Function at 0x434f08
Capabilities:
Read file via mapping

Disassembly:
push 0x30
push 0x5c5df8
call fcn.0051bb70
mov edi, edx
mov esi, ecx
mov dword [ebp - 0x28], esi
mov eax, dword [esi + 0xf4]
mov dword [ebp - 0x40], eax
mov eax, dword [edi]
and al, 3
cmp al, 1
jne 0x434f41
mov ecx, 0x3ec
mov dword [esi + 0xf0], ecx
call fcn.00449d08
jmp 0x435a12
cmp byte [edi + 4], 0
je 0x434f4c
xor ecx, ecx
inc ecx
jmp 0x434f31
mov ecx, dword [esi + 0x110]
mov dword [ebp - 0x20], ecx
mov edx, dword [esi + 0x114]
mov dword [ebp - 0x24], edx
mov eax, ecx
and eax, edx
cmp eax, 0xffffffff
jne 0x434f73
mov ecx, dword [edi + 0x18]
mov dword [ebp - 0x20], ecx
mov edx, dword [edi + 0x1c]
mov dword [ebp - 0x24], edx
mov eax, dword [edi + 0x14]
mov dword [ebp - 0x1c], eax
cmp edx, eax
jg 0x435a10
jl 0x434f8c
cmp ecx, dword [edi + 0x10]
jae 0x435a10
xor eax, eax
mov ebx, eax
mov edx, dword [esi + 0x108]
cmp edx, eax
jbe 0x434fb0
mov ecx, dword [ebp - 0x20]
mov esi, dword [esi + 0x10c]
add ebx, dword [esi]
lea esi, [esi + 8]
sub edx, 1
jne 0x434fa3
mov esi, dword [ebp - 0x28]
mov edx, dword [edi + 0x10]
sub edx, ecx
mov dword [ebp - 0x34], edx
mov edx, dword [ebp - 0x24]
sbb dword [ebp - 0x1c], edx
cmp eax, dword [ebp - 0x1c]
jl 0x434fcf
jg 0x434fca
cmp ebx, dword [ebp - 0x34]
jb 0x434fcf
mov ebx, dword [edi + 0x10]
sub ebx, ecx
test ebx, ebx
je 0x435a12
mov dword [ebp - 0x1c], ebx
and dword [ebp - 0x2c], eax
add dword [ebp - 0x1c], ecx
adc dword [ebp - 0x2c], edx
push eax
push dword [0x892c88]
push edx
push ecx
call fcn.0054e720
mov ecx, eax
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x20]
sub edx, ecx
mov eax, dword [ebp - 0x24]
sbb eax, 0
add ecx, ebx
push ecx
push edx
push eax
push 4
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x43502b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0xf0], eax
mov ecx, eax
jmp 0x434f37
xor ecx, ecx
xor edx, edx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], ecx
cmp edx, dword [esi + 0x108]
jae 0x43554c
cmp ecx, ebx
jae 0x43554c
mov eax, ebx
sub eax, ecx
mov esi, dword [esi + 0x10c]
mov esi, dword [esi + edx*8]
cmp esi, eax
cmovae esi, eax
mov dword [ebp - 0x20], esi
and dword [ebp - 0x38], 0
and dword [ebp - 4], 0
mov esi, dword [ebp - 0x28]
push dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
add eax, ecx
add eax, dword [ebp - 0x3c]
push eax
mov eax, dword [esi + 0x10c]
push dword [eax + edx*8 + 4]
call fcn.0051c650
add esp, 0xc
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x34]
inc edx
jmp 0x43502f
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
test eax, eax
jne 0x4359e4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0xf0], eax
test eax, eax
jle 0x435a12
cmp eax, 0x17
jg 0x435618
je 0x435800
cmp eax, 8
jg 0x4355dd
je 0x4355d3
sub eax, 1
je 0x4355c9
sub eax, 1
je 0x4356e6
sub eax, 1
je 0x4356e6
sub eax, 1
je 0x435953
sub eax, 1
je 0x4355bf
sub eax, 1
jne case.0x43598a.10039
mov eax, 0xfffff00d
jmp 0x435a12
mov eax, 0xfffff030
jmp 0x435a12
mov eax, 0xfffff01c
jmp 0x435a12
mov eax, 0xfffff027
jmp 0x435a12
sub eax, 0xd
je case.0x43598a.10046
sub eax, 1
je 0x4355d3
sub eax, 1
je 0x4356e6
dec eax
sub eax, 1
je 0x43560e
dec eax
sub eax, 1
jne case.0x43598a.10039
mov eax, 0xfffff035
jmp 0x435a12
mov eax, 0xfffff03b
jmp 0x435a12
mov ecx, 0x45d
cmp eax, ecx
jg 0x435830
je 0x435800
mov ecx, 0xcb
cmp eax, ecx
jg 0x435736
je 0x4356e6
cmp eax, 0x6e
jg 0x4356be
je 0x435800
cmp eax, 0x40
jg 0x43568d
je case.0x43598a.10054
sub eax, 0x1f
je 0x435800
sub eax, 1
je 0x435778
sub eax, 1
je 0x435778
sub eax, 6
je 0x4356b4
sub eax, 0xb
jne case.0x43598a.10039
mov eax, 0xfffff02f
jmp 0x435a12
mov eax, 0xfffff013
jmp 0x435a12
sub eax, 0x50
