Function at 0x55aef0
Capabilities:
Delete file
Read file via mapping

Disassembly:
push edi
lea edi, [esp + 8]
and esp, 0xfffffff8
push dword [edi - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov ebx, dword fs:[0x18]
sub esp, 0xdc
mov eax, dword [sym.imp.kernel32.dll_CreateFileA]
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc0000000
mov dword [esp], str.testfile.xxx
mov dword [ebp - 0xa8], eax
call eax
sub esp, 0x1c
mov edi, eax
mov eax, 0x243
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFile_error__lu_n
mov dword [esp + 8], eax
xor eax, eax
cmp edi, 0xffffffff
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [sym.imp.kernel32.dll_SetFilePointer]
mov dword [esp], edi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x3000
mov dword [ebp - 0xac], eax
call eax
mov eax, dword [sym.imp.kernel32.dll_SetEndOfFile]
sub esp, 0x10
mov dword [esp], edi
mov dword [ebp - 0xb0], eax
call eax
mov eax, dword [sym.imp.kernel32.dll_CreateFileMappingA]
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 4
mov dword [esp + 4], 0
mov dword [esp], edi
mov dword [ebp - 0x98], eax
call eax
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x24b
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFileMapping_error__lu_n
mov dword [esp + 8], eax
mov esi, dword [ebp - 0x8c]
xor eax, eax
test esi, esi
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov esi, dword [sym.imp.kernel32.dll_MapViewOfFile]
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x24f
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_FILE_MAP_READ_error__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x84]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [sym.imp.kernel32.dll_UnmapViewOfFile]
mov dword [ebp - 0x94], eax
call eax
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x254
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_FILE_MAP_COPY_error__lu_n
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x84]
xor eax, eax
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [ebp - 0x94]
call eax
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x259
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_0_error__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x84]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [ebp - 0x94]
call eax
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov dword [ebp - 0x9c], esi
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x25e
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_FILE_MAP_WRITE_error__lu_n
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x84]
xor eax, eax
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov ecx, dword [ebp - 0x94]
call ecx
lea edx, [ebp - 0x88]
mov esi, dword [sym.imp.kernel32.dll_DuplicateHandle]
sub esp, 4
mov dword [esp + 0xc], edx
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 6
mov dword [esp + 8], 0xffffffff
mov eax, dword [ebp - 0x8c]
mov dword [esp], 0xffffffff
mov dword [esp + 4], eax
call esi
sub esp, 0x1c
mov dword [ebp - 0x90], eax
mov eax, 0x263
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.DuplicateHandle_failed_error__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x90]
mov dword [esp], edx
call fcn.0055ab70
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
mov eax, dword [ebp - 0x9c]
call eax
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x265
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_FILE_MAP_WRITE_error__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x84]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov ecx, dword [ebp - 0x94]
call ecx
mov edx, dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [ebp - 0x88]
sub esp, 4
mov dword [esp], eax
mov dword [ebp - 0x90], edx
call edx
lea ecx, [ebp - 0x88]
sub esp, 4
mov dword [esp + 0xc], ecx
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 4
mov dword [esp + 8], 0xffffffff
mov eax, dword [ebp - 0x8c]
mov dword [esp], 0xffffffff
mov dword [esp + 4], eax
call esi
sub esp, 0x1c
mov dword [ebp - 0xa0], eax
mov eax, 0x26b
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.DuplicateHandle_failed_error__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0xa0]
mov dword [esp], edx
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
mov eax, dword [ebp - 0x9c]
call eax
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x26e
call fcn.0055a4a0
mov dword [esp + 4], str.MapViewOfFile_succeeded_n
xor eax, eax
mov ecx, dword [ebp - 0x84]
test ecx, ecx
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x26f
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.Wrong_error__ld_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 5
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
mov edx, dword [ebp - 0x90]
call edx
lea ecx, [ebp - 0x88]
sub esp, 4
mov dword [esp + 0xc], ecx
