Function at 0x100029d0
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
jmp 0x100029ee
imul ecx, dword [ebp + 0x10], 0xce
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
imul edx, dword [ebp + 0x10], 0xd
imul eax, edx, 0xce
cmp dword [ebp - 0x10], eax
ja 0x10002c74
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0x11ae7
ja 0x10002a7e
cmp dword [ebp - 8], 0x11ae7
je 0x10002b7a
cmp dword [ebp - 8], 0x8a45
ja 0x10002a5f
cmp dword [ebp - 8], 0x8a45
je 0x10002be7
mov edx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
sub dword [ebp - 0xc], 0x75
je 0x10002b0f
sub dword [ebp - 0xc], 0x36
je 0x10002b2c
sub dword [ebp - 0xc], 0x5df0
je 0x10002c41
jmp 0x10002c6f
cmp dword [ebp - 8], 0xbcc1
je 0x10002b92
cmp dword [ebp - 8], 0x113df
je 0x10002c38
jmp 0x10002c6f
cmp dword [ebp - 8], 0x2937f
ja 0x10002abc
cmp dword [ebp - 8], 0x2937f
je 0x10002bb3
cmp dword [ebp - 8], 0x1790d
je 0x10002c5d
cmp dword [ebp - 8], 0x1d733
je 0x10002c65
cmp dword [ebp - 8], 0x23559
je 0x10002ad7
jmp 0x10002c6f
cmp dword [ebp - 8], 0x2f1a5
je 0x10002afa
cmp dword [ebp - 8], 0x34fcb
je 0x10002b88
jmp 0x10002c6f
push edi
mov eax, dword [esi + 8]
push dword [eax + 4]
call dword [str.UNED]
mov bx, ax
mov ebp, dword [esi]
push ebx
mov ecx, esi
call dword [ebp + 0x48]
test eax, eax
jne 0x10002b2c
jmp 0x10002aff
pop esp
imul ebp, edx, 0x67
push dword ss:[edi]
push dword [edi]
push dword [esi + 8]
push ebx
call fcn.100029d0
jmp 0x10002c6f
les ebp, [ebx]
xchg edx, eax
lds edx, [ecx - 0x74a8a9ad]
int1
push ebp
lea edi, [esi + 0x7c]
mov eax, dword [edi]
test eax, eax
je 0x10002c6a
jmp 0x10002c6f
push 0
push 0
push 3
push 0
push 1
push MenuHelp
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 0xffffffff
jne 0x10002b60
mov byte [ebp - 1], 0
mov al, byte [ebp - 1]
jmp 0x10002c77
push 0
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
jmp 0x10002c6f
ja 0x10002b6c
pop ebp
out dx, eax
call ebp
test eax, eax
jmp 0x10002c6f
jmp 0x10002ad7
je 0x10002ad7
test byte [esi + 0xc5], 0x40
jne 0x10002b88
push 3
push dword [edi]
call dword [str.CapX]
push eax
mov ecx, esi
jmp 0x10002c6f
fisttp qword [ebx + edx*2 + 0x16aee4c]
push dword [edi]
call dword [0x1001a264]
push edi
mov ecx, dword [esi + 8]
mov dword [edi], 0
push dword [ecx + 4]
call dword [0x1001a26c]
mov bx, ax
mov ecx, esi
push ebx
call ebp
jmp 0x10002c6a
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.1000ab8b
add esp, 4
mov dword [ebp - 0x24], eax
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x24]
mov dword [edx], eax
mov ecx, dword [ebp - 0x14]
push ecx
push 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
push eax
call fcn.1000c040
add esp, 0xc
push 0
lea ecx, [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10002c6f
mov byte [ebp - 1], 1
mov al, byte [ebp - 1]
jmp 0x10002c77
mov bl, 0x5b
pop ebp
sub dl, al
push 0
push eax
call dword [0x1001a24c]
mov ecx, dword [esi]
push eax
mov ebp, dword [ecx + 0x48]
mov ecx, esi
call ebp
test eax, eax
jmp 0x10002c6f
je 0x10002b7f
jmp 0x10002c6f
cmp al, 0x7c
jae 0x10002c69
pop ebp
pop ebp
pop edi
pop esi
pop ebx
ret
jmp 0x100029e1
mov al, byte [ebp - 1]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret