Function at 0x1004fdd1
Capabilities:
Get file size
Read file via mapping

Disassembly:
push 0x3c
push 0x10085088
call fcn.1008405c
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x38], ecx
xor edi, edi
mov dword [ebp - 0x34], edi
mov esi, 0x80004005
mov dword [ebp - 0x28], esi
mov ebx, edi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x48], edi
test ecx, ecx
je 0x10050035
cmp edx, 0xffffffff
je 0x10050035
lea eax, [ebp - 0x4c]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x1004febd
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1004fe36
movzx eax, ax
or eax, 0x80070000
test eax, eax
jns 0x1004fe4d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x1004fe4f
movzx esi, si
or esi, 0x80070000
test esi, esi
jns 0x1004fe61
push esi
push 0xce
mov ecx, 0x1000ad0c
call fcn.1003a254
mov eax, edi
test eax, eax
je 0x1004fe6e
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x1004fe7c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
jns 0x1005005d
test ebx, ebx
je 0x1004fe91
mov ecx, ebx
call fcn.10031fd4
mov ebx, edi
test esi, 0x10000000
je 0x10050045
push esi
call dword [sym.imp.ntdll.dll_RtlNtStatusToDosError]
cmp eax, 0x13d
je 0x10050056
push esi
call dword [sym.imp.ntdll.dll_RtlNtStatusToDosError]
mov esi, eax
jmp 0x10050056
cmp dword [ebp - 0x48], ebx
je 0x1004fecf
mov esi, 0x8007000d
push esi
push 0xd6
jmp 0x1004fe57
push edi
push dword [ebp - 0x4c]
push edi
push 2
push edi
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x40], eax
test eax, eax
jne 0x1004ff28
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1004fefe
movzx eax, ax
or eax, 0x80070000
test eax, eax
jns 0x1004ff15
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x1004ff17
movzx esi, si
or esi, 0x80070000
test esi, esi
jns 0x1004fe61
push esi
push 0xe2
jmp 0x1004fe57
push edi
push edi
push edi
push 4
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x20], eax
test eax, eax
jne 0x1004ff82
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1004ff4f
movzx eax, ax
or eax, 0x80070000
test eax, eax
jns 0x1004ff66
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x1004ff68
movzx esi, si
or esi, 0x80070000
test esi, esi
jns 0x1004ff7a
push esi
push 0xed
mov ecx, 0x1000ad0c
call fcn.1003a254
mov eax, dword [ebp - 0x20]
jmp 0x1004fe63
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x2c]
push ecx
push ecx
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
mov edx, eax
mov ecx, dword [ebp - 0x38]
call fcn.1004fcb6
mov esi, eax
mov dword [ebp - 0x34], esi
test esi, esi
jns 0x1004ffb3
push esi
push 0xf6
mov ecx, 0x1000ad0c
call fcn.1003a254
mov dword [ebp - 4], 0xfffffffe
mov ebx, dword [ebp - 0x2c]
jmp 0x1004ff7a
mov esi, 0x80070057
push esi
push 0xc6
jmp 0x1004fe57
mov eax, esi
and eax, 0x1fff0000
cmp eax, 0x70000
jne 0x10050056
movzx esi, si
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, ebx
call fcn.100840a1
ret 4