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0xffffffff
mov eax, dword [ebp - 0x8c]
mov dword [esp], 0xffffffff
mov dword [esp + 4], eax
call esi
sub esp, 0x1c
mov dword [ebp - 0xa0], eax
mov eax, 0x272
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.DuplicateHandle_failed_error__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0xa0]
mov dword [esp], edx
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
mov eax, dword [ebp - 0x9c]
call eax
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x275
call fcn.0055a4a0
mov dword [esp + 4], str.MapViewOfFile_succeeded_n
xor eax, eax
mov edx, dword [ebp - 0x84]
test edx, edx
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x276
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.Wrong_error__ld_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 5
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
mov edx, dword [ebp - 0x90]
call edx
lea ecx, [ebp - 0x88]
sub esp, 4
mov dword [esp + 0xc], ecx
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 4
mov dword [esp + 8], 0xffffffff
mov eax, dword [ebp - 0x8c]
mov dword [esp], 0xffffffff
mov dword [esp + 4], eax
call esi
sub esp, 0x1c
mov esi, eax
mov eax, 0x27a
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], esi
mov dword [esp + 4], str.DuplicateHandle_failed_error__lu_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
mov esi, dword [ebp - 0x9c]
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x27c
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_NO_ACCESS_error__lu_n
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x84]
xor eax, eax
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov ecx, dword [ebp - 0x94]
call ecx
mov eax, dword [ebp - 0x88]
sub esp, 4
mov dword [esp], eax
mov edx, dword [ebp - 0x90]
call edx
mov eax, dword [ebp - 0x8c]
sub esp, 4
mov dword [esp], eax
mov edx, dword [ebp - 0x90]
call edx
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 2
mov dword [esp + 4], 0
mov dword [esp], edi
mov eax, dword [ebp - 0x98]
call eax
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x286
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFileMapping_error__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x8c]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x28a
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_FILE_MAP_READ_error__lu_n
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x84]
xor eax, eax
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov ecx, dword [ebp - 0x94]
call ecx
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x28f
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_FILE_MAP_COPY_error__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x84]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov ecx, dword [ebp - 0x94]
call ecx
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x294
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_0_error__lu_n
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x84]
xor eax, eax
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov ecx, dword [ebp - 0x94]
call ecx
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x299
call fcn.0055a4a0
mov dword [esp + 4], str.MapViewOfFile_FILE_MAP_WRITE_succeeded_n
xor eax, eax
mov esi, dword [ebp - 0x84]
test esi, esi
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x29a
call fcn.0055a4a0
mov edx, dword [ebx + 0x34]
mov eax, 1
cmp edx, 0x57
je 0x55b8df
xor eax, eax
cmp edx, 5
sete al
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [esp + 4], str.Wrong_error__ld_n
mov ebx, dword fs:[0x18]
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov eax, dword [ebp - 0x90]
call eax
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 8
mov dword [esp + 4], 0
mov dword [esp], edi
mov eax, dword [ebp - 0x98]
call eax
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x2a2
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFileMapping_error__lu_n
mov dword [esp + 8], eax
mov esi, dword [ebp - 0x8c]
xor eax, eax
test esi, esi
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov esi, dword [ebp - 0x9c]
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x2a6
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_FILE_MAP_READ_error__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x84]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [ebp - 0x94]
call eax
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x2ab
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_FILE_MAP_COPY_error__lu_n
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x84]
xor eax, eax
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [ebp - 0x94]
call eax
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x2b0
