Function at 0x49ddf0
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53be8b
mov eax, dword fs:[0]
push eax
sub esp, 0x2d8
mov eax, dword [0x58b464]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2dc], ecx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x2c8], ebx
call fcn.00453ec0
push eax
lea ecx, [ebp - 0x94]
call fcn.0044d8f0
mov dword [ebp - 4], 0
call fcn.00453ed0
mov ecx, eax
call fcn.0044e530
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
test al, al
je 0x49df25
push ebx
lea ecx, [ebp - 0x94]
call fcn.0044dd00
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [ebp - 0x94]
call fcn.00532960
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x49dea9
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], eax
call fcn.0044da40
jmp 0x49e154
push 0
push ebx
call esi
mov esi, eax
test esi, esi
jne 0x49decb
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044da40
jmp 0x49e14e
push esi
mov dword [ebp - 0x2cc], 0
call fcn.004f1ae7
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2cc]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2cc], esi
je 0x49e134
push edi
call fcn.004f18aa
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044da40
jmp 0x49e14e
call fcn.00454190
test al, al
jne 0x49e042
call fcn.00453ed0
push eax
lea ecx, [ebp - 0x94]
call fcn.0044dce0
call fcn.00454140
test al, al
je 0x49df53
call fcn.00453ee0
jmp 0x49df6b
push 2
push 0
lea ecx, [ebp - 0x94]
call fcn.00532960
push eax
call fcn.0046af90
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x49df88
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044da40
jmp 0x49e154
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2d4]
push eax
push 1
push dword [ebp - 0x2c8]
push ebx
call fcn.0046a8a0
add esp, 0x14
test eax, eax
je 0x49dfc2
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044da40
jmp 0x49e154
mov esi, dword [ebp - 0x98]
test esi, esi
jne 0x49dfe3
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044da40
jmp 0x49e14e
push esi
call fcn.004f1ae7
push 3
push esi
mov edi, eax
push edi
push dword [ebp - 0x2d4]
push ebx
call fcn.0046b420
add esp, 0x18
test eax, eax
je 0x49e02a
cmp eax, 0x600
je 0x49e02a
push edi
call fcn.004f18aa
add esp, 4
call fcn.00454140
test al, al
jne 0x49df0e
push ebx
call fcn.0046a680
jmp 0x49df0b
call fcn.00454140
test al, al
jne 0x49e134
push ebx
call fcn.0046a680
jmp 0x49e131
call fcn.00453ed0
push eax
lea ecx, [ebp - 0x94]
call fcn.0044dce0
call fcn.00454140
test al, al
je 0x49e063
call fcn.00453ee0
jmp 0x49e07b
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.00532960
push eax
call fcn.0046f440
add esp, 0xc
mov ebx, eax
test ebx, ebx
jne 0x49e098
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044da40
jmp 0x49e154
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x2d8]
push eax
push dword [ebp - 0x2c8]
push ebx
call fcn.0046ed40
add esp, 0x10
test eax, eax
je 0x49e0d0
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044da40
jmp 0x49e154
mov esi, dword [ebp - 0x2e4]
test esi, esi
je 0x49df0e
push esi
call fcn.004f1ae7
mov edi, eax
push edi
push dword [ebp - 0x2d8]
push ebx
call fcn.0046f6b0
add esp, 0x10
test eax, eax
je 0x49e122
cmp eax, 0x600
je 0x49e122
push edi
call fcn.004f18aa
add esp, 4
call fcn.00454140
test al, al
jne 0x49df0e
push ebx
call fcn.0046ec50
jmp 0x49df0b
call fcn.00454140
test al, al
jne 0x49e134
push ebx
call fcn.0046ec50
add esp, 4
lea ecx, [ebp - 0x94]
mov dword [ebp - 4], 0xffffffff
call fcn.0044da40
test edi, edi
jne 0x49e1cf
mov esi, dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push dword [ebp - 0x2c8]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x49e1cb
push 0
push ebx
call esi
mov esi, eax
test esi, esi
je 0x49e1cb
push esi
mov dword [ebp - 0x2d0], 0
call fcn.004f1ae7
add esp, 4
mov edi, eax
lea eax, [ebp - 0x2d0]
push 0
push eax
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x2d0], esi
je 0x49e1c7
push edi
call fcn.004f18aa
add esp, 4
xor eax, eax
jmp 0x49e1eb
test edi, edi
jne 0x49e1cf
xor eax, eax
jmp 0x49e1eb
mov ecx, dword [ebp - 0x2dc]
push esi
push edi
call fcn.0049e210
push 1
push edi
mov esi, eax
call fcn.004f15d2
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004f159e
mov esp, ebp
pop ebp
ret 4