Function at 0x300119cf
Capabilities:
Get file size
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push edi
mov dword [ebp - 0x10], ebx
cmp dword [esi + 0x10], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1c], ebx
jg 0x30011a0d
mov dword [0x3002ed24], 1
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0xc
cmp dword [0x3002ed04], ebx
je 0x30011a1c
mov dword [esi + 0x20], 1
mov ecx, dword [esi + 0x38]
cmp ecx, ebx
jne 0x30011a28
cmp dword [esi + 0x34], ebx
je 0x30011a39
cmp dword [esi + 0x1c], ebx
jne 0x30011a04
mov eax, dword [esi + 8]
cmp eax, ebx
je 0x30011a39
cmp word [eax], bx
jne 0x30011a04
cmp ecx, ebx
je 0x30011a68
mov eax, dword [esi]
cmp eax, ebx
je 0x30011a47
cmp byte [eax], bl
jne 0x30011a04
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x30011a52
cmp byte [eax], bl
jne 0x30011a04
mov eax, dword [esi + 0xc]
cmp eax, ebx
je 0x30011a5e
cmp word [eax], bx
jne 0x30011a04
cmp dword [esi + 0x20], ebx
jne 0x30011a04
cmp dword [esi + 0x24], ebx
jne 0x30011a04
mov ecx, dword [esi]
cmp ecx, ebx
je 0x30011ae0
cmp byte [ecx], bl
je 0x30011ae0
mov al, byte [ecx]
cmp al, bl
je 0x30011aa9
mov edi, ecx
cmp al, 0x3b
je 0x30011a86
mov al, byte [edi + 1]
inc edi
cmp al, bl
jne 0x30011a7a
cmp byte [edi], bl
jne 0x30011a98
lea eax, [ebp - 0x10]
push eax
push ecx
call fcn.30010ce5
mov ecx, edi
jmp 0x30011a72
lea eax, [ebp - 0x10]
mov byte [edi], bl
push eax
push ecx
call fcn.30010ce5
lea ecx, [edi + 1]
jmp 0x30011a72
push dword [ebp - 0x10]
call fcn.30010c2a
cmp eax, ebx
mov dword [ebp - 8], eax
jle 0x30011ae0
inc dword [ebp - 8]
push 0x106
push dword [ebp - 8]
call fcn.30024069
cmp eax, ebx
mov dword [ebp - 0x18], eax
je 0x30011add
push dword [ebp - 8]
push eax
push dword [ebp - 0x10]
call fcn.30010c6a
jmp 0x30011ae0
mov dword [ebp - 8], ebx
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x30011af5
cmp byte [eax], bl
je 0x30011af5
lea ecx, [ebp - 0xc]
push ecx
push eax
call fcn.3001068a
cmp dword [esi + 0x1c], ebx
je 0x30011b0a
cmp dword [0x3002ed10], ebx
jne 0x30011b0a
mov eax, dword [0x3002b910]
mov dword [ebp - 0x14], eax
lea edi, [esi + 8]
push edi
call fcn.300118a4
lea eax, [esi + 0xc]
push eax
call fcn.300118a4
cmp dword [ebp - 0x14], ebx
je 0x30011b29
mov eax, dword [ebp - 0x14]
cmp word [eax], bx
ja 0x30011b46
cmp dword [ebp - 8], ebx
jg 0x30011b46
cmp dword [ebp - 0xc], ebx
jne 0x30011b46
cmp dword [esi + 0x20], ebx
jne 0x30011b46
cmp dword [esi + 0x24], ebx
jne 0x30011b46
cmp dword [edi], ebx
jne 0x30011b46
cmp dword [esi + 0xc], ebx
je 0x30011ba3
mov eax, dword [esi + 0x24]
push dword [ebp - 0x14]
or eax, dword [esi + 0x20]
push eax
lea eax, [esi + 0x2c]
push eax
push dword [esi + 0xc]
push dword [edi]
push dword [ebp - 0xc]
push dword [ebp - 8]
push dword [ebp - 0x18]
call fcn.300110ed
test eax, eax
je 0x30012079
