Function at 0xf03220a
Capabilities:
Get file size
Read file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x134
mov eax, dword [0xf061038]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov dword [ebp - 0x130], eax
lea eax, [ebp - 0x118]
push eax
xor ebx, ebx
push 1
mov dword [ebp - 0x120], 0x4000
mov dword [ebp - 0x124], 8
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x11c], ebx
call fcn.0f03b7d7
cmp byte [ebp - 0x118], bl
jne 0xf032266
xor eax, eax
jmp 0xf03266b
push esi
push ebx
push 0x80
push 3
push ebx
push 1
push 0x80000000
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
jne 0xf032292
xor eax, eax
jmp 0xf03266a
push edi
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
cmp edi, ebx
je 0xf032660
cmp edi, 0xffffffff
je 0xf032660
push edi
call fcn.0f006f83
cmp eax, ebx
pop ecx
mov dword [ebp - 0x128], eax
jne 0xf0322d9
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xf002059
push 1
push 7
call fcn.0f03411f
jmp 0xf032667
push ebx
lea eax, [ebp - 0x134]
push eax
push edi
push dword [ebp - 0x128]
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0xf03264b
cmp dword [ebp - 0x134], edi
jne 0xf03264b
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x128]
jmp 0xf03238c
movsx eax, byte [esi]
push eax
call fcn.0f0562af
test eax, eax
pop ecx
je 0xf032324
inc esi
dec edi
jne 0xf032312
cmp edi, ebx
je 0xf0325dc
cmp edi, 3
jb 0xf032360
movsx eax, byte [esi]
push eax
call fcn.0f0562e2
cmp eax, 0x45
pop ecx
jne 0xf032360
movsx eax, byte [esi + 1]
push eax
call fcn.0f0562e2
cmp eax, 0x4d
pop ecx
jne 0xf032360
movsx eax, byte [esi + 2]
push eax
call fcn.0f0562e2
cmp eax, 0x4d
pop ecx
je 0xf032395
dec edi
inc esi
cmp edi, ebx
je 0xf0325dc
mov al, byte [esi]
cmp al, 0xa
je 0xf032386
cmp al, 0xd
je 0xf032378
cmp al, bl
jne 0xf032360
mov al, byte [esi]
cmp al, 0xa
je 0xf032386
cmp al, 0xd
je 0xf032386
cmp al, bl
jne 0xf03238c
dec edi
inc esi
cmp edi, ebx
jne 0xf032378
cmp edi, ebx
jne 0xf032312
jmp 0xf0325dc
sub edi, 3
add esi, 3
cmp edi, ebx
je 0xf0323db
movsx eax, byte [esi]
push eax
call fcn.0f0562af
test eax, eax
pop ecx
je 0xf0323b1
inc esi
dec edi
jne 0xf03239f
cmp edi, ebx
je 0xf0323db
cmp byte [esi], 0x3d
jne 0xf0323db
dec edi
inc esi
cmp edi, ebx
je 0xf0325dc
movsx eax, byte [esi]
push eax
call fcn.0f0562af
test eax, eax
pop ecx
je 0xf0323e6
inc esi
dec edi
jne 0xf0323c4
jmp 0xf0325dc
xor ecx, ecx
inc ecx
mov dword [ebp - 0x11c], ecx
jmp 0xf0323e9
xor ecx, ecx
inc ecx
cmp edi, ebx
je 0xf0325dc
jmp 0xf0323f6
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x11c], ebx
jne 0xf0325dc
mov al, byte [esi]
cmp al, 0xa
je 0xf0325dc
cmp al, 0xd
je 0xf0325dc
cmp al, bl
je 0xf0325dc
cmp edi, ebx
je 0xf032435
movsx eax, byte [esi]
push eax
call fcn.0f0562af
test eax, eax
pop ecx
je 0xf032432
inc esi
dec edi
jne 0xf032420
