Function at 0x2e01bf78
Capabilities:
Get file size
Read file on windows

Disassembly:
push 0x368
mov eax, 0x2e04005f
call fcn.2e02f920
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0x14]
mov esi, dword [ebp + 0x18]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp + 0x10]
xor ebx, ebx
push ebx
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x220], 7
call fcn.2e00d4aa
push esi
lea eax, [ebp - 0x254]
push eax
mov ecx, edi
mov dword [ebp - 4], ebx
call fcn.2e01fe9c
or dword [ebp - 0x298], 0xffffffff
mov esi, 0x104
push esi
lea eax, [ebp - 0x21c]
push eax
push ebx
mov dword [ebp - 0x2a4], ebx
mov dword [ebp - 0x29c], ebx
mov byte [ebp - 4], 2
call dword [0x2e049690]
cmp eax, ebx
je 0x2e01c47b
cmp eax, esi
je 0x2e01c47b
cmp dword [ebp - 0x240], ebx
jbe 0x2e01c25f
cmp dword [ebp - 0x23c], 8
mov eax, dword [ebp - 0x250]
jae 0x2e01c02e
lea eax, [ebp - 0x250]
push eax
mov ecx, edi
call fcn.2e01f7d8
cmp al, bl
jne 0x2e01c25f
push ebx
lea ecx, [ebp - 0x28c]
mov dword [ebp - 0x274], 7
call fcn.2e00d4aa
push 0x2e0060f8
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 3
call fcn.2e00eb13
cmp dword [ebp - 0x258], 8
mov eax, dword [ebp - 0x26c]
mov byte [ebp - 4], 4
jae 0x2e01c081
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x2f0]
push eax
mov ecx, edi
call fcn.2e020327
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 5
call fcn.2e00dd12
push ebx
push 1
lea ecx, [ebp - 0x2f0]
mov byte [ebp - 4], 4
call fcn.2e00d621
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x238]
call fcn.2e01bce1
push 0x2e0060f4
lea ecx, [ebp - 0x238]
call fcn.2e01be3b
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp - 0x238]
call fcn.2e01bce1
mov esi, 0x2e049420
push 0x2e0060c4
mov ecx, esi
call fcn.2e025fc5
cmp dword [ebp - 0x220], 8
mov eax, dword [ebp - 0x234]
jae 0x2e01c115
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x374]
call fcn.2e00d5ba
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 6
call fcn.2e025fc5
lea eax, [ebp - 0x370]
mov byte [ebp - 4], 4
cmp dword [ebp - 0x374], eax
je 0x2e01c14c
push dword [ebp - 0x374]
call fcn.2e02f1e7
pop ecx
push 0x2e00141c
mov ecx, esi
call fcn.2e025fc5
push 0x2e00137c
mov ecx, esi
call fcn.2e025fc5
cmp dword [ebp - 0x220], 8
mov eax, dword [ebp - 0x234]
jae 0x2e01c179
lea eax, [ebp - 0x234]
push ebx
push 0x8000080
push 3
push ebx
push 1
push SysReAllocString
push eax
call dword [0x2e04968c]
mov edi, eax
mov dword [ebp - 0x298], edi
cmp edi, 0xffffffff
jne 0x2e01c1c8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x290]
call fcn.2e00e7c9
mov eax, dword [eax]
mov dword [ebp - 0x2c8], eax
push 0x2e042058
lea eax, [ebp - 0x2c8]
push eax
call fcn.2e02ef14
push ebx
push edi
mov dword [ebp - 0x2cc], ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push ebx
push 1
lea ecx, [ebp - 0x270]
mov dword [ebp - 0x2d0], eax
call fcn.2e00d621
push ebx
push 1
lea ecx, [ebp - 0x28c]
call fcn.2e00d621
push 0x2e006080
mov ecx, esi
mov dword [ebp - 4], 1
call fcn.2e025fc5
push 0x2e00137c
mov ecx, esi
