Function at 0x1005199
Capabilities:
Read file via mapping

Disassembly:
push 0x280
push 0x1001810
call fcn.01007594
mov eax, dword [0x10095ec]
mov dword [ebp - 0x1c], eax
mov edi, dword [ebp + 8]
mov dword [ebp - 0x240], edi
xor ebx, ebx
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x250], ebx
mov dword [ebp - 0x238], ebx
mov dword [ebp - 0x248], ebx
mov dword [ebp - 0x230], ebx
mov eax, dword [0x100a780]
cmp eax, 0xffffffff
jne 0x10051e9
push edi
jmp 0x10052c0
lea ecx, [ebp - 0x290]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov esi, dword [ebp - 0x26c]
mov dword [ebp - 0x254], esi
cmp eax, ebx
jne 0x1005212
push edi
call fcn.01004e40
jmp 0x1005801
cmp esi, 0x40000000
jae 0x10057e7
cmp dword [ebp - 0x270], ebx
jne 0x10057e7
push dword [0x100ae84]
call dword [sym.imp.USER32.dll_SetCursor]
cmp esi, ebx
je 0x100527e
xor edi, edi
mov dword [ebp - 0x23c], edi
push ebx
push esi
push ebx
push 2
push ebx
push dword [0x100a780]
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [ebp - 0x25c], eax
cmp eax, ebx
je 0x1005297
push esi
push ebx
push ebx
push 4
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x23c], eax
push dword [ebp - 0x25c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1005291
lea eax, [ebp - 0x24c]
mov dword [ebp - 0x23c], eax
mov word [ebp - 0x24c], bx
mov edi, dword [ebp - 0x23c]
push dword [0x100a780]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [0x100a780], 0xffffffff
cmp edi, ebx
jne 0x10052ca
push dword [0x100ae88]
call dword [sym.imp.USER32.dll_SetCursor]
push dword [ebp - 0x240]
call fcn.01004e40
jmp 0x1005814
mov dword [ebp - 4], ebx
mov dword [ebp - 0x244], edi
mov eax, dword [ebp + 0xc]
cmp eax, 0xffffffff
jne 0x1005491
movzx eax, word [edi]
cmp eax, 0xbbef
je 0x1005325
cmp eax, 0xfeff
je 0x1005314
cmp eax, 0xfffe
jne 0x1005352
mov dword [ebp - 0x238], 1
mov dword [ebp - 0x22c], 2
mov ebx, esi
shr ebx, 1
jmp 0x1005544
xor eax, eax
inc eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x22c], eax
jmp 0x100530b
cmp esi, 2
jbe 0x1005352
cmp byte [edi + 2], 0xbf
jne 0x1005352
mov dword [ebp - 0x258], 1
mov dword [ebp - 0x230], 0xfde9
push 3
pop eax
mov dword [ebp - 0x22c], eax
jmp 0x10054ea
push esi
push edi
call fcn.010070d1
mov dword [ebp - 0x238], eax
cmp eax, ebx
je 0x1005376
mov dword [ebp - 0x22c], 1
mov ebx, esi
shr ebx, 1
jmp 0x1005545
push esi
push edi
call fcn.01007079
mov dword [ebp - 0x258], eax
cmp eax, ebx
je 0x100549e
mov dword [ebp - 0x22c], 3
mov dword [ebp - 0x230], 0xfde9
mov ebx, dword [ebp - 0x228]
xor eax, eax
cmp dword [ebp - 0x238], eax
jne 0x10053cf
push eax
push eax
push esi
push dword [ebp - 0x244]
push eax
push dword [ebp - 0x230]
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebx, eax
mov dword [ebp - 0x228], ebx
xor eax, eax
push eax
push eax
push 0xb
push dword [0x1009818]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
call esi
push 0
push 0
push 0xb1
push dword [0x1009818]
call esi
push 0
push 0
push 0xb7
push dword [0x1009818]
call esi
push 2
lea eax, [ebx + ebx + 2]
push eax
push dword [0x100ae8c]
call dword [sym.imp.KERNEL32.dll_LocalReAlloc]
mov dword [ebp - 0x248], eax
test eax, eax
jne 0x1005550
push dword [ebp - 0x240]
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
xor ebx, ebx
push ebx
call fcn.01004d1f
push dword [0x100ae88]
call dword [sym.imp.USER32.dll_SetCursor]
push 0x30
lea eax, [ebp - 0x224]
push eax
push dword [0x1009038]
push dword [0x100903c]
push dword [0x1009810]
call fcn.01001f90
lea eax, [ebp - 0x24c]
cmp edi, eax
je 0x100547c
push edi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push ebx
push ebx
push 0xb
push dword [0x1009818]
call esi
or dword [ebp - 4], 0xffffffff
jmp 0x1005814
dec eax
je 0x1005520
dec eax
je 0x1005500
dec eax
je 0x10054af
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x230], ebx
jmp 0x100539f
mov dword [ebp - 0x258], 1
mov dword [ebp - 0x230], 0xfde9
push 3
pop eax
