Function at 0x43dc88
Capabilities:
Read file via mapping

Disassembly:
mov dword [0x471a8d], ecx
xor esi, eax
rol esi, 6
mov dword [0x4719d0], ebx
inc eax
sub dword [0x471b34], 0x52a8572
xor ecx, eax
not eax
call fcn.0042f9e0
sub eax, 0x1b81f60b
ror eax, 0x1f
call fcn.0042f9e0
dec eax
xor esi, dword [0x470036]
add esi, eax
call fcn.0040831a
xor dword [0x471772], 0x26432d0
sub dword [0x471b67], edx
mov dword [0x471a9d], ecx
call fcn.0040831a
mov ebx, 0x1567
not esi
add ebx, eax
xchg edx, edx
xor edx, dword [0x471f50]
ror eax, 0xd
xor dword [0x4719f3], edi
neg edi
mov dword [0x4717cc], ecx
xchg edi, esi
sub ebx, dword [0x471d82]
xor edi, esi
xor esi, eax
xchg esi, edx
call fcn.0040831a
dec esi
xchg esi, eax
call fcn.00403d91
ror eax, 0xa
or dword [0x471b38], esi
xor ecx, edi
xor ecx, dword [0x471e54]
xor ecx, edi
sub dword [0x471808], ebx
rol eax, 0xa
xchg esi, eax
inc esi
xchg esi, edx
xor esi, eax
xor edi, esi
xchg edi, esi
mov dword [0x471b49], edi
neg edi
sub dword [0x4719be], esi
rol eax, 0xd
xchg edx, edx
sub ebx, eax
not esi
push ebx
call fcn.00401ece
xor eax, esi
ror esi, 0x16
add ebx, dword [0x471e2a]
sub ebx, dword [0x471f8e]
or dword [0x47181f], ecx
inc eax
rol eax, 0x12
not esi
add edi, esi
sub edi, esi
not esi
ror eax, 0x12
dec eax
rol esi, 0x16
xor eax, esi
call fcn.00408789
push 0
xor esi, eax
neg esi
sub ecx, dword [0x471d42]
not ebx
dec ebx
xchg eax, edx
mov dword [0x4719d8], ecx
sub eax, esp
ror eax, 0x1f
mov dword [0x471acd], ecx
call fcn.0040831a
xor esi, eax
xor edi, dword [0x471d26]
sub ecx, dword [0x471f9e]
xor edi, esp
xchg eax, edx
mov dword [0x471af6], 0x1a9e2abc
call fcn.00402946
not esi
not esi
call fcn.00401ece
xor dword [0x47198e], 0x25c61c7
xchg eax, edx
xor edi, esp
xor esi, eax
call fcn.004020ac
rol eax, 0x1f
add eax, esp
xchg eax, edx
inc ebx
not ebx
neg esi
xor esi, eax
push 0x40
xor dword [0x4717fc], edi
not eax
inc esi
add edx, dword [0x471d5e]
ror esi, 0x1b
xor esi, dword [0x471eca]
xor ebx, dword [0x471c90]
xor edx, esp
rol edi, 1
add ecx, dword [0x471d0a]
ror edi, 1
xor edx, esp
rol esi, 0x1b
dec esi
not eax
sub dword [0x471790], edi
push 0
call fcn.004026db
ror edx, 9
xor ecx, dword [0x471e22]
neg esi
dec eax
xor ebx, ebp
dec eax
call fcn.00401ece
inc eax
sub eax, 0x13131ec2
add eax, 0x13131ec2
dec eax
inc eax
xor ebx, ebp
inc eax
neg esi
rol edx, 9
call fcn.00402c45
push 0xffffffffffffffff
sub ebx, dword [0x471cd0]
sub edx, dword [0x471f22]
inc esi
call fcn.0040831a
xchg eax, eax
call fcn.004035fa
mov dword [0x4717dd], edx
xor edi, esp
xor esi, 0x2ef1bb6
or dword [0x471ad9], 0x868008
add ecx, dword [0x471c41]
call fcn.00405408
inc edi
xchg edx, eax
sub ecx, dword [0x471ee7]
inc edi
dec edi
xchg edx, eax
dec edi
call fcn.004035fa
sub dword [0x471b3f], 0x12b3fff5
xor esi, 0x2ef1bb6
xor edi, esp
sub dword [0x471a33], ecx
call fcn.00406578
xchg eax, eax
dec esi
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
not eax
ror edi, 0x15
inc edx
xor esi, esp
sub dword [0x4719e9], 0x27830ed4
xor edx, edi
mov dword [0x4719de], 0x1201882
sub ebx, esp
xor eax, 0x28a1be7c
xor edi, dword [0x471c0f]
mov dword [0x471ad4], ebx
dec eax
add esi, eax
xor eax, esi
xchg ebx, eax
inc ebx
xor ebx, ecx
call fcn.0040831a
call fcn.00408f40
xor ebx, ecx
dec ebx
xchg ebx, eax
xor eax, esi
sub esi, eax
inc eax
xor eax, 0x28a1be7c
add ebx, esp
xor edx, edi
add dword [0x47184b], 0x7547ea
xor esi, esp
dec edx
rol edi, 0x15
not eax
push ebx
not eax
rol esi, 0x1f
call fcn.00405736
xor edx, ebp
sub edi, esp
dec edx
xor esi, 0x18de003c
dec ecx
sub ecx, dword [0x471fdc]
neg esi
sub esi, dword [0x471f13]
sub edi, 0x333c658
add edi, 0x333c658
neg esi
inc ecx
xor esi, 0x18de003c
inc edx
add edi, esp
xor edx, ebp
ror esi, 0x1f
not eax
push 0
xor eax, esp
rol esi, 0x13
sub dword [0x471885], esi
xor esi, 0x390e14b
mov dword [0x471b40], 0x328716d
sub eax, 0x21248cb8
xor dword [0x471836], edi
add esi, 0x115cd980
dec esi
add eax, 0x9d8ddf0
xchg edi, esi
xor ebx, ebp
xor ecx, dword [0x471da4]
xchg eax, edx
xor esi, eax
neg edi
neg edi
xor esi, eax
xchg eax, edx
xor ebx, ebp
xchg edi, esi
sub eax, 0x9d8ddf0
inc esi
sub esi, 0x115cd980
add eax, 0x21248cb8
and dword [0x47180f], 0x8f79150
xor esi, 0x390e14b
add dword [0x4719d7], esi
ror esi, 0x13
xor eax, esp
push 0
xor edi, dword [0x471e96]
add eax, edx
call fcn.0040831a
inc eax
sub ecx, dword [0x471c1c]
xor esi, eax
ror edi, 0x13
sub edx, dword [0x471faf]
or dword [0x471a89], ecx
not esi
add dword [0x471aa7], esi
not esi
xor dword [0x47185d], esi
rol edi, 0x13
xor esi, eax
dec eax
call fcn.0040831a
sub eax, edx
push 0x22
inc esi
sub ebx, dword [0x471e9f]
xchg esi, eax
neg eax
xor edi, 0x29923a51
mov dword [0x471a2e], ecx
xor ecx, 0x729df1f
sub edi, esi
xor esi, dword [0x471e6d]
dec esi
not edi
xor edi, dword [0x471f08]
ror edx, 0x1a
and dword [0x471927], ecx
sub ecx, dword [0x471da4]
call fcn.00405408
xor edi, edx
not eax
rol edi, 0x19
xor ecx, dword [0x471c5a]
xchg esi, edx
xchg esi, edx
ror edi, 0x19
not eax
xor edi, edx
rol edx, 0x1a
not edi
inc esi
add edi, esi
xor ecx, 0x729df1f
mov dword [0x4718f8], ebx
xor edi, 0x29923a51
neg eax
xchg esi, eax
dec esi
push eax
sub esi, dword [0x471f06]
xor eax, 0x1bdb26a0
rol ebx, 0x1a
add ecx, dword [0x471f89]
ror eax, 0xb
mov dword [0x4718cb], 0xc8bb5fd
sub esi, dword [0x471fb5]
inc esi
add ecx, eax
xor ecx, esi
xchg eax, esi
not esi
inc edi
sub ebx, 0x94f6e8e
xchg esi, esi
xor ecx, dword [0x471c24]
mov dword [0x471a72], 0xe2e6180
xchg esi, esi
add ebx, 0x94f6e8e
dec edi
not esi
xchg eax, esi
xor ecx, esi
sub ecx, eax
dec esi
rol eax, 0xb
ror ebx, 0x1a
xor eax, 0x1bdb26a0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
xor edx, esi
call fcn.00406578
xor edi, ebx
call fcn.00405408
sub esi, eax
dec eax
sub esi, dword [0x471db0]
xor ecx, dword [0x471e84]
xor dword [0x4718f6], ebx
ror esi, 3
xchg esi, eax
add esi, 0x9c537f9
and dword [0x4717c8], ebx
sub edx, dword [0x471da6]
dec esi
call fcn.004035fa
inc esi
call fcn.00405408
xor ebx, esi
rol esi, 0x1d
neg edi
add ecx, dword [0x471f8b]
neg edi
ror esi, 0x1d
xor ebx, esi
call fcn.00405ad7
dec esi
inc esi
sub esi, 0x9c537f9
xchg esi, eax
rol esi, 3
mov dword [0x471ab8], ecx
inc eax
add esi, eax
call fcn.004035fa
xor edi, ebx
call fcn.0040831a
xor edx, esi
mov ecx, ebx
xor esi, 0x1329ea24
inc esi
sub edi, esi
xor dword [0x471b72], edx
call fcn.00403d91
sub edx, dword [0x471d4f]
ror eax, 0xe
inc edi
or dword [0x471a0e], edi
inc edx
sub ecx, dword [0x471d96]
sub ebx, dword [0x471cec]
dec edx
or dword [0x4719e8], edi
dec edi
rol eax, 0xe
call fcn.00408f40
add edi, esi