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_0_error__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x84]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [ebp - 0x94]
call eax
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x2b5
call fcn.0055a4a0
mov dword [esp + 4], str.MapViewOfFile_FILE_MAP_WRITE_succeeded_n
xor eax, eax
mov ecx, dword [ebp - 0x84]
test ecx, ecx
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x2b6
call fcn.0055a4a0
mov edx, dword [ebx + 0x34]
mov eax, 1
cmp edx, 0x57
je 0x55bb7d
xor eax, eax
cmp edx, 5
sete al
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [esp + 4], str.Wrong_error__ld_n
mov ebx, dword fs:[0x18]
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov esi, dword [ebp - 0x90]
call esi
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], edi
mov eax, dword [ebp - 0x98]
call eax
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x2be
call fcn.0055a4a0
mov dword [esp + 4], str.CreateFileMappingA_succeeded_n
xor eax, eax
mov edx, dword [ebp - 0x8c]
test edx, edx
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x2bf
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.Wrong_error__ld_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 0x57
sete al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp], edi
call esi
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x80000000
mov dword [esp], str.testfile.xxx
mov ecx, dword [ebp - 0xa8]
call ecx
sub esp, 0x1c
mov esi, eax
mov eax, 0x2c6
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFile_error__lu_n
mov dword [esp + 8], eax
xor eax, eax
cmp esi, 0xffffffff
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 4
mov dword [esp + 4], 0
mov dword [esp], esi
mov eax, dword [ebp - 0x98]
call eax
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x2ca
call fcn.0055a4a0
mov dword [esp + 4], str.CreateFileMapping_PAGE_READWRITE_succeeded_n
xor eax, eax
mov ecx, dword [ebp - 0x8c]
test ecx, ecx
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x2cb
call fcn.0055a4a0
mov edx, dword [ebx + 0x34]
mov eax, 1
cmp edx, 0x57
je 0x55bd45
xor eax, eax
cmp edx, 5
sete al
mov dword [esp + 8], edx
mov dword [esp + 4], str.Wrong_error__ld_n
mov dword [esp], eax
mov ebx, dword fs:[0x18]
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp], esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 8
mov dword [esp + 4], 0
mov edi, dword [ebp - 0x98]
call edi
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x2d0
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFileMapping_PAGE_WRITECOPY_error__lu_n
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x8c]
xor eax, eax
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov eax, dword [ebp - 0x90]
call eax
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp], esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 2
mov dword [esp + 4], 0
call edi
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x2d5
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFileMapping_PAGE_READONLY_error__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x8c]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov eax, dword [ebp - 0x90]
call eax
sub esp, 4
mov dword [esp], esi
mov eax, dword [ebp - 0x90]
call eax
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], str.testfile.xxx
mov eax, dword [ebp - 0xa8]
call eax
sub esp, 0x1c
mov esi, eax
mov eax, 0x2dd
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFile_error__lu_n
mov dword [esp + 8], eax
xor eax, eax
cmp esi, 0xffffffff
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 4
mov dword [esp + 4], 0
mov dword [esp], esi
call edi
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x2e1
call fcn.0055a4a0
mov dword [esp + 4], str.CreateFileMapping_PAGE_READWRITE_succeeded_n
xor eax, eax
mov ecx, dword [ebp - 0x8c]
test ecx, ecx
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x2e2
call fcn.0055a4a0
mov edx, dword [ebx + 0x34]
mov eax, 1
cmp edx, 0x57
je 0x55bf69
xor eax, eax
cmp edx, 5
sete al
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [esp + 4], str.Wrong_error__ld_n
mov ebx, dword fs:[0x18]
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 8
mov dword [esp + 4], 0
mov dword [esp], esi
mov eax, dword [ebp - 0x98]
call eax
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x2e7
call fcn.0055a4a0
mov dword [esp + 4], str.CreateFileMapping_PAGE_WRITECOPY_succeeded_n
xor eax, eax
mov edx, dword [ebp - 0x8c]
test edx, edx
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x2e8
call fcn.0055a4a0
mov edx, dword [ebx + 0x34]
mov eax, 1
cmp edx, 0x57
je 0x55c00d
xor eax, eax
cmp edx, 5
sete al
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [esp + 4], str.Wrong_error__ld_n
mov ebx, dword fs:[0x18]
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x1000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 2
mov dword [esp + 4], 0
