Function at 0x43b930
Capabilities:
Read file via mapping

Disassembly:
push 0xffffffffffffffff
push 0x50aeeb
mov eax, dword fs:[0]
push eax
sub esp, 0x1d8
mov eax, dword [0x53f5a0]
xor eax, esp
mov dword [esp + 0x1d4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x53f5a0]
xor eax, esp
push eax
lea eax, [esp + 0x1ec]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x1fc]
mov edi, ecx
mov esi, edx
call fcn.00446830
test al, al
je 0x43b9a0
mov dword [esp + 0x1c], str.CreateShareble
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ebx, eax
call fcn.0044a1f0
mov ecx, eax
mov eax, str.CreateShareble
call fcn.0044a630
xor ebx, ebx
mov dword [esp + 0x1f4], ebx
cmp dword [edi + 4], ebx
je 0x43b9f4
push str._rYeR
push ebp
call fcn.004383b0
add esp, 8
mov byte [esp + 0x1b], al
mov dword [esp + 0x1f4], 0xffffffff
call fcn.00446830
test al, al
je 0x43b9eb
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ebx, eax
call fcn.0044a1f0
cmp byte [eax], 0
je 0x43b9eb
call fcn.0044a6d0
mov al, byte [esp + 0x1b]
jmp 0x43bca9
cmp esi, ebx
je 0x43bab1
push 6
push 0x528a3c
push esi
lea ebx, [esp + 0x2c]
call fcn.004cd1c2
add esp, 0xc
test eax, eax
je 0x43ba3e
push 0x528a3c
mov eax, ebx
push 0xe2
push eax
call fcn.004cc9c0
add esp, 0xc
push 0xc2
push esi
mov ecx, ebx
push 0xe2
push ecx
call fcn.004cfe8a
jmp 0x43ba53
push 0xc8
push esi
lea edx, [esp + 0x28]
push 0xe2
push edx
call fcn.004ce857
xor eax, eax
add esp, 0x10
mov word [esp + 0x1b0], ax
cmp byte [esp + 0x204], al
je 0x43ba88
call fcn.0043e400
add eax, 0x4be
je 0x43ba88
push eax
lea ecx, [esp + 0x24]
push 0xe2
push ecx
call fcn.004cc943
add esp, 0xc
cmp byte [esp + 0x208], 0
je 0x43bab1
call fcn.0043e400
add eax, 0x49c
je 0x43bab1
push eax
lea edx, [esp + 0x24]
push 0xe2
push edx
call fcn.004cc943
add esp, 0xc
xor esi, esi
test ebx, ebx
je 0x43bb61
push ebx
push 1
push 6
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov esi, eax
test esi, esi
je 0x43bb61
mov dword [edi + 0xc], 2
mov ecx, dword [esp + 0x20c]
push ecx
push 0
push 0
push 6
push esi
mov dword [edi + 4], esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [edi + 8], eax
test eax, eax
jne 0x43bc7c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [edi + 8]
test eax, eax
je 0x43bb17
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov dword [edi + 8], 0
mov eax, dword [edi + 4]
test eax, eax
je 0x43bb2c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 4], 0
mov ecx, ebp
call fcn.00438300
mov edi, esi
mov esi, eax
call fcn.00438b40
mov ecx, ebp
call fcn.00438300
test ebx, ebx
jne 0x43bc2f
push 0x529090
push 0x51f1f4
mov edx, eax
call fcn.00439710
add esp, 8
jmp 0x43bba6
cmp byte [esp + 0x200], 0
je 0x43bbf5
mov eax, dword [esp + 0x20c]
push ebx
push eax
push 0
push 0x8000004
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov esi, eax
test esi, esi
jne 0x43bbd7
test ebx, ebx
jne 0x43bbc1
push 0x529020
mov ebx, ebp
call fcn.00438b10
mov ecx, eax
call fcn.00438c70
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1f4], 0xffffffff
call fcn.00446800
xor al, al
jmp 0x43bca9
push ebx
push 0x52903c
mov ebx, ebp
call fcn.00438b10
mov ecx, eax
call fcn.00438c70
jmp 0x43bb9f
mov dword [edi + 0xc], 1
test ebx, ebx
je 0x43bbf5
push 6
push esi
call fcn.004443c0
push 6
push esi
call fcn.00444410
add esp, 0x10
test esi, esi
jne 0x43bad7
cmp byte [esp + 0x200], 0
jne 0x43bad7
test ebx, ebx
jne 0x43bc16
push 0x529058
jmp 0x43bb98
push ebx
push 0x529074
mov ebx, ebp
call fcn.00438b10
mov ecx, eax
call fcn.00438c70
jmp 0x43bb9f
mov esi, eax
push 0x5290b4
push 0x51f1f4
mov edx, esi
call fcn.00439710
push ebx
push 0x51f1f4
mov edx, esi
call fcn.00439710
push 0x5290d8
push 0x51f1f4
mov edx, esi
call fcn.00439710
mov edx, dword [esp + 0x224]
push edx
push 0x528d90
mov edx, esi
call fcn.00439710
add esp, 0x20
jmp 0x43bba6
mov dword [esp + 0x1f4], 0xffffffff
call fcn.00446830
test al, al
je 0x43bca7
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ebx, eax
call fcn.0044a1f0
cmp byte [eax], 0
je 0x43bca7
call fcn.0044a6d0
mov al, 1
mov ecx, dword [esp + 0x1ec]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1d4]
xor ecx, esp
call fcn.004cc2b1
add esp, 0x1e4
ret 0x14