Function at 0x70145d38
Capabilities:
Read file via mapping

Disassembly:
mov eax, 0x70153b07
call fcn.70055494
sub esp, 0x270
mov eax, dword [section..cdata]
push ebx
push esi
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
push edi
push eax
mov esi, ecx
call fcn.700e1dcd
mov edi, eax
cmp edi, 1
jne 0x70145f99
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 0x27c]
mov dword [esi + 0xbc], eax
call fcn.7014b6be
xor edi, edi
cmp dword [ebp + 0xc], edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x244], edi
je 0x70145da4
lea ecx, [ebp - 0x27c]
call fcn.7014b69e
lea eax, [ebp - 0x27c]
mov dword [ebp - 0x244], eax
lea eax, [ebp - 0x240]
push eax
mov ecx, 0x70170d34
mov dword [ebp - 0x23c], edi
mov dword [ebp - 0x240], edi
call fcn.700e1dcd
cmp eax, 1
je 0x70145dcc
mov dword [ebp - 0x240], edi
cmp dword [ebp - 0x240], edi
lea eax, [esi + 0xcc]
push eax
lea eax, [ebp - 0x238]
jne 0x70145de8
push 0x70017324
jmp 0x70145ded
push 0x700172f8
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
lea eax, [ebp - 0x238]
push eax
push edi
push edi
push dword [ebp - 0x244]
call dword [sym.imp.kernel32.dll_CreateEventW]
cmp eax, edi
mov ebx, dword [sym.imp.kernel32.dll_GetLastError]
mov dword [esi + 0x9c], eax
jne 0x70145e3d
call ebx
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x238]
push eax
push edi
push 0x100002
call dword [sym.imp.kernel32.dll_OpenEventW]
mov dword [esi + 0x9c], eax
cmp dword [esi + 0x9c], edi
je 0x70145f38
cmp dword [ebp - 0x240], edi
lea eax, [esi + 0xcc]
push eax
lea eax, [ebp - 0x238]
jne 0x70145e65
push 0x700172d8
jmp 0x70145e6a
push 0x700172ac
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
lea eax, [ebp - 0x238]
push eax
push 1
push edi
push dword [ebp - 0x244]
call dword [sym.imp.kernel32.dll_CreateEventW]
cmp eax, edi
mov dword [esi + 0xa0], eax
jne 0x70145eb5
call ebx
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x238]
push eax
push edi
push 0x100002
call dword [sym.imp.kernel32.dll_OpenEventW]
mov dword [esi + 0xa0], eax
cmp dword [esi + 0xa0], edi
je 0x70145f38
cmp dword [ebp - 0x240], edi
lea eax, [esi + 0xcc]
push eax
lea eax, [ebp - 0x238]
jne 0x70145ed9
push 0x70017290
jmp 0x70145ede
push 0x70017268
push eax
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
lea eax, [ebp - 0x238]
push eax
push dword [esi + 0xbc]
push edi
push 4
push dword [ebp - 0x244]
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
cmp eax, edi
mov dword [esi + 0xb4], eax
jne 0x70145f2e
call ebx
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x238]
push eax
push edi
push 6
call dword [sym.imp.kernel32.dll_OpenFileMappingW]
mov dword [esi + 0xb4], eax
mov eax, dword [esi + 0xb4]
cmp eax, edi
jne 0x70145f55
push 0xffffffffffffffff
lea eax, [ebp - 0x238]
push eax
push dword [ebp - 0x23c]
push 1
push 0xfffffffffffffffd
call fcn.700e1dcd
add esp, 0x14
jmp 0x70145f88
push dword [esi + 0xbc]
push edi
push edi
push 6
push eax
call dword [sym.imp.kernel32.dll_MapViewOfFile]
cmp eax, edi
mov dword [esi + 0xc8], eax
jne 0x70145fa2
call ebx
mov ebx, eax
call fcn.7006107f
push 0xffffffffffffffff
push edi
push ebx
push 0x15
push 0xfffffffffffffffb
mov ecx, eax
call fcn.700e1dcd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x27c]
mov edi, eax
call fcn.7014b6de
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x20]
jmp 0x70145fe0
add dword [esi + 0xbc], 0xfffffff8
push dword [esi + 0xbc]
mov dword [esi + 0xc4], eax
add eax, 4
mov dword [esi + 0xc0], eax
add eax, 4
mov ecx, esi
mov dword [esi + 0xc8], eax
call fcn.700e1dcd
or dword [ebp - 4], 0xffffffff
xor edi, edi
lea ecx, [ebp - 0x27c]
inc edi
call fcn.7014b6de
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.700555ea
leave
ret 0xc