
sete bl
je 0x44a066
mov edi, 0x94e31ce9
cmp eax, 0xa
setl al
cmovl edx, edi
xor al, bl
jne 0x449f70
mov ecx, edx
cmp ecx, 0x12f69b8a
jg 0x449f78
jmp 0x449fc0
cmp ecx, 0xd4f0680f
je 0x44a1e7
cmp ecx, 0xeae56f83
je 0x44a214
cmp ecx, 0x9592ba0
jne 0x449f70
push dword [esp + 0x14]
call fcn.0041412c
add esp, 4
mov ecx, 0x5ea5f4a4
cmp ecx, 0x12f69b8a
jg 0x449f78
jmp 0x449fc0
cmp ecx, 0x5ea5f4a4
je 0x449f5a
cmp ecx, 0x6bd1e234
jne 0x449f70
mov esi, ebp
push 0
push dword [esp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, dword [0x4434c0]
mov edx, dword [0x4434c4]
mov ebx, 0xc09ebca8
lea edi, [ecx - 1]
imul edi, ecx
mov ebp, edi
xor ebp, 0xfffffffe
test ebp, edi
sete cl
cmp edx, 0xa
setl ch
xor ch, cl
mov ecx, 0xc09ebca8
jne 0x44a131
mov ebx, 0x94e31ce9
mov dword [esp + 0xc], eax
test ebp, edi
mov ebp, esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0xc]
cmovne ecx, ebx
cmp edx, 0xa
cmovge ecx, ebx
cmp eax, 0xffffffff
sete byte [esp + 0x13]
cmp ecx, 0x12f69b8a
jg 0x449f78
jmp 0x449fc0
cmp ecx, 0x94e31ce9
je 0x44a231
cmp ecx, 0x918e5a83
jne 0x449f70
jmp 0x44a253
push dword [esp + 0xc]
call fcn.00414123
add esp, 4
mov dword [ebp], eax
push 0
push dword [esp + 0x3c]
push dword [esp + 0x14]
push eax
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
mov ecx, 0xd4f0680f
je 0x449f70
mov ecx, 0x1dee3113
cmp ecx, 0x12f69b8a
jg 0x449f78
jmp 0x449fc0
mov ecx, 0x918e5a83
mov dword [esp + 4], 0
cmp ecx, 0x12f69b8a
jg 0x449f78
jmp 0x449fc0
mov eax, dword [ebp]
mov ecx, 0x5ea5f4a4
mov dword [esp + 0x14], eax
cmp dword [esp + 0x14], 0
je 0x449f70
mov ecx, 0x9592ba0
cmp ecx, 0x12f69b8a
jg 0x449f78
jmp 0x449fc0
mov eax, dword [esp]
mov ecx, 0x918e5a83
mov dword [esp + 4], eax
cmp ecx, 0x12f69b8a
jg 0x449f78
jmp 0x449fc0
push 0
push dword [esp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, 0x6bd1e234
cmp ecx, 0x12f69b8a
jg 0x449f78
jmp 0x449fc0
mov ebx, dword [esp + 4]
mov ecx, dword [esp + 0x18]
xor ecx, esp
and bl, 1
call fcn.00414131
mov eax, ebx
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret