Function at 0x43b510
Capabilities:
Read file via mapping

Disassembly:
push 0xffffffffffffffff
push 0x504d6b
mov eax, dword fs:[0]
push eax
sub esp, 0x1d8
mov eax, dword [0x5375a0]
xor eax, esp
mov dword [esp + 0x1d4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5375a0]
xor eax, esp
push eax
lea eax, [esp + 0x1ec]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x1fc]
mov edi, ecx
mov esi, edx
call fcn.004460c0
test al, al
je 0x43b580
mov dword [esp + 0x1c], str.CreateShareble
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ebx, eax
call fcn.00449f60
mov ecx, eax
mov eax, str.CreateShareble
call fcn.0044a3b0
xor ebx, ebx
mov dword [esp + 0x1f4], ebx
cmp dword [edi + 4], ebx
je 0x43b5d4
push str._rYeR
push ebp
call fcn.00437f70
add esp, 8
mov byte [esp + 0x1b], al
mov dword [esp + 0x1f4], 0xffffffff
call fcn.004460c0
test al, al
je 0x43b5cb
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ebx, eax
call fcn.00449f60
cmp byte [eax], 0
je 0x43b5cb
call fcn.0044a450
mov al, byte [esp + 0x1b]
jmp 0x43b889
cmp esi, ebx
je 0x43b691
push 6
push 0x52101c
push esi
lea ebx, [esp + 0x2c]
call fcn.004c7005
add esp, 0xc
test eax, eax
je 0x43b61e
push 0x52101c
mov eax, ebx
push 0xe2
push eax
call fcn.004c6803
add esp, 0xc
push 0xc2
push esi
mov ecx, ebx
push 0xe2
push ecx
call fcn.004c9d73
jmp 0x43b633
push 0xc8
push esi
lea edx, [esp + 0x28]
push 0xe2
push edx
call fcn.004c873f
xor eax, eax
add esp, 0x10
mov word [esp + 0x1b0], ax
cmp byte [esp + 0x204], al
je 0x43b668
call fcn.0043dfe0
add eax, 0x4be
je 0x43b668
push eax
lea ecx, [esp + 0x24]
push 0xe2
push ecx
call fcn.004c6786
add esp, 0xc
cmp byte [esp + 0x208], 0
je 0x43b691
call fcn.0043dfe0
add eax, 0x49c
je 0x43b691
push eax
lea edx, [esp + 0x24]
push 0xe2
push edx
call fcn.004c6786
add esp, 0xc
xor esi, esi
test ebx, ebx
je 0x43b741
push ebx
push 1
push 6
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov esi, eax
test esi, esi
je 0x43b741
mov dword [edi + 0xc], 2
mov ecx, dword [esp + 0x20c]
push ecx
push 0
push 0
push 6
push esi
mov dword [edi + 4], esi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [edi + 8], eax
test eax, eax
jne 0x43b85c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [edi + 8]
test eax, eax
je 0x43b6f7
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov dword [edi + 8], 0
mov eax, dword [edi + 4]
test eax, eax
je 0x43b70c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 4], 0
mov ecx, ebp
call fcn.00437ec0
mov edi, esi
mov esi, eax
call fcn.00438700
mov ecx, ebp
call fcn.00437ec0
test ebx, ebx
jne 0x43b80f
push 0x521670
push 0x5192f4
mov edx, eax
call fcn.004392f0
add esp, 8
jmp 0x43b786
cmp byte [esp + 0x200], 0
je 0x43b7d5
mov eax, dword [esp + 0x20c]
push ebx
push eax
push 0
push 0x8000004
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov esi, eax
test esi, esi
jne 0x43b7b7
test ebx, ebx
jne 0x43b7a1
push 0x521600
mov ebx, ebp
call fcn.004386d0
mov ecx, eax
call fcn.00438830
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1f4], 0xffffffff
call fcn.00446090
xor al, al
jmp 0x43b889
push ebx
push 0x52161c
mov ebx, ebp
call fcn.004386d0
mov ecx, eax
call fcn.00438830
jmp 0x43b77f
mov dword [edi + 0xc], 1
test ebx, ebx
je 0x43b7d5
push 6
push esi
call fcn.00443cb0
push 6
push esi
call fcn.00443d00
add esp, 0x10
test esi, esi
jne 0x43b6b7
cmp byte [esp + 0x200], 0
jne 0x43b6b7
test ebx, ebx
jne 0x43b7f6
push 0x521638
jmp 0x43b778
push ebx
push 0x521654
mov ebx, ebp
call fcn.004386d0
mov ecx, eax
call fcn.00438830
jmp 0x43b77f
mov esi, eax
push 0x521694
push 0x5192f4
mov edx, esi
call fcn.004392f0
push ebx
push 0x5192f4
mov edx, esi
call fcn.004392f0
push 0x5216b8
push 0x5192f4
mov edx, esi
call fcn.004392f0
mov edx, dword [esp + 0x224]
push edx
push 0x521370
mov edx, esi
call fcn.004392f0
add esp, 0x20
jmp 0x43b786
mov dword [esp + 0x1f4], 0xffffffff
call fcn.004460c0
test al, al
je 0x43b887
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ebx, eax
call fcn.00449f60
cmp byte [eax], 0
je 0x43b887
call fcn.0044a450
mov al, 1
mov ecx, dword [esp + 0x1ec]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1d4]
xor ecx, esp
call fcn.004c60f4
add esp, 0x1e4
ret 0x14