mov dword [ebp - 0x22c], eax
cmp esi, 2
jbe 0x100539f
cmp word [edi], 0xbbef
jne 0x100539f
cmp byte [edi + 2], 0xbf
jne 0x100539f
lea ecx, [edi + 3]
mov dword [ebp - 0x244], ecx
sub esi, eax
mov dword [ebp - 0x254], esi
jmp 0x100539f
xor eax, eax
inc eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x22c], eax
mov ebx, esi
shr ebx, 1
mov dword [ebp - 0x228], ebx
cmp word [edi], 0xfffe
jmp 0x100553e
xor eax, eax
inc eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x22c], eax
mov ebx, esi
shr ebx, 1
mov dword [ebp - 0x228], ebx
cmp word [edi], 0xfeff
jne 0x10053a5
dec ebx
mov dword [ebp - 0x228], ebx
jmp 0x10053a5
push eax
call dword [sym.imp.KERNEL32.dll_LocalLock]
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x238], 0
je 0x10055ac
mov cx, word [edi]
cmp cx, 0xfeff
jne 0x1005575
lea esi, [edi + 2]
jmp 0x100558b
cmp cx, 0xfffe
jne 0x1005589
push ebx
lea ecx, [edi + 2]
push ecx
push eax
call fcn.01004b85
jmp 0x10055d0
mov esi, edi
lea ecx, [ebx + ebx]
mov edi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x23c]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x10055d0
push ebx
push eax
push dword [ebp - 0x254]
push dword [ebp - 0x244]
push 0
push dword [ebp - 0x230]
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebx, eax
mov dword [ebp - 0x228], ebx
mov eax, dword [ebp - 0x234]
mov ecx, dword [ebp - 0x22c]
mov dword [0x1009018], ecx
or dword [ebp - 4], 0xffffffff
jmp 0x1005626
lea ecx, [ebp - 0x24c]
cmp edi, ecx
je 0x100563d
push edi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [ebp - 0x234]
xor edi, edi
cmp eax, edi
je 0x1005695
mov ecx, eax
cmp ebx, edi
jbe 0x100565a
mov edx, ebx
cmp word [ecx], di
jne 0x1005655
mov word [ecx], 0x20
inc ecx
inc ecx
dec edx
jne 0x100564b
mov word [eax + ebx*2], di
mov cx, word [eax]
inc eax
inc eax
cmp cx, 0x2e
jne 0x100568f
mov cx, word [eax]
inc eax
inc eax
cmp cx, 0x4c
jne 0x100568f
mov cx, word [eax]
inc eax
inc eax
cmp cx, 0x4f
jne 0x100568f
cmp word [eax], 0x47
mov dword [ebp - 0x250], 1
je 0x1005695
mov dword [ebp - 0x250], edi
cmp dword [ebp - 0x248], edi
je 0x10056b4
push dword [ebp - 0x248]
call dword [sym.imp.KERNEL32.dll_LocalUnlock]
mov eax, dword [ebp - 0x248]
mov dword [0x100ae8c], eax
push dword [ebp - 0x240]
push 0x100ac00
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push dword [ebp - 0x240]
call fcn.01002a75
mov dword [0x1009004], edi
mov dword [0x1009828], 1
push edi
push dword [0x100ae8c]
push 0xbc
push dword [0x1009818]
call esi
cmp dword [0x1009828], 2
jne 0x1005746
push dword [0x100ae88]
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [0x1009828], edi
push 0x30
push dword [ebp - 0x240]
push dword [0x1009038]
push dword [0x100903c]
push dword [0x1009810]
call fcn.01001f90
push edi
call fcn.01004d1f
push edi
push 1
push 0xb
push dword [0x1009818]
call esi
jmp 0x1005814
mov dword [0x1009828], edi
push edi
push edi
push 0xc5
push dword [0x1009818]
call dword [sym.imp.USER32.dll_PostMessageW]
cmp dword [ebp - 0x250], edi
je 0x100578c
push ebx
push ebx
push 0xb1
push dword [0x1009818]
call esi
push edi
push edi
push 0xb7
push dword [0x1009818]
call esi
push 1
call fcn.01006f30
xor ebx, ebx
inc ebx
push ebx
push edi
push 0xbe
push 0x115
push dword [0x1009818]
call esi
push eax
push ebx
push dword [0x1009810]
call dword [sym.imp.USER32.dll_SetScrollPos]
push edi
push ebx
push 0xb
push dword [0x1009818]
call esi
push ebx
push edi
push dword [0x1009818]
call dword [sym.imp.USER32.dll_InvalidateRect]
push dword [0x1009818]
call dword [sym.imp.USER32.dll_UpdateWindow]
push dword [0x100ae88]
call dword [sym.imp.USER32.dll_SetCursor]
mov eax, ebx
jmp 0x1005816
push 0x30
push edi
push dword [0x1009038]
push dword [0x100903c]
push dword [0x1009810]
call fcn.01001f90
push dword [0x100a780]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [0x100a780], 0xffffffff
xor eax, eax
mov ecx, dword [ebp - 0x1c]
call fcn.01007167
call fcn.010075cf
ret 8