Function at 0x100a95e0
Capabilities:
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x430
mov eax, dword [0x10188068]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [ebp + 8]
mov esi, ecx
call fcn.100a9880
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call fcn.100fc650
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call fcn.100fc650
add esp, 0x18
test edi, edi
je 0x100a9861
cmp word [edi], 0
je 0x100a9861
push edi
push str._s_accessmutex
lea eax, [ebp - 0x414]
push 0x104
push eax
call fcn.10049d10
add esp, 0x10
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
call fcn.10042db0
mov ecx, eax
xor eax, eax
cmp dword [ecx + 0x128], 1
jne 0x100a9674
cmp dword [ecx + 4], eax
cmovne eax, ecx
lea ecx, [ebp - 0x414]
push ecx
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
test eax, eax
je 0x100a9844
push ebx
lea ecx, [ebp - 0x20c]
mov ebx, edi
mov eax, ecx
mov edx, 0x104
sub ebx, eax
nop
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x100a96be
movzx eax, word [ebx + ecx]
test ax, ax
je 0x100a96be
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x100a96a0
lea eax, [ecx - 2]
test edx, edx
cmovne eax, ecx
xor ecx, ecx
push ecx
mov word [eax], cx
lea ecx, [ebp - 0x20c]
call fcn.100a9a90
call fcn.10042db0
mov ecx, eax
xor eax, eax
cmp dword [ecx + 0x128], 1
jne 0x100a96ef
cmp dword [ecx + 4], eax
cmovne eax, ecx
lea ecx, [ebp - 0x20c]
push ecx
push 0
push 1
push eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
lea ebx, [esi + 4]
mov dword [esi + 0x218], eax
mov edx, 0x104
mov ecx, ebx
sub edi, ebx
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x100a9731
movzx eax, word [edi + ecx]
test ax, ax
je 0x100a9731
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x100a9713
mov edi, dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [ecx - 2]
test edx, edx
cmovne eax, ecx
xor ecx, ecx
push ecx
mov word [eax], cx
mov dword [esi + 0x214], ecx
call edi
push ebx
push 0
push 4
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov dword [esi + 0x20c], eax
pop ebx
test eax, eax
je 0x100a9844
push 0
mov dword [esi + 0x214], 1
call edi
push 0
push 0
push 0
push 4
push dword [esi + 0x20c]
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [esi + 0x210], eax
test eax, eax
jne 0x100a97c5
mov eax, dword [esi + 0x20c]
test eax, eax
je 0x100a97ae
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x20c], 0
pop edi
mov eax, 0x80004005
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100e278d
mov esp, ebp
pop ebp
ret 4
push 0x1c
lea ecx, [ebp - 0x430]
mov dword [ebp - 0x418], 0
xorps xmm0, xmm0
push ecx
push eax
movups xmmword [ebp - 0x430], xmm0
movq qword [ebp - 0x420], xmm0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
mov eax, dword [esi + 0x210]
mov eax, dword [eax]
cmp dword [ebp - 0x424], eax
jb 0x100a9826
cmp eax, 0x50
jbe 0x100a9826
push dword [esi + 0x218]
call dword [sym.imp.KERNEL32.dll_SetEvent]
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100e278d
mov esp, ebp
pop ebp
ret 4
mov ecx, esi
call fcn.100a9880
pop edi
mov eax, 0x80004005
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100e278d
mov esp, ebp
pop ebp
ret 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
pop edi
mov eax, 0x80004005
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100e278d
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 4]
mov eax, 0x80070057
pop edi
xor ecx, ebp
pop esi
call fcn.100e278d
mov esp, ebp
pop ebp
ret 4