Function at 0x443d01
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
push edi
xor edi, edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
cmp dword [ebp + 0xc], edi
jne 0x443d32
mov eax, 0x80070057
push eax
push 0x347
push str.c:_agent_work66_s_srclibsdutil_fileutil.cpp
mov esi, eax
call fcn.004038ba
jmp 0x443fb6
cmp dword [ebp + 8], edi
jne 0x443d44
mov eax, 0x80070057
push eax
push 0x348
jmp 0x443d21
mov eax, dword [ebp + 0x10]
test eax, eax
jne 0x443d58
mov eax, 0x80070057
push eax
push 0x349
jmp 0x443d21
xor ecx, ecx
cmp cx, word [eax]
jne 0x443d6c
mov eax, 0x80070057
push eax
push 0x34a
jmp 0x443d21
push ebx
push edi
push 0x8000080
push 3
push edi
push 5
push 0x80000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 4], esi
cmp esi, 0xffffffff
jne 0x443ddf
call ebx
movzx ecx, ax
mov edx, eax
or ecx, 0x80070000
test eax, eax
jle 0x443da7
mov edx, ecx
mov esi, 0x80070002
cmp edx, esi
je 0x443fb5
test eax, eax
je 0x443ddc
mov esi, eax
jle 0x443dbe
mov esi, ecx
test esi, esi
js 0x443dc7
mov esi, 0x80004005
push esi
push 0x354
push str.c:_agent_work66_s_srclibsdutil_fileutil.cpp
call fcn.004038ba
jmp 0x443fb5
mov esi, dword [ebp - 4]
lea eax, [ebp - 0xc]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x443e1d
call ebx
mov esi, eax
test esi, esi
jle 0x443e01
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x443e08
mov esi, 0x80004005
push esi
push 0x359
push str.c:_agent_work66_s_srclibsdutil_fileutil.cpp
call fcn.004038ba
jmp 0x443fa6
cmp dword [ebp + 0x14], edi
je 0x443e6a
mov edi, dword [ebp + 0x18]
xor eax, eax
cmp eax, dword [ebp - 8]
jl 0x443e3d
jg 0x443e33
cmp edi, dword [ebp - 0xc]
jbe 0x443e3d
mov esi, 0x80070057
jmp 0x443fa6
push 1
push eax
push edi
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x443e6a
call ebx
mov esi, eax
test esi, esi
jle 0x443e60
movzx esi, si
or esi, 0x80070000
test esi, esi
jns 0x443e6a
push esi
push 0x367
jmp 0x443e0e
cmp dword [ebp + 0x20], 0
je 0x443e96
mov ebx, dword [ebp + 0x1c]
xor edi, edi
mov esi, dword [ebp + 8]
cmp dword [esi], 0
je 0x443ee4
test ebx, ebx
jne 0x443ec2
push dword [esi]
call fcn.00403aa4
mov dword [esi], edi
mov eax, dword [ebp + 0xc]
mov esi, edi
mov dword [eax], edi
jmp 0x443fa6
mov ecx, dword [ebp - 0xc]
mov ebx, ecx
mov eax, dword [ebp - 8]
sub ebx, edi
sub ecx, edi
push 0
pop edi
sbb eax, edi
cmp edi, eax
jg 0x443e75
jl 0x443eb2
cmp dword [ebp + 0x1c], ecx
jae 0x443e75
mov esi, 0x8007007a
push esi
push 0x379
jmp 0x443e0e
push 1
push ebx
push dword [esi]
call fcn.00403b7c
mov edi, eax
test edi, edi
jne 0x443f08
mov eax, 0x8007000e
push eax
mov esi, eax
push 0x387
jmp 0x443e0e
test ebx, ebx
je 0x443e8a
push 1
push ebx
call fcn.004039df
mov edi, eax
test edi, edi
jne 0x443f08
mov eax, 0x8007000e
push eax
mov esi, eax
push 0x394
jmp 0x443e0e
xor ecx, ecx
mov eax, ecx
mov dword [ebp + 0x10], ecx
mov dword [ebp + 0x1c], eax
jmp 0x443f16
xor ecx, ecx
mov dword [ebp + 0x14], ecx
lea ecx, [ebp + 0x14]
push ecx
push eax
push ebx
call fcn.0043eec2
mov esi, eax
test esi, esi
js 0x443f9c
mov ecx, dword [ebp + 0x1c]
lea eax, [ebp + 0x10]
push 0
push eax
push dword [ebp + 0x14]
add ecx, edi
push ecx
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x443f6e
mov eax, dword [ebp + 0x1c]
add eax, dword [ebp + 0x10]
cmp dword [ebp + 0x10], 0
mov dword [ebp + 0x1c], eax
jne 0x443f14
cmp eax, ebx
je 0x443f60
mov esi, 0x8000ffff
jmp 0x443f9c
mov eax, dword [ebp + 8]
mov dword [eax], edi
xor edi, edi
mov eax, dword [ebp + 0xc]
mov dword [eax], ebx
jmp 0x443f9c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x443f85
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x443f8c
mov esi, 0x80004005
push esi
push 0x3a1
push str.c:_agent_work66_s_srclibsdutil_fileutil.cpp
call fcn.004038ba
test edi, edi
je 0x443fa6
push edi
call fcn.00403aa4
mov eax, dword [ebp - 4]
cmp eax, 0xffffffff
je 0x443fb5
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
pop edi
mov eax, esi
pop esi
leave
ret 0x1c