cmp dword [0x3002eab0], ebx
jne 0x30011ba3
push esi
push 0x30009166
push dword [0x3002d814]
push 0x6d
push dword [0x3002eae4]
call fcn.30007b69
test eax, eax
jne 0x30011ba3
mov eax, dword [ebp + 0xc]
mov dword [eax + 8], 1
jmp 0x30012079
push 1
pop edi
mov dword [ebp - 4], edi
mov dword [esi + 0x30], edi
call fcn.300155b5
test eax, eax
je 0x30011a04
cmp dword [esi + 0x20], ebx
je 0x30011d14
cmp dword [0x3002ed10], ebx
jne 0x30011bf5
mov eax, dword [0x3002b2e0]
cmp eax, ebx
je 0x30012076
push dword [0x3002b2e4]
push eax
push 0x3001198a
call fcn.3001566b
test eax, eax
jne 0x30011d14
jmp 0x30012076
mov eax, dword [ebp + 0x10]
cmp eax, ebx
je 0x30012076
cmp word [eax], bx
je 0x30012076
push eax
call fcn.3002557f
mov edi, eax
push 0x106
inc edi
lea eax, [edi + edi]
push eax
call fcn.30024069
cmp eax, ebx
mov dword [ebp + 8], eax
je 0x30012076
push edi
push eax
push dword [ebp + 0x10]
call fcn.300254c0
push 0x7c
push dword [ebp + 8]
call fcn.3000b579
mov edi, eax
push ebx
push 0x8000000
push 3
push ebx
push 3
push SysReAllocString
push edi
mov byte [ebp + 0x13], bl
call fcn.3000e6be
cmp eax, 0xffffffff
mov dword [ebp + 0xc], eax
je 0x30011d04
push ebx
push ebx
push ebx
push 2
push ebx
push eax
call dword [sym.imp.KERNEL32.DLL_CreateFileMappingA]
cmp eax, ebx
mov dword [ebp - 0x28], eax
je 0x30011cd2
push ebx
push ebx
push ebx
push 4
push eax
call dword [sym.imp.KERNEL32.DLL_MapViewOfFile]
cmp eax, ebx
mov dword [ebp - 0x24], eax
je 0x30011cc9
push 0x30011996
push edi
call fcn.3000da00
mov edi, eax
cmp edi, ebx
je 0x30011cc0
push ebx
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.DLL_GetFileSize]
push eax
push dword [ebp - 0x24]
push edi
call fcn.3001566b
test eax, eax
je 0x30011cf3
push edi
call fcn.300240a4
mov byte [ebp + 0x13], 1
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.DLL_UnmapViewOfFile]
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp byte [ebp + 0x13], bl
je 0x30011d04
push 0x7c
push ebx
call fcn.3000b579
mov edi, eax
cmp edi, ebx
je 0x30011d09
jmp 0x30011c41
push edi
mov dword [ebp - 4], ebx
call fcn.300240a4
push dword [ebp + 8]
jmp 0x3001204e
mov dword [ebp - 4], ebx
jmp 0x30011cfc
push dword [ebp + 8]
call fcn.300240a4
push 1
pop edi
cmp dword [esi + 0x24], ebx
je 0x30011d64
cmp dword [0x3002ed10], ebx
jne 0x30011d64
cmp dword [0x3002eaf4], ebx
jne 0x30011d64
push edi
push 0x3002b2e8
push 0x104
push 0x3002b500
call fcn.3000caae
mov eax, dword [0x3002b2f0]
cmp eax, ebx
je 0x30012076
push dword [0x3002b2f4]
push eax
push 0x3001199a
call fcn.3001566b
test eax, eax
je 0x30012076
mov eax, dword [esi + 0x28]
mov dword [ebp + 8], ebx
cmp word [eax], bx
jbe 0x30011deb
xor edi, edi
mov eax, dword [eax + 0xc]
lea eax, [eax + edi + 8]
push eax
call fcn.300254f8
inc eax
mov dword [ebp + 0xc], eax
push eax
lea eax, [ebp + 0x10]
