Function at 0x1000ce00
Capabilities:
Get file size
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x22c
mov eax, dword [0x10048070]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x20a
lea eax, [ebp - 0x218]
mov dword [ebp - 0x224], ecx
mov ecx, dword [ebp + 0xc]
push 0
push eax
mov dword [ebp - 0x228], ecx
call fcn.100167e0
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push dword [0x1004a244]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, eax
cmp edi, 0xffffffff
jne 0x1000ceb5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x218]
push eax
push str._DDAInject__Couldnt_open_dll_file__ws__LastError_d
push 0xf4
push str.InjectSelfIntoDWM
push str...DwmHookDwmBlackScreendllmain.cpp
push 4
push 0x1004a248
call fcn.100026e0
add esp, 0x20
jmp 0x1000cf42
push 0
push 0
push 0
push 2
push 0
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov ebx, eax
test ebx, ebx
jne 0x1000cef8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._DDAInject__Couldnt_map_dll_file__LastError_d
push 0xfb
push str.InjectSelfIntoDWM
push str...DwmHookDwmBlackScreendllmain.cpp
push 4
push 0x1004a248
call fcn.100026e0
add esp, 0x1c
jmp 0x1000cf3e
push 0
push 0
push 0
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x22c], eax
test eax, eax
jne 0x1000cf5a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._DDAInject__Couldnt_map_dll_view__LastError_d
push 0x102
push str.InjectSelfIntoDWM
push str...DwmHookDwmBlackScreendllmain.cpp
push 4
push 0x1004a248
call fcn.100026e0
add esp, 0x1c
push ebx
call esi
test edi, edi
je 0x1000cf45
push edi
call esi
xor edi, edi
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001347d
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x220]
mov dword [ebp - 0x220], 0
push eax
push edi
mov dword [ebp - 0x21c], 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov edx, dword [ebp - 0x228]
mov eax, dword [ebp + 8]
mov esi, dword [ebp - 0x220]
movzx ecx, word [edx + 0x18]
mov dword [edx + 4], eax
lea eax, [edx + 0x1a]
push eax
push ecx
lea eax, [ecx + 0x1c]
mov dword [edx], 0
push eax
push str._DDAInject__LoadRemoteLibraryR_userdatalen__d_imgepathsize__d_path__ls
push 0x10c
push str.InjectSelfIntoDWM
push str...DwmHookDwmBlackScreendllmain.cpp
push 1
push 0x1004a248
call fcn.100026e0
mov ecx, dword [ebp - 0x228]
add esp, 0x24
mov edx, dword [ebp - 0x22c]
lea eax, [ecx + 8]
push eax
movzx eax, word [ecx + 0x18]
add eax, 0x1c
push eax
push ecx
sub esp, 8
push esi
mov esi, dword [ebp - 0x224]
mov ecx, esi
call fcn.10011810
push dword [ebp - 0x22c]
mov dword [ebp - 0x224], eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
call ebx
push edi
call ebx
mov edi, dword [ebp - 0x224]
test edi, edi
jne 0x1000d056
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._DDAInject__Failed_to_inject_the_DLL__LastError_d
push 0x11e
push str.InjectSelfIntoDWM
push str...DwmHookDwmBlackScreendllmain.cpp
push 4
push 0x1004a248
call fcn.100026e0
add esp, 0x1c
push esi
call ebx
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1001347d
mov esp, ebp
pop ebp
ret
push esi
call dword [sym.imp.KERNEL32.dll_GetProcessId]
push eax
push str._DDAInject__Injected_the_DLL_into_process__d
push 0x124
push str.InjectSelfIntoDWM
push str...DwmHookDwmBlackScreendllmain.cpp
push 8
push 0x1004a248
call fcn.100026e0
mov ecx, dword [ebp - 4]
add esp, 0x1c
mov eax, edi
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.1001347d
mov esp, ebp
pop ebp
ret