call fcn.2e025fc5
mov eax, dword [ebp - 0x2ac]
mov ecx, dword [ebp - 0x2b4]
mov dword [eax], edi
mov eax, dword [ebp - 0x2cc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [ebp - 0x290]
push ebx
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x254]
call fcn.2e00d621
push ebx
push 1
lea ecx, [ebp - 0x238]
call fcn.2e00d621
call fcn.2e02f979
ret 0x14
mov esi, 0x2e049420
push 0x2e0060c4
mov ecx, esi
call fcn.2e025fc5
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x374]
call fcn.2e00d5ba
push dword [eax]
mov ecx, esi
mov byte [ebp - 4], 7
call fcn.2e025fc5
lea eax, [ebp - 0x370]
mov byte [ebp - 4], 2
cmp dword [ebp - 0x374], eax
je 0x2e01c2ad
push dword [ebp - 0x374]
call fcn.2e02f1e7
pop ecx
push 0x2e00141c
mov ecx, esi
call fcn.2e025fc5
push 0x2e00137c
mov ecx, esi
call fcn.2e025fc5
push ebx
push 0x8000080
push 3
push ebx
push 1
push SysReAllocString
lea eax, [ebp - 0x21c]
push eax
call dword [0x2e04968c]
mov edi, eax
mov dword [ebp - 0x298], edi
cmp edi, 0xffffffff
jne 0x2e01c319
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x290]
call fcn.2e00e7c9
mov eax, dword [eax]
mov dword [ebp - 0x2b8], eax
push 0x2e042058
lea eax, [ebp - 0x2b8]
jmp 0x2e01c1c2
push ebx
push ebx
push 0x38
push edi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x2e01c353
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x290]
call fcn.2e00e7c9
mov eax, dword [eax]
mov dword [ebp - 0x2bc], eax
push 0x2e042058
lea eax, [ebp - 0x2bc]
jmp 0x2e01c1c2
push ebx
lea eax, [ebp - 0x29c]
push eax
push 4
lea eax, [ebp - 0x2a4]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x2e01c451
cmp dword [ebp - 0x29c], 4
jb 0x2e01c451
push ebx
push ebx
push dword [ebp - 0x2a4]
push edi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x2e01c3be
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x290]
call fcn.2e00e7c9
mov eax, dword [eax]
mov dword [ebp - 0x2c0], eax
push 0x2e042058
lea eax, [ebp - 0x2c0]
jmp 0x2e01c1c2
push ebx
lea eax, [ebp - 0x29c]
push eax
push 0xc
lea eax, [ebp - 0x2d4]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x2e01c427
cmp dword [ebp - 0x29c], 0xc
jb 0x2e01c427
cmp dword [ebp - 0x2d4], 0xfafbfcfd
je 0x2e01c1f8
push 0x2e006038
mov ecx, esi
call fcn.2e025fc5
push 0x2e00137c
mov ecx, esi
call fcn.2e025fc5
mov al, byte [ebp - 0x29d]
mov byte [ebp - 0x291], al
push 0x2e043b98
lea eax, [ebp - 0x291]
jmp 0x2e01c1c2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x290]
call fcn.2e00e7c9
mov eax, dword [eax]
mov dword [ebp - 0x2b0], eax
push 0x2e042058
lea eax, [ebp - 0x2b0]
jmp 0x2e01c1c2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x290]
call fcn.2e00e7c9
mov eax, dword [eax]
mov dword [ebp - 0x2c4], eax
push 0x2e042058
lea eax, [ebp - 0x2c4]
jmp 0x2e01c1c2
mov esi, 0x2e049420
push 0x2e006000
mov ecx, esi
call fcn.2e025fc5
push 0x2e00137c
mov ecx, esi
call fcn.2e025fc5
push 0x7b
lea ecx, [ebp - 0x290]
call fcn.2e00e7c9
mov eax, dword [eax]
mov dword [ebp - 0x2a8], eax
push 0x2e042058
lea eax, [ebp - 0x2a8]
jmp 0x2e01c1c2