push eax
call fcn.300242f3
test eax, eax
je 0x30012076
mov eax, dword [esi + 0x28]
push dword [ebp + 0xc]
mov eax, dword [eax + 0xc]
push dword [ebp + 0x10]
lea eax, [eax + edi + 8]
push eax
call fcn.300254dd
push dword [ebp + 0x10]
call fcn.3000d995
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 0xc]
add eax, edi
push dword [eax + 4]
push dword [eax]
push dword [ebp + 0x10]
call fcn.3001566b
test eax, eax
je 0x30011f5e
push dword [ebp + 0x10]
call fcn.300243f5
mov eax, dword [esi + 0x28]
inc dword [ebp + 8]
add edi, 0x10c
movzx ecx, word [eax]
cmp dword [ebp + 8], ecx
jl 0x30011d71
lea eax, [ebp - 0x1c]
push eax
call fcn.300117da
test eax, eax
je 0x30011e17
push dword [ebp - 0x1c]
call fcn.300254f8
inc eax
push eax
push dword [ebp - 0x1c]
push 0x300119ae
call fcn.3001566b
test eax, eax
je 0x30012076
cmp dword [ebp - 0x10], ebx
je 0x30011e2f
push dword [ebp - 8]
push dword [ebp - 0x18]
call fcn.30010ec7
test eax, eax
je 0x30012076
cmp dword [ebp - 0x14], ebx
je 0x30011e4d
cmp dword [esi + 0x1c], ebx
je 0x30011e4d
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x14]
call fcn.30010eed
test eax, eax
je 0x30012076
cmp dword [ebp - 0xc], ebx
je 0x30011e62
push dword [ebp - 0xc]
call fcn.30011012
test eax, eax
je 0x30012076
mov eax, dword [esi + 8]
cmp eax, ebx
je 0x30011f79
push 0x3b
push eax
call fcn.3000b579
mov dword [ebp + 8], eax
push ebx
push 0x8000000
push 3
push ebx
push 3
push SysReAllocString
push eax
mov byte [ebp + 0x13], bl
call fcn.3000e6be
cmp eax, 0xffffffff
mov dword [ebp - 0x28], eax
je 0x30011f15
push ebx
push ebx
push ebx
push 2
push ebx
push eax
call dword [sym.imp.KERNEL32.DLL_CreateFileMappingA]
cmp eax, ebx
mov dword [ebp + 0xc], eax
je 0x30011f07
push ebx
push ebx
push ebx
push 4
push eax
call dword [sym.imp.KERNEL32.DLL_MapViewOfFile]
mov edi, eax
cmp edi, ebx
je 0x30011efe
push 0x300119ba
push dword [ebp + 8]
call fcn.3000da00
push ebx
mov dword [ebp + 0x10], eax
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.DLL_GetFileSize]
push eax
push edi
push dword [ebp + 0x10]
call fcn.3001566b
test eax, eax
je 0x30011f6e
push dword [ebp + 0x10]
call fcn.300240a4
push edi
mov byte [ebp + 0x13], 1
call dword [sym.imp.KERNEL32.DLL_UnmapViewOfFile]
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp byte [ebp + 0x13], bl
jne 0x30011f4a
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push 0x300119be
mov dword [ebp - 0x24], eax
push dword [ebp + 8]
call fcn.3000da00
mov edi, eax
lea eax, [ebp - 0x24]
push 4
push eax
push edi
mov byte [edi], 0x21
call fcn.3001566b
test eax, eax
je 0x3001204a
push edi
call fcn.300240a4
push 0x3b
push ebx
call fcn.3000b579
cmp eax, ebx
mov dword [ebp + 8], eax
je 0x30011f79
jmp 0x30011e78
push dword [ebp + 0x10]
mov dword [ebp - 4], ebx
call fcn.300243f5
jmp 0x30012079
