Function at 0x4dfa0b
Capabilities:
Read file via mapping

Disassembly:
xor esi, eax
sub esi, 0x1ebde66
not esi
xor esi, 0x15296515
inc esi
xor esi, eax
or dword [0x520625], 0xe023960
or dword [0x5207d0], esi
xor ebx, edx
dec esi
call fcn.00406097
add esi, eax
xor esi, eax
push 0x40
call fcn.00406c36
mov dword [0x520724], ecx
sub esi, dword [0x520f98]
call fcn.00406097
xor ecx, eax
add edi, dword [0x520ced]
xor edi, dword [0x520e22]
add esi, edx
xor edx, dword [0x520bd2]
not edx
xchg eax, edx
inc edx
sub ecx, dword [0x520cb8]
call fcn.00404814
xor edi, ebx
xor edi, ebx
call fcn.00406c36
dec edx
xchg eax, edx
not edx
sub esi, edx
xor ecx, eax
call fcn.00406097
or dword [0x520a15], ecx
push 0
xor edi, 0x1d6b55fa
dec esi
xor eax, edx
sub edi, dword [0x520f77]
not eax
sub edx, dword [0x520ee9]
sub ebx, eax
add ebx, edx
sub edx, dword [0x520b16]
mov dword [0x5206da], 0x2041c2bf
sub dword [0x5205cb], 0x109be266
sub ebx, edx
add ebx, eax
not eax
xor eax, edx
inc esi
xor edi, 0x1d6b55fa
push 0xffffffffffffffff
or dword [0x52068e], 0x25343e62
xor esi, eax
xchg eax, eax
dec eax
xor ecx, esi
call fcn.00406097
xchg edx, eax
xor dword [0x5208dc], ecx
rol esi, 4
dec eax
inc eax
ror esi, 4
mov dword [0x5209bc], edx
xchg edx, eax
xor ecx, esi
inc eax
xchg eax, eax
xor esi, eax
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
not ecx
add edx, esi
call fcn.00406c36
sub esi, 0xea3b27c
xor esi, eax
sub eax, 0xcb1cb9e
dec edx
call fcn.00406097
sub ecx, dword [0x520c6e]
xchg ecx, esi
call fcn.00404814
sub ebx, esi
xor eax, 0x1bbc1d50
xor esi, eax
sub ebx, dword [0x520cc2]
sub edi, dword [0x520d28]
sub esi, eax
add ebx, eax
rol eax, 0x17
sub ecx, dword [0x520b70]
xor dword [0x52061c], ecx
ror eax, 0x17
sub ebx, eax
add esi, eax
xor esi, eax
xor eax, 0x1bbc1d50
add ebx, esi
xchg ecx, esi
inc edx
add eax, 0xcb1cb9e
xor esi, eax
add esi, 0xea3b27c
call fcn.00401f52
sub edx, esi
not ecx
push ebx
xor ebx, dword [0x520b3c]
mov dword [0x520914], 0x1a6c0a15
xor esi, eax
sub esi, ebp
add esi, dword [0x520f7d]
xor ecx, dword [0x520d68]
xor esi, eax
not eax
sub ecx, dword [0x520f36]
xor edi, esp
call fcn.004018ef
ror esi, 3
add esi, eax
add ecx, dword [0x520f6c]
rol eax, 0x18
ror eax, 0x18
sub esi, eax
rol esi, 3
xor edi, esp
not eax
xor esi, eax
add esi, ebp
xor esi, eax
push 0
call fcn.00408192
xor dword [0x520766], ecx
xor ecx, eax
xor ecx, dword [0x520ae5]
sub edi, dword [0x520cbc]
xchg esi, edx
sub ecx, dword [0x520b6c]
add dword [0x520a2b], ecx
dec eax
xchg eax, eax
xor esi, eax
add esi, 0x92163e0
call fcn.00403cda
xor edi, eax
sub esi, eax
ror esi, 0x1d
xor edx, 0x123cf3e0
xor edx, 0x123cf3e0
rol esi, 0x1d
add esi, eax
