Function at 0x11036ab0
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov esi, ecx
push edi
lea eax, [esi + 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movzx edi, byte [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
mov ebx, dword [ebp + 8]
neg edi
sbb edi, edi
and edi, 0xe8000000
push ebx
add edi, 0x20000000
mov dword [esi + 0xc], ecx
call dword [sym.imp.MSVCR100.dll__wcsdup]
push 0x5c
push eax
mov dword [esi + 0x4c], eax
call dword [sym.imp.MSVCR100.dll_wcsrchr]
add esp, 0xc
push 0
or edi, 0x40000000
push edi
push 3
push 0
push 1
push closesocket
add eax, 2
push ebx
mov dword [esi], eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esi + 0x14], eax
cmp eax, 0xffffffff
jne 0x11036b35
push 0
push edi
push 3
push 0
push 3
push closesocket
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x14]
cmp eax, 0xffffffff
sete cl
mov byte [esi + 0x18], cl
test cl, cl
jne 0x11036b83
lea edi, [esi + 0x40]
push edi
push eax
mov dword [esi + 0x48], 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov ecx, dword [edi]
mov eax, dword [edi + 4]
mov edx, ecx
or edx, eax
jne 0x11036b68
mov byte [esi + 0x18], 1
jmp 0x11036b9c
cmp byte [ebp + 0xc], 0
jne 0x11036b9c
test eax, eax
jg 0x11036b9c
jl 0x11036b7c
cmp ecx, 0x10000
ja 0x11036b9c
mov ebx, 0x4000
jmp 0x11036b9f
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [esi + 0x40]
mov dword [esi + 0x48], eax
mov dword [edi], 0
mov dword [edi + 4], 0
mov ebx, dword [ebp + 0x14]
xor ecx, ecx
mov dword [esi + 4], ebx
cmp dword [esi + 0x44], ecx
je 0x11036bae
mov eax, dword [ebp + 0x18]
jmp 0x11036bc1
mov edx, dword [edi]
lea eax, [edx + ebx - 1]
xor edx, edx
div ebx
mov edx, dword [ebp + 0x18]
cmp edx, eax
jge 0x11036bc1
mov eax, edx
mov edi, eax
mov dword [esi + 8], eax
mov dword [esi + 0x28], ecx
mov dword [esi + 0x2c], ecx
mov dword [esi + 0x38], ecx
mov dword [esi + 0x30], ecx
mov dword [esi + 0x34], ecx
cmp edi, ecx
je 0x11036c8f
xor ecx, ecx
mov edx, 0x14
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.11170a40
mov edi, dword [esi + 8]
mov dword [esi + 0x10], eax
mov eax, edi
imul eax, ebx
add eax, 0x1000
push eax
call dword [sym.imp.MSVCR100.dll_malloc]
mov dword [esi + 0x1c], eax
add eax, 0xfff
and eax, 0xfffff000
add esp, 8
xor ebx, ebx
mov dword [esi + 0x20], eax
test edi, edi
jle 0x11036c53
mov dword [ebp + 0xc], ebx
mov edi, dword [esi + 0x10]
add edi, dword [ebp + 0xc]
xor eax, eax
push eax
mov dword [edi], eax
push eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
push eax
mov dword [edi + 0xc], eax
push eax
mov dword [edi + 0x10], eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
add dword [ebp + 0xc], 0x14
inc ebx
mov dword [edi + 0x10], eax
cmp ebx, dword [esi + 8]
jl 0x11036c26
cmp dword [esi + 0xc], 0
jne 0x11036c64
mov ecx, dword [esi + 8]
push ecx
mov ecx, esi
call fcn.11035af0
xor ecx, ecx
cmp dword [esi + 0xc], 1
mov dword [esi + 0x38], ecx
mov dword [esi + 0x30], ecx
mov dword [esi + 0x34], ecx
jne 0x11036c86
lea edx, [ebp + 0xc]
push edx
mov ecx, 0x1127a5ec
mov dword [ebp + 0xc], esi
call fcn.11036860
pop edi
mov eax, esi
pop esi
pop ebx
pop ebp
ret 0x14
mov dword [esi + 0x10], ecx
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x20], ecx
jmp 0x11036c66