Function at 0x403220
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x58
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
xor esi, esi
mov edi, dword [0x4215f0]
xor edi, ebp
mov dword [ebp - 0xc], edi
mov edi, dword [ebp + 8]
mov dword [esp], edi
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x34], esi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], 0xa0c783cd
mov eax, dword [ebp - 0x24]
mov ecx, eax
sub ecx, 0x941bab3e
mov dword [ebp - 0x38], eax
je 0x403381
jmp 0x4032b2
mov eax, dword [ebp - 0x38]
sub eax, 0x9b5320a6
je 0x403443
jmp 0x4032c5
mov eax, dword [ebp - 0x38]
sub eax, 0xa045c256
je 0x403391
jmp 0x4032d8
mov eax, dword [ebp - 0x38]
sub eax, 0xa0c783cd
je 0x403362
jmp 0x4032eb
mov eax, dword [ebp - 0x38]
sub eax, 0xb9382b9c
je 0x4033e8
jmp 0x4032fe
mov eax, dword [ebp - 0x38]
sub eax, 0xc373d28f
je 0x403466
jmp 0x403311
mov eax, dword [ebp - 0x38]
sub eax, 0xc57df214
je 0x40347d
jmp 0x403324
mov eax, dword [ebp - 0x38]
sub eax, 0xe00bfd97
je 0x4034bb
jmp 0x403337
mov eax, dword [ebp - 0x38]
sub eax, 0xeb2de02c
je 0x40349c
jmp 0x40334a
mov eax, dword [ebp - 0x38]
sub eax, 0x4e2d30e5
je 0x4033c9
jmp 0x40335d
jmp 0x4034da
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffffff
cmp eax, ecx
mov eax, 0x941bab3e
mov ecx, 0xa045c256
cmove ecx, eax
mov dword [ebp - 0x24], ecx
jmp 0x4034da
mov byte [ebp - 0x15], 0
mov dword [ebp - 0x24], 0xe00bfd97
jmp 0x4034da
xor eax, eax
mov ecx, dword [ebp - 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [ebp - 0x3c], eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
sub esp, 8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
mov eax, 0x4e2d30e5
mov ecx, 0xb9382b9c
cmove ecx, eax
mov dword [ebp - 0x24], ecx
jmp 0x4034da
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov byte [ebp - 0x15], 0
mov dword [ebp - 0x24], 0xe00bfd97
jmp 0x4034da
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
call fcn.0040a873
xor ecx, ecx
mov edx, dword [ebp + 0xc]
mov dword [edx], eax
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp - 0x20]
mov esi, dword [ebp + 0xc]
mov esi, dword [esi]
mov edi, dword [ebp - 0x1c]
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
mov dword [ebp - 0x40], ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
cmp eax, 0
mov eax, 0xeb2de02c
mov ecx, 0x9b5320a6
cmovne ecx, eax
mov dword [ebp - 0x24], ecx
jmp 0x4034da
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0
mov eax, 0xc57df214
mov ecx, 0xc373d28f
cmove ecx, eax
mov dword [ebp - 0x24], ecx
jmp 0x4034da
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.0040a87c
mov dword [ebp - 0x24], 0xc57df214
jmp 0x4034da
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov byte [ebp - 0x15], 0
mov dword [ebp - 0x24], 0xe00bfd97
jmp 0x4034da
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov byte [ebp - 0x15], 1
mov dword [ebp - 0x24], 0xe00bfd97
jmp 0x4034da
mov al, byte [ebp - 0x15]
and al, 1
movzx eax, al
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
mov dword [ebp - 0x44], eax
call fcn.0040a881
mov eax, dword [ebp - 0x44]
add esp, 0x58
pop esi
pop edi
pop ebp
ret
jmp 0x403299