Function at 0x41b1c4
Capabilities:
Read file via mapping

Disassembly:
xor dword [0x536a75], ecx
sub esi, ebx
call fcn.0046d598
call fcn.0041ffe9
add esi, ebx
add dword [0x536812], ecx
add edx, edi
not eax
sub edx, esp
xchg eax, esi
xor eax, ebp
rol ecx, 9
not ecx
xchg ebx, edx
sub dword [0x536826], 0x7d4c311f
mov edx, 0x3d8b2422
ror eax, 0x1c
not edx
xor esi, 0xf8482609
ror esi, 0xa
call fcn.004b2417
ror eax, 0x10
or dword [0x53699e], esi
xor ebx, edx
xor eax, esp
xchg esi, eax
ror ebx, 0xe
call fcn.004ca43e
sub ecx, 0x499838f
dec ecx
call fcn.004e6a7e
neg edi
add ecx, dword [0x536cfb]
sti
insb byte es:[edi], dx
push ebx
add byte [ebx], ch
xor eax, 0x536ca6
xor dword [0x536903], ebx
xor esi, esp
neg esi
call fcn.004a7379
neg esi
xor esi, esp
add dword [0x536aae], ecx
neg edi
call fcn.004b7cf6
inc ecx
add ecx, 0x499838f
rol ebx, 0xe
xchg esi, eax
xor eax, esp
xor ebx, edx
add dword [0x536961], esi
rol eax, 0x10
rol esi, 0xa
xor esi, 0xf8482609
not edx
rol eax, 0x1c
xor edx, 0xeafd1dc8
sub ebx, dword [0x536c85]
ror ecx, 8
sub ebx, esi
xor edx, 0x24e0115a
xor esi, 0x5bb7b36c
not ebx
dec esi
add ecx, 0xb253782e
and dword [0x536acf], esi
xchg edi, edx
xchg esi, edx
xchg esi, edx
xchg edi, edx
or dword [0x5369a2], esi
sub ecx, 0xb253782e
inc esi
not ebx
xor esi, 0x5bb7b36c
xor edx, 0x24e0115a
add ebx, esi
rol ecx, 8
add edx, 0x2889c616
sub edi, dword [0x536e21]
xor ebx, esi
call fcn.004ec149
neg esi
xor eax, dword [0x536c1e]
add dword [0x536858], ecx
rol edi, 0x19
inc edx
call fcn.00421c79
dec ebx
sub edi, dword [0x536c9a]
xchg eax, edx
add edi, dword [0x536c68]
call fcn.0040b66b
call fcn.004f0810
xchg eax, edx
inc ebx
call fcn.0050f919
dec edx
ror edi, 0x19
neg esi
call fcn.004e1254
xor ebx, esi
push edx
xor ebx, esp
and dword [0x536b4e], ecx
neg edi
or edi, dword [0x536ce6]
sub dword [0x5369fe], ebx
add ecx, dword [0x536c90]
rol edx, 0x1b
xchg ecx, esi
and dword [0x536b2d], ebx
add esi, dword [0x536f43]
mov dword [0x536a7c], edi
sub eax, dword [0x536f95]
mov dword [0x536b71], ecx
add esi, 0x7e1e77b0
dec eax
xor edi, 0x1ebcf7e0
xor edx, dword [0x536c89]
call fcn.004a8d2d
call fcn.004cfd8e
xor edi, 0x1ebcf7e0
inc eax
sub esi, 0x7e1e77b0
mov dword [0x536bc7], edx
xchg ecx, esi
ror edx, 0x1b
neg edi
xor ebx, esp
mov edx, 0x8c1d64f2
sub dword [0x53680a], edx
call fcn.004b4c4f
xchg ebx, edx
sub esi, dword [0x536f9f]
and dword [0x536ab6], eax
xchg edx, eax
add edx, dword [0x536c1f]
not edx
sub edi, esp
xor ebx, 0x2b788edd
or ebx, dword [0x536fa6]
xchg esi, edx
dec ebx
or dword [0x5368f7], edi
xor ebx, dword [0x536f14]
mov dword [0x5368e2], eax
inc ebx
xchg esi, edx
xor ebx, 0x2b788edd
add edi, esp
not edx
xchg edx, eax
mov dword [0x536a65], edi
xchg ebx, edx
call fcn.0048a633
mov dword [0x536bad], eax
xor edx, 0xfdb55359
inc esi
xor edx, ecx
or edx, dword [0x536c15]
dec esi
call fcn.0047c8c7
sub edi, dword [0x536ece]
rol eax, 6
not esi
xchg esi, eax
xor esi, 0xc9fa0746
xor edi, dword [0x536f5c]
ror ebx, 0x1e
xor ecx, dword [0x536ebe]
add edi, dword [0x536f4d]
call fcn.004ba27d
call fcn.005060aa
rol ebx, 0x1e
xor esi, 0xc9fa0746
xchg esi, eax
not esi
ror eax, 6
call fcn.00487766
inc esi
xor edx, ecx
dec esi
xor edx, 0x71a837ab
xor edi, ecx
call fcn.0044fbdc
and dword [0x536a7d], edi
neg ebx
inc ebx
sub eax, 0x21255bf7
rol esi, 2
dec ecx
add esi, dword [0x536ef2]
call fcn.004d5317
or ecx, dword [0x536d5a]
not esi
or edi, dword [0x536d8c]
not esi
call fcn.00429efa
inc ecx
ror esi, 2
add eax, 0x21255bf7
dec ebx
neg ebx
