Function at 0x4195a0
Capabilities:
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4818d8
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x49b1b0]
xor eax, esp
mov dword [esp + 0x60], eax
push ebx
push esi
push edi
mov eax, dword [0x49b1b0]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov eax, dword [esi]
cmp eax, 0xffffffff
mov ebx, ecx
mov dword [esp + 0x2c], esi
je 0x419602
lea ecx, [esp + 0x18]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, 0xffffffff
jne 0x419664
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x419664
xor edi, edi
push edi
push 0x4851c0
lea esi, [esp + 0x38]
mov dword [esp + 0x50], 7
mov dword [esp + 0x4c], edi
mov word [esp + 0x3c], di
call fcn.00401df0
mov dword [esp + 0x80], edi
mov esi, dword [ebx]
add esi, 0x34
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [esi]
lea edx, [esp + 0x34]
push edx
push 0x10000002
mov ecx, ebx
call eax
cmp dword [esp + 0x48], 8
jb 0x41984f
mov ecx, dword [esp + 0x34]
push ecx
call fcn.00469d48
add esp, 4
jmp 0x41984f
xor eax, eax
mov dword [esp + 0x69], eax
mov word [esp + 0x6d], ax
mov byte [esp + 0x6f], al
mov eax, dword [esi]
cmp eax, 0xffffffff
mov byte [esp + 0x68], 0
je 0x41984f
push 0
lea edx, [esp + 0x14]
push edx
push 8
lea ecx, [esp + 0x74]
push ecx
push eax
mov dword [esp + 0x24], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x41984f
mov ecx, dword [esp + 0x10]
test ecx, ecx
seta al
test al, al
je 0x41984f
cmp ecx, 8
jne 0x41984f
movzx edx, byte [esp + 0x68]
mov eax, 0x47
sub eax, edx
jne 0x4196ec
movzx ecx, byte [esp + 0x69]
mov eax, 0x4d
sub eax, ecx
jne 0x4196ec
movzx edx, byte [esp + 0x6a]
mov eax, 0x5a
sub eax, edx
je 0x4196fa
test eax, eax
mov ecx, 1
jg 0x4196fc
or ecx, 0xffffffff
jmp 0x4196fc
xor ecx, ecx
test ecx, ecx
jne 0x41984f
mov al, byte [esp + 0x6b]
cmp al, 1
mov byte [ebx + 0xa8], al
jbe 0x419728
mov eax, dword [ebx]
mov edx, dword [eax + 0x38]
push ecx
push 3
push 0x30000001
mov ecx, ebx
call edx
jmp 0x41984f
mov edi, dword [esp + 0x6c]
cmp edi, 0x3200000
mov dword [esp + 0x18], edi
jbe 0x41974f
mov eax, dword [ebx]
mov edx, dword [eax + 0x38]
push 0
push 4
push 0x30000001
mov ecx, ebx
call edx
jmp 0x41984f
lea esi, [esp + 0x1c]
call fcn.0041d3b0
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x80], 1
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x24]
push edi
lea esi, [esp + 0x14]
call fcn.00415480
test al, al
jne 0x4197bd
mov edx, 0x4851c0
lea eax, [esp + 0x4c]
call fcn.00404820
mov byte [esp + 0x80], 2
mov esi, dword [ebx]
add esi, 0x34
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [esi]
push eax
lea eax, [esp + 0x50]
push eax
push 0x10000002
mov ecx, ebx
call edx
lea esi, [esp + 0x4c]
call fcn.0040d6b0
jmp 0x419846
cmp dword [esp + 0x10], edi
je 0x4197d7
mov eax, dword [ebx]
mov edx, dword [eax + 0x38]
push 0
push 8
push 0x30000001
mov ecx, ebx
call edx
jmp 0x419846
mov eax, dword [esp + 0x20]
cmp edi, eax
mov dword [esp + 0x28], eax
ja 0x4197e7
mov dword [esp + 0x28], edi
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
lea esi, [ebx + 8]
push ecx
mov ecx, esi
mov dword [esp + 0x1c], 0
call fcn.00418f50
test al, al
je 0x419834
cmp dword [esp + 0x14], edi
jne 0x419834
mov ecx, esi
mov byte [ebx + 0xf0], 1
call fcn.00419220
lea ecx, [esp + 0x1c]
mov dword [ebx + 0x108], eax
mov dword [ebx + 0x10c], edx
call fcn.0040ca60
mov al, 1
jmp 0x419851
mov edx, dword [ebx]
mov eax, dword [edx + 0x38]
push 0
push 8
push 0x30000001
mov ecx, ebx
call eax
lea ecx, [esp + 0x1c]
call fcn.0040ca60
xor al, al
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.00469ab5
mov esp, ebp
pop ebp
ret 4