Function at 0x796ba0
Capabilities:
Get file size
Read file via mapping

Disassembly:
sub esp, 0x538
push ebx
push ebp
push esi
push edi
mov ecx, 0x14
xor eax, eax
lea edi, [esp + 0x38]
mov dword [esp + 0x34], 0
rep stosd dword es:[edi], eax
mov ecx, 0x97
lea edi, [esp + 0x89]
mov byte [esp + 0x88], al
mov esi, dword [esp + 0x554]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x550]
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x34]
push eax
push esi
push ecx
call fcn.00796e30
add esp, 0xc
test eax, eax
jne 0x796c03
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x538
ret
lea edx, [esp + 0x88]
lea eax, [esp + 0x34]
push edx
push eax
push esi
call fcn.00796f80
add esp, 0xc
test eax, eax
jne 0x796c28
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x538
ret
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x15]
mov byte [esp + 0x14], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x98
lea esi, [esp + 0x88]
lea edi, [esp + 0x2e8]
push 0x10
rep movsd dword es:[edi], dword [esi]
push 0x8661e8
lea ecx, [esp + 0x2f0]
push 0x260
push ecx
call fcn.007967e0
lea edx, [esp + 0x24]
lea eax, [esp + 0x2f8]
push edx
push 0x260
push eax
call fcn.0079f520
mov ecx, dword [esp + 0x568]
add esp, 0x1c
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push ecx
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x796cce
call dword [sym.imp.kernel32.dll_GetLastError]
pop edi
pop esi
mov dword [0x9edafc], eax
pop ebp
mov dword [0x9edaf8], 2
xor eax, eax
pop ebx
add esp, 0x538
ret
push 0
push ebp
call dword [sym.imp.kernel32.dll_GetFileSize]
mov esi, eax
cmp esi, 0xffffffff
mov dword [esp + 0x10], esi
jne 0x796d0b
call dword [sym.imp.kernel32.dll_GetLastError]
push ebp
mov dword [0x9edafc], eax
mov dword [0x9edaf8], 3
call dword [sym.imp.kernel32.dll_CloseHandle]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x538
ret
push 0
push 0
push 0
push 2
push 0
push ebp
call dword [sym.imp.kernel32.dll_CreateFileMappingA]
mov ebx, eax
test ebx, ebx
jne 0x796d4b
call dword [sym.imp.kernel32.dll_GetLastError]
push ebp
mov dword [0x9edafc], eax
mov dword [0x9edaf8], 4
call dword [sym.imp.kernel32.dll_CloseHandle]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x538
ret
push 0
push 0
push 0
push 4
push ebx
call dword [sym.imp.kernel32.dll_MapViewOfFile]
test eax, eax
jne 0x796d8c
call dword [sym.imp.kernel32.dll_GetLastError]
mov esi, dword [sym.imp.kernel32.dll_CloseHandle]
push ebx
mov dword [0x9edafc], eax
mov dword [0x9edaf8], 5
call esi
push ebp
call esi
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x538
ret
mov edx, dword [eax]
lea edi, [eax + esi - 0x3e0]
mov dword [0x9edb38], edx
mov ecx, dword [eax + 4]
mov dword [0x9edb3c], ecx
mov ecx, 0x98
lea esi, [esp + 0x2e8]
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
je 0x796dcd
pop edi
pop esi
pop ebp
mov dword [0x9edaf8], 6
xor eax, eax
pop ebx
add esp, 0x538
ret
mov edx, dword [esp + 0x10]
mov ecx, 8
lea esi, [esp + 0x14]
lea edi, [eax + edx - 0x180]
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
je 0x796dfe
pop edi
pop esi
pop ebp
mov dword [0x9edaf8], 7
xor eax, eax
pop ebx
add esp, 0x538
ret
push eax
call dword [sym.imp.kernel32.dll_UnmapViewOfFile]
mov esi, dword [sym.imp.kernel32.dll_CloseHandle]
push ebx
call esi
push ebp
call esi
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x538
ret