Function at 0x10003570
Capabilities:
Get file size
Read file on windows
Read file via mapping

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100199d2
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1170
call fcn.10019640
mov eax, dword [0x10024014]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1150], ecx
mov eax, dword [ebx + 8]
xorps xmm0, xmm0
mov dword [ebp - 0x114c], eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x1138], 0
mov dword [ebp - 0x1144], eax
movups xmmword [ecx], xmm0
cmp edx, 5
jne 0x100036c3
cmp dword [0x1002e90c], 0x10
mov eax, 0x1002e8f8
mov edi, dword [0x1002e908]
cmovae eax, dword [0x1002e8f8]
mov dword [ebp - 0x1168], 0
mov dword [ebp - 0x1158], 0
mov dword [ebp - 0x1154], 0
mov dword [ebp - 0x1138], eax
cmp edi, 0x10
jae 0x1000363e
movups xmm0, xmmword [eax]
mov dword [ebp - 0x1154], 0xf
movups xmmword [ebp - 0x1168], xmm0
jmp 0x100036b0
mov esi, edi
mov eax, 0x7fffffff
or esi, 0xf
cmp esi, eax
cmova esi, eax
lea eax, [esi + 1]
cmp eax, 0x1000
jb 0x1000367e
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x10003a7c
push ecx
call fcn.100068be
add esp, 4
test eax, eax
je 0x10003a81
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
jmp 0x10003691
test eax, eax
je 0x1000368f
push eax
call fcn.100068be
add esp, 4
mov ecx, eax
jmp 0x10003691
xor ecx, ecx
lea eax, [edi + 1]
mov dword [ebp - 0x1168], ecx
push eax
push dword [ebp - 0x1138]
push ecx
call fcn.10007f50
add esp, 0xc
mov dword [ebp - 0x1154], esi
mov dword [ebp - 0x1158], edi
lea eax, [ebp - 0x1168]
mov ecx, 1
jmp 0x100036e1
lea eax, [edx + edx*2]
lea eax, [eax*8 + 0x1002e928]
push eax
lea ecx, [ebp - 0x1180]
call fcn.10003fe0
add esp, 4
mov ecx, 2
mov dword [ebp - 0x1030], 0
mov dword [ebp - 0x1020], 0
mov dword [ebp - 0x101c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1030], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1020], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov dword [ebp - 4], 1
test cl, 2
je 0x10003797
mov edx, dword [ebp - 0x116c]
and ecx, 0xfffffffd
mov dword [ebp - 0x1138], ecx
cmp edx, 0x10
jb 0x1000377c
mov ecx, dword [ebp - 0x1180]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1000376c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003a81
push edx
push ecx
call fcn.100068ee
mov ecx, dword [ebp - 0x1138]
add esp, 8
mov dword [ebp - 0x1170], 0
mov dword [ebp - 0x116c], 0xf
mov byte [ebp - 0x1180], 0
mov byte [ebp - 4], 2
test cl, 1
je 0x100037da
mov edx, dword [ebp - 0x1154]
cmp edx, 0x10
jb 0x100037da
mov ecx, dword [ebp - 0x1168]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100037d0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003a81
push edx
push ecx
call fcn.100068ee
add esp, 8
cmp dword [ebp - 0x101c], 0x10
lea eax, [ebp - 0x1030]
push 0
cmovae eax, dword [ebp - 0x1030]
push 0x80
push 3
push 0
push 1
push 0x80000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x10003a1b
push 0
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
sub esi, dword [ebp - 0x114c]
cmp esi, 0xffffffff
je 0x10003a14
cmp dword [ebp - 0x1144], 0
mov dword [ebp - 0x1148], 0
mov dword [ebp - 0x1140], esi
je 0x1000390c
cmp dword [ebx + 0x10], 0
je 0x1000390c
lea edx, [ebp - 0x113c]
mov dword [ebp - 0x113c], 0
mov ecx, edi
call fcn.10003e10
test al, al
je 0x10003a14
mov eax, dword [ebp - 0x113c]
mov ecx, esi
push 0
push 0
test eax, eax
push 0
cmovne ecx, eax
push edi
mov dword [ebp - 0x1140], ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0x1000
lea eax, [ebp - 0x1018]
push 0
push eax
call fcn.100084d0
push 4
call fcn.100068be
add esp, 0x10
push 0
push eax
push 0x1000
lea eax, [ebp - 0x1018]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, 1
jne 0x10003a14
mov ecx, dword [ebp - 0xfdc]
lea eax, [ebp - 0xf20]
add eax, ecx
lea edx, [ebp - 0x1018]
cmp eax, edx
jbe 0x10003a14
mov eax, dword [ebp - 0x1140]
add ecx, 0xf8
mov dword [ebp - 0x1148], ecx
cmp eax, ecx
jbe 0x10003a14
sub eax, ecx
mov dword [ebp - 0x1140], eax
push 0
push 0
push 0
push 2
push 0
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x1138], eax
test eax, eax
je 0x10003a14
push esi
push 0
push 0
push 4
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x113c], eax
test eax, eax
jne 0x10003959
push dword [ebp - 0x1138]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push edi
call esi
jmp 0x10003a1b
lea eax, [ebp - 0x1130]
push eax
mov eax, 0x1002ebd8
call eax
add esp, 4
cmp dword [ebp - 0x1144], 0
je 0x100039b8
mov edx, dword [ebx + 0x10]
test edx, edx
je 0x100039b8
mov esi, dword [ebp - 0x113c]
add esi, dword [ebp - 0x1148]
mov eax, dword [ebp - 0x1144]
add eax, esi
push edx
push eax
lea eax, [ebp - 0x1130]
push eax
mov eax, 0x1002ea60
call eax
push dword [ebp - 0x1140]
lea eax, [ebp - 0x1130]
push esi
push eax
mov eax, 0x1002ea60
call eax
add esp, 0x18
jmp 0x100039d7
mov eax, dword [ebp - 0x113c]
add eax, dword [ebp - 0x114c]
push esi
push eax
lea eax, [ebp - 0x1130]
push eax
mov eax, 0x1002ea60
call eax
add esp, 0xc
push dword [ebp - 0x1150]
lea eax, [ebp - 0x1130]
push eax
mov eax, 0x1002e9a0
call eax
add esp, 8
push dword [ebp - 0x113c]
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push dword [ebp - 0x1138]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push edi
call esi
mov byte [ebp - 0x1131], 1
jmp 0x10003a22
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x1131], 0
mov edx, dword [ebp - 0x101c]
cmp edx, 0x10
jb 0x10003a58
mov ecx, dword [ebp - 0x1030]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10003a4e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003a86
push edx
push ecx
call fcn.100068ee
add esp, 8
mov al, byte [ebp - 0x1131]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100068b0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.10001ca0
call fcn.10009ded
call fcn.10009ded
int3