Function at 0x48da00
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x529b6b
mov eax, dword fs:[0]
push eax
sub esp, 0x2d8
mov eax, dword [0x575464]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2dc], ecx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x2c8], ebx
call fcn.004412c0
push eax
lea ecx, [ebp - 0x94]
call fcn.0043d460
mov dword [ebp - 4], 0
call fcn.004412d0
mov ecx, eax
call fcn.0043e0a0
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
test al, al
je 0x48db35
push ebx
lea ecx, [ebp - 0x94]
call fcn.0043d860
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [ebp - 0x94]
call fcn.0043de50
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x48dab9
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], eax
call fcn.0043d5c0
jmp 0x48dd64
push 0
push ebx
call esi
mov esi, eax
test esi, esi
jne 0x48dadb
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d5c0
jmp 0x48dd5e
push esi
mov dword [ebp - 0x2cc], 0
call fcn.004e186e
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2cc]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2cc], esi
je 0x48dd44
push edi
call fcn.004e1639
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d5c0
jmp 0x48dd5e
call fcn.00441590
test al, al
jne 0x48dc52
call fcn.004412d0
push eax
lea ecx, [ebp - 0x94]
call fcn.0043d840
call fcn.00441540
test al, al
je 0x48db63
call fcn.004412e0
jmp 0x48db7b
push 2
push 0
lea ecx, [ebp - 0x94]
call fcn.0043de50
push eax
call fcn.0045c1c0
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x48db98
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d5c0
jmp 0x48dd64
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2d4]
push eax
push 1
push dword [ebp - 0x2c8]
push ebx
call fcn.0045bad0
add esp, 0x14
test eax, eax
je 0x48dbd2
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d5c0
jmp 0x48dd64
mov esi, dword [ebp - 0x98]
test esi, esi
jne 0x48dbf3
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d5c0
jmp 0x48dd5e
push esi
call fcn.004e186e
push 3
push esi
mov edi, eax
push edi
push dword [ebp - 0x2d4]
push ebx
call fcn.0045c650
add esp, 0x18
test eax, eax
je 0x48dc3a
cmp eax, 0x600
je 0x48dc3a
push edi
call fcn.004e1639
add esp, 4
call fcn.00441540
test al, al
jne 0x48db1e
push ebx
call fcn.0045b8b0
jmp 0x48db1b
call fcn.00441540
test al, al
jne 0x48dd44
push ebx
call fcn.0045b8b0
jmp 0x48dd41
call fcn.004412d0
push eax
lea ecx, [ebp - 0x94]
call fcn.0043d840
call fcn.00441540
test al, al
je 0x48dc73
call fcn.004412e0
jmp 0x48dc8b
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.0043de50
push eax
call fcn.00460670
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x48dca8
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d5c0
jmp 0x48dd64
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x2d8]
push eax
push dword [ebp - 0x2c8]
push ebx
call fcn.0045ff70
add esp, 0x10
test eax, eax
je 0x48dce0
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d5c0
jmp 0x48dd64
mov esi, dword [ebp - 0x2e4]
test esi, esi
je 0x48db1e
push esi
call fcn.004e186e
mov edi, eax
push edi
push dword [ebp - 0x2d8]
push ebx
call fcn.004608e0
add esp, 0x10
test eax, eax
je 0x48dd32
cmp eax, 0x600
je 0x48dd32
push edi
call fcn.004e1639
add esp, 4
call fcn.00441540
test al, al
jne 0x48db1e
push ebx
call fcn.0045fe80
jmp 0x48db1b
call fcn.00441540
test al, al
jne 0x48dd44
push ebx
call fcn.0045fe80
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0043d5c0
test edi, edi
jne 0x48dddf
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push dword [ebp - 0x2c8]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x48dddb
push 0
push ebx
call esi
mov esi, eax
test esi, esi
je 0x48dddb
push esi
mov dword [ebp - 0x2d0], 0
call fcn.004e186e
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2d0]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2d0], esi
je 0x48ddd7
push edi
call fcn.004e1639
add esp, 4
xor eax, eax
jmp 0x48ddfb
test edi, edi
jne 0x48dddf
xor eax, eax
jmp 0x48ddfb
mov ecx, dword [ebp - 0x2dc]
push esi
push edi
call fcn.0048de20
push 1
push edi
mov esi, eax
call fcn.004e1044
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e1010
mov esp, ebp
pop ebp
ret 4