push dword [ebp + 0x10]
mov dword [ebp - 4], ebx
jmp 0x3001204e
mov eax, dword [esi + 0xc]
cmp eax, ebx
je 0x30012055
push 0x3b
push eax
call fcn.3000b579
mov dword [ebp + 0x10], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp + 0x10]
call fcn.3000e805
cmp eax, ebx
mov dword [ebp + 0xc], eax
jle 0x30012005
push 0x106
push eax
call fcn.30024069
cmp eax, ebx
mov dword [ebp + 8], eax
je 0x30011fca
mov ecx, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
push dword [ebp + 8]
push dword [ebp + 0xc]
push dword [ebp - 0x28]
push dword [ebp + 0x10]
call fcn.3000e87e
push 0x300119c2
push dword [ebp + 0x10]
call fcn.3000da00
push dword [ebp + 0xc]
mov edi, eax
push dword [ebp + 8]
push edi
call fcn.3001566b
test eax, eax
je 0x3001204a
push edi
call fcn.300240a4
push dword [ebp + 8]
jmp 0x30012031
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push 0x300119ca
mov dword [ebp - 0x24], eax
push dword [ebp + 0x10]
call fcn.3000da00
mov edi, eax
lea eax, [ebp - 0x24]
push 4
push eax
push edi
mov byte [edi], 0x21
call fcn.3001566b
test eax, eax
je 0x3001204a
push edi
call fcn.300240a4
push 0x3b
push ebx
call fcn.3000b579
cmp eax, ebx
mov dword [ebp + 0x10], eax
je 0x30012055
jmp 0x30011f8f
mov dword [ebp - 4], ebx
push edi
call fcn.300240a4
jmp 0x30012079
lea edi, [esi + 0x14]
add esi, 0x18
push edi
push esi
call fcn.3001572e
test eax, eax
jne 0x30012079
mov eax, dword [esi]
mov dword [edi], ebx
cmp eax, ebx
je 0x30012076
push eax
call fcn.300240a4
mov dword [esi], ebx
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 0xc]
cmp eax, ebx
je 0x300120a4
xor esi, esi
cmp word [eax], bx
jbe 0x3001209e
mov eax, dword [eax + 0xc]
push dword [eax + esi*4]
call dword [sym.imp.OLEAUT32.DLL_SysStringLen]
mov eax, dword [ebp - 0xc]
inc esi
movzx ecx, word [eax]
cmp esi, ecx
jl 0x30012087
push eax
call fcn.30026ff7
mov eax, dword [ebp - 0x20]
cmp eax, ebx
je 0x300120e7
xor edi, edi
cmp word [eax], bx
jbe 0x300120cd
xor esi, esi
mov eax, dword [eax + 0xc]
add eax, esi
push eax
call fcn.3000c67c
mov eax, dword [ebp - 0x20]
inc edi
add esi, 0x10
movzx ecx, word [eax]
cmp edi, ecx
jl 0x300120b4
push eax
call fcn.3002733f
mov ecx, dword [ebp - 0x20]
cmp ecx, ebx
mov esi, ecx
je 0x300120e7
call fcn.30013db5
push esi
call fcn.300240a4
mov eax, dword [ebp - 0x10]
cmp eax, ebx
je 0x30012116
xor esi, esi
cmp word [eax], bx
jbe 0x30012110
mov ecx, dword [eax + 0xc]
mov ecx, dword [ecx + esi*4]
cmp ecx, ebx
je 0x30012108
push ecx
call fcn.300240a4
mov eax, dword [ebp - 0x10]
movzx ecx, word [eax]
inc esi
cmp esi, ecx
jl 0x300120f5
push eax
call fcn.30026ff7
cmp dword [ebp - 0x18], ebx
je 0x30012123
push dword [ebp - 0x18]
call fcn.300240a4
cmp dword [ebp - 0x1c], ebx
je 0x30012130
push dword [ebp - 0x1c]
call fcn.300240a4
mov eax, dword [ebp - 4]
jmp 0x30011a06