Function at 0x460520
Capabilities:
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53053b
mov eax, dword fs:[0]
push eax
sub esp, 0x1dc
mov eax, dword [0x5c6150]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 0x18]
mov edi, dword [ebp + 0x10]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x1dc], edi
mov dword [ebp - 0x1e0], eax
call fcn.00464730
test al, al
je 0x460597
mov dword [ebp - 0x1e4], str.CreateShareble
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push str.CreateShareble
push eax
call fcn.0046ef50
mov ecx, eax
call fcn.0046f0d0
mov ecx, eax
call fcn.0046f440
mov dword [ebp - 4], 0
cmp dword [esi + 4], 0
je 0x4605b9
push str._rYeR
push ebx
call fcn.00450d30
add esp, 8
mov bl, al
jmp 0x46083f
test edi, edi
jne 0x460607
xor eax, eax
mov cl, byte [ebp + 0xc]
test cl, cl
je 0x4607a4
push edi
push dword [ebp - 0x1e0]
push 0
push 0x8000004
call fcn.00464ca0
push eax
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
test eax, eax
jne 0x46079a
mov ecx, ebx
call fcn.00450fc0
test edi, edi
jne 0x46076f
push 0x5a174c
jmp 0x46075a
push 6
push str.Local_
push dword [ebp - 0x1dc]
lea edi, [ebp - 0x1d8]
call fcn.004e6f83
add esp, 0xc
test eax, eax
mov eax, edi
je 0x460655
push str.Local_
push 0xe2
push eax
call fcn.004e1af2
add esp, 0xc
mov eax, edi
push 0xc2
push dword [ebp - 0x1dc]
push 0xe2
push eax
call fcn.004e6f78
jmp 0x46066b
push 0xc8
push dword [ebp - 0x1dc]
push 0xe2
push eax
call fcn.004e2f3b
xor eax, eax
add esp, 0x10
mov word [ebp - 0x48], ax
cmp byte [ebp + 0x14], al
je 0x46069a
call fcn.004594a0
add eax, 0x5e2
je 0x46069a
push eax
lea eax, [ebp - 0x1d8]
push 0xe2
push eax
call fcn.004e7085
add esp, 0xc
call fcn.004594a0
add eax, 0x5c0
je 0x4606bb
push eax
lea eax, [ebp - 0x1d8]
push 0xe2
push eax
call fcn.004e7085
add esp, 0xc
lea eax, [ebp - 0x1d8]
push eax
push 1
push 6
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
test eax, eax
je 0x4605bf
mov dword [esi + 0xc], 2
push dword [ebp - 0x1e0]
mov dword [esi + 4], eax
push 0
push 0
push 6
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [esi + 8], eax
test eax, eax
jne 0x46083d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esi + 8]
mov dword [ebp - 0x1dc], eax
test ecx, ecx
je 0x46071d
push ecx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov dword [esi + 8], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x460732
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 4], 0
push dword [ebp - 0x1dc]
mov ecx, ebx
call fcn.00450c80
mov ecx, eax
call fcn.00450ff0
mov ecx, ebx
call fcn.00450c80
test edi, edi
jne 0x4607ee
push 0x5a17c0
push 0x5971f4
push eax
call fcn.00450580
add esp, 0xc
xor bl, bl
jmp 0x46083f
push 0x5a1730
mov esi, eax
push 0x5971f4
push esi
call fcn.00450580
add esp, 0xc
push edi
push 0x5971f4
push esi
call fcn.00450580
add esp, 0xc
xor bl, bl
jmp 0x46083f
mov cl, byte [ebp + 0xc]
mov dword [esi + 0xc], 1
test eax, eax
jne 0x4606db
test cl, cl
jne 0x4606db
mov ecx, ebx
call fcn.00450fc0
test edi, edi
jne 0x4607c6
push 0x5a1714
jmp 0x46075a
push 0x5a16f8
mov esi, eax
push 0x5971f4
push esi
call fcn.00450580
add esp, 0xc
push edi
push 0x5971f4
push esi
call fcn.00450580
add esp, 0xc
xor bl, bl
jmp 0x46083f
push str.Filemap
mov esi, eax
push 0x5971f4
push esi
call fcn.00450580
add esp, 0xc
push edi
push 0x5971f4
push esi
call fcn.00450580
add esp, 0xc
push 0x5a1790
push 0x5971f4
push esi
call fcn.00450580
add esp, 0xc
push dword [ebp - 0x1e0]
push 0x59fc70
push esi
call fcn.00450580
add esp, 0xc
xor bl, bl
jmp 0x46083f
mov bl, 1
lea ecx, [ebp - 0x1e4]
call fcn.00464680
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004d6cfd
mov esp, ebp
pop ebp
ret 0x28