Function at 0xf0327d3
Capabilities:
Get file size
Read file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x134
mov eax, dword [0xf062038]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov dword [ebp - 0x130], eax
push 1
lea eax, [ebp - 0x118]
push eax
xor ebx, ebx
push 1
mov dword [ebp - 0x120], 0x4000
mov dword [ebp - 0x124], 8
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x11c], ebx
call fcn.0f01b6e4
cmp byte [ebp - 0x118], bl
jne 0xf032831
xor eax, eax
jmp 0xf032c36
push esi
push ebx
push 0x80
push 3
push ebx
push 1
push 0x80000000
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
jne 0xf03285d
xor eax, eax
jmp 0xf032c35
push edi
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
cmp edi, ebx
je 0xf032c2b
cmp edi, 0xffffffff
je 0xf032c2b
push edi
call fcn.0f0070c9
cmp eax, ebx
pop ecx
mov dword [ebp - 0x128], eax
jne 0xf0328a4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xf002065
push 1
push 7
call fcn.0f0346c3
jmp 0xf032c32
push ebx
lea eax, [ebp - 0x134]
push eax
push edi
push dword [ebp - 0x128]
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0xf032c16
cmp dword [ebp - 0x134], edi
jne 0xf032c16
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x128]
jmp 0xf032957
movsx eax, byte [esi]
push eax
call fcn.0f056b7f
test eax, eax
pop ecx
je 0xf0328ef
inc esi
dec edi
jne 0xf0328dd
cmp edi, ebx
je 0xf032ba7
cmp edi, 3
jb 0xf03292b
movsx eax, byte [esi]
push eax
call fcn.0f056bb2
cmp eax, 0x45
pop ecx
jne 0xf03292b
movsx eax, byte [esi + 1]
push eax
call fcn.0f056bb2
cmp eax, 0x4d
pop ecx
jne 0xf03292b
movsx eax, byte [esi + 2]
push eax
call fcn.0f056bb2
cmp eax, 0x4d
pop ecx
je 0xf032960
dec edi
inc esi
cmp edi, ebx
je 0xf032ba7
mov al, byte [esi]
cmp al, 0xa
je 0xf032951
cmp al, 0xd
je 0xf032943
cmp al, bl
jne 0xf03292b
mov al, byte [esi]
cmp al, 0xa
je 0xf032951
cmp al, 0xd
je 0xf032951
cmp al, bl
jne 0xf032957
dec edi
inc esi
cmp edi, ebx
jne 0xf032943
cmp edi, ebx
jne 0xf0328dd
jmp 0xf032ba7
sub edi, 3
add esi, 3
cmp edi, ebx
je 0xf0329a6
movsx eax, byte [esi]
push eax
call fcn.0f056b7f
test eax, eax
pop ecx
je 0xf03297c
inc esi
dec edi
jne 0xf03296a
cmp edi, ebx
je 0xf0329a6
cmp byte [esi], 0x3d
jne 0xf0329a6
dec edi
inc esi
cmp edi, ebx
je 0xf032ba7
movsx eax, byte [esi]
push eax
call fcn.0f056b7f
test eax, eax
pop ecx
je 0xf0329b1
inc esi
dec edi
jne 0xf03298f
jmp 0xf032ba7
xor ecx, ecx
inc ecx
mov dword [ebp - 0x11c], ecx
jmp 0xf0329b4
xor ecx, ecx
inc ecx
cmp edi, ebx
je 0xf032ba7
jmp 0xf0329c1
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x11c], ebx
jne 0xf032ba7
mov al, byte [esi]
cmp al, 0xa
je 0xf032ba7
cmp al, 0xd
je 0xf032ba7
cmp al, bl
je 0xf032ba7
cmp edi, ebx
je 0xf032a00
movsx eax, byte [esi]
push eax
call fcn.0f056b7f
test eax, eax
pop ecx
je 0xf0329fd
inc esi
dec edi
jne 0xf0329eb