mov dword [esp], esi
mov eax, dword [ebp - 0x98]
call eax
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x2ed
call fcn.0055a4a0
mov dword [esp + 4], str.CreateFileMapping_PAGE_READONLY_succeeded_n
xor eax, eax
mov edi, dword [ebp - 0x8c]
test edi, edi
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x2ee
call fcn.0055a4a0
mov edx, dword [ebx + 0x34]
mov eax, 1
cmp edx, 0x57
je 0x55c0b1
xor eax, eax
cmp edx, 5
sete al
mov dword [esp + 8], edx
mov edi, 1
mov dword [esp], eax
mov dword [esp + 4], str.Wrong_error__ld_n
mov ebx, dword fs:[0x18]
call fcn.0055ab70
mov dword [esp], esi
mov eax, dword [ebp - 0x90]
mov esi, str.LocalFoo
call eax
mov eax, dword [sym.imp.kernel32.dll_DeleteFileA]
sub esp, 4
mov dword [esp], str.testfile.xxx
mov dword [ebp - 0xb8], eax
call eax
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x14], str.LocalFoo
mov dword [esp + 0x10], 0xffa
mov dword [esp + 0xc], 0
mov dword [esp + 8], 4
mov dword [esp + 4], 0
mov dword [esp], 0xffffffff
mov eax, dword [ebp - 0x98]
call eax
sub esp, 0x18
mov ecx, eax
test eax, eax
je 0x5602a8
mov eax, 0x2fd
mov dword [ebp - 0xb4], ecx
mov ebx, dword fs:[0x18]
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], edi
mov dword [esp + 4], str.CreateFileMapping_PAGE_READWRITE_error__lu_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, dword [sym.imp.kernel32.dll_OpenFileMappingA]
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov dword [esp], 4
mov dword [ebp - 0xa4], eax
call eax
sub esp, 0xc
mov dword [ebp - 0x8c], eax
mov eax, 0x301
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.OpenFileMapping_FILE_MAP_READ_error__lu_n
mov dword [esp + 8], eax
mov edi, dword [ebp - 0x8c]
xor eax, eax
test edi, edi
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov edi, dword [ebp - 0x9c]
call edi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x304
call fcn.0055a4a0
mov dword [esp + 4], str.MapViewOfFile_FILE_MAP_WRITE_succeeded_n
xor eax, eax
mov edx, dword [ebp - 0x84]
test edx, edx
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x305
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.Wrong_error__ld_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 5
sete al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov dword [ebp - 0x9c], edi
call edi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x308
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_FILE_MAP_READ_error__lu_n
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x84]
xor eax, eax
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.0055ab70
lea ecx, [ebp - 0x5c]
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1c
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [sym.imp.kernel32.dll_VirtualQuery]
mov dword [ebp - 0xa0], eax
call eax
sub esp, 0xc
mov dword [ebp - 0x80], eax
mov eax, 0x30b
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.VirtualQuery_error__lu_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebp - 0x80], 0x1c
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x30d
call fcn.0055a4a0
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x5c]
mov dword [esp + 4], str._p____p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x30e
call fcn.0055a4a0
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x58]
mov dword [esp + 4], str._p____p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x30f
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], str._lx___PAGE_READONLY_n
cmp eax, 2
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x310
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 4], str._Ix___4096_n
cmp eax, 0x1000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x311
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], 0x5fdd42
cmp eax, 0x1000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x312
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str._lx___PAGE_READONLY_n
cmp eax, 2
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov ecx, dword [ebp - 0x94]
call ecx
lea ecx, [ebp - 0x7c]
sub esp, 4
mov dword [esp + 0x10], ecx
lea ecx, [ebp - 0x70]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0x10
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov edi, eax
mov eax, 0x316
call fcn.0055a4a0
xor eax, eax
cmp edi, 0xc0000022
mov dword [esp + 8], edi
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov ecx, dword [ebp - 0x90]
call ecx
sub esp, 4
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov dword [esp], 5
mov edx, dword [ebp - 0xa4]
call edx
sub esp, 0xc
mov dword [ebp - 0x8c], eax
mov eax, 0x319
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.OpenFileMapping_FILE_MAP_READ_error__lu_n
mov dword [esp + 8], eax
mov edi, dword [ebp - 0x8c]
xor eax, eax
test edi, edi
setne al
mov dword [esp], eax
call fcn.0055ab70
lea edx, [ebp - 0x7c]
