Function at 0x1015a920
Capabilities:
Read file via mapping

Disassembly:
sub esp, 0x854
mov eax, dword [0x10291440]
xor eax, esp
mov dword [esp + 0x850], eax
mov eax, dword [esp + 0x868]
mov edx, dword [esp + 0x864]
mov ecx, dword [esp + 0x874]
push ebx
mov ebx, dword [esp + 0x864]
mov dword [esp + 8], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], ecx
push ebp
mov ebp, dword [esp + 0x864]
push esi
mov esi, dword [esp + 0x884]
mov dword [esp + 0x24], esi
push edi
mov edi, dword [esp + 0x868]
test ebx, ebx
je 0x1015a984
mov dword [ebx + 0x28], 0
cmp dword [esp + 0x87c], 0
mov dword [esp + 0x20], eax
je 0x1015ab2d
cmp dword [esp + 0x880], 0
je 0x1015ab2d
mov ecx, ebp
mov dword [esp + 0x20], 1
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1015a9b1
sub ecx, edx
mov dword [esp + 0x10], 0
lea eax, [esp + 0x10]
push eax
lea esi, [ecx + 1]
lea eax, [esi + esi]
push eax
push edi
call fcn.100dc800
add esp, 0xc
test eax, eax
jne 0x1015abf0
push esi
push dword [esp + 0x14]
push 0xffffffffffffffff
push ebp
push eax
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jne 0x1015aa0d
call fcn.100f3810
push eax
call fcn.100f3830
add esp, 4
test eax, eax
jne 0x1015abf0
mov eax, dword [esp + 0x1c]
mov ebp, dword [esp + 0x10]
push 0x2f
push ebp
mov eax, dword [eax + 0x10]
mov dword [esp + 0x24], eax
call fcn.10221137
push 0x5c
push ebp
mov esi, eax
call fcn.10221137
add esp, 0x10
test esi, esi
je 0x1015aa3d
test eax, eax
je 0x1015aa50
cmp eax, esi
jbe 0x1015aa50
mov esi, eax
test esi, esi
jne 0x1015aa50
push 0x3a
push ebp
call fcn.10221137
add esp, 8
mov esi, eax
lea eax, [esp + 0x2c]
push eax
push dword [esp + 0x20]
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
test eax, eax
jne 0x1015aa75
call fcn.100f3810
push eax
call fcn.100f3830
add esp, 4
mov esi, eax
jmp 0x1015aaa9
lea eax, [esi + 2]
test esi, esi
cmovne ebp, eax
mov eax, dword [esp + 0x34]
push ebp
push eax
push eax
push dword [esp + 0x68]
lea eax, [esp + 0x70]
push dword [esp + 0x68]
push dword [esp + 0x5c]
push str.__db_shmem._8.8lx._8.8lx._8.8lx._8.8lx._8.8lx._s
push 0x800
push eax
call fcn.100fb290
add esp, 0x24
xor esi, esi
mov eax, dword [esp + 0x10]
test eax, eax
je 0x1015aac3
push eax
push edi
call fcn.100dc7e0
add esp, 8
mov dword [esp + 0x10], 0
test esi, esi
je 0x1015aace
mov eax, esi
jmp 0x1015abf0
cmp dword [esp + 0x18], 0
lea eax, [esp + 0x60]
push eax
mov ecx, 4
mov eax, 0xf001f
push 0
cmovne eax, ecx
push eax
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov esi, eax
test esi, esi
jne 0x1015ab83
test byte [ebx + 0x2c], 2
je 0x1015ab5e
mov ebp, dword [esp + 0x14]
lea eax, [esp + 0x60]
push eax
xor eax, eax
cmp dword [esp + 0x1c], eax
push ebp
sete al
push esi
lea eax, [eax*2 + 2]
push eax
push esi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [esp + 0x20], 1
jmp 0x1015ab58
push 0
push eax
xor eax, eax
mov dword [esp + 0x28], 0
test ecx, ecx
push 0
sete al
lea eax, [eax*2 + 2]
push eax
push 0
push dword [edx + 0x10]
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov ebp, dword [esp + 0x14]
mov esi, eax
test esi, esi
jne 0x1015ab87
call fcn.100f3810
mov esi, eax
push str.OpenFileMapping
push esi
push edi
call fcn.100d0ec0
push esi
call fcn.100f3830
push eax
push edi
call fcn.100d1090
add esp, 0x18
jmp 0x1015abf0
mov ebp, dword [esp + 0x14]
cmp dword [esp + 0x18], 0
mov ecx, 4
push ebp
push 0
push 0
mov eax, 0xf001f
cmovne eax, ecx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ebp, eax
test ebp, ebp
jne 0x1015abd1
call fcn.100f3810
mov esi, eax
push 0x10273b54
push esi
push edi
call fcn.100d0ec0
push esi
call fcn.100f3830
push eax
push edi
call fcn.100d1090
add esp, 0x18
jmp 0x1015abf0
cmp dword [esp + 0x20], 0
je 0x1015abe1
test ebx, ebx
je 0x1015abe1
mov dword [ebx + 0x28], esi
jmp 0x1015abe8
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x28]
mov dword [eax], ebp
xor eax, eax
mov ecx, dword [esp + 0x860]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.1021eb98
add esp, 0x854
ret