Function at 0x1007819c
Capabilities:
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], esi
mov dword [ebp - 4], ebx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], 0x1160913
lea ebx, [eax + 0x10]
mov dword [ebp - 0x18], 0
call fcn.10093824
mov dword [ebp - 0x14], eax
call sub.KERNEL32.dll_GetCurrentProcessId
lea esi, [ebp - 0x44]
mov dword [ebp - 0x10], eax
mov edi, 0x100c1404
mov dl, byte [edi]
add edi, 1
mov byte [esi], dl
add esi, 1
test dl, dl
jne 0x100781d7
lea ecx, [ebp - 0x44]
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x10078201
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x100781ea
add eax, 0xffffffff
push dword [ebp - 0x1c]
push str._08X
add eax, ecx
push eax
call fcn.100907f2
add esp, 0xc
lea edi, [ebp - 0x44]
mov edx, str._0000_0000_
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
add edi, 0xffffffff
mov al, byte [edx]
add edx, 1
mov byte [edi], al
add edi, 1
test al, al
jne 0x10078228
lea ecx, [ebp - 0x44]
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x10078252
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x1007823b
add eax, 0xffffffff
add eax, ecx
movzx ecx, byte [ebp - 0x14]
push ecx
push str._02X
push eax
call fcn.100907f2
add esp, 0xc
lea ecx, [ebp - 0x44]
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x10078283
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x1007826c
add eax, 0xffffffff
add eax, ecx
movzx ecx, byte [ebp - 0x13]
push ecx
push str._02X
push eax
call fcn.100907f2
add esp, 0xc
lea edi, [ebp - 0x44]
mov edx, 0x100c1424
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
add edi, 0xffffffff
mov al, byte [edx]
add edx, 1
mov byte [edi], al
add edi, 1
test al, al
jne 0x100782ac
lea ecx, [ebp - 0x44]
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x100782d6
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x100782bf
add eax, 0xffffffff
add eax, ecx
movzx ecx, byte [ebp - 0x12]
push ecx
push str._02X
push eax
call fcn.100907f2
add esp, 0xc
lea ecx, [ebp - 0x44]
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x10078307
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x100782f0
add eax, 0xffffffff
add eax, ecx
movzx ecx, byte [ebp - 0x11]
push ecx
push str._02X
push eax
call fcn.100907f2
add esp, 0xc
lea ecx, [ebp - 0x44]
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x10078338
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x10078321
add eax, 0xffffffff
add eax, ecx
movzx ecx, byte [ebp - 0x10]
push ecx
push str._02X
push eax
call fcn.100907f2
add esp, 0xc
lea ecx, [ebp - 0x44]
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x10078369
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x10078352
add eax, 0xffffffff
add eax, ecx
movzx ecx, byte [ebp - 0xf]
push ecx
push str._02X
push eax
call fcn.100907f2
add esp, 0xc
lea ecx, [ebp - 0x44]
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x1007839a
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x10078383
add eax, 0xffffffff
add eax, ecx
movzx ecx, byte [ebp - 0xe]
push ecx
push str._02X
push eax
call fcn.100907f2
add esp, 0xc
lea ecx, [ebp - 0x44]
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x100783cb
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x100783b4
add eax, 0xffffffff
add eax, ecx
movzx ecx, byte [ebp - 0xd]
push ecx
push str._02X
push eax
call fcn.100907f2
add esp, 0xc
lea edi, [ebp - 0x44]
mov edx, 0x100c1428
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
add edi, 0xffffffff
mov al, byte [edx]
add edx, 1
mov byte [edi], al
add edi, 1
test al, al
jne 0x100783f4
lea eax, [ebp - 0x44]
push eax
push 0
push 4
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
test eax, eax
je 0x10078432
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp + 8]
push eax
call fcn.100904c2
pop ecx
mov ebx, dword [ebp - 4]
mov esi, dword [ebp - 0xc]
mov edi, dword [ebp - 8]
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x44]
push eax
push ebx
xor edx, edx
push edx
push 4
push edx
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov esi, eax
test esi, esi
je 0x1007841b
mov dword [ebp - 0x18], esi
push ebx
xor eax, eax
push eax
push eax
push 6
push esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
test eax, eax
je 0x1007847c
mov edx, dword [ebp - 0x1c]
mov dword [eax], edx
mov ecx, dword [ebp - 0x18]
mov dword [eax + 4], ecx
mov ebx, dword [ebp - 0x14]
mov dword [eax + 8], ebx
mov esi, dword [ebp - 0x10]
mov dword [eax + 0xc], esi
add eax, 0x10
jmp 0x10078425
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1007841b