xor edi, eax
call fcn.00402d4a
sub esi, 0x92163e0
xor esi, eax
xchg eax, eax
inc eax
xor dword [0x52094a], ebx
xchg esi, edx
xor ecx, eax
call fcn.00406c36
push 0
xor eax, 0x3813f168
sub ecx, dword [0x520aa8]
xor eax, 0x76a6f79
neg edx
xor edx, dword [0x520f38]
xor ecx, eax
not esi
add ecx, dword [0x520e9c]
add eax, 0x1fb6f14
rol ecx, 0xb
xor edi, dword [0x520dac]
sub dword [0x52065a], edx
xchg edx, eax
dec esi
add ebx, esp
xor edx, dword [0x520e6c]
dec edx
inc edx
sub ebx, esp
inc esi
xchg edx, eax
sub dword [0x520a29], ecx
ror ecx, 0xb
sub eax, 0x1fb6f14
not esi
xor ecx, eax
neg edx
xor eax, 0x76a6f79
xor eax, 0x3813f168
push 0x22
xor ecx, dword [0x520e12]
sub edx, dword [0x520b58]
rol ecx, 1
call fcn.00406c36
sub ebx, dword [0x520eb0]
xor eax, 0x14756688
or dword [0x5208f0], edx
ror ecx, 0x1a
xor dword [0x5207ae], 0x2df9c234
inc ecx
mov dword [0x52072b], 0x1b4c34a0
dec eax
or dword [0x5205de], edi
dec ebx
xor ecx, eax
neg ebx
xor dword [0x520616], edx
xor ebx, esp
neg ecx
xor dword [0x520811], edx
neg ecx
xor ebx, esp
xor dword [0x5205d2], ecx
neg ebx
xor ecx, eax
inc ebx
xor dword [0x520904], edi
inc eax
dec ecx
mov dword [0x52060d], 0x4fc6247
rol ecx, 0x1a
xor eax, 0x14756688
call fcn.00408642
ror ecx, 1
push eax
inc eax
not esi
call fcn.004083ea
xor esi, eax
xor esi, edx
rol edx, 0x19
or dword [0x5209e5], edx
inc esi
or dword [0x5209d0], 0x3ec8085a
rol ecx, 7
ror ecx, 7
dec esi
ror edx, 0x19
xor esi, edx
xor esi, eax
call fcn.0040904b
not esi
dec eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
or dword [0x5208bf], edi
xchg esi, eax
or dword [0x520695], 0xf9a3a58
xor eax, 0x17b56f00
ror esi, 0x11
xor esi, 0x31ab74b
call fcn.00407f3a
xor dword [0x520640], edx
rol esi, 6
mov dword [0x520540], 0xfd30350
ror esi, 6
sub dword [0x520528], edx
call fcn.00406097
xor esi, 0x31ab74b
rol esi, 0x11
xor eax, 0x17b56f00
mov dword [0x520590], 0x2001c000
xchg esi, eax
or dword [0x5208a6], ecx
mov ecx, ebx
call fcn.00406097
sub ecx, dword [0x520e22]
xor edx, dword [0x520c26]
xor dword [0x520a32], ecx
add eax, 0xcf0b184
sub edx, dword [0x520f94]
sub ebx, dword [0x520d4e]
neg esi
or dword [0x520a22], edi
xor edi, edx
neg ebx
inc edi
xchg edx, edx
xchg edx, edx
dec edi
neg ebx
xor edi, edx
xor dword [0x5208d9], edi
neg esi
sub eax, 0xcf0b184
mov dword [0x520880], edi
call 0x4dfe55
call fcn.00406097
dec eax
xchg eax, edx
sub ecx, dword [0x520f60]
xchg ebx, esi
sub ecx, dword [0x520ab6]
or dword [0x52077b], edi
xchg esi, esi
xor esi, dword [0x520af2]
neg esi
xor edx, dword [0x520b93]
neg esi
xchg esi, esi
xchg ebx, esi
xchg eax, edx
rol byte [eax + 0x5e], 1
xor edx, eax
inc esi
call fcn.00404814