xor ecx, ecx
inc ecx
movsx eax, byte [esi]
sub eax, 0x41
je 0xf032b27
dec eax
je 0xf032a61
sub eax, 0x10
je 0xf032a29
sub eax, 0xf
je 0xf032b27
dec eax
je 0xf032a61
sub eax, 0x10
jne 0xf032b99
cmp edi, 3
jb 0xf032b99
mov al, byte [esi + 1]
cmp al, 0x61
je 0xf032a41
cmp al, 0x41
jne 0xf032b99
mov al, byte [esi + 2]
cmp al, 0x6d
je 0xf032a50
cmp al, 0x4d
jne 0xf032b99
sub edi, 3
add esi, 3
mov dword [ebp - 0x12c], ecx
jmp 0xf032b9f
dec edi
je 0xf032b99
inc esi
cmp byte [esi], 0x3d
jne 0xf032b99
dec edi
inc esi
cmp edi, ebx
mov dword [ebp - 0x120], ebx
je 0xf032b8d
movsx eax, byte [esi]
push eax
call fcn.0f056b47
test eax, eax
pop ecx
je 0xf032aee
mov al, byte [esi]
cmp al, 0x30
jl 0xf032aa2
cmp al, 0x39
jg 0xf032aa2
movsx eax, al
sub eax, 0x30
jmp 0xf032ac4
cmp al, 0x41
jl 0xf032ab2
cmp al, 0x46
jg 0xf032ab2
movsx eax, al
sub eax, 0x37
jmp 0xf032ac4
cmp al, 0x61
jl 0xf032ac2
cmp al, 0x66
jg 0xf032ac2
movsx eax, al
sub eax, 0x57
jmp 0xf032ac4
xor eax, eax
mov ecx, dword [ebp - 0x120]
shl ecx, 4
add ecx, eax
dec edi
inc esi
cmp cx, 0x4000
mov dword [ebp - 0x120], ecx
jg 0xf032ae4
cmp edi, ebx
jne 0xf032a82
jmp 0xf032aee
mov dword [ebp - 0x11c], 1
cmp word [ebp - 0x120], 0x1000
jl 0xf032b8d
cmp word [ebp - 0x120], 0x4000
jg 0xf032b8d
movsx eax, word [ebp - 0x120]
shl eax, 4
shr eax, 0xe
shl eax, 0xe
shr eax, 4
mov dword [ebp - 0x120], eax
jmp 0xf032b9f
dec edi
je 0xf032b99
inc esi
cmp byte [esi], 0x3d
jne 0xf032b99
dec edi
inc esi
cmp edi, ebx
mov dword [ebp - 0x124], ebx
je 0xf032b8d
movsx eax, byte [esi]
push eax
call fcn.0f056b14
test eax, eax
pop ecx
je 0xf032b79
movsx cx, byte [esi]
mov eax, dword [ebp - 0x124]
lea eax, [eax + eax*4]
dec edi
inc esi
lea eax, [ecx + eax*2 - 0x30]
cmp ax, 0xff
mov dword [ebp - 0x124], eax
jg 0xf032b6f
cmp edi, ebx
jne 0xf032b3c
jmp 0xf032b79
mov dword [ebp - 0x11c], 1
cmp word [ebp - 0x124], bx
je 0xf032b8d
cmp word [ebp - 0x124], 0xff
jle 0xf032b9f
mov dword [ebp - 0x11c], 1
jmp 0xf032b9f
mov dword [ebp - 0x11c], ecx
cmp edi, ebx
jne 0xf0329be
push dword [ebp - 0x128]
call fcn.0f0058e2
cmp dword [ebp - 0x11c], ebx
pop ecx
je 0xf032bd9
push 0xf002065
push 1
push 0x1a
call fcn.0f0346c3
push 8
mov ecx, 0x4000
pop edx
mov dword [ebp - 0x12c], ebx
jmp 0xf032be5
mov ecx, dword [ebp - 0x120]
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x130]
mov word [eax + 4], dx
movsx edx, cx
mov esi, 0xa000
sub esi, edx
mov word [eax + 0xc], cx
xor ecx, ecx
shl esi, 4
cmp dword [ebp - 0x12c], ebx
mov dword [eax + 8], esi
sete cl
mov dword [eax + 0x10], ecx
xor eax, eax
inc eax
jmp 0xf032c34
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x128]
call fcn.0f0058e2
pop ecx
jmp 0xf032c32
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop edi
pop esi
mov ecx, dword [ebp - 4]
pop ebx
call fcn.0f01b9b9
leave
ret 4