Function at 0x449640
Capabilities:
Read file via mapping

Disassembly:
push 0xffffffffffffffff
push 0x4bb51b
mov eax, dword fs:[0]
push eax
sub esp, 0x1d4
mov eax, dword [0x4f36a0]
xor eax, esp
mov dword [esp + 0x1d0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4f36a0]
xor eax, esp
push eax
lea eax, [esp + 0x1e8]
mov dword fs:[0], eax
mov edi, dword [esp + 0x1fc]
mov esi, ecx
push str.CreateShareble
lea ecx, [esp + 0x1c]
mov ebx, edx
call fcn.00455f00
xor ebp, ebp
mov dword [esp + 0x1f0], ebp
cmp dword [esi + 4], ebp
je 0x4496cd
push str._rYeR
push ebx
call fcn.004477d0
add esp, 8
lea ecx, [esp + 0x18]
mov bl, al
mov dword [esp + 0x1f0], 0xffffffff
call fcn.00455f80
mov al, bl
jmp 0x4499a0
cmp edi, ebp
je 0x449780
push 6
push 0x4e29e8
push edi
lea ebp, [esp + 0x28]
call fcn.0049e2c7
add esp, 0xc
test eax, eax
je 0x449717
push 0x4e29e8
mov eax, ebp
push 0xe2
push eax
call fcn.00498b64
add esp, 0xc
push 0xc2
push edi
mov ecx, ebp
push 0xe2
push ecx
call fcn.0049ef4d
jmp 0x44972c
push 0xc8
push edi
lea edx, [esp + 0x24]
push 0xe2
push edx
call fcn.00499993
xor eax, eax
add esp, 0x10
mov word [esp + 0x1ac], ax
cmp byte [esp + 0x200], al
je 0x449761
call fcn.0044c840
add eax, 0x4ba
je 0x449761
push eax
lea ecx, [esp + 0x20]
push 0xe2
push ecx
call fcn.0049dcea
add esp, 0xc
call fcn.0044c840
add eax, 0x498
je 0x449780
push eax
lea edx, [esp + 0x20]
push 0xe2
push edx
call fcn.0049dcea
add esp, 0xc
call fcn.0044c840
xor eax, eax
test ebp, ebp
je 0x44984d
push ebp
push 1
push 6
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
test eax, eax
je 0x44984d
mov dword [esi + 0xc], 2
or edi, 0xffffffff
mov ecx, dword [esp + 0x204]
push ecx
push 0
push 0
push 6
push eax
mov dword [esi + 4], eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [esi + 8], eax
test eax, eax
jne 0x44998e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov eax, dword [esi + 8]
test eax, eax
je 0x4497ec
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov dword [esi + 8], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x449801
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 4], 0
mov ecx, ebx
call fcn.00447720
mov esi, eax
call fcn.00447a60
mov ecx, ebx
call fcn.00447720
test ebp, ebp
jne 0x44992e
push 0x4e35bc
push 0x4d65ac
mov edx, eax
call fcn.00448ff0
add esp, 8
lea ecx, [esp + 0x18]
mov dword [esp + 0x1f0], 0xffffffff
call fcn.00455f80
xor al, al
jmp 0x4499a0
cmp byte [esp + 0x1f8], 0
je 0x4498c4
mov eax, dword [esp + 0x204]
push ebp
push eax
push 0
push 0x8000004
call fcn.004532d0
push eax
or edi, 0xffffffff
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
test eax, eax
jne 0x4498bb
test ebp, ebp
jne 0x4498a7
push 0x4e354c
call fcn.00447a30
mov ecx, eax
call fcn.00447b70
lea ecx, [esp + 0x18]
mov dword [esp + 0x1f0], edi
call fcn.00455f80
xor al, al
jmp 0x4499a0
push ebp
push 0x4e3568
call fcn.00447a30
mov ecx, eax
call fcn.00447b70
jmp 0x449889
mov dword [esi + 0xc], 1
jmp 0x4498c7
or edi, 0xffffffff
test eax, eax
jne 0x4497ac
cmp byte [esp + 0x1f8], al
jne 0x4497ac
call fcn.00447a30
test ebp, ebp
jne 0x449910
push 0x4e3584
push 0x4d65ac
mov edx, eax
call fcn.00448ff0
add esp, 8
lea ecx, [esp + 0x18]
mov dword [esp + 0x1f0], edi
call fcn.00455f80
xor al, al
jmp 0x4499a0
mov esi, eax
push 0x4e35a0
push 0x4d65ac
mov edx, esi
call fcn.00448ff0
add esp, 8
push ebp
mov ecx, esi
jmp 0x44988b
mov esi, eax
push str.Filemap
push 0x4d65ac
mov edx, esi
call fcn.00448ff0
push ebp
push 0x4d65ac
mov edx, esi
call fcn.00448ff0
push 0x4e3604
push 0x4d65ac
mov edx, esi
call fcn.00448ff0
mov edx, dword [esp + 0x21c]
push edx
push 0x4e34dc
mov edx, esi
call fcn.00448ff0
add esp, 0x20
lea ecx, [esp + 0x18]
mov dword [esp + 0x1f0], 0xffffffff
call fcn.00455f80
xor al, al
jmp 0x4499a0
lea ecx, [esp + 0x18]
mov dword [esp + 0x1f0], edi
call fcn.00455f80
mov al, 1
mov ecx, dword [esp + 0x1e8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1d0]
xor ecx, esp
call fcn.00497c58
add esp, 0x1e0
ret 0x10