mov dword [ebp - 0x7c], 0xbeef0000
mov dword [esp + 0x10], edx
lea edx, [ebp - 0x70]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x10
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov edi, eax
mov eax, 0x31d
call fcn.0055a4a0
xor eax, eax
test edi, edi
mov dword [esp + 8], edi
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x31e
call fcn.0055a4a0
mov eax, dword [ebp - 0x7c]
mov dword [esp + 4], str.NtQuerySection_wrong_size__Iu_n
cmp eax, 0x10
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x31f
call fcn.0055a4a0
mov eax, dword [ebp - 0x6c]
mov dword [esp + 4], str.NtQuerySection_wrong_attr__08lx_n
cmp eax, 0x8000000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x321
call fcn.0055a4a0
mov eax, dword [ebp - 0x70]
mov dword [esp + 4], str.NtQuerySection_wrong_base__p_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x322
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 0x10], eax
mov edx, dword [ebp - 0x68]
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x64]
mov dword [esp + 4], str.NtQuerySection_wrong_size__lx_08lx____08Ix_n
mov dword [esp + 8], edx
xor edx, edx
xor eax, dword [ebp - 0x68]
xor edx, dword [ebp - 0x64]
or eax, edx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov ecx, dword [ebp - 0x90]
call ecx
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov dword [esp], 2
mov edx, dword [ebp - 0xa4]
call edx
sub esp, 0xc
mov dword [ebp - 0x8c], eax
mov eax, 0x328
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.OpenFileMapping_FILE_MAP_WRITE_error__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x8c]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov edi, dword [ebp - 0x9c]
call edi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x32b
call fcn.0055a4a0
mov dword [esp + 4], str.MapViewOfFile_succeeded_n
xor eax, eax
mov ecx, dword [ebp - 0x84]
test ecx, ecx
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x32c
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.Wrong_error__ld_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 5
sete al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov dword [ebp - 0x9c], edi
call edi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x32f
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_FILE_MAP_WRITE_error__lu_n
mov dword [esp + 8], eax
mov edi, dword [ebp - 0x84]
xor eax, eax
test edi, edi
setne al
mov dword [esp], eax
call fcn.0055ab70
lea ecx, [ebp - 0x5c]
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1c
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [ebp - 0xa0]
call eax
sub esp, 0xc
mov dword [ebp - 0x80], eax
mov eax, 0x332
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.VirtualQuery_error__lu_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebp - 0x80], 0x1c
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x334
call fcn.0055a4a0
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x5c]
mov dword [esp + 4], str._p____p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x335
call fcn.0055a4a0
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x58]
mov dword [esp + 4], str._p____p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x336
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], 0x5fde2e
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x337
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 4], str._Ix___4096_n
cmp eax, 0x1000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x338
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], 0x5fdd42
cmp eax, 0x1000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x339
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], 0x5fde2e
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov ecx, dword [ebp - 0x94]
call ecx
lea ecx, [ebp - 0x7c]
sub esp, 4
mov dword [esp + 0x10], ecx
lea ecx, [ebp - 0x70]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0x10
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov edi, eax
mov eax, 0x33d
call fcn.0055a4a0
xor eax, eax
cmp edi, 0xc0000022
mov dword [esp + 8], edi
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov edi, dword [ebp - 0x90]
call edi
sub esp, 4
mov dword [esp + 8], esi
lea esi, [ebp - 0x7c]
mov dword [esp + 4], 0
mov dword [esp], 3
mov edx, dword [ebp - 0xa4]
call edx
sub esp, 0xc
mov dword [ebp - 0x8c], eax
mov eax, 0x341
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.OpenFileMapping_FILE_MAP_WRITE_error__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x8c]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 0x10], esi
lea esi, [ebp - 0x70]
mov dword [esp + 8], esi
mov dword [esp + 0xc], 0x10
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov esi, eax
mov eax, 0x344
call fcn.0055a4a0
xor eax, eax
test esi, esi
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x345
call fcn.0055a4a0
