Function at 0x10b1470
Capabilities:
Get file size
Read file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
xor ebx, ebx
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 4], ebx
mov eax, dword [0x111124c]
mov edi, 0x111124c
cmp eax, edi
je 0x10b14b1
test byte [eax + 0x1c], 4
je 0x10b14b1
cmp byte [eax + 0x19], 4
jb 0x10b14b1
push 0x100b070
push 0xcc
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
mov eax, dword [ebp + 0x14]
push ebx
push 0x80
push 3
push ebx
push 1
push 0x80000000
push dword [ebp + 8]
mov byte [eax], bl
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 8], eax
cmp eax, 0xffffffff
jne 0x10b14de
xor eax, eax
jmp 0x10b18d0
push esi
lea ecx, [ebp - 0x1c]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x10b1539
mov eax, dword [0x111124c]
cmp eax, edi
je 0x10b1527
test byte [eax + 0x1c], 4
je 0x10b1527
cmp byte [eax + 0x19], 3
jb 0x10b1527
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 8]
mov eax, dword [0x111124c]
push 0x100b070
push 0xcd
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010196ed
xor esi, esi
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
jmp 0x10b18cf
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0x1c]
mov esi, 0x200
mov dword [eax], ecx
mov ecx, dword [ebp - 0x18]
push esi
push ebx
mov dword [eax + 4], ecx
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp + 0x1c], eax
cmp eax, ebx
jne 0x10b156b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp + 0x20]
mov dword [ecx], eax
push 3
pop esi
jmp 0x10b1529
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_ReadFile]
lea ecx, [ebp - 4]
push ecx
push esi
push eax
push dword [ebp - 8]
call ebx
test eax, eax
je 0x10b1882
cmp dword [ebp - 4], esi
jne 0x10b1882
mov ecx, dword [ebp - 0xc]
xor esi, esi
push esi
push esi
push esi
lea eax, [ebp - 0x14]
push eax
push dword [ebp + 0x1c]
call fcn.010b05eb
test al, al
jne 0x10b15de
mov eax, dword [0x111124c]
cmp eax, edi
je 0x10b15d0
test byte [eax + 0x1c], 4
je 0x10b15d0
cmp byte [eax + 0x19], 3
jb 0x10b15d0
push 0x100b070
push 0xcf
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
push dword [ebp + 0x1c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x10b1529
mov edx, dword [ebp - 0x10]
cmp edx, dword [ebp + 0x10]
jg 0x10b162f
mov ecx, dword [ebp + 0xc]
jl 0x10b15f0
cmp dword [ebp - 0x14], ecx
jae 0x10b162f
mov eax, dword [0x111124c]
cmp eax, edi
je 0x10b15d0
test byte [eax + 0x1c], 4
je 0x10b15d0
cmp byte [eax + 0x19], 3
jb 0x10b15d0
push ecx
push dword [ebp + 0x10]
mov ecx, dword [ebp + 0x10]
push dword [ebp - 0x14]
sar ecx, 0x1f
push edx
push 0x100b070
push 0xd0
push dword [eax + 0x14]
mov ecx, edx
push dword [eax + 0x10]
sar ecx, 0x1f
call fcn.0107bd73
jmp 0x10b15d0
mov esi, 0x400
push esi
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp + 0x10], eax
test eax, eax
jne 0x10b165d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp + 0x20]
push dword [ebp + 0x1c]
mov dword [ecx], eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x10b1566
push 0
lea ecx, [ebp - 4]
push ecx
push esi
push eax
push dword [ebp - 8]
call ebx
test eax, eax
je 0x10b1834
cmp dword [ebp - 4], esi
jne 0x10b1834
mov esi, dword [ebp - 0xc]
push dword [ebp + 0x10]
mov ecx, esi
call fcn.010ac594
test al, al
jne 0x10b16c7
mov eax, dword [0x111124c]
cmp eax, edi
je 0x10b186d
test byte [eax + 0x1c], 4
je 0x10b186d
cmp byte [eax + 0x19], 3
jb 0x10b186d
push 0x100b070
push 0xd2
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
jmp 0x10b186d
mov esi, dword [esi + 0x8c]
shl esi, 2
push esi
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x10b1700
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp + 0x20]
push dword [ebp + 0x10]
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ecx], eax
call esi
push dword [ebp + 0x1c]
call esi
jmp 0x10b1566
push 0
lea ecx, [ebp - 4]
push ecx
push esi
push eax
push dword [ebp - 8]
call ebx
test eax, eax
je 0x10b17f2
cmp dword [ebp - 4], esi
jne 0x10b17f2
mov esi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
push esi
call fcn.010acc56
test al, al
jne 0x10b1766
mov eax, dword [0x111124c]
cmp eax, edi
je 0x10b1758
test byte [eax + 0x1c], 4
je 0x10b1758
cmp byte [eax + 0x19], 3
jb 0x10b1758
push 0x100b070
push 0xd4
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
call esi
jmp 0x10b1873
mov eax, dword [0x111124c]
cmp eax, edi
je 0x10b1793
test byte [eax + 0x1c], 4
je 0x10b1793
cmp byte [eax + 0x19], 4
jb 0x10b1793
push dword [ebp + 8]
push 0x100b070
push 0xd5
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019680
mov eax, dword [ebp + 0x14]
push dword [ebp + 0x10]
mov byte [eax], 1
mov eax, dword [ebp + 0x18]
mov dword [eax], esi
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
call esi
push dword [ebp + 0x1c]
call esi
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x111124c]
cmp eax, edi
je 0x10b18cd
test byte [eax + 0x1c], 4
je 0x10b18cd
cmp byte [eax + 0x19], 4
jb 0x10b18cd
push 0x100b070
push 0xd6
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
jmp 0x10b18cd
mov eax, dword [0x111124c]
cmp eax, edi
je 0x10b182c
test byte [eax + 0x1c], 4
je 0x10b182c
cmp byte [eax + 0x19], 3
jb 0x10b182c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp - 4]
mov eax, dword [0x111124c]
push esi
push 0x100b070
push 0xd3
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109bb0b
push dword [ebp - 0x10]
jmp 0x10b1759
mov eax, dword [0x111124c]
cmp eax, edi
je 0x10b186d
test byte [eax + 0x1c], 4
je 0x10b186d
cmp byte [eax + 0x19], 3
jb 0x10b186d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp - 4]
mov eax, dword [0x111124c]
push 0x100b070
push 0xd1
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109ba57
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
push dword [ebp + 0x10]
call esi
push dword [ebp + 0x1c]
call esi
jmp 0x10b1527
mov eax, dword [0x111124c]
cmp eax, edi
je 0x10b18bb
test byte [eax + 0x1c], 4
je 0x10b18bb
cmp byte [eax + 0x19], 3
jb 0x10b18bb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp - 4]
mov eax, dword [0x111124c]
push 0x100b070
push 0xce
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109ba57
push dword [ebp + 0x1c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
pop esi
pop edi
pop ebx
leave
ret 0x1c