Function at 0x435eaa
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push edi
xor eax, eax
lea edi, [ebp - 0xc]
stosd dword es:[edi], eax
xor ebx, ebx
stosd dword es:[edi], eax
cmp dword [ebp + 0xc], ebx
jne 0x435edc
mov eax, 0x80070057
push eax
push 0x2a4
push str.fileutil.cpp
mov edi, eax
call fcn.0043294e
jmp 0x43617a
cmp dword [ebp + 8], ebx
jne 0x435eee
mov eax, 0x80070057
push eax
push 0x2a5
jmp 0x435ecb
mov eax, dword [ebp + 0x10]
cmp eax, ebx
jne 0x435f02
mov eax, 0x80070057
push eax
push 0x2a6
jmp 0x435ecb
xor ecx, ecx
cmp cx, word [eax]
jne 0x435f16
mov eax, 0x80070057
push eax
push 0x2a7
jmp 0x435ecb
push esi
push ebx
push 0x8000080
push 3
push ebx
push 5
push SysReAllocString
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp + 0x10], eax
cmp eax, 0xffffffff
jne 0x435f8c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
mov edi, 0xffff
mov esi, 0x80070000
cmp eax, ebx
jle 0x435f50
and ecx, edi
or ecx, esi
mov edx, 0x80070002
cmp ecx, edx
jne 0x435f60
mov edi, edx
jmp 0x436179
cmp eax, ebx
je 0x435f96
jg 0x435f6a
mov edi, eax
jmp 0x435f6e
and edi, eax
or edi, esi
cmp edi, ebx
jl 0x435f77
mov edi, 0x80004005
push edi
push 0x2b1
push str.fileutil.cpp
call fcn.0043294e
jmp 0x436179
mov edi, 0xffff
mov esi, 0x80070000
lea eax, [ebp - 0xc]
push eax
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x435fd7
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jg 0x435fb5
mov edi, eax
jmp 0x435fb9
and edi, eax
or edi, esi
cmp edi, ebx
jl 0x435fc2
mov edi, 0x80004005
push edi
push 0x2b6
push str.fileutil.cpp
call fcn.0043294e
jmp 0x43616a
cmp dword [ebp + 0x14], ebx
je 0x436027
mov ebx, dword [ebp + 0x18]
xor eax, eax
cmp eax, dword [ebp - 8]
jl 0x435ff7
jg 0x435fed
cmp ebx, dword [ebp - 0xc]
jbe 0x435ff7
mov edi, 0x80070057
jmp 0x43616a
push 1
push eax
push ebx
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x436027
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jg 0x436017
mov edi, eax
jmp 0x43601b
and edi, eax
or edi, esi
test edi, edi
jns 0x436027
push edi
push 0x2c4
jmp 0x435fc8
cmp dword [ebp + 0x20], 0
je 0x436056
mov esi, dword [ebp + 0x1c]
mov edi, dword [ebp + 8]
mov eax, dword [edi]
test eax, eax
je 0x4360f3
test esi, esi
jne 0x436085
push eax
call fcn.004324f6
and dword [edi], esi
mov eax, dword [ebp + 0xc]
and dword [eax], 0
xor edi, edi
jmp 0x43616a
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov esi, ecx
xor edx, edx
sub esi, ebx
sub ecx, ebx
sbb eax, edx
mov edx, dword [ebp + 0x1c]
xor edi, edi
cmp edi, eax
jg 0x436030
jl 0x436075
cmp edx, ecx
jae 0x436030
mov edi, 0x8007007a
push edi
push 0x2d6
jmp 0x435fc8
push 1
push esi
push eax
call fcn.0043235d
test eax, eax
jne 0x4360a2
mov edi, 0x8007000e
push edi
push 0x2e4
jmp 0x435fc8
mov dword [ebp + 0x1c], eax
xor ebx, ebx
and dword [ebp - 4], ebx
and dword [ebp + 0x14], 0
lea eax, [ebp + 0x14]
push eax
push ebx
push esi
call fcn.00432591
mov edi, eax
test edi, edi
js 0x43615c
push 0
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x14]
mov eax, dword [ebp + 0x1c]
add eax, ebx
push eax
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x43611a
add ebx, dword [ebp - 4]
cmp dword [ebp - 4], 0
jne 0x4360aa
cmp ebx, esi
je 0x43614b
mov edi, 0x8000ffff
jmp 0x43615c
test esi, esi
je 0x436049
push 1
push esi
call fcn.0043233b
mov dword [ebp + 0x1c], eax
test eax, eax
jne 0x4360a5
mov edi, 0x8007000e
push edi
push 0x2f1
jmp 0x435fc8
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x43612e
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
test edi, edi
js 0x436139
mov edi, 0x80004005
push edi
push 0x2fe
push str.fileutil.cpp
call fcn.0043294e
jmp 0x43615c
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 8]
and dword [ebp + 0x1c], 0
mov dword [ecx], eax
mov eax, dword [ebp + 0xc]
mov dword [eax], esi
cmp dword [ebp + 0x1c], 0
je 0x43616a
push dword [ebp + 0x1c]
call fcn.004324f6
cmp dword [ebp + 0x10], 0xffffffff
je 0x436179
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop esi
mov eax, edi
pop edi
pop ebx
leave
ret 0x1c