mov eax, dword [ebp - 0x7c]
mov dword [esp + 4], str.NtQuerySection_wrong_size__Iu_n
cmp eax, 0x10
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x346
call fcn.0055a4a0
mov eax, dword [ebp - 0x6c]
mov dword [esp + 4], str.NtQuerySection_wrong_attr__08lx_n
cmp eax, 0x8000000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x348
call fcn.0055a4a0
mov eax, dword [ebp - 0x70]
mov dword [esp + 4], str.NtQuerySection_wrong_base__p_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x349
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 0x10], eax
mov edx, dword [ebp - 0x68]
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x64]
mov dword [esp + 4], str.NtQuerySection_wrong_size__lx_08lx____08Ix_n
mov dword [esp + 8], edx
xor edx, edx
xor eax, dword [ebp - 0x68]
xor edx, dword [ebp - 0x64]
or eax, edx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call edi
mov ecx, dword [ebp - 0xb4]
sub esp, 4
mov dword [esp], ecx
mov dword [ebp - 0x90], edi
call edi
sub esp, 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x100000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x4000004
mov dword [esp + 4], 0
mov dword [esp], 0xffffffff
mov edx, dword [ebp - 0x98]
call edx
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x351
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFileMappingA_failed_with_error__ld_n
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x8c]
xor eax, eax
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.0055ab70
lea edx, [ebp - 0x70]
mov dword [esp + 0x10], 0
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x10
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov esi, eax
mov eax, 0x354
call fcn.0055a4a0
xor eax, eax
test esi, esi
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x355
call fcn.0055a4a0
mov eax, dword [ebp - 0x6c]
mov dword [esp + 4], str.NtQuerySection_wrong_attr__08lx_n
cmp eax, 0x4000000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x357
call fcn.0055a4a0
mov eax, dword [ebp - 0x70]
mov dword [esp + 4], str.NtQuerySection_wrong_base__p_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x358
call fcn.0055a4a0
mov dword [esp + 0x10], 0x100000
mov eax, dword [ebp - 0x68]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x64]
mov dword [esp + 4], str.NtQuerySection_wrong_size__lx_08lx____08x_n
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x68]
mov edx, dword [ebp - 0x64]
xor eax, 0x100000
or eax, edx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov edi, dword [ebp - 0x9c]
call edi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x35c
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_failed_with_error__ld_n
mov dword [esp + 8], eax
mov esi, dword [ebp - 0x84]
xor eax, eax
test esi, esi
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov dword [ebp - 0x9c], edi
call edi
mov esi, eax
sub esp, 0x14
mov eax, 0x35f
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_failed_with_error__ld_n
mov dword [esp + 8], eax
xor eax, eax
test esi, esi
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x360
call fcn.0055a4a0
mov dword [esp + 4], str.MapViewOfFile_returned_same_pointer_n
xor eax, eax
cmp dword [ebp - 0x84], esi
setne al
mov dword [esp], eax
call fcn.0055ab70
lea edx, [ebp - 0x5c]
mov dword [esp + 8], 0x1c
mov dword [esp + 4], edx
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [ebp - 0xa0]
call eax
sub esp, 0xc
mov edi, eax
mov eax, 0x363
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], edi
mov dword [esp + 4], str.VirtualQuery_failed_with_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, 0x364
call fcn.0055a4a0
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x84]
mov dword [esp + 4], str.BaseAddress_should_have_been__p_but_was__p_instead_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x365
call fcn.0055a4a0
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x84]
mov dword [esp + 4], str.AllocationBase_should_have_been__p_but_was__p_instead_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x366
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 8], 0x100000
mov dword [esp + 4], str.RegionSize_should_have_been_0x_x_but_was_0x_Ix_n
cmp eax, 0x100000
mov dword [esp + 0xc], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x367
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], str.State_should_have_been_MEM_RESERVE_instead_of_0x_lx_n
cmp eax, 0x2000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x368
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], str.AllocationProtect_should_have_been_PAGE_READWRITE_but_was_0x_lx_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x36a
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.Protect_should_have_been_0_instead_of_0x_lx_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x36b
