Function at 0x10011a60
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100702e7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5c
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1c], ebx
mov eax, 0x10085f68
mov byte [ebp - 4], 1
test eax, eax
je 0x1001207e
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
inc esi
lea eax, [esi + esi]
add eax, 3
and al, 0xfc
call fcn.1006e670
mov edi, esp
push esi
push edi
push 0xffffffffffffffff
push 0x10085f68
push ebx
push ebx
mov word [edi], bx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jne 0x10011ae9
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
test eax, eax
jg 0x10011adb
call esi
jmp 0x10011af5
call esi
and eax, 0xffff
or eax, 0x80070000
jmp 0x10011af5
push 0x17
push ebx
push edi
lea ecx, [ebp - 0x1c]
call fcn.10015b70
cmp eax, ebx
jl 0x1001207e
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
jne 0x10011b11
push 0x80004003
call fcn.1006e336
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push ebx
push eax
mov esi, eax
call dword [ecx + 0xfc]
cmp eax, ebx
jge 0x10011b2d
push 0x10085f58
push esi
push eax
call fcn.1006e344
mov edi, dword [ebp + 8]
mov word [ebp - 0x48], 8
push edi
call fcn.1006e3e3
cmp eax, ebx
mov dword [ebp - 0x40], eax
jne 0x10011b51
cmp edi, ebx
je 0x10011b51
push 0x8007000e
call fcn.1006e336
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 2
cmp eax, ebx
jne 0x10011b69
push 0x80004003
call fcn.1006e336
mov eax, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x48]
lea ecx, [ebp + 0xa]
push ecx
mov edx, dword [eax]
sub esp, 0x10
mov esi, eax
mov ecx, esp
push eax
mov dword [ecx], ebx
mov ebx, dword [ebp - 0x44]
mov dword [ecx + 4], ebx
mov ebx, dword [ebp - 0x40]
mov dword [ecx + 8], ebx
mov ebx, dword [ebp - 0x3c]
mov dword [ecx + 0xc], ebx
call dword [edx + 0xe8]
test eax, eax
jge 0x10011ba4
push 0x10085f58
push esi
push eax
call fcn.1006e344
cmp word [ebp + 0xa], 0
lea edx, [ebp - 0x48]
push edx
mov byte [ebp - 4], 1
sete bl
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test eax, eax
jge 0x10011bc4
push eax
call fcn.1006e336
test bl, bl
je 0x10011d4e
push 0
push 0x80
push 3
push 0
push 1
push closesocket
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebx, eax
mov dword [ebp + 8], ebx
cmp ebx, 0xffffffff
mov byte [ebp - 4], 3
je 0x1001207e
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
lea eax, [esi + 1]
push eax
call fcn.1003bfe0
add esp, 4
mov dword [ebp - 0x3c], eax
test eax, eax
setne cl
mov byte [ebp - 0x40], cl
lea edx, [ebp - 0x38]
push 0
push edx
push esi
push eax
push ebx
mov byte [ebp - 4], 4
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x10011e0b
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x40]
mov byte [eax + esi], 0
call fcn.10015560
push ecx
mov esi, eax
mov dword [ebp - 0x34], esp
mov edi, esp
push 0xc
call fcn.1003bfe0
mov ecx, eax
add esp, 4
mov dword [ebp - 0x30], ecx
test ecx, ecx
mov byte [ebp - 4], 5
je 0x10011c6a
push esi
call fcn.10015570
jmp 0x10011c6c
xor eax, eax
test eax, eax
mov byte [ebp - 4], 4
mov dword [edi], eax
jne 0x10011c80
push 0x8007000e
call fcn.1006e336
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 6
call fcn.100155b0
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.100151f0
test ax, ax
jne 0x10011d30
mov ecx, dword [ebp - 0x3c]
push 1
push 0x26
push ecx
call fcn.10014e80
add esp, 0xc
lea ecx, [ebp - 0x40]
call fcn.10015560
push ecx
mov esi, eax
mov dword [ebp - 0x34], esp
mov edi, esp
push 0xc
call fcn.1003bfe0
mov ecx, eax
add esp, 4
mov dword [ebp - 0x30], ecx
test ecx, ecx
mov byte [ebp - 4], 7
je 0x10011cdf
push esi
call fcn.10015570
jmp 0x10011ce1
xor eax, eax
test eax, eax
mov byte [ebp - 4], 4
mov dword [edi], eax
jne 0x10011cf5
push 0x8007000e
call fcn.1006e336
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 8
call fcn.100155b0
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.100151f0
test ax, ax
jne 0x10011d30
mov al, byte [ebp - 0x40]
test al, al
je 0x10011d24
