Function at 0x659b519
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
xor ebx, ebx
mov dword [ebp - 0x10], ebx
cmp dword [ebp + 0x1c], ebx
jne 0x659b531
xor eax, eax
jmp 0x659b80f
cmp dword [ebp + 0x14], ebx
je 0x659b52a
cmp dword [ebp + 0x18], ebx
jbe 0x659b52a
push esi
push edi
push ebx
push dword [ebp + 0x1c]
call fcn.065badad
pop ecx
pop ecx
test eax, eax
jne 0x659b7d8
push ebx
push 0x80
push 3
push ebx
push 1
push SysReAllocString
push dword [ebp + 0x1c]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov dword [ebp + 0x1c], esi
cmp esi, 0xffffffff
je 0x659b7d8
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
cmp edi, ebx
je 0x659b7d1
cmp edi, 0xffffffff
je 0x659b7d1
lea eax, [edi + 2]
mov esi, 0x65e6b14
push esi
push eax
mov dword [ebp - 0xc], eax
call fcn.065b8549
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
jne 0x659b5b4
push dword [ebp + 0x1c]
jmp 0x659b7d2
push 0
lea eax, [ebp - 0x10]
push eax
push edi
push ebx
push dword [ebp + 0x1c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push dword [ebp + 0x1c]
test eax, eax
jne 0x659b5d4
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x659b62e
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x10], 0
je 0x659b62e
and dword [ebp - 8], 0
cmp edi, 3
jb 0x659b607
cmp byte [ebx], 0xff
jne 0x659b607
cmp byte [ebx + 1], 0xfe
jne 0x659b607
mov ecx, edi
shr ecx, 1
lea eax, [ebx + 2]
xor edx, edx
mov dword [ebp - 4], eax
mov word [eax + ecx*2 - 2], dx
jmp 0x659b675
mov eax, dword [ebp - 0xc]
push esi
xor ecx, ecx
push 2
pop edx
mul edx
seto cl
mov word [ebx + edi], 0
neg ecx
or ecx, eax
push ecx
call fcn.065b8549
pop ecx
pop ecx
mov dword [ebp - 4], eax
test eax, eax
jne 0x659b634
push ebx
jmp 0x659b789
and dword [ebp - 0x14], 0
push edi
push ebx
push dword [ebp - 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.065bad0e
add esp, 0x14
test eax, eax
je 0x659b662
push ebx
call fcn.065b71f5
push dword [ebp - 4]
call fcn.065b71f5
pop ecx
jmp 0x659b78e
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
xor eax, eax
mov word [edx + ecx*2], ax
mov dword [ebp - 8], 1
push esi
xor ecx, ecx
push 2
pop edx
cmp dword [ebp + 0xc], ecx
jne 0x659b735
mov eax, dword [ebp - 0xc]
mul edx
mov byte [ebp + 0x1f], cl
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.065b8549
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x659b74e
push dword [ebp - 0xc]
xor eax, eax
push edi
push dword [ebp + 8]
mov word [edi], ax
push dword [ebp - 4]
call fcn.0659ae92
mov esi, eax
add esp, 0x10
cmp dword [ebp + 0x18], esi
jae 0x659b6ca
mov esi, dword [ebp + 0x18]
mov byte [ebp + 0x1f], 1
cmp esi, 1
jbe 0x659b6f9
lea edx, [esi - 2]
test edx, edx
je 0x659b6ef
mov eax, dword [ebp + 0x14]
mov ecx, edi
sub ecx, eax
mov dword [ebp - 0xc], edx
mov dx, word [ecx + eax]
mov word [eax], dx
add eax, 2
dec dword [ebp - 0xc]
jne 0x659b6e0
mov ecx, dword [ebp + 0x14]
xor eax, eax
mov word [ecx + esi*2 - 4], ax
mov ecx, dword [ebp + 0x14]
xor eax, eax
push edi
mov word [ecx + esi*2 - 2], ax
call fcn.065b71f5
push ebx
call fcn.065b71f5
cmp dword [ebp - 8], 1
pop ecx
pop ecx
jne 0x659b720
push dword [ebp - 4]
call fcn.065b71f5
pop ecx
cmp byte [ebp + 0x1f], 0
lea eax, [esi - 2]
jne 0x659b80d
lea eax, [esi - 1]
jmp 0x659b80d
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.065b8549
mov esi, eax
pop ecx
pop ecx
test esi, esi
jne 0x659b756
push ebx
call fcn.065b71f5
jmp 0x659b77f
push edi
push esi
push dword [ebp + 0xc]
xor eax, eax
push dword [ebp + 8]
mov word [esi], ax
push dword [ebp - 4]
call fcn.0659aaac
add esp, 0x14
push esi
test eax, eax
jne 0x659b791
call fcn.065b71f5
push ebx
call fcn.065b71f5
pop ecx
cmp dword [ebp - 8], 1
pop ecx
jne 0x659b7d8
push dword [ebp - 4]
call fcn.065b71f5
pop ecx
jmp 0x659b7d8
mov edi, dword [ebp + 0x18]
push 0x65d2e64
push 0xffffffffffffffff
push edi
push dword [ebp + 0x14]
call fcn.065baa8b
mov ecx, dword [ebp + 0x14]
xor eax, eax
push esi
mov word [ecx + edi*2 - 2], ax
call fcn.065b71f5
push ebx
call fcn.065b71f5
add esp, 0x1c
cmp dword [ebp - 8], 1
jne 0x659b7cc
push dword [ebp - 4]
call fcn.065b71f5
pop ecx
push dword [ebp + 0x14]
jmp 0x659b807
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp + 0x10], 0
mov esi, dword [ebp + 0x18]
push 0xffffffffffffffff
lea eax, [esi - 1]
jne 0x659b7ed
push 0x65d8dc0
jmp 0x659b7f0
push dword [ebp + 0x10]
push eax
push dword [ebp + 0x14]
call fcn.065ba98a
mov ecx, dword [ebp + 0x14]
add esp, 0x10
xor eax, eax
mov word [ecx + esi*2 - 2], ax
push ecx
call fcn.065ba39b
pop ecx
pop edi
pop esi
pop ebx
leave
ret