call fcn.0055a4a0
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], str.Type_should_have_been_MEM_MAPPED_instead_of_0x_lx_n
cmp eax, 0x40000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
lea edx, [ebp - 0x5c]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], 0x1c
mov eax, dword [ebp - 0xa0]
call eax
sub esp, 0xc
mov edi, eax
mov eax, 0x36e
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], edi
mov dword [esp + 4], str.VirtualQuery_failed_with_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, 0x36f
call fcn.0055a4a0
mov eax, dword [ebp - 0x5c]
mov dword [esp + 8], esi
mov dword [esp + 4], str.BaseAddress_should_have_been__p_but_was__p_instead_n
cmp eax, esi
mov dword [esp + 0xc], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x371
call fcn.0055a4a0
mov eax, dword [ebp - 0x58]
mov dword [esp + 8], esi
mov dword [esp + 4], str.AllocationBase_should_have_been__p_but_was__p_instead_n
cmp eax, esi
mov dword [esp + 0xc], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x373
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], str.AllocationProtect_should_have_been_PAGE_READWRITE_but_was_0x_lx_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x375
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 8], 0x100000
mov dword [esp + 4], str.RegionSize_should_have_been_0x_x_but_was_0x_Ix_n
cmp eax, 0x100000
mov dword [esp + 0xc], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x377
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], str.State_should_have_been_MEM_RESERVE_instead_of_0x_lx_n
cmp eax, 0x2000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x378
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.Protect_should_have_been_0_instead_of_0x_lx_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x379
call fcn.0055a4a0
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], str.Type_should_have_been_MEM_MAPPED_instead_of_0x_lx_n
cmp eax, 0x40000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 0xc], 2
mov edi, dword [sym.imp.kernel32.dll_VirtualAlloc]
mov dword [esp + 8], 0x1000
mov dword [esp + 4], 0x10000
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
call edi
sub esp, 0x10
mov dword [ebp - 0x84], eax
mov eax, 0x37c
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.VirtualAlloc_failed_with_error__ld_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x84]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
lea edx, [ebp - 0x5c]
mov dword [esp + 8], 0x1c
mov dword [esp + 4], edx
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [ebp - 0xa0]
call eax
sub esp, 0xc
mov dword [ebp - 0xb4], eax
mov eax, 0x37f
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.VirtualQuery_failed_with_error__ld_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0xb4]
mov dword [esp], edx
call fcn.0055ab70
mov eax, 0x380
call fcn.0055a4a0
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x84]
mov dword [esp + 4], str.BaseAddress_should_have_been__p_but_was__p_instead_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x381
call fcn.0055a4a0
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x84]
mov dword [esp + 4], str.AllocationBase_should_have_been__p_but_was__p_instead_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x382
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 4], str.RegionSize_should_have_been_0x10000_but_was_0x_Ix_n
cmp eax, 0x10000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x383
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], str.State_should_have_been_MEM_COMMIT_instead_of_0x_lx_n
cmp eax, 0x1000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x384
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.Protect_should_have_been_PAGE_READONLY_instead_of_0x_lx_n
cmp eax, 2
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x385
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], str.AllocationProtect_should_have_been_PAGE_READWRITE_but_was_0x_lx_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x387
call fcn.0055a4a0
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], str.Type_should_have_been_MEM_MAPPED_instead_of_0x_lx_n
cmp eax, 0x40000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
lea edx, [ebp - 0x5c]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], 0x1c
mov eax, dword [ebp - 0xa0]
call eax
sub esp, 0xc
mov dword [ebp - 0xb4], eax
mov eax, 0x38d
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.VirtualQuery_failed_with_error__ld_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0xb4]
mov dword [esp], edx
call fcn.0055ab70
mov eax, 0x38e
call fcn.0055a4a0
mov eax, dword [ebp - 0x5c]
mov dword [esp + 8], esi
mov dword [esp + 4], str.BaseAddress_should_have_been__p_but_was__p_instead_n
cmp eax, esi
mov dword [esp + 0xc], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x390