add dword [0x536a82], eax
call fcn.00430b12
xor edi, ecx
push edx
not ebx
dec edi
ror ebx, 2
xchg esi, edx
sub eax, dword [0x536cc1]
not ebx
call fcn.004fe265
not esi
dec edi
add ecx, dword [0x536ed7]
add edx, dword [0x536ee4]
rol ecx, 3
xor esi, 0xe97d49cd
sub ebx, eax
dec esi
ror esi, 0x18
dec esi
xor ecx, edi
call fcn.00462ee3
xor ecx, edi
inc esi
rol esi, 0x18
inc esi
add ebx, eax
xor esi, 0xe97d49cd
ror ecx, 3
inc edi
not esi
call fcn.0050a414
not ebx
xchg esi, edx
rol ebx, 2
inc edi
not ebx
mov edi, 0x9c55ff71
xchg esi, edx
dec ecx
call fcn.0046e121
ror edx, 4
not edi
or eax, dword [0x536ef7]
xor ebx, esi
call fcn.004e6c14
not esi
rol ebx, 0xa
or ecx, dword [0x536d1f]
add esi, 0xf8ea521e
ror eax, 7
inc ebx
call fcn.004b4c4f
ror ebx, 0x1a
neg edx
call fcn.004be672
sub esi, dword [0x536d9f]
call fcn.00488f24
call fcn.00406371
neg edx
rol ebx, 0x1a
call fcn.004a1361
dec ebx
rol eax, 7
sub esi, 0xf8ea521e
ror ebx, 0xa
not esi
call fcn.004ac457
xor ebx, esi
not edi
rol edx, 4
inc ecx
xchg esi, edx
sub edi, 0x3426dbd9
not edi
call fcn.004c95db
rol edi, 0x1d
or ebx, dword [0x536ce8]
xor esi, edi
xchg edi, edx
sub dword [0x53681f], ebx
ror esi, 0x1d
sub edx, ebx
xor ebx, 0x135fbdbd
xor dword [0x536b6b], esi
ror edx, 0x1a
call fcn.004fb3a9
call fcn.004feda4
rol edx, 0x1a
xor dword [0x53695b], eax
xor ebx, 0x135fbdbd
add edx, ebx
rol esi, 0x1d
and dword [0x5368bb], edx
xchg edi, edx
xor esi, edi
ror edi, 0x1d
call fcn.0044bece
not edi
add edi, 0x97d0dc8a
inc eax
ror esi, 0xb
xor ecx, eax
add esi, 0xc92b29c6
xchg ebx, esi
sub edi, dword [0x536c11]
xor ecx, dword [0x536cf7]
neg ebx
or ecx, dword [0x536f5d]
or esi, dword [0x536d42]
add esi, dword [0x536f64]
add eax, dword [0x536c33]
or esi, dword [0x536c57]
dec eax
rol eax, 0x10
dec ebx
sub ecx, dword [0x536d33]
inc ebx
ror eax, 0x10
inc eax
neg ebx
xchg ebx, esi
sub esi, 0xc92b29c6
xor ecx, eax
rol esi, 0xb
dec eax
push edi
sub edx, edi
add dword [0x536a35], ebx
dec ecx
rol edx, 0xa
mov dword [0x536af6], ebx
or eax, dword [0x536db2]
xor edi, dword [0x536da5]
add ecx, dword [0x536e8e]
xor esi, ebx
ror eax, 0x1d
xor edi, ebp
xor dword [0x536887], esi
xchg esi, edx
not esi
xchg ecx, esi
or ecx, dword [0x536f52]
add ecx, edi
xor edx, dword [0x536e40]
xor eax, edi
sub ebx, dword [0x536f6f]
xor esi, dword [0x536c04]
call fcn.0048a273
xor eax, edi
sub ecx, edi
xchg ecx, esi
not esi
xchg esi, edx
xor dword [0x5369e0], edi
xor edi, ebp
rol eax, 0x1d
xor esi, ebx
ror edx, 0xa
inc ecx
mov dword [0x536a36], esi
add edx, edi
push eax
not edi
xor eax, 0xdc7bc48d
xor ebx, 0x3090927a
call fcn.0041879d
xor eax, edx
xchg ebx, edx
add esi, dword [0x536d4e]
sub edx, ecx
mov dword [0x536a5c], eax
xor ebx, dword [0x536e9d]
ror edi, 0x1f
call fcn.0047b251
call fcn.004f63f2
rol edi, 0x1f
add edx, ecx
xchg ebx, edx
xor eax, edx
call fcn.0046f19e
xor ebx, 0x3090927a
xor eax, 0xdc7bc48d
not edi
call dword [sym.imp.kernel32.dll_MapViewOfFile]
mov dword [0x536873], edi
dec edx
xchg edx, esi
xor ebx, 0x4ab98cb0
dec ecx
ror esi, 5
add esi, 0x2c7b3dab
sub esi, dword [0x536e86]
rol edi, 0x12
call fcn.00413306
dec edx
not ebx
sub ebx, dword [0x536e98]
call fcn.004297ff
xor esi, 0xbd1d0f85
call fcn.0040ab0b
xor esi, 0xbd1d0f85
not ebx
inc edx
call fcn.0046e0a1
ror edi, 0x12
sub esi, 0x2c7b3dab
rol esi, 5
inc ecx
xor ebx, 0x4ab98cb0
xchg edx, esi
inc edx
xor dword [0x53689b], esi
lea esi, [0x9225fe7d]
xor edx, dword [0x536c55]
neg ebx
xor ebx, 0x86f33c0
add eax, ebp
add ebx, dword [0x536ed1]
invalid