Function at 0x4033e0
Capabilities:
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x4c
push ebx
push esi
push edi
push str.MMAP_PS_AV_STRING_AB1098C2_33CF_4001_A246_0C68E4DFE2D3
xor ebx, ebx
push ebx
push 4
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
push ebx
push ebx
push ebx
push 4
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
cmp eax, ebx
jne 0x40388b
push 8
pop ecx
mov esi, str.0000000000000000000000000000000
lea edi, [esp + 0x30]
rep movsd dword es:[edi], dword [esi]
xor eax, eax
lea edi, [esp + 0x50]
stosd dword es:[edi], eax
push 0x4a7d3639
stosd dword es:[edi], eax
call fcn.00403171
xor edi, edi
inc edi
pop ecx
test eax, eax
ja 0x403447
push 0xe33f02e6
call fcn.00403171
pop ecx
test eax, eax
jbe 0x403449
mov ebx, edi
test bl, bl
setne al
mov bl, 0x30
add al, bl
mov byte [esp + 0x30], al
call fcn.00403236
test al, al
setne al
add al, bl
mov byte [esp + 0x31], al
call fcn.00403274
test al, al
setne al
add al, bl
push 0x5f43d167
mov byte [esp + 0x36], al
call fcn.00403171
pop ecx
test eax, eax
ja 0x403498
push 0x3398f1df
call fcn.00403171
pop ecx
test eax, eax
ja 0x403498
xor eax, eax
jmp 0x40349a
mov eax, edi
test al, al
setne al
add al, bl
push 0xf569010a
mov byte [esp + 0x37], al
call fcn.00403171
pop ecx
test eax, eax
ja 0x4034c7
push 0x9afa7931
call fcn.00403171
pop ecx
test eax, eax
ja 0x4034c7
xor eax, eax
jmp 0x4034c9
mov eax, edi
test al, al
setne al
add al, bl
push 0x7ba65ca5
mov byte [esp + 0x38], al
call fcn.00403171
pop ecx
test eax, eax
ja 0x4034f2
push 0x290e7d06
call fcn.00403171
pop ecx
test eax, eax
je 0x4034f4
mov eax, edi
test al, al
setne al
add al, bl
push 0x2e808ae5
mov byte [esp + 0x39], al
call fcn.00403171
test eax, eax
seta al
add al, bl
mov byte [esp + 0x3a], al
mov dword [esp], 0x5da6c35c
call fcn.00403171
test eax, eax
seta al
add al, bl
mov byte [esp + 0x3b], al
mov dword [esp], 0x768018cb
call fcn.00403171
pop ecx
test eax, eax
ja 0x40354f
push 0xf1ace7da
call fcn.00403171
pop ecx
test eax, eax
ja 0x40354f
xor eax, eax
jmp 0x403551
mov eax, edi
test al, al
setne al
add al, bl
push 0x6bd49bae
mov byte [esp + 0x3c], al
call fcn.00403171
test eax, eax
seta al
add al, bl
mov byte [esp + 0x3d], al
mov dword [esp], 0x36d48902
call fcn.00403171
pop ecx
test eax, eax
ja 0x403595
push 0xac5a39b4
call fcn.00403171
pop ecx
test eax, eax
ja 0x403595
xor eax, eax
jmp 0x403597
mov eax, edi
test al, al
setne al
add al, bl
push 0xc4151736
mov byte [esp + 0x3e], al
call fcn.00403171
test eax, eax
seta al
pop ecx
add al, bl
push 0xb77c6e20
mov byte [esp + 0x3f], al
call fcn.00403171
test eax, eax
seta al
add al, bl
mov byte [esp + 0x40], al
mov dword [esp], 0xb6ee655
call fcn.00403171
test eax, eax
seta al
pop ecx
add al, bl
push 0xa281be07
mov byte [esp + 0x41], al
call fcn.00403171
test eax, eax
seta al
add al, bl
pop ecx
mov byte [esp + 0x3e], al
call fcn.004032b2
test al, al
setne al
add al, bl
mov byte [esp + 0x3f], al
call fcn.004032f0
test al, al
setne al
add al, bl
push 0x75177b66
mov byte [esp + 0x45], al
call fcn.00403171
pop ecx
test eax, eax
ja 0x40363d
push 0xe76c25e
call fcn.00403171
pop ecx
