Function at 0x1000114d0
Capabilities:
Get file size
Read file via mapping

Disassembly:
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xb8
mov rax, qword [0x100031100]
xor rax, rsp
mov qword [rsp + 0xa0], rax
cmp qword [0x100031d48], 0
je 0x100011542
mov rax, qword [0x100031d48]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x70], 0
je 0x100011536
mov rax, qword [rsp + 0x70]
mov rax, qword [rax]
mov edx, 1
mov rcx, qword [rsp + 0x70]
call qword [rax]
mov qword [rsp + 0x90], rax
jmp 0x100011542
mov qword [rsp + 0x90], 0
mov ecx, 0x60
call qword [sym.imp.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__]
mov qword [rsp + 0x88], rax
cmp qword [rsp + 0x88], 0
je 0x10001157e
lea rdx, [0x100002308]
mov rcx, qword [rsp + 0x88]
call fcn.1000044c0
mov qword [rsp + 0x98], rax
jmp 0x10001158a
mov qword [rsp + 0x98], 0
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [0x100031d48], rax
cmp qword [0x100031d48], 0
jne 0x1000115c6
lea rcx, [0x1000023d0]
call fcn.10000d3c0
xor eax, eax
jmp 0x100011870
call fcn.100011400
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10000080
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov r8d, 1
mov edx, 0x80000000
lea rcx, [0x1000566e0]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x100052150], rax
cmp qword [0x100052150], 0xffffffffffffffff
jne 0x100011628
lea rdx, [0x1000566e0]
lea rcx, [0x100002400]
call fcn.10000d3c0
jmp 0x100011856
xor edx, edx
mov rcx, qword [0x100052150]
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [rsp + 0x40], eax
cmp dword [rsp + 0x40], 0xffffffff
jne 0x10001165b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [0x100002420]
call fcn.10000d3c0
jmp 0x100011856
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 2
xor edx, edx
mov rcx, qword [0x100052150]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov qword [0x100052158], rax
cmp qword [0x100052158], 0
jne 0x1000116a6
lea rcx, [0x100002448]
call fcn.10000d3c0
jmp 0x100011856
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 4
mov rcx, qword [0x100052158]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [0x100052160], rax
cmp qword [0x100052160], 0
jne 0x1000116e9
lea rcx, [0x100002468]
call fcn.10000d3c0
jmp 0x100011856
mov eax, dword [rsp + 0x40]
mov rcx, qword [0x100052160]
add rcx, rax
mov rax, rcx
mov qword [0x100052168], rax
lea rax, [0x100052570]
mov rdi, rax
mov rsi, qword [0x100052160]
mov ecx, 0x40ac
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [0x100031bf0]
call fcn.10000d2f0
mov dword [rsp + 0x44], eax
mov eax, dword [rsp + 0x44]
cmp dword [0x100052650], eax
je 0x10001176d
mov r8d, dword [0x100052650]
mov edx, dword [rsp + 0x44]
lea rcx, [0x100002480]
call fcn.10000d3c0
mov r9d, 0x10
lea r8, [0x10000208c]
lea rdx, [0x1000024b8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x100011856
mov rax, qword [0x100052160]
add rax, 0x40ac
mov qword [0x100052160], rax
call fcn.100011140
mov dword [0x100056638], eax
mov eax, dword [0x100056638]
dec eax
mov dword [0x10005662c], eax
cmp dword [0x100056638], 0
jle 0x100011842
call fcn.100011260
test eax, eax
je 0x100011842
mov eax, dword [0x100056638]
mov dword [0x100056628], eax
mov dword [rsp + 0x50], 0x1c
mov dword [rsp + 0x54], 7
mov dword [rsp + 0x58], 0
mov eax, dword [0x10005661c]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [0x100056628]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c], eax
mov eax, dword [0x10005661c]
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x64], 0
mov r9d, 1
lea r8, [rsp + 0x50]
mov edx, 1
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.USER32.dll_SetScrollInfo]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.USER32.dll_InvalidateRect]
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov rcx, qword [rsp + 0xd0]
call fcn.100010cb0
mov eax, 1
jmp 0x100011870
lea rdx, [0x1000566e0]
lea rcx, [0x1000024e0]
call fcn.10000d3c0
call fcn.100011400
xor eax, eax
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.100025760
add rsp, 0xb8
pop rdi
pop rsi
ret