xor ecx, ecx
inc ecx
movsx eax, byte [esi]
sub eax, 0x41
je 0xf03255c
dec eax
je 0xf032496
sub eax, 0x10
je 0xf03245e
sub eax, 0xf
je 0xf03255c
dec eax
je 0xf032496
sub eax, 0x10
jne 0xf0325ce
cmp edi, 3
jb 0xf0325ce
mov al, byte [esi + 1]
cmp al, 0x61
je 0xf032476
cmp al, 0x41
jne 0xf0325ce
mov al, byte [esi + 2]
cmp al, 0x6d
je 0xf032485
cmp al, 0x4d
jne 0xf0325ce
sub edi, 3
add esi, 3
mov dword [ebp - 0x12c], ecx
jmp 0xf0325d4
dec edi
je 0xf0325ce
inc esi
cmp byte [esi], 0x3d
jne 0xf0325ce
dec edi
inc esi
cmp edi, ebx
mov dword [ebp - 0x120], ebx
je 0xf0325c2
movsx eax, byte [esi]
push eax
call fcn.0f056277
test eax, eax
pop ecx
je 0xf032523
mov al, byte [esi]
cmp al, 0x30
jl 0xf0324d7
cmp al, 0x39
jg 0xf0324d7
movsx eax, al
sub eax, 0x30
jmp 0xf0324f9
cmp al, 0x41
jl 0xf0324e7
cmp al, 0x46
jg 0xf0324e7
movsx eax, al
sub eax, 0x37
jmp 0xf0324f9
cmp al, 0x61
jl 0xf0324f7
cmp al, 0x66
jg 0xf0324f7
movsx eax, al
sub eax, 0x57
jmp 0xf0324f9
xor eax, eax
mov ecx, dword [ebp - 0x120]
shl ecx, 4
add ecx, eax
dec edi
inc esi
cmp cx, 0x4000
mov dword [ebp - 0x120], ecx
jg 0xf032519
cmp edi, ebx
jne 0xf0324b7
jmp 0xf032523
mov dword [ebp - 0x11c], 1
cmp word [ebp - 0x120], 0x1000
jl 0xf0325c2
cmp word [ebp - 0x120], 0x4000
jg 0xf0325c2
movsx eax, word [ebp - 0x120]
shl eax, 4
shr eax, 0xe
shl eax, 0xe
shr eax, 4
mov dword [ebp - 0x120], eax
jmp 0xf0325d4
dec edi
je 0xf0325ce
inc esi
cmp byte [esi], 0x3d
jne 0xf0325ce
dec edi
inc esi
cmp edi, ebx
mov dword [ebp - 0x124], ebx
je 0xf0325c2
movsx eax, byte [esi]
push eax
call fcn.0f056244
test eax, eax
pop ecx
je 0xf0325ae
movsx cx, byte [esi]
mov eax, dword [ebp - 0x124]
lea eax, [eax + eax*4]
dec edi
inc esi
lea eax, [ecx + eax*2 - 0x30]
cmp ax, 0xff
mov dword [ebp - 0x124], eax
jg 0xf0325a4
cmp edi, ebx
jne 0xf032571
jmp 0xf0325ae
mov dword [ebp - 0x11c], 1
cmp word [ebp - 0x124], bx
je 0xf0325c2
cmp word [ebp - 0x124], 0xff
jle 0xf0325d4
mov dword [ebp - 0x11c], 1
jmp 0xf0325d4
mov dword [ebp - 0x11c], ecx
cmp edi, ebx
jne 0xf0323f3
push dword [ebp - 0x128]
call fcn.0f00579c
cmp dword [ebp - 0x11c], ebx
pop ecx
je 0xf03260e
push 0xf002059
push 1
push 0x1a
call fcn.0f03411f
push 8
mov ecx, 0x4000
pop edx
mov dword [ebp - 0x12c], ebx
jmp 0xf03261a
mov ecx, dword [ebp - 0x120]
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x130]
mov word [eax + 4], dx
movsx edx, cx
mov esi, 0xa000
sub esi, edx
mov word [eax + 0xc], cx
xor ecx, ecx
shl esi, 4
cmp dword [ebp - 0x12c], ebx
mov dword [eax + 8], esi
sete cl
mov dword [eax + 0x10], ecx
xor eax, eax
inc eax
jmp 0xf032669
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x128]
call fcn.0f00579c
pop ecx
jmp 0xf032667
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop edi
pop esi
mov ecx, dword [ebp - 4]
pop ebx
call fcn.0f01b45c
leave
ret 4