Function at 0x107c426
Capabilities:
Get file size
Read file on windows

Disassembly:
mov eax, 0x1082e6d
call fcn.01002b15
sub esp, 0x38
mov eax, dword [ebp + 0x10]
push ebx
push esi
mov ecx, eax
neg ecx
push edi
sbb ecx, ecx
mov edi, 0x7ff8ffa9
and ecx, edi
mov esi, 0x80070057
add ecx, esi
push 0
pop ebx
je 0x107c460
cmp ecx, ebx
setl dl
cmp dl, bl
je 0x107c460
push 3
pop edx
jmp 0x107c481
mov ecx, dword [ebp + 0xc]
neg ecx
sbb ecx, ecx
push 3
and ecx, edi
pop edx
add ecx, esi
mov dword [eax], ebx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], ecx
je 0x107c48e
cmp ecx, ebx
setl al
cmp al, bl
je 0x107c48e
mov eax, dword [ebp + 8]
mov dword [eax], edx
mov dword [eax + 4], ecx
jmp 0x107c6f8
push ebx
push 0x80
push 3
push ebx
push 1
push 0x80000000
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov dword [ebp + 0xc], esi
push esi
mov dword [ebp - 4], ebx
call fcn.0101d06d
test al, al
jne 0x107c4d1
lea ecx, [ebp - 0x20]
call dword [sym.imp.mmcbase.DLL_public:_class_mmcerror::SC____thiscall_mmcerror::SC::FromLastError_void_]
mov ecx, dword [eax]
mov edi, dword [ebp + 8]
mov dword [edi], ecx
mov eax, dword [eax + 4]
mov dword [edi + 4], eax
jmp 0x107c4f4
lea eax, [ebp - 0x2c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], eax
je 0x107c502
mov edi, dword [ebp + 8]
mov dword [edi], 3
mov dword [edi + 4], 0x8000ffff
cmp esi, ebx
je 0x107c6f6
push esi
jmp 0x107c6f1
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x107c608
push ebx
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x44]
call fcn.01017af4
mov edi, dword [eax]
mov dword [ebp - 0x20], edi
mov eax, dword [eax + 4]
cmp eax, ebx
mov dword [ebp - 0x1c], eax
je 0x107c553
cmp edi, 3
jne 0x107c540
cmp eax, ebx
setl cl
jmp 0x107c542
mov cl, 1
cmp cl, bl
je 0x107c553
mov esi, dword [ebp + 8]
mov dword [esi], edi
mov dword [esi + 4], eax
jmp 0x107c686
lea eax, [ebp - 0x44]
mov byte [ebp - 0x28], bl
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
mov dword [ebp - 0x14], ebx
call fcn.01017bbe
mov eax, dword [ebp - 0x34]
cmp eax, ebx
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], eax
je 0x107c5ae
cmp edi, 3
jne 0x107c58f
cmp eax, ebx
setl cl
jmp 0x107c591
mov cl, 1
cmp cl, bl
je 0x107c5ae
mov esi, dword [ebp + 8]
mov dword [esi], edi
mov dword [esi + 4], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.0101770c
jmp 0x107c686
push ebx
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x30]
mov dword [ebp - 0x18], ebx
push dword [ebp - 0x14]
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, ebx
jne 0x107c5dc
lea ecx, [ebp - 0x20]
call dword [sym.imp.mmcbase.DLL_public:_class_mmcerror::SC____thiscall_mmcerror::SC::FromLastError_void_]
mov ecx, dword [eax]
mov esi, dword [ebp + 8]
mov dword [esi], ecx
mov eax, dword [eax + 4]
jmp 0x107c59a
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x18]
mov byte [ebp - 4], 1
je 0x107c600
mov esi, dword [ebp + 8]
push 3
pop eax
mov ecx, 0x8000ffff
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ecx
mov dword [esi], eax
mov dword [esi + 4], ecx
jmp 0x107c5a1
lea ecx, [ebp - 0x28]
call fcn.0101770c
mov dword [ebp - 0x10], ebx
mov esi, dword [ebp - 0x44]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 3
call fcn.01014097
push eax
push 1
push esi
call dword [sym.imp.ole32.dll_CreateILockBytesOnHGlobal]
cmp eax, ebx
push 3
pop ecx
mov edi, eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], edi
je 0x107c63a
setl al
cmp al, bl
jne 0x107c66d
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
call fcn.01002bd7
push dword [ebp - 0x2c]
mov ecx, dword [eax]
push dword [ebp - 0x30]
push eax
call dword [ecx + 0x18]
cmp eax, ebx
push 3
pop ecx
mov edi, eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], edi
je 0x107c6a2
setl al
cmp al, bl
je 0x107c6a2
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 0x10]
cmp eax, ebx
mov dword [esi], ecx
mov dword [esi + 4], edi
mov byte [ebp - 4], 1
je 0x107c686
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], bl
call fcn.01017d0d
cmp dword [ebp + 0xc], ebx
je 0x107c69e
push dword [ebp + 0xc]
call fcn.0101d056
mov eax, esi
jmp 0x107c6f8
push dword [ebp + 0x10]
push ebx
push ebx
push 0x12
push ebx
push dword [ebp - 0x10]
call dword [sym.imp.ole32.dll_StgOpenStorageOnILockBytes]
cmp eax, ebx
push 3
pop ecx
mov esi, eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], esi
je 0x107c6c5
setl al
mov edi, dword [ebp + 8]
mov eax, dword [ebp - 0x10]
cmp eax, ebx
mov dword [edi], ecx
mov dword [edi + 4], esi
mov byte [ebp - 4], 1
je 0x107c6de
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], bl
call fcn.01017d0d
cmp dword [ebp + 0xc], ebx
je 0x107c6f6
push dword [ebp + 0xc]
call fcn.0101d056
mov eax, edi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc