Function at 0x1211665e
Capabilities:
Read file via mapping

Disassembly:
mov eax, 0x1211ea25
call fcn.120820e8
sub esp, 0x270
mov eax, dword [section..cdata]
push ebx
push esi
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
push edi
push eax
mov esi, ecx
call fcn.120f7704
mov edi, eax
cmp edi, 1
jne 0x121168bf
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 0x27c]
mov dword [esi + 0xbc], eax
call fcn.1211a839
xor edi, edi
cmp dword [ebp + 0xc], edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x244], edi
je 0x121166ca
lea ecx, [ebp - 0x27c]
call fcn.1211a819
lea eax, [ebp - 0x27c]
mov dword [ebp - 0x244], eax
lea eax, [ebp - 0x240]
push eax
mov ecx, 0x1212f508
mov dword [ebp - 0x23c], edi
mov dword [ebp - 0x240], edi
call fcn.120f7704
cmp eax, 1
je 0x121166f2
mov dword [ebp - 0x240], edi
cmp dword [ebp - 0x240], edi
lea eax, [esi + 0xcc]
push eax
lea eax, [ebp - 0x238]
jne 0x1211670e
push 0x1205d9e4
jmp 0x12116713
push 0x1205d9b8
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
lea eax, [ebp - 0x238]
push eax
push edi
push edi
push dword [ebp - 0x244]
call dword [sym.imp.kernel32.dll_CreateEventW]
cmp eax, edi
mov ebx, dword [sym.imp.kernel32.dll_GetLastError]
mov dword [esi + 0x9c], eax
jne 0x12116763
call ebx
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x238]
push eax
push edi
push 0x100002
call dword [sym.imp.kernel32.dll_OpenEventW]
mov dword [esi + 0x9c], eax
cmp dword [esi + 0x9c], edi
je 0x1211685e
cmp dword [ebp - 0x240], edi
lea eax, [esi + 0xcc]
push eax
lea eax, [ebp - 0x238]
jne 0x1211678b
push 0x1205d998
jmp 0x12116790
push 0x1205d96c
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
lea eax, [ebp - 0x238]
push eax
push 1
push edi
push dword [ebp - 0x244]
call dword [sym.imp.kernel32.dll_CreateEventW]
cmp eax, edi
mov dword [esi + 0xa0], eax
jne 0x121167db
call ebx
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x238]
push eax
push edi
push 0x100002
call dword [sym.imp.kernel32.dll_OpenEventW]
mov dword [esi + 0xa0], eax
cmp dword [esi + 0xa0], edi
je 0x1211685e
cmp dword [ebp - 0x240], edi
lea eax, [esi + 0xcc]
push eax
lea eax, [ebp - 0x238]
jne 0x121167ff
push 0x1205d950
jmp 0x12116804
push 0x1205d928
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
lea eax, [ebp - 0x238]
push eax
push dword [esi + 0xbc]
push edi
push 4
push dword [ebp - 0x244]
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
cmp eax, edi
mov dword [esi + 0xb4], eax
jne 0x12116854
call ebx
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x238]
push eax
push edi
push 6
call dword [sym.imp.kernel32.dll_OpenFileMappingW]
mov dword [esi + 0xb4], eax
mov eax, dword [esi + 0xb4]
cmp eax, edi
jne 0x1211687b
push 0xffffffffffffffff
lea eax, [ebp - 0x238]
push eax
push dword [ebp - 0x23c]
push 1
push 0xfffffffffffffffd
call fcn.120f7704
add esp, 0x14
jmp 0x121168ae
push dword [esi + 0xbc]
push edi
push edi
push 6
push eax
call dword [sym.imp.kernel32.dll_MapViewOfFile]
cmp eax, edi
mov dword [esi + 0xc8], eax
jne 0x121168c8
call ebx
mov ebx, eax
call fcn.1208ab2b
push 0xffffffffffffffff
push edi
push ebx
push 0x15
push 0xfffffffffffffffb
mov ecx, eax
call fcn.120f7704
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x27c]
mov edi, eax
call fcn.1211a859
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x20]
jmp 0x12116906
add dword [esi + 0xbc], 0xfffffff8
push dword [esi + 0xbc]
mov dword [esi + 0xc4], eax
add eax, 4
mov dword [esi + 0xc0], eax
add eax, 4
mov ecx, esi
mov dword [esi + 0xc8], eax
call fcn.120f7704
or dword [ebp - 4], 0xffffffff
xor edi, edi
lea ecx, [ebp - 0x27c]
inc edi
call fcn.1211a859
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.12082031
leave
ret 0xc