mov edx, dword [ebp - 0x3c]
push edx
call fcn.1003c010
add esp, 4
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1001207e
mov al, byte [ebp - 0x40]
test al, al
je 0x10011d43
mov eax, dword [ebp - 0x3c]
push eax
call fcn.1003c010
add esp, 4
push ebx
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1c]
xor edi, edi
cmp eax, edi
jne 0x10011d61
push 0x80004003
call fcn.1006e336
mov ecx, dword [ebp - 0x1c]
lea edx, [ebp - 0x14]
push edx
call fcn.10014fb0
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 9
cmp eax, edi
je 0x10012076
mov dword [ebp - 0x18], edi
mov byte [ebp - 4], 0xa
test eax, eax
jne 0x10011d94
push 0x80004003
call fcn.1006e336
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
lea edx, [ebp + 8]
push edx
push eax
mov esi, eax
call dword [ecx + 0x20]
test eax, eax
jge 0x10011db0
push 0x10085f48
push esi
push eax
call fcn.1006e344
cmp edi, dword [ebp + 8]
jge 0x10011e60
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x10011dca
push 0x80004003
call fcn.1006e336
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x2c]
push edi
push eax
call fcn.100150a0
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x18]
call fcn.10015c80
lea ecx, [ebp - 0x2c]
call fcn.10002fd0
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x10011e57
lea edx, [ebp - 0x28]
push edx
call fcn.10014eb0
mov ecx, dword [eax]
mov byte [ebp - 4], 0xb
test ecx, ecx
je 0x10011e2a
call fcn.10015630
jmp 0x10011e2c
mov al, byte [ebp - 0x40]
test al, al
je 0x10011e1e
mov ecx, dword [ebp - 0x3c]
push ecx
call fcn.1003c010
add esp, 4
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1001207e
xor eax, eax
push str.smil
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
sete bl
call fcn.1000f220
test bl, bl
jne 0x10011e60
push 0
lea ecx, [ebp - 0x18]
call fcn.10015c80
mov eax, dword [ebp - 0x14]
inc edi
jmp 0x10011d83
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x1001206e
lea eax, [ebp + 8]
push eax
call fcn.10014fb0
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x14]
call fcn.10015c80
lea ecx, [ebp + 8]
call fcn.10002fd0
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1001206e
xor edi, edi
test eax, eax
jne 0x10011ea5
push 0x80004003
call fcn.1006e336
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
lea ecx, [ebp + 8]
push ecx
push eax
mov esi, eax
call dword [edx + 0x20]
test eax, eax
jge 0x10011ec1
push 0x10085f48
push esi
push eax
call fcn.1006e344
cmp edi, dword [ebp + 8]
jge 0x10011f52
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x10011edb
push 0x80004003
call fcn.1006e336
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x2c]
push edi
push edx
call fcn.100150a0
mov eax, dword [eax]
lea ecx, [ebp - 0x18]
push eax
call fcn.10015c80
lea ecx, [ebp - 0x2c]
call fcn.10002fd0
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x10011f49
lea edx, [ebp - 0x28]
push edx
call fcn.10014eb0
mov ecx, dword [eax]
mov byte [ebp - 4], 0xc
test ecx, ecx
je 0x10011f1c
call fcn.10015630
jmp 0x10011f1e
xor eax, eax
push str.body
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
sete bl
call fcn.1000f220
test bl, bl
jne 0x10011f52
push 0
lea ecx, [ebp - 0x18]
call fcn.10015c80
mov eax, dword [ebp - 0x14]
inc edi
jmp 0x10011e94
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x1001206e
lea eax, [ebp + 8]
push eax
call fcn.10014fb0
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x14]
call fcn.10015c80
lea ecx, [ebp + 8]
call fcn.10002fd0
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1001206e
xor edi, edi
test eax, eax
jne 0x10011f97
push 0x80004003
call fcn.1006e336
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
lea ecx, [ebp + 8]
push ecx
push eax
mov esi, eax
call dword [edx + 0x20]
test eax, eax
jge 0x10011fb3
push 0x10085f48
push esi
push eax
call fcn.1006e344
cmp edi, dword [ebp + 8]
jge 0x10012044
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x10011fcd
push 0x80004003
call fcn.1006e336
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x2c]
