Function at 0x429384
Capabilities:
Read file via mapping

Disassembly:
push 0x4c
mov eax, 0x4a0780
call fcn.00481da3
mov eax, dword [ebp + 8]
xor ebx, ebx
mov edi, ecx
mov dword [ebp - 0x58], eax
mov esi, edx
mov dword [ebp - 0x40], ebx
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x44]
call fcn.0040161b
mov dword [ebp - 4], ebx
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x48]
call fcn.0040161b
mov byte [ebp - 4], 1
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040161b
mov byte [ebp - 4], 2
call fcn.0045db7e
push eax
lea ecx, [ebp - 0x50]
call fcn.0040161b
mov byte [ebp - 4], 3
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edi, dword [edi]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x38]
call fcn.0042908a
push edi
push dword [ebp - 0x3c]
lea eax, [ebp - 0x44]
push str.466DD0DB_3076_4ae5_BCEF_EC21BAED6986__d__d
push eax
call fcn.004063eb
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x44]
call fcn.00412d62
add esp, 0x18
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 4
call fcn.004015ba
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x54]
add ecx, 0xfffffff0
call fcn.00401325
push edi
push dword [ebp - 0x3c]
lea eax, [ebp - 0x48]
push str.26CD8CC3_9A72_4025_AE8F_75104DE848CC__d__d
push eax
call fcn.004063eb
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x48]
call fcn.00412d62
add esp, 0x18
push eax
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 5
call fcn.004015ba
mov ecx, dword [ebp - 0x54]
add ecx, 0xfffffff0
call fcn.00401325
call fcn.004290c8
push dword [ebp - 0x4c]
mov dword [ebp - 0x3c], eax
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push 8
push ebx
push 4
push eax
push 0xffffffffffffffff
call edi
cmp eax, ebx
mov dword [esi], eax
jne 0x4294ad
push dword [ebp - 0x44]
push 8
push ebx
push 4
push dword [ebp - 0x3c]
push 0xffffffffffffffff
call edi
cmp eax, ebx
mov dword [esi], eax
je 0x429525
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x4294c6
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi], ebx
jmp 0x429525
push 8
push ebx
push ebx
push 6
push dword [esi]
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
cmp eax, ebx
mov dword [ebp - 0x40], eax
je 0x42951e
push dword [ebp - 0x50]
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push ebx
push 1
push dword [ebp - 0x3c]
call esi
cmp eax, ebx
mov edi, dword [ebp - 0x58]
mov dword [edi], eax
jne 0x429506
push dword [ebp - 0x48]
push ebx
push 1
push dword [ebp - 0x3c]
call esi
cmp eax, ebx
mov dword [edi], eax
je 0x429514
mov eax, dword [ebp - 0x40]
mov dword [eax], 8
mov dword [eax + 4], ebx
jmp 0x429517
mov eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov dword [ebp - 0x40], 1
mov esi, dword [ebp - 0x3c]
cmp esi, ebx
je 0x42953c
push dword [esi + 4]
call fcn.0047e8b5
push esi
call fcn.0047e8b5
pop ecx
pop ecx
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x4c]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.00401325
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
call fcn.00401325
mov eax, dword [ebp - 0x40]
call fcn.00481e26
ret 4