Function at 0x402f20
Capabilities:
Read file via mapping

Disassembly:
sub esp, 0x124
push ebx
push esi
push edi
lea ecx, [esp + 0x18]
lea eax, [esp + 0x18]
push 1
push ecx
mov dword [esp + 0x14], 0xc
mov dword [esp + 0x1c], 1
mov dword [esp + 0x18], eax
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
push 0
push 0
lea edx, [esp + 0x20]
push 1
push edx
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
mov ebx, dword [esp + 0x134]
mov eax, str.Global_
test bl, bl
jne 0x402f74
mov eax, 0x425850
push eax
lea eax, [esp + 0x30]
push str._sDBWinMutex
push eax
call fcn.00410876
add esp, 0xc
lea ecx, [esp + 0x2c]
push ecx
push 0
push 0x10000000
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
mov esi, ebx
and esi, 0xff
shl esi, 2
test eax, eax
mov dword [esi + 0x42e908], eax
jne 0x402fc7
lea edx, [esp + 0x2c]
push edx
push eax
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [esi + 0x42e908], eax
jmp 0x402ff8
push str.SetSecurityInfo
push str.Advapi32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [esi + 0x42e908]
push 0
push 0
push 0
push 0
push 4
push 6
push ecx
mov dword [0x432660], eax
call eax
test bl, bl
mov eax, str.Global_
jne 0x403006
mov eax, 0x425850
push eax
lea edx, [esp + 0x30]
push str._sDBWIN_BUFFER
push edx
call fcn.00410876
add esp, 0xc
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
lea eax, [esp + 0x2c]
lea ecx, [esp + 0xc]
push eax
push 0x1000
push 0
push 4
push ecx
push 0xffffffffffffffff
call edi
cmp eax, 0xffffffff
mov dword [esi + 0x4313c8], eax
jne 0x40306f
lea edx, [esp + 0x2c]
lea eax, [esp + 0xc]
push edx
push 0x1000
push 0
push 4
push eax
push 0xffffffffffffffff
call edi
cmp eax, 0xffffffff
mov dword [esi + 0x4313c8], eax
jne 0x40306f
pop edi
pop esi
xor al, al
pop ebx
add esp, 0x124
ret
mov ecx, dword [esi + 0x4313c8]
push 0x1000
push 0
push 0
push 6
push ecx
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
test eax, eax
mov dword [esi + 0x432c88], eax
jne 0x4030aa
mov edx, dword [esi + 0x4313c8]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
xor al, al
pop ebx
add esp, 0x124
ret
test bl, bl
mov eax, str.Global_
jne 0x4030b8
mov eax, 0x425850
push eax
lea eax, [esp + 0x30]
push str._sDBWIN_DATA_READY
push eax
call fcn.00410876
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventA]
add esp, 0xc
lea ecx, [esp + 0x2c]
lea edx, [esp + 0xc]
push ecx
push 0
push 0
push edx
call edi
cmp eax, 0xffffffff
mov dword [esi + 0x4313b8], eax
jne 0x40312d
lea eax, [esp + 0x2c]
lea ecx, [esp + 0xc]
push eax
push 0
push 0
push ecx
call edi
cmp eax, 0xffffffff
mov dword [esi + 0x4313b8], eax
jne 0x40312d
mov edx, dword [esi + 0x432c88]
push edx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [esi + 0x4313c8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
xor al, al
pop ebx
add esp, 0x124
ret
test bl, bl
mov eax, str.Global_
jne 0x40313b
mov eax, 0x425850
push eax
lea ecx, [esp + 0x30]
push str._sDBWIN_BUFFER_READY
push ecx
call fcn.00410876
add esp, 0xc
lea edx, [esp + 0x2c]
lea eax, [esp + 0xc]
push edx
push 0
push 0
push eax
call edi
cmp eax, 0xffffffff
mov dword [esi + 0x430d40], eax
jne 0x4031b5
lea ecx, [esp + 0x2c]
lea edx, [esp + 0xc]
push ecx
push 0
push 0
push edx
call edi
cmp eax, 0xffffffff
mov dword [esi + 0x430d40], eax
jne 0x4031b5
mov eax, dword [esi + 0x432c88]
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov ecx, dword [esi + 0x4313b8]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ecx
call edi
mov edx, dword [esi + 0x4313c8]
push edx
call edi
pop edi
pop esi
xor al, al
pop ebx
add esp, 0x124
ret
mov eax, dword [esi + 0x430d40]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
pop edi
pop esi
mov al, 1
pop ebx
add esp, 0x124
ret