Function at 0x1004340e
Capabilities:
Get file size
Read file on windows

Disassembly:
push 0x744
mov eax, 0x10045851
call fcn.10030946
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x73c], ecx
mov dword [ebp - 0x748], esi
cmp esi, ebx
jne 0x10043439
xor eax, eax
jmp 0x100437a8
mov edi, 0x208
push edi
lea eax, [ebp - 0x31c]
push ebx
push eax
call fcn.10030b00
push edi
lea eax, [ebp - 0x72c]
push ebx
push eax
call fcn.10030b00
add esp, 0x18
lea eax, [ebp - 0x734]
push eax
push ebx
push ebx
push 2
push ebx
push esi
mov dword [ebp - 0x734], ebx
call sub.WINSPOOL.DRV_GetPrinterDriverW
test eax, eax
jne 0x10043526
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x10043526
push dword [ebp - 0x734]
call fcn.1002fc8d
pop ecx
mov dword [ebp - 0x730], eax
cmp eax, ebx
je 0x10043526
push dword [ebp - 0x734]
push ebx
push eax
call fcn.10030b00
add esp, 0xc
lea eax, [ebp - 0x734]
push eax
push dword [ebp - 0x734]
push dword [ebp - 0x730]
push 2
push ebx
push esi
call sub.WINSPOOL.DRV_GetPrinterDriverW
test eax, eax
jne 0x100434e7
push dword [ebp - 0x730]
call fcn.1002fc7d
pop ecx
jmp 0x10043432
mov eax, dword [ebp - 0x730]
push dword [eax + 0x10]
mov esi, 0x104
push esi
lea eax, [ebp - 0x31c]
push eax
call fcn.1001525b
mov eax, dword [ebp - 0x730]
push dword [eax + 4]
lea eax, [ebp - 0x72c]
push esi
push eax
call fcn.1001525b
push dword [ebp - 0x730]
call fcn.1002fc7d
pop ecx
jmp 0x1004352b
mov esi, 0x104
push 0x100
lea eax, [ebp - 0x114]
push ebx
push eax
call fcn.10030b00
movzx eax, word [ebp + 0xc]
push eax
push 0x1000f790
push 0x1000f780
lea eax, [ebp - 0x114]
push 0x80
push eax
call fcn.1001e1eb
push edi
lea eax, [ebp - 0x524]
push ebx
push eax
call fcn.10030b00
add esp, 0x2c
lea eax, [ebp - 0x31c]
push eax
push esi
lea eax, [ebp - 0x524]
push eax
push 0x1000d11c
lea eax, [ebp - 0x114]
push eax
push 0x1000f764
call fcn.10042f4d
lea eax, [ebp - 0x524]
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
cmp dx, bx
jne 0x1004359c
sub eax, ecx
sar eax, 1
jne 0x1004360c
push 0x1000f790
push 0x1000f758
lea eax, [ebp - 0x114]
push 0x80
push eax
call fcn.1001e1eb
add esp, 0x10
lea eax, [ebp - 0x31c]
push eax
push esi
lea eax, [ebp - 0x524]
push eax
push 0x1000d11c
lea eax, [ebp - 0x114]
push eax
push 0x1000f764
call fcn.10042f4d
lea eax, [ebp - 0x524]
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
cmp dx, bx
jne 0x100435f8
sub eax, ecx
sar eax, 1
je 0x10043432
push edi
call fcn.1002fc8d
pop ecx
mov dword [ebp - 0x738], eax
cmp eax, ebx
je 0x10043432
push edi
push ebx
push eax
call fcn.10030b00
mov edi, dword [ebp - 0x738]
add esp, 0xc
lea eax, [ebp - 0x31c]
push eax
push esi
push edi
call fcn.1001525b
push 0x5c
push edi
call fcn.10031c8b
pop ecx
pop ecx
cmp eax, ebx
jne 0x10043654
push edi
jmp 0x100434dc
push 0x1000d134
push esi
xor ecx, ecx
push edi
mov word [eax], cx
call fcn.1002a6e7
lea eax, [ebp - 0x524]
push eax
push esi
push edi
call fcn.1002a6e7
push ebx
push 0x80
push 3
push ebx
push 1
push 0x80000000
push edi
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x730], eax
cmp eax, 0xffffffff
jne 0x100436af
mov dword [ebp - 0x744], ebx
push 0x10045c78
lea eax, [ebp - 0x744]
push eax
call fcn.100303d8
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, dword [ebp - 0x73c]
lea esi, [edi + 4]
mov dword [esi], eax
cmp eax, ebx
je 0x10043742
cmp eax, 0xffffffff
je 0x10043742
push eax
call fcn.1002fc8d
pop ecx
mov dword [edi], eax
cmp eax, ebx
jne 0x100436eb
mov dword [ebp - 0x74c], ebx
push 0x10045c78
lea eax, [ebp - 0x74c]
jmp 0x100436a9
push ebx
push esi
push dword [esi]
push eax
push dword [ebp - 0x730]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x10043713
mov dword [ebp - 0x740], ebx
push 0x10045c78
lea eax, [ebp - 0x740]
jmp 0x100436a9
push dword [ebp - 0x730]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x72c]
push eax
lea eax, [ebp - 0x31c]
push eax
push dword [ebp - 0x748]
mov ecx, edi
mov dword [ebp - 0x730], ebx
call fcn.1004307d
jmp 0x10043792
mov dword [ebp - 0x750], ebx
push 0x10045c78
lea eax, [ebp - 0x750]
jmp 0x100436a9
push dword [ebp - 0x738]
call fcn.1002fc7d
pop ecx
push dword [ebp + 0xc]
mov ecx, edi
call fcn.10042f92
call fcn.100309b1
ret 8