je 0x435722
dec eax
sub eax, 1
je 0x4356b4
sub eax, 5
je case.0x43598a.10046
sub eax, 0x16
jne case.0x43598a.10039
mov eax, 0xfffff001
jmp 0x435a12
mov eax, 0xfffff029
jmp 0x435a12
cmp eax, 0x7e
jg 0x435704
je 0x4356e6
sub eax, 0x6f
je 0x43595d
sub eax, 1
je 0x4356b4
sub eax, 9
je case.0x43598a.10060
sub eax, 1
je case.0x43598a.10046
sub eax, 1
jne case.0x43598a.10039
mov eax, 0xfffff026
jmp 0x435a12
mov eax, 0xfffff019
jmp 0x435a12
mov eax, 0xfffff039
jmp 0x435a12
sub eax, 0x91
je 0x43572c
sub eax, 0xb
je 0x435800
sub eax, 5
je 0x4356e6
sub eax, 0x16
jne case.0x43598a.10039
mov eax, 0xfffff015
jmp 0x435a12
mov eax, 0xfffff02d
jmp 0x435a12
mov ecx, 0x3e3
cmp eax, ecx
jg 0x4357ce
je 0x43590c
mov ecx, 0xe8
cmp eax, ecx
jg 0x4357a0
je case.0x43598a.10058
sub eax, 0xcd
je 0x435800
sub eax, 1
je 0x435796
dec eax
sub eax, 1
je 0x43578c
sub eax, 0x16
je case.0x43598a.10058
sub eax, 1
jne case.0x43598a.10039
mov eax, 0xfffff00e
jmp 0x435a12
mov eax, 0xfffff031
jmp 0x435a12
mov eax, 0xfffff003
jmp 0x435a12
mov eax, 0xfffff020
jmp 0x435a12
sub eax, 0xe9
je case.0x43598a.10058
sub eax, 0x22
je 0x4356e6
sub eax, 0xa
je 0x4356b4
sub eax, 0x1cf
jne case.0x43598a.10039
mov eax, 0xfffff004
jmp 0x435a12
mov ecx, 0x44f
cmp eax, ecx
jg 0x43580a
je 0x435800
sub eax, 0x3e6
je 0x4357c4
sub eax, 6
je 0x4355b5
sub eax, 0x60
je 0x4356b4
sub eax, 1
je 0x435800
sub eax, 1
jne case.0x43598a.10039
mov eax, 0xfffff01a
jmp 0x435a12
sub eax, 0x450
je 0x435800
dec eax
sub eax, 1
je 0x435800
sub eax, 5
je 0x435800
dec eax
sub eax, 1
jne case.0x43598a.10039
mov eax, 0xfffff010
jmp 0x435a12
mov ecx, 0x2735
cmp eax, ecx
jg 0x435971
je 0x435967
mov ecx, 0x5b8
cmp eax, ecx
jg 0x4358d0
je case.0x43598a.10046
mov ecx, 0x4cf
cmp eax, ecx
jg 0x43589f
je case.0x43598a.10051
sub eax, 0x469
je 0x435800
sub eax, 0x24
je 0x435800
sub eax, 1
je 0x435800
sub eax, 0x3b
je case.0x43598a.10061
dec eax
sub eax, 1
jne case.0x43598a.10039
mov eax, 0xfffff005
jmp 0x435a12
mov eax, 0xfffff012
jmp 0x435a12
mov eax, 0xfffff022
jmp 0x435a12
sub eax, 0x4d0
je 0x4358c6
sub eax, 4
je case.0x43598a.10053
sub eax, 0x4e
je 0x4355bf
sub eax, 0x4f
jmp 0x4357fa
mov eax, 0xfffff011
jmp 0x435a12
mov eax, 0xfffff017
jmp 0x435a12
mov ecx, 0x271d
cmp eax, ecx
jg 0x43592a
je 0x4357c4
sub eax, 0x780
je 0x4357c4
sub eax, 1
je 0x435920
sub eax, 0x149
je case.0x43598a.10057
sub eax, 0x85e
je 0x4356e6
sub eax, 0x15ec
jne case.0x43598a.10039
mov eax, 0xfffff00f
jmp 0x435a12
mov eax, 0xfffff02b
jmp 0x435a12
mov eax, 0xfffff01d
jmp 0x435a12
sub eax, 0x271e
je 0x43595d
sub eax, 8
je case.0x43598a.10046
dec eax
sub eax, 1
je 0x435953
sub eax, 0xb
jne case.0x43598a.10039
mov eax, 0xfffff008
jmp 0x435a12
mov eax, 0xfffff01e
jmp 0x435a12
mov eax, 0xfffff016
jmp 0x435a12
mov eax, 0xfffff00c
jmp 0x435a12
mov ecx, 0x2751
cmp eax, ecx
jg 0x4359c9
je 0x4358c6
add eax, 0xffffd8ca
cmp eax, 0x17
ja case.0x43598a.10039
jmp dword [eax*4 + 0x435a88]
mov eax, 0xfffff006
jmp 0x435a12
mov eax, 0xfffff007
jmp 0x435a12
mov eax, 0xfffff01b
jmp 0x435a12
mov eax, 0xfffff01f
jmp 0x435a12
mov eax, 0xfffff024
jmp 0x435a12
mov eax, 0xfffff02e
jmp 0x435a12
mov eax, 0xfffff033
jmp 0x435a12
mov eax, 0xfffff047
jmp 0x435a12
sub eax, 0x2af9
je 0x4356e6
sub eax, 3
je 0x4356e6
mov eax, 0xfffff002
jmp 0x435a12
mov eax, dword [esi + 0x110]
and eax, dword [esi + 0x114]
cmp eax, 0xffffffff
jne 0x435a0b
mov eax, dword [ebp - 0x1c]
mov dword [edi + 0x18], eax
mov eax, dword [ebp - 0x2c]
mov dword [edi + 0x1c], eax
mov edx, edi
mov ecx, dword [ebp - 0x40]
call fcn.00433d83
mov dword [esi + 0x48], ebx
jmp 0x435a15
xor eax, eax
mov dword [esi + 0x48], eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret