Function at 0x415410
Capabilities:
Read file via mapping

Disassembly:
sub esp, 0x1c8
mov eax, dword [0x4c5280]
xor eax, esp
mov dword [esp + 0x1c4], eax
push ebx
push esi
mov esi, dword [esp + 0x1d8]
push edi
mov edi, ecx
cmp dword [edi + 4], 0
mov ebx, edx
je 0x41544c
push str._rYeR
mov eax, ebx
call fcn.0040f830
add esp, 4
jmp 0x4156d3
push ebp
test esi, esi
jne 0x415458
xor ebp, ebp
jmp 0x415503
push 6
push 0x4b9188
push esi
lea ebp, [esp + 0x1c]
call fcn.00475f8b
add esp, 0xc
test eax, eax
je 0x41549a
push 0x4b9188
mov eax, ebp
push 0xe2
push eax
call fcn.00476081
push 0xc2
push esi
mov ecx, ebp
push 0xe2
push ecx
call fcn.004785bd
add esp, 0x1c
jmp 0x4154b2
push 0xc8
push esi
lea edx, [esp + 0x18]
push 0xe2
push edx
call fcn.00475b84
add esp, 0x10
xor eax, eax
mov word [esp + 0x1a0], ax
cmp byte [esp + 0x1e4], al
je 0x4154e4
call fcn.0040d840
add eax, 0x4be
je 0x4154e4
push eax
lea ecx, [esp + 0x14]
push 0xe2
push ecx
call fcn.0047679e
add esp, 0xc
call fcn.0040d840
add eax, 0x49c
je 0x415503
push eax
lea edx, [esp + 0x14]
push 0xe2
push edx
call fcn.0047679e
add esp, 0xc
xor esi, esi
test ebp, ebp
je 0x4155b8
push ebp
push 1
push 6
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov esi, eax
test esi, esi
je 0x4155b8
mov dword [edi + 0xc], 2
mov ecx, dword [esp + 0x1e8]
push ecx
push 0
push 0
push 6
push esi
mov dword [edi + 4], esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [edi + 8], eax
test eax, eax
jne 0x4156d0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [edi + 8]
test eax, eax
je 0x415569
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov dword [edi + 8], 0
mov eax, dword [edi + 4]
test eax, eax
je 0x41557e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 4], 0
mov eax, ebx
call fcn.0040f780
mov edi, esi
mov esi, eax
call fcn.004103f0
mov eax, ebx
call fcn.0040f780
test ebp, ebp
jne 0x415684
push 0x4ba1bc
push 0x4b8ff4
mov edx, eax
call fcn.00410f90
add esp, 8
xor al, al
jmp 0x4156d2
cmp byte [esp + 0x1dc], 0
je 0x415634
mov eax, dword [esp + 0x1e8]
push ebp
push eax
push 0
push 0x8000004
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov esi, eax
test esi, esi
jne 0x415616
call fcn.004103c0
test ebp, ebp
jne 0x4155f2
push 0x4ba14c
jmp 0x4155a2
mov esi, eax
push 0x4ba168
push 0x4b8ff4
mov edx, esi
call fcn.00410f90
add esp, 8
mov eax, ebp
call fcn.00410db0
xor al, al
jmp 0x4156d2
mov dword [edi + 0xc], 1
test ebp, ebp
je 0x415634
push 6
push esi
call fcn.00415b20
push 6
push esi
call fcn.00415b70
add esp, 0x10
test esi, esi
jne 0x415529
cmp byte [esp + 0x1dc], 0
jne 0x415529
call fcn.004103c0
test ebp, ebp
jne 0x41565d
push 0x4ba184
jmp 0x4155a2
mov esi, eax
push 0x4ba1a0
push 0x4b8ff4
mov edx, esi
call fcn.00410f90
push ebp
push 0x4b8ff4
mov edx, esi
call fcn.00410f90
add esp, 0x10
xor al, al
jmp 0x4156d2
mov esi, eax
push str.Filemap
push 0x4b8ff4
mov edx, esi
call fcn.00410f90
push ebp
push 0x4b8ff4
mov edx, esi
call fcn.00410f90
push 0x4ba204
push 0x4b8ff4
mov edx, esi
call fcn.00410f90
mov edx, dword [esp + 0x200]
push edx
push 0x4b9a74
mov edx, esi
call fcn.00410f90
add esp, 0x20
xor al, al
jmp 0x4156d2
mov al, 1
pop ebp
mov ecx, dword [esp + 0x1d0]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00474db0
add esp, 0x1c8
ret 0x10