Function at 0x100278f0
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov eax, dword [ebp + 8]
push ebx
lea edx, [eax + 0xcdd]
push esi
mov ecx, eax
push edi
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x88], edx
cmp eax, edx
ja 0x10027e13
mov esi, dword [ebp + 0xc]
xor ebx, ebx
mov edi, 0x4c53
mov eax, 0x1e2d
cmp ecx, eax
ja 0x10027b39
je 0x10027adc
mov eax, 0x1c70
cmp ecx, eax
ja 0x10027a30
je 0x10027a16
mov eax, ecx
sub eax, 0xadd
je 0x100279f3
sub eax, 0x59
je 0x100279b5
sub eax, 0x59
je 0x10027ddc
sub eax, 0x102f
je 0x10027990
sub eax, 0x59
jne 0x10027dc5
push 0x6b
pop eax
mov byte [ebp - 0x24], bl
mov word [ebp - 0x64], ax
mov dword [ebp - 0x62], 0x720065
mov dword [ebp - 0x5e], 0x65006e
jmp 0x10027dc5
push 0x52
pop eax
mov word [ebp - 0x2c], ax
mov eax, 0x6165
mov word [ebp - 0x2b], ax
mov eax, 0x656c
mov dword [ebp - 0x29], 0x694664
mov word [ebp - 0x26], ax
jmp 0x10027dc5
push 0x69
pop eax
push 0x6c
mov word [0x1005db4f], ax
pop eax
mov dword [0x1005db50], 0x50657a
mov word [0x1005db53], ax
mov eax, 0x6775
push 0x69
mov word [0x1005db54], ax
pop eax
mov word [0x1005db56], ax
push 0x6e
pop eax
mov word [0x1005db57], ax
jmp 0x10027dc5
mov eax, 0x6e49
push 0x69
mov word [0x1005db48], ax
pop eax
mov word [0x1005db4a], ax
mov dword [0x1005db4b], 0x6c616974
jmp 0x10027dc5
push 0x6c
pop eax
push 0x33
mov word [ebp - 0x5a], ax
pop eax
mov word [ebp - 0x58], ax
mov dword [ebp - 0x56], 0x2e0032
jmp 0x10027dc5
mov eax, ecx
sub eax, 0x1cc9
je 0x10027aa8
sub eax, 0x59
je 0x10027a9c
sub eax, 0x59
je 0x10027a82
sub eax, 0x59
jne 0x10027dc5
push 0x41
pop eax
push 0x6b
mov word [ebp - 0x2e], ax
pop eax
push 0x6e
mov word [ebp - 0x80], ax
pop eax
push 0x33
mov word [ebp - 0x7a], ax
pop eax
push 0x32
mov word [ebp - 0x74], ax
pop eax
mov dword [ebp - 0x7e], 0x720065
mov dword [ebp - 0x78], 0x6c0065
mov word [ebp - 0x72], ax
jmp 0x10027dc5
push 0x65
pop eax
mov word [ebp - 0x33], ax
push 0x46
pop eax
mov word [ebp - 0x32], ax
mov dword [ebp - 0x31], 0x656c69
jmp 0x10027dc5
push 0x74
pop eax
mov word [ebp - 0x34], ax
jmp 0x10027dc5
push 0x64
pop eax
push 0x6c
mov word [ebp - 0x52], ax
pop eax
mov word [ebp - 0x50], ax
mov word [ebp - 0x4e], ax
xor eax, eax
push 0x43
mov word [ebp - 0x4c], ax
pop eax
mov word [ebp - 0x38], ax
push 0x72
pop eax
mov word [ebp - 0x37], ax
mov eax, 0x6165
mov word [ebp - 0x36], ax
jmp 0x10027dc5
xor eax, eax
mov word [ebp - 0x68], ax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x2c]
push 0x505d
push eax
mov dword [ebp - 0x70], 0x64002e
mov dword [ebp - 0x6c], 0x6c006c
call fcn.10036ab6
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x38]
push 0x505d
push eax
call fcn.10036ab6
add esp, 0x18
push ebx
push ebx
push 3
push ebx
push 1
push 0x80000000
push dword [ebp + 0x14]
mov byte [ebp + 0xb], bl
call eax
mov dword [ebp - 0x3c], eax
jmp 0x10027dc5
mov eax, 0x2043
cmp ecx, eax
ja 0x10027d95
je 0x10027d4e
mov eax, ecx
sub eax, 0x1e86
je 0x10027d3f
push 0x59
pop ecx
sub eax, ecx
je 0x10027d11
sub eax, ecx
je 0x10027c7f
sub eax, ecx
je 0x10027bee
sub eax, ecx
jne 0x10027dc5
lea eax, [ebp - 0xa8]
push eax
mov ecx, esi
call fcn.10037acf
push esi
push dword [ebp - 0xa4]
lea eax, [ebp - 0xa0]
push 0x44cc
push eax
call fcn.10021ae6
add esp, 0x10
cmp al, bl
jne 0x10027cfe
mov eax, dword [esi]
mov ecx, dword [esi + 4]
sub ecx, eax
push 0x5e17
and ecx, 0xffffffe0
lea eax, [ecx + eax - 0x20]
push ebx
lea ecx, [ebp - 0x20]
push ecx
push esi
push eax
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x20], 1
call fcn.10034050
add esp, 0x18
push edi
push dword [ebp - 4]
cmp al, bl
je 0x10027d02
call fcn.10034f88
pop ecx
pop ecx
jmp 0x10027dc5
lea eax, [ebp - 0xa8]
push eax
push 0x3c02
call fcn.1002ff66
mov eax, dword [ebp + 0x14]
pop ecx
pop ecx
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x10027c07
sub eax, ecx
inc eax
push eax
call fcn.1000361d
mov edx, eax
pop ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0xa8], edx
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
cmp al, bl
jne 0x10027c23
mov eax, dword [ebp + 0x10]
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x10027c33
sub eax, ecx
inc eax
push eax
call fcn.1000361d
mov edx, eax
pop ecx
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0xa4], edx
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
cmp al, bl
jne 0x10027c4f
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x6399
push dword [ebp - 4]
call fcn.10027787
add esp, 0x10
jmp 0x10027dc5
push dword [ebp - 0x3c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [esi + 0x28]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push 0x5a2b
push eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0xc], ebx
mov byte [ebp - 0x14], 1
mov byte [ebp - 0x18], 1
call fcn.100322b6
add esp, 0x20
push edi
cmp al, bl
je 0x10027de3
push dword [ebp - 0x40]
call fcn.10034f88
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 4]
push 0x3251
call fcn.10014422
add esp, 0x14
cmp al, bl
jne 0x10027dc5
push edi
push dword [ebp - 4]
call fcn.10034f88
pop ecx
pop ecx
mov byte [ebp - 8], bl
jmp 0x10027e13
push ebx
push dword [ebp - 0x3c]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push eax
mov dword [ebp - 0x48], eax
call fcn.1000361d
pop ecx
push ebx
lea ecx, [ebp - 0x10]
push ecx
push dword [ebp - 0x48]
mov dword [ebp - 0x40], eax
push eax
push dword [ebp - 0x3c]
invalid
xchg ebp, eax
jl 0x10027d37