test eax, eax
ja 0x40363d
xor eax, eax
jmp 0x40363f
mov eax, edi
test al, al
setne al
add al, bl
push 0x37c02ab3
mov byte [esp + 0x46], al
call fcn.00403171
test eax, eax
seta al
add al, bl
mov byte [esp + 0x47], al
mov dword [esp], 0x5d4c48d7
call fcn.00403171
pop ecx
test eax, eax
ja 0x403683
push 0xaf6fbac8
call fcn.00403171
pop ecx
test eax, eax
ja 0x403683
xor eax, eax
jmp 0x403685
mov eax, edi
test al, al
setne al
add al, bl
push 0x9e3a6612
mov byte [esp + 0x48], al
call fcn.00403171
pop ecx
test eax, eax
ja 0x4036b2
push 0x3724c002
call fcn.00403171
pop ecx
test eax, eax
ja 0x4036b2
xor eax, eax
jmp 0x4036b4
mov eax, edi
test al, al
setne al
add al, bl
mov byte [esp + 0x45], al
call fcn.0040332e
test al, al
setne al
add al, bl
push 0x2d90a0b9
mov byte [esp + 0x4a], al
call fcn.00403171
pop ecx
test eax, eax
ja 0x4036f1
push 0x68949900
call fcn.00403171
pop ecx
test eax, eax
ja 0x4036f1
xor eax, eax
jmp 0x4036f3
mov eax, edi
test al, al
setne al
add al, bl
mov byte [esp + 0x47], al
call fcn.00403368
test al, al
setne al
add al, bl
push 0xc39ae7f0
mov byte [esp + 0x4c], al
call fcn.00403171
pop ecx
test eax, eax
ja 0x403730
push 0x914e412c
call fcn.00403171
pop ecx
test eax, eax
ja 0x403730
xor eax, eax
jmp 0x403732
mov eax, edi
test al, al
setne al
add al, bl
push 0x93b5637f
mov byte [esp + 0x4d], al
call fcn.00403171
pop ecx
test eax, eax
ja 0x40375f
push 0xe2477f3
call fcn.00403171
pop ecx
test eax, eax
ja 0x40375f
xor eax, eax
jmp 0x403761
mov eax, edi
test al, al
setne al
add al, bl
push 0x2da5955c
mov byte [esp + 0x4e], al
call fcn.00403171
pop ecx
test eax, eax
ja 0x40378e
push 0x5779bb8c
call fcn.00403171
pop ecx
test eax, eax
ja 0x40378e
xor eax, eax
jmp 0x403790
mov eax, edi
test al, al
setne al
add al, bl
push 0x992bdc64
mov byte [esp + 0x4f], al
call fcn.00403171
test eax, eax
seta al
pop ecx
add al, bl
push 0xed4f37d8
mov byte [esp + 0x50], al
call fcn.00403171
test eax, eax
seta al
pop ecx
add al, bl
push 0x82272400
mov byte [esp + 0x51], al
call fcn.00403171
pop ecx
test eax, eax
ja 0x4037e9
push 0x9bbc6ad2
call fcn.00403171
pop ecx
test eax, eax
ja 0x4037e9
xor eax, eax
jmp 0x4037eb
mov eax, edi
test al, al
setne al
add al, bl
push 0xf7092721
mov byte [esp + 0x52], al
call fcn.00403171
pop ecx
test eax, eax
ja 0x403818
push 0xe79c16ca
call fcn.00403171
pop ecx
test eax, eax
ja 0x403818
xor eax, eax
jmp 0x40381a
mov eax, edi
push dword [ebp + 0xc]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpynA]
test al, al
setne al
add al, bl
mov byte [esp + 0x44], al
lea eax, [esp + 0x34]
push eax
push dword [ebp + 8]
call esi
sub esp, 0x1c
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.00403a0b
lea eax, [esp + 0x30]
push eax
call fcn.0040389f
mov eax, dword [esp + 0x38]
add esp, 0x20
cmp dword [esp + 0x2c], 0x10
jae 0x403867
lea eax, [esp + 0x18]
push dword [ebp + 0xc]
push eax
push dword [ebp + 8]
call esi
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004033a2
pop ecx
pop ecx
push 0
push edi
lea ecx, [esp + 0x1c]
call fcn.00403b39
jmp 0x403898
push dword [ebp + 0xc]
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret