Function at 0x434d1b
Capabilities:
Get file size
Read file on windows

Disassembly:
push 0x98
mov eax, 0x4f72f6
call fcn.004cb6c8
mov edx, ecx
mov dword [ebp - 0x9c], edx
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x98], edi
call fcn.00440334
xor esi, esi
lea eax, [edx + 4]
mov dword [ebp - 4], esi
cmp dword [eax + 0x10], esi
je 0x434d73
push eax
lea ecx, [ebp - 0x28]
call fcn.00443482
push 1
lea ecx, [ebp - 0x2c]
call fcn.0044126b
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
call fcn.004409a0
jmp 0x434f8e
lea ecx, [ebp - 0x48]
call fcn.00434bc9
push esi
push 0x80
push 3
push esi
mov byte [ebp - 4], 1
lea eax, [ebp - 0x44]
cmp dword [ebp - 0x30], 8
push 1
cmovae eax, dword [ebp - 0x44]
push accept
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x434f7f
lea eax, [ebp - 0xa4]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x434dca
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x434f7f
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x98], eax
cmp ecx, esi
jg 0x434dbe
jl 0x434dbe
cmp eax, esi
jbe 0x434dbe
cmp ecx, esi
jl 0x434df3
jg 0x434dbe
cmp eax, 0x7f8
jae 0x434dbe
push 0x800
call fcn.004cacc1
mov esi, eax
mov dword [esp], 0x800
push 0
push esi
mov dword [ebp - 0x94], esi
call fcn.004cd4b0
and dword [ebp - 0x90], 0
lea eax, [ebp - 0x90]
add esp, 0xc
push 0
push eax
push dword [ebp - 0x98]
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
je 0x434f72
cmp dword [ebp - 0x90], 0
jbe 0x434f72
mov esi, dword [ebp - 0x94]
lea ecx, [ebp - 0x80]
lea eax, [esi + 2]
push eax
call fcn.00440943
push esi
call fcn.004cacbc
xor eax, eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x64]
mov dword [esp], 0x520120
call fcn.00440943
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x80]
call fcn.00442ba4
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 3
call fcn.00440de9
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp - 0x8c]
push 0x1c
cdq
pop ecx
idiv ecx
cmp eax, 2
jb 0x434f55
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x64]
call fcn.004409a0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x8c]
lea ecx, [ecx + 0x1c]
call fcn.00441258
cmp dword [ebp - 0x50], 0xa
mov esi, eax
jle 0x434f4d
test esi, esi
je 0x434f4d
mov ebx, dword [ebp - 0x9c]
lea ecx, [ebx + 4]
cmp dword [ecx + 0x10], 0
jne 0x434f4d
lea eax, [ebp - 0x60]
push eax
call fcn.00443482
push 1
lea ecx, [ebp - 0x64]
mov dword [ebx + 0x1c], esi
call fcn.0044126b
lea eax, [ebp - 0x64]
mov ecx, edi
push eax
call fcn.004409a0
lea ecx, [ebp - 0x64]
call fcn.00440de9
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 6
call fcn.00428dbc
lea ecx, [ebp - 0x80]
call fcn.00440de9
jmp 0x434f86
lea ecx, [ebp - 0x64]
call fcn.00440de9
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 7
call fcn.00428dbc
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 1
call fcn.00440de9
jmp 0x434f7f
mov esi, dword [ebp - 0x94]
push esi
call fcn.004cacbc
pop ecx
mov ecx, edi
call fcn.00434fa0
lea ecx, [ebp - 0x48]
call fcn.00440de9
lea ecx, [ebp - 0x2c]
call fcn.00440de9
mov eax, edi
call fcn.004cb672
ret 8