push edi
push edx
call fcn.100150a0
mov eax, dword [eax]
lea ecx, [ebp - 0x18]
push eax
call fcn.10015c80
lea ecx, [ebp - 0x2c]
call fcn.10002fd0
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x1001203b
lea edx, [ebp - 0x28]
push edx
call fcn.10014eb0
mov ecx, dword [eax]
mov byte [ebp - 4], 0xd
test ecx, ecx
je 0x1001200e
call fcn.10015630
jmp 0x10012010
xor eax, eax
push 0x10085f30
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
sete bl
call fcn.1000f220
test bl, bl
jne 0x10012044
push 0
lea ecx, [ebp - 0x18]
call fcn.10015c80
mov eax, dword [ebp - 0x14]
inc edi
jmp 0x10011f86
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x1001206e
lea eax, [ebp + 8]
push eax
call fcn.10014fb0
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x14]
call fcn.10015c80
lea ecx, [ebp + 8]
call fcn.10002fd0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x1001209c
lea ecx, [ebp - 0x18]
call fcn.10002fd0
lea ecx, [ebp - 0x14]
call fcn.10002fd0
lea ecx, [ebp - 0x1c]
call fcn.10002fd0
xor eax, eax
mov ecx, dword [ebp - 0xc]
lea esp, [ebp - 0x74]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor edi, edi
mov dword [ebp - 0x2c], edi
test eax, eax
jne 0x100120b2
push 0x80004003
call fcn.1006e336
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
lea ecx, [ebp - 0x30]
push ecx
push eax
mov esi, eax
call dword [edx + 0x20]
test eax, eax
jge 0x100120ce
push 0x10085f48
push esi
push eax
call fcn.1006e344
cmp edi, dword [ebp - 0x30]
jge 0x10012261
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x100120e8
push 0x80004003
call fcn.1006e336
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x34]
push edi
push edx
call fcn.100150a0
mov eax, dword [eax]
lea ecx, [ebp - 0x18]
push eax
call fcn.10015c80
lea ecx, [ebp - 0x34]
call fcn.10002fd0
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x10012255
lea edx, [ebp - 0x38]
push edx
call fcn.10014eb0
mov ecx, dword [eax]
mov byte [ebp - 4], 0xe
test ecx, ecx
je 0x1001212d
call fcn.10015630
jmp 0x1001212f
xor eax, eax
push str.media
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xa
sete bl
call fcn.1000f220
test bl, bl
je 0x10012255
lea ecx, [ebp - 0x18]
call fcn.100155b0
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.10015050
push ecx
mov byte [ebp - 4], 0xf
mov ecx, esp
mov dword [ebp - 0x3c], esp
push 0x10085f24
call fcn.10015360
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x10
call fcn.100155b0
lea edx, [ebp - 0x20]
mov ecx, eax
push edx
mov byte [ebp - 4], 0xf
call fcn.100150f0
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x10012241
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x12
call fcn.100155b0
lea ecx, [ebp - 0x68]
push ecx
mov ecx, eax
call fcn.10014f50
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x13
call fcn.100156c0
lea edx, [ebp - 0x68]
mov byte [ebp - 4], 0x15
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test eax, eax
jge 0x100121dd
push eax
call fcn.1006e336
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x100121eb
call fcn.10015630
jmp 0x100121ed
xor eax, eax
push 0x26
push 1
push eax
call fcn.10014e80
add esp, 0xc
lea ecx, [ebp + 0xb]
push ecx
push eax
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVCP60.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const___class_std::allocator_char__const__]
mov ecx, dword [ebp + 0xc]
lea edx, [ebp - 0x58]
push edx
mov byte [ebp - 4], 0x16
call fcn.10015300
push 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x15
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Tidy_bool_]
lea ecx, [ebp - 0x24]
call fcn.1000f220
jmp 0x1001223a
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x20]
call fcn.10002fd0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xa
call fcn.10002fd0
mov eax, dword [ebp - 0x14]
inc edi
mov dword [ebp - 0x2c], edi
jmp 0x100120a1
lea ecx, [ebp - 0x18]
call fcn.10002fd0
lea ecx, [ebp - 0x14]
call fcn.10002fd0
lea ecx, [ebp - 0x1c]
call fcn.10002fd0
mov eax, 1
jmp 0x10012088