Function at 0x436354
Capabilities:
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.00436354
xor esi, esi
xor edi, edi
mov ecx, 0x1b
push esi
dec ecx
jne 0x436370
mov eax, dword [0x460114]
test eax, eax
je 0x436383
jmp 0x436627
push 0
mov edx, 0x18673e4
call fcn.0045d0ba
lea ebx, [esp]
call fcn.0045c36b
push 0
push 4
call dword [sym.imp.KERNEL32.DLL_OpenFileMappingA]
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.00457d88
pop eax
add esp, 4
fldcw word [ebp - 0x10]
mov esi, eax
mov eax, esi
test eax, eax
je 0x436627
push 0
push 0
push 0
push 4
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_MapViewOfFile]
fldcw word [ebp - 0x10]
mov edi, eax
mov eax, edi
test eax, eax
je 0x43661b
mov ecx, edi
mov eax, 0x14
neg eax
call fcn.00457d90
lea ebx, [ebp - 0xe0]
mov ecx, 0x40
call fcn.0045ced6
mov eax, edi
push eax
call dword [sym.imp.KERNEL32.DLL_UnmapViewOfFile]
fldcw word [ebp - 0x10]
mov eax, 0x12
lea ebx, [ebp - 0xe0]
call fcn.0045ce8d
mov dword [ebp - 0x30], eax
call fcn.0045d088
cmp eax, dword [ebp - 0x30]
jne 0x43661b
push 0
push 0
lea ebx, [ebp - 0xe0]
call fcn.0045ce8d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0040c3ef
call fcn.0045d0d1
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.0040c3ef
call fcn.0045d0d1
mov ebx, 0x46011c
mov ecx, 0x21
call fcn.0045ced6
push 0
push 0
push 0
mov ebx, 0x46011c
push ebx
mov edx, 0x1867418
call fcn.0045d0ba
lea ebx, [esp + 0xc]
call fcn.0045c36b
mov edx, 0x18673f8
call fcn.0045d0ba
lea ebx, [esp + 0xc]
call fcn.0045c36b
fild qword [0x186d0cc]
fistp qword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
lea ebx, [esp + 0xc]
push ebx
mov dword [ebx], eax
call fcn.00430e85
mov ebx, esp
mov eax, dword [ebx + 8]
call fcn.00457d88
mov eax, dword [ebx + 4]
call fcn.00457d88
add esp, 0xc
mov edx, 0x1867424
call fcn.0045d0ba
mov ebx, 0x46011c
call fcn.0045ce8d
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
mov eax, dword [0x45fb08]
test eax, eax
je 0x436611
lea ebx, [ebp - 0xf0]
push ebx
call dword [sym.imp.KERNEL32.DLL_GetLocalTime]
fldcw word [ebp - 0x10]
mov word [ebp - 0xe8], 0
mov word [ebp - 0xe6], 0
mov word [ebp - 0xe4], 0
lea ebx, [ebp - 0xe0]
call fcn.0045ce8d
mov ecx, 7
mov eax, 4
call fcn.00454232
call fcn.0045ae43
call fcn.0045c29a
mov word [ebp - 0xf0], ax
lea ebx, [ebp - 0xe0]
call fcn.0045ce8d
mov ecx, 0xb
mov eax, 2
call fcn.00454232
call fcn.0045ae43
call fcn.0045c29a
mov word [ebp - 0xee], ax
lea ebx, [ebp - 0xe0]
call fcn.0045ce8d
mov ecx, 0xd
mov eax, 2
call fcn.00454232
call fcn.0045ae43
call fcn.0045c29a
mov word [ebp - 0xea], ax
push 0
lea ebx, [ebp - 0xf0]
push ebx
call fcn.00436642
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x436611
mov dword [0x460118], 1
mov edx, 0x1867434
call fcn.0045d0ba
lea ebx, [ebp - 0xe0]
call fcn.0045ce8d
call fcn.0045c56d
mov edx, 0x1867448
call fcn.0045d0ba
call fcn.0045c56d
push 0
mov ebx, esp
call fcn.0045c2a9
call fcn.00417148
push 0
call fcn.00424cf0
mov dword [0x460114], 1
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
fldcw word [ebp - 0x10]
mov eax, dword [ebp - 0x98]
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret