Function at 0x1006488b
Capabilities:
Get file size
Read file on windows

Disassembly:
push 0x738
mov eax, 0x100cffb0
call fcn.10033864
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0x508]
call fcn.1004f5a6
xor ebx, ebx
lea ecx, [ebp - 0x508]
push ebx
push ebx
push esi
mov dword [ebp - 4], ebx
call fcn.10053ea5
lea eax, [ebp - 0x400]
push eax
lea ecx, [ebp - 0x19c]
call fcn.1004dcd2
mov byte [ebp - 4], 1
mov esi, ebx
mov edi, ebx
call fcn.10050f47
push eax
lea ecx, [ebp - 0x94]
call fcn.1004dcd2
mov byte [ebp - 4], 2
call fcn.10050f53
mov ecx, eax
call fcn.1004e4e5
test al, al
je 0x1006499c
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0x94]
call fcn.1004df42
push ebx
push 0x80
push 3
push ebx
push 1
push SysReAllocString
lea ecx, [ebp - 0x94]
call fcn.1004defe
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x1006494d
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 1
call fcn.1004ddfa
jmp 0x10064b16
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
test edi, edi
je 0x10064939
and dword [ebp - 0x744], 0
push edi
call fcn.1002ed8d
pop ecx
push 0
mov esi, eax
lea eax, [ebp - 0x744]
push eax
push edi
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x744], edi
je 0x10064b03
push esi
call fcn.10030bd4
pop ecx
xor esi, esi
jmp 0x10064939
call fcn.10050f53
push eax
lea ecx, [ebp - 0x94]
call fcn.1004df42
call fcn.100511bb
test al, al
je 0x100649bf
call fcn.10050f59
mov ebx, eax
jmp 0x10064a24
call fcn.10050f5f
push eax
lea ecx, [ebp - 0x220]
call fcn.1004dcd2
push ebx
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 3
call fcn.1004defe
push eax
call fcn.1007b095
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x73c], eax
call fcn.1004defe
push eax
call fcn.10017b90
mov ebx, eax
mov eax, dword [ebp - 0x73c]
pop ecx
pop ecx
test eax, eax
je 0x10064a15
push eax
call fcn.10030bd4
pop ecx
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 2
call fcn.1004ddfa
test ebx, ebx
je 0x10064939
and dword [ebp - 0x740], 0
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0x118]
call fcn.1004dcd2
push 0x100d92a4
push 0x100f13b0
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 4
call fcn.1004e6af
lea eax, [ebp - 0x738]
push eax
lea eax, [ebp - 0x740]
push eax
push 1
lea ecx, [ebp - 0x118]
call fcn.1004defe
push eax
push ebx
call fcn.10017c30
add esp, 0x14
test eax, eax
je 0x10064a9b
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 2
call fcn.1004ddfa
jmp 0x10064939
mov edi, dword [ebp - 0x50c]
test edi, edi
je 0x10064a87
push edi
call fcn.1002ed8d
push edi
mov esi, eax
push esi
push dword [ebp - 0x740]
push ebx
call fcn.10018000
add esp, 0x14
test eax, eax
je 0x10064ae4
cmp eax, 0x600
je 0x10064ae4
push esi
call fcn.10030bd4
pop ecx
xor esi, esi
call fcn.100511bb
test al, al
jne 0x10064a87
push ebx
call fcn.10018050
pop ecx
jmp 0x10064a87
call fcn.100511bb
test al, al
jne 0x10064af4
push ebx
call fcn.10018050
pop ecx
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 2
call fcn.1004ddfa
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 1
call fcn.1004ddfa
test esi, esi
jne 0x10064b8a
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [ebp - 0x19c]
call fcn.1004defe
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x10064b8a
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
test edi, edi
je 0x10064b8a
and dword [ebp - 0x73c], 0
push edi
call fcn.1002ed8d
pop ecx
push 0
mov esi, eax
lea eax, [ebp - 0x73c]
push eax
push edi
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x73c], edi
je 0x10064b8a
push esi
call fcn.10030bd4
pop ecx
xor esi, esi
xor ebx, ebx
test esi, esi
je 0x10064ba2
push edi
push esi
call fcn.10064820
push esi
mov ebx, eax
call fcn.10030bd4
add esp, 0xc
lea ecx, [ebp - 0x19c]
mov byte [ebp - 4], 0
call fcn.1004ddfa
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x508]
call fcn.1004fa22
mov eax, ebx
call fcn.10033822
ret