Function at 0x1011f0e8
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1017cb15
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x102c
call fcn.1012ba20
mov eax, dword [0x102406a8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x1020], ebx
mov dword [ebp - 0x1024], ebx
mov edi, dword [ebp + 8]
push 0x1000
xor esi, esi
push esi
lea eax, [ebp - 0x1014]
push eax
call fcn.1012db70
mov dword [ebp - 0x1034], esi
xor eax, eax
inc eax
mov dword [ebp - 0x1030], eax
mov dword [ebx + 4], esi
push 8
call fcn.10010082
add esp, 0x10
push esi
push 0x80
push 3
push esi
push 1
push SysReAllocStringLen
push edi
test eax, eax
je 0x1011f180
call eax
mov edi, eax
mov dword [ebp - 0x102c], edi
jmp 0x1011f18e
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
mov dword [ebp - 0x102c], eax
cmp edi, 0xffffffff
je 0x1011f323
push 0x11
call fcn.10010082
pop ecx
push esi
push edi
test eax, eax
je 0x1011f1b1
call eax
mov edi, eax
mov dword [ebp - 0x1018], edi
jmp 0x1011f1bf
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
mov dword [ebp - 0x1018], eax
cmp edi, 0xffffffff
je 0x1011f318
cmp edi, 0x8001
ja 0x1011f318
mov dword [ebp - 4], esi
lea eax, [edi + 2]
push eax
call fcn.1012b7a9
pop ecx
mov ebx, eax
mov dword [ebp - 0x101c], ebx
or dword [ebp - 4], 0xffffffff
jmp 0x1011f21a
lea ecx, [edi + 2]
test ebx, ebx
je 0x1011f318
push ecx
push esi
push ebx
call fcn.1012db70
push 9
call fcn.10010082
add esp, 0x10
push esi
test eax, eax
je 0x1011f24f
lea ecx, [ebp - 0x1034]
push ecx
push edi
push ebx
push dword [ebp - 0x102c]
call eax
jmp 0x1011f264
lea eax, [ebp - 0x1034]
push eax
push edi
push ebx
push dword [ebp - 0x102c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1011f318
cmp dword [ebp - 0x1034], edi
jne 0x1011f318
mov eax, 0xfeff
cmp word [ebx], ax
mov eax, dword [ebp - 0x1020]
jne 0x1011f2a0
mov dword [eax + 4], 2
lea eax, [ebx + 2]
mov dword [ebp - 0x1028], eax
shr edi, 1
dec edi
jmp 0x1011f36f
mov dword [eax + 4], 1
lea eax, [edi*2 + 2]
mov dword [ebp - 0x1018], eax
mov dword [ebp - 4], 2
push eax
call fcn.1012b7a9
pop ecx
mov edi, eax
mov dword [ebp - 0x1028], edi
mov dword [ebp - 0x1038], edi
or dword [ebp - 4], 0xffffffff
jmp 0x1011f307
mov ecx, dword [ebp - 0x1018]
test edi, edi
jne 0x1011f341
push ebx
call fcn.1012b7b2
pop ecx
push dword [ebp - 0x102c]
call fcn.10049da5
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1012b632
leave
ret 4
push ecx
push esi
push edi
call fcn.1012db70
add esp, 0xc
mov eax, dword [ebp - 0x1018]
shr eax, 1
push eax
push edi
push 0xffffffffffffffff
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_GetACP]
push eax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov edi, eax
mov eax, dword [ebp - 0x1028]
mov edx, esi
mov ecx, esi
mov dword [ebp - 0x103c], ecx
test edi, edi
je 0x1011f480
movzx ebx, word [eax + ecx*2]
mov dword [ebp - 0x1024], ebx
push 0xd
pop eax
cmp bx, ax
mov ebx, dword [ebp - 0x101c]
mov eax, dword [ebp - 0x1028]
je 0x1011f3d3
push 0xa
pop ebx
cmp word [ebp - 0x1024], bx
mov ebx, dword [ebp - 0x101c]
je 0x1011f3d3
cmp edx, 0x7ff
je 0x1011f3d3
mov ebx, dword [ebp - 0x1024]
mov word [ebp + edx*2 - 0x1014], bx
inc edx
mov ebx, dword [ebp - 0x101c]
jmp 0x1011f471
add edx, edx
cmp edx, 0x1000
jae 0x1011f51a
xor eax, eax
mov word [ebp + edx - 0x1014], ax
lea eax, [ebp - 0x1014]
push eax
call fcn.10137f71
pop ecx
mov dword [ebp - 0x1018], eax
test eax, eax
je 0x1011f4d6
mov ecx, dword [ebp - 0x1020]
add ecx, 8
lea eax, [ebp - 0x1018]
push eax
push dword [ecx]
call fcn.1007ba79
mov dword [ebp - 0x1024], esi
push 0x1000
push esi
lea eax, [ebp - 0x1014]
push eax
call fcn.1012db70
add esp, 0xc
mov ecx, dword [ebp - 0x103c]
lea edx, [ecx + 1]
mov eax, dword [ebp - 0x1028]
cmp edx, edi
jae 0x1011f45a
push 0xd
pop ebx
cmp word [eax + ecx*2], bx
mov ebx, dword [ebp - 0x101c]
je 0x1011f469
push 0xa
pop ebx
cmp word [eax + ecx*2], bx
mov ebx, dword [ebp - 0x101c]
jne 0x1011f46b
mov ecx, edx
mov edx, dword [ebp - 0x1024]
inc ecx
mov dword [ebp - 0x103c], ecx
cmp ecx, edi
jb 0x1011f381
cmp word [ebp - 0x1014], 0
je 0x1011f4d0
add edx, edx
cmp edx, 0x1000
jae 0x1011f51a
xor eax, eax
mov word [ebp + edx - 0x1014], ax
lea eax, [ebp - 0x1014]
push eax
call fcn.10137f71
pop ecx
mov dword [ebp - 0x1018], eax
test eax, eax
je 0x1011f4d6
mov ecx, dword [ebp - 0x1020]
add ecx, 8
lea eax, [ebp - 0x1018]
push eax
push dword [ecx]
call fcn.1007ba79
mov esi, dword [ebp - 0x1030]
push dword [ebp - 0x102c]
call fcn.10049da5
mov eax, dword [ebp - 0x1020]
cmp dword [eax + 4], 1
jne 0x1011f4fe
mov eax, dword [ebp - 0x1028]
test eax, eax
je 0x1011f4fe
push eax
call fcn.1012b7b2
pop ecx
push ebx
call fcn.1012b7b2
pop ecx
mov eax, dword [ebp - 0x1020]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx]
mov dword [eax + 0x10], ecx
mov eax, esi
jmp 0x1011f325
call fcn.1012b8d8
int3