Function at 0x4a1170
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55399b
mov eax, dword fs:[0]
push eax
sub esp, 0x2d8
mov eax, dword [0x5a7464]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2dc], ecx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x2c8], ebx
call fcn.00457300
push eax
lea ecx, [ebp - 0x94]
call fcn.00450c90
mov dword [ebp - 4], 0
call fcn.00457310
mov ecx, eax
call fcn.004518d0
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
test al, al
je 0x4a12a5
push ebx
lea ecx, [ebp - 0x94]
call fcn.004510a0
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [ebp - 0x94]
call fcn.00450fa0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x4a1229
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], eax
call fcn.00450df0
jmp 0x4a14d4
push 0
push ebx
call esi
mov esi, eax
test esi, esi
jne 0x4a124b
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00450df0
jmp 0x4a14ce
push esi
mov dword [ebp - 0x2cc], 0
call fcn.0050724e
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2cc]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2cc], esi
je 0x4a14b4
push edi
call fcn.00506f0d
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00450df0
jmp 0x4a14ce
call fcn.004575d0
test al, al
jne 0x4a13c2
call fcn.00457310
push eax
lea ecx, [ebp - 0x94]
call fcn.00451080
call fcn.00457580
test al, al
je 0x4a12d3
call fcn.00457320
jmp 0x4a12eb
push 2
push 0
lea ecx, [ebp - 0x94]
call fcn.00450fa0
push eax
call fcn.0046e350
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x4a1308
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00450df0
jmp 0x4a14d4
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2d4]
push eax
push 1
push dword [ebp - 0x2c8]
push ebx
call fcn.0046dc60
add esp, 0x14
test eax, eax
je 0x4a1342
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00450df0
jmp 0x4a14d4
mov esi, dword [ebp - 0x98]
test esi, esi
jne 0x4a1363
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00450df0
jmp 0x4a14ce
push esi
call fcn.0050724e
push 3
push esi
mov edi, eax
push edi
push dword [ebp - 0x2d4]
push ebx
call fcn.0046e7e0
add esp, 0x18
test eax, eax
je 0x4a13aa
cmp eax, 0x600
je 0x4a13aa
push edi
call fcn.00506f0d
add esp, 4
call fcn.00457580
test al, al
jne 0x4a128e
push ebx
call fcn.0046da40
jmp 0x4a128b
call fcn.00457580
test al, al
jne 0x4a14b4
push ebx
call fcn.0046da40
jmp 0x4a14b1
call fcn.00457310
push eax
lea ecx, [ebp - 0x94]
call fcn.00451080
call fcn.00457580
test al, al
je 0x4a13e3
call fcn.00457320
jmp 0x4a13fb
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.00450fa0
push eax
call fcn.00472800
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x4a1418
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00450df0
jmp 0x4a14d4
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x2d8]
push eax
push dword [ebp - 0x2c8]
push ebx
call fcn.00472100
add esp, 0x10
test eax, eax
je 0x4a1450
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00450df0
jmp 0x4a14d4
mov esi, dword [ebp - 0x2e4]
test esi, esi
je 0x4a128e
push esi
call fcn.0050724e
mov edi, eax
push edi
push dword [ebp - 0x2d8]
push ebx
call fcn.00472a70
add esp, 0x10
test eax, eax
je 0x4a14a2
cmp eax, 0x600
je 0x4a14a2
push edi
call fcn.00506f0d
add esp, 4
call fcn.00457580
test al, al
jne 0x4a128e
push ebx
call fcn.00472010
jmp 0x4a128b
call fcn.00457580
test al, al
jne 0x4a14b4
push ebx
call fcn.00472010
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00450df0
test edi, edi
jne 0x4a154f
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push dword [ebp - 0x2c8]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4a154b
push 0
push ebx
call esi
mov esi, eax
test esi, esi
je 0x4a154b
push esi
mov dword [ebp - 0x2d0], 0
call fcn.0050724e
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2d0]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2d0], esi
je 0x4a1547
push edi
call fcn.00506f0d
add esp, 4
xor eax, eax
jmp 0x4a156b
test edi, edi
jne 0x4a154f
xor eax, eax
jmp 0x4a156b
mov ecx, dword [ebp - 0x2dc]
push esi
push edi
call fcn.004a1590
push 1
push edi
mov esi, eax
call fcn.00506c54
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00506c20
mov esp, ebp
pop ebp
ret 4