Function at 0x4a3300
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x555e4b
mov eax, dword fs:[0]
push eax
sub esp, 0x2d8
mov eax, dword [0x5a9464]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2dc], ecx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x2c8], ebx
call fcn.004594c0
push eax
lea ecx, [ebp - 0x94]
call fcn.00452de0
mov dword [ebp - 4], 0
call fcn.004594d0
mov ecx, eax
call fcn.00453a20
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
test al, al
je 0x4a3435
push ebx
lea ecx, [ebp - 0x94]
call fcn.004531f0
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [ebp - 0x94]
call fcn.004537d0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x4a33b9
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], eax
call fcn.00452f30
jmp 0x4a3664
push 0
push ebx
call esi
mov esi, eax
test esi, esi
jne 0x4a33db
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452f30
jmp 0x4a365e
push esi
mov dword [ebp - 0x2cc], 0
call fcn.005093a4
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2cc]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2cc], esi
je 0x4a3644
push edi
call fcn.00509080
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452f30
jmp 0x4a365e
call fcn.00459790
test al, al
jne 0x4a3552
call fcn.004594d0
push eax
lea ecx, [ebp - 0x94]
call fcn.004531d0
call fcn.00459740
test al, al
je 0x4a3463
call fcn.004594e0
jmp 0x4a347b
push 2
push 0
lea ecx, [ebp - 0x94]
call fcn.004537d0
push eax
call fcn.00470530
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x4a3498
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452f30
jmp 0x4a3664
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2d4]
push eax
push 1
push dword [ebp - 0x2c8]
push ebx
call fcn.0046fe40
add esp, 0x14
test eax, eax
je 0x4a34d2
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452f30
jmp 0x4a3664
mov esi, dword [ebp - 0x98]
test esi, esi
jne 0x4a34f3
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452f30
jmp 0x4a365e
push esi
call fcn.005093a4
push 3
push esi
mov edi, eax
push edi
push dword [ebp - 0x2d4]
push ebx
call fcn.004709c0
add esp, 0x18
test eax, eax
je 0x4a353a
cmp eax, 0x600
je 0x4a353a
push edi
call fcn.00509080
add esp, 4
call fcn.00459740
test al, al
jne 0x4a341e
push ebx
call fcn.0046fc20
jmp 0x4a341b
call fcn.00459740
test al, al
jne 0x4a3644
push ebx
call fcn.0046fc20
jmp 0x4a3641
call fcn.004594d0
push eax
lea ecx, [ebp - 0x94]
call fcn.004531d0
call fcn.00459740
test al, al
je 0x4a3573
call fcn.004594e0
jmp 0x4a358b
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.004537d0
push eax
call fcn.004749e0
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x4a35a8
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452f30
jmp 0x4a3664
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x2d8]
push eax
push dword [ebp - 0x2c8]
push ebx
call fcn.004742e0
add esp, 0x10
test eax, eax
je 0x4a35e0
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452f30
jmp 0x4a3664
mov esi, dword [ebp - 0x2e4]
test esi, esi
je 0x4a341e
push esi
call fcn.005093a4
mov edi, eax
push edi
push dword [ebp - 0x2d8]
push ebx
call fcn.00474c50
add esp, 0x10
test eax, eax
je 0x4a3632
cmp eax, 0x600
je 0x4a3632
push edi
call fcn.00509080
add esp, 4
call fcn.00459740
test al, al
jne 0x4a341e
push ebx
call fcn.004741f0
jmp 0x4a341b
call fcn.00459740
test al, al
jne 0x4a3644
push ebx
call fcn.004741f0
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.00452f30
test edi, edi
jne 0x4a36df
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push dword [ebp - 0x2c8]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4a36db
push 0
push ebx
call esi
mov esi, eax
test esi, esi
je 0x4a36db
push esi
mov dword [ebp - 0x2d0], 0
call fcn.005093a4
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2d0]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2d0], esi
je 0x4a36d7
push edi
call fcn.00509080
add esp, 4
xor eax, eax
jmp 0x4a36fb
test edi, edi
jne 0x4a36df
xor eax, eax
jmp 0x4a36fb
mov ecx, dword [ebp - 0x2dc]
push esi
push edi
call fcn.004a3720
push 1
push edi
mov esi, eax
call fcn.00508db8
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00508d84
mov esp, ebp
pop ebp
ret 4