Function at 0x1011b7e
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
xor esi, esi
mov ebx, ecx
mov eax, dword [ebx + 0x10]
push edi
xor edi, edi
cmp eax, esi
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x18], 1
je 0x1011bb6
cmp dword [ebx + 0x18], esi
jne 0x1011bbf
cmp dword [ebp + 0xc], esi
je 0x1011bb6
cmp dword [ebp + 8], esi
jne 0x1011bc8
cmp dword [ebx + 0x18], esi
je 0x1011db0
push 0xfffffffffffffffb
jmp 0x1011db6
xor esi, esi
mov eax, dword [ebx + 0x1c]
cmp eax, dword [ebx + 0x20]
jl 0x1011c13
push esi
lea eax, [ebp - 8]
push eax
push 0x2000
push dword [ebx + 4]
mov dword [ebp - 8], esi
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, esi
jne 0x1011c02
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x26
jne 0x1011d67
mov dword [ebx + 0x18], 1
mov eax, dword [ebp - 8]
cmp eax, esi
je 0x1011d52
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], esi
cmp dword [ebx + 0x234], esi
je 0x1011c28
mov ecx, ebx
call fcn.0101189c
mov dword [ebx + 0x234], esi
cmp dword [ebp - 0x18], esi
je 0x1011c8c
cmp dword [ebx + 0x230], esi
je 0x1011c46
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0xc]
add eax, 0xfffffffe
mov dword [ebp - 0x10], eax
jmp 0x1011c89
mov eax, dword [ebp + 0xc]
shr eax, 1
dec eax
dec eax
lea esi, [eax + 2]
cmp esi, dword [ebx + 0xc]
mov dword [ebp - 0x10], eax
jle 0x1011c81
mov eax, dword [ebx + 8]
test eax, eax
je 0x1011c6a
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
and dword [ebx + 8], 0
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
test eax, eax
mov dword [ebx + 8], eax
je 0x1011d6b
mov dword [ebx + 0xc], esi
mov eax, dword [ebx + 8]
mov dword [ebp - 0xc], eax
xor esi, esi
mov dword [ebp - 0x18], esi
mov ecx, dword [ebx + 0x1c]
mov esi, dword [ebx + 4]
mov eax, dword [ebx + 0x20]
add esi, ecx
sub eax, ecx
mov ecx, dword [ebp - 0x10]
sub ecx, edi
cmp eax, ecx
mov dword [ebp - 8], esi
mov dword [ebp - 0x1c], ecx
jl 0x1011caa
mov eax, ecx
lea ecx, [eax + esi]
cmp esi, ecx
jae 0x1011cc7
sub ecx, esi
mov edx, dword [ebp - 8]
cmp byte [edx], 0xa
je 0x1011d1f
inc dword [ebp - 8]
lea edx, [eax + esi]
dec ecx
cmp dword [ebp - 8], edx
jb 0x1011cb3
mov edx, dword [ebp - 0xc]
add dword [ebp - 4], eax
add edi, edx
mov ecx, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
add dword [ebx + 0x1c], eax
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x10]
jne 0x1011cf1
mov dword [ebp - 0x14], 1
mov edi, dword [ebp - 4]
cmp dword [ebp - 0x14], 0
je 0x1011bc6
mov eax, dword [ebp - 0xc]
add eax, edi
and byte [eax], 0
lea ecx, [ebx + 0x230]
xor esi, esi
cmp dword [ecx], esi
je 0x1011d6f
and byte [eax + 1], 0
cmp dword [ecx], esi
je 0x1011d6f
shr edi, 1
push edi
jmp 0x1011d8c
xor eax, eax
cmp dword [ebx + 0x230], eax
setne al
inc eax
sub eax, esi
add eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x1c]
jge 0x1011cf4
mov edx, dword [ebp - 0xc]
add edi, edx
mov ecx, eax
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
add dword [ebx + 0x1c], eax
add dword [ebp - 4], eax
jmp 0x1011cea
mov eax, edi
neg eax
sbb eax, eax
and eax, 6
mov dword [ebx + 0x18], 1
add eax, 0xfffffffb
jmp 0x1011dc3
push 0xfffffffffffffff9
jmp 0x1011db6
push 0xfffffffffffffffe
jmp 0x1011db6
mov eax, dword [ebp + 0xc]
shr eax, 1
push eax
push dword [ebp + 8]
push 0xffffffffffffffff
push dword [ebx + 8]
push 1
push esi
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, esi
je 0x1011d9b
dec eax
push eax
push dword [ebp + 8]
mov ecx, ebx
call fcn.01011996
xor eax, eax
inc eax
jmp 0x1011dc3
call dword [sym.imp.KERNEL32.dll_GetLastError]
sub eax, 0x7a
neg eax
sbb eax, eax
and eax, 3
add eax, 0xfffffffc
jmp 0x1011dc3
cmp eax, esi
jne 0x1011db9
push 0xfffffffffffffffa
pop eax
jmp 0x1011dc3
xor eax, eax
cmp dword [ebx + 4], esi
setne al
dec eax
dec eax
pop edi
pop esi
pop ebx
leave
ret 8