call fcn.0055a4a0
mov eax, dword [ebp - 0x58]
mov dword [esp + 8], esi
mov dword [esp + 4], str.AllocationBase_should_have_been__p_but_was__p_instead_n
cmp eax, esi
mov dword [esp + 0xc], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x392
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], str.AllocationProtect_should_have_been_PAGE_READWRITE_but_was_0x_lx_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x394
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 4], str.RegionSize_should_have_been_0x10000_but_was_0x_Ix_n
cmp eax, 0x10000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x396
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], str.State_should_have_been_MEM_COMMIT_instead_of_0x_lx_n
cmp eax, 0x1000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x398
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.Protect_should_have_been_PAGE_READWRITE_instead_of_0x_lx_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x39a
call fcn.0055a4a0
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], str.Type_should_have_been_MEM_MAPPED_instead_of_0x_lx_n
cmp eax, 0x40000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0x80000
mov dword [esp + 4], 0x100000
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
call edi
sub esp, 0x10
mov dword [ebp - 0xb4], eax
mov eax, 0x39d
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.VirtualAlloc_failed_with_error__lu_n
mov dword [esp + 8], eax
xor eax, eax
mov edx, dword [ebp - 0xb4]
cmp dword [ebp - 0x84], edx
sete al
mov dword [esp], eax
call fcn.0055ab70
mov edx, dword [sym.imp.kernel32.dll_VirtualFree]
mov dword [esp + 8], 0x4000
mov dword [esp + 4], 0x10000
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov dword [ebp - 0xb4], edx
call edx
sub esp, 0xc
mov dword [ebp - 0xbc], eax
mov eax, 0x3a0
call fcn.0055a4a0
mov dword [esp + 4], str.VirtualFree_succeeded_n
xor eax, eax
mov edx, dword [ebp - 0xbc]
test edx, edx
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3a1
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.VirtualFree_failed_with__lu_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 0x57
sete al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp], esi
mov edx, dword [ebp - 0x94]
call edx
sub esp, 4
mov esi, eax
mov eax, 0x3a4
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], esi
mov dword [esp + 4], str.UnmapViewOfFile_failed_with_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov edx, dword [ebp - 0x94]
call edx
sub esp, 4
mov esi, eax
mov eax, 0x3a6
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], esi
mov dword [esp + 4], str.UnmapViewOfFile_failed_with_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov esi, dword [ebp - 0x90]
call esi
lea esi, [ebp - 0x70]
sub esp, 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x100000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x8000004
mov dword [esp + 4], 0
mov dword [esp], 0xffffffff
mov ecx, dword [ebp - 0x98]
call ecx
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x3ab
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFileMappingA_failed_with_error__ld_n
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x8c]
xor eax, eax
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 8], esi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x10
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov esi, eax
mov eax, 0x3ae
call fcn.0055a4a0
xor eax, eax
test esi, esi
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3af
call fcn.0055a4a0
mov eax, dword [ebp - 0x6c]
mov dword [esp + 4], str.NtQuerySection_wrong_attr__08lx_n
cmp eax, 0x8000000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3b1
call fcn.0055a4a0
mov eax, dword [ebp - 0x70]
mov dword [esp + 4], str.NtQuerySection_wrong_base__p_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3b2
call fcn.0055a4a0
mov dword [esp + 0x10], 0x100000
mov eax, dword [ebp - 0x68]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x64]
mov dword [esp + 4], str.NtQuerySection_wrong_size__lx_08lx____08x_n
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x68]
mov edx, dword [ebp - 0x64]
xor eax, 0x100000
or eax, edx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov ecx, dword [ebp - 0x9c]
call ecx
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x3b6
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_failed_with_error__ld_n
mov dword [esp + 8], eax
mov esi, dword [ebp - 0x84]
xor eax, eax
test esi, esi
setne al
mov dword [esp], eax
call fcn.0055ab70
lea ecx, [ebp - 0x5c]
mov dword [esp + 8], 0x1c
mov dword [esp + 4], ecx
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [ebp - 0xa0]
call eax
sub esp, 0xc
mov esi, eax
mov eax, 0x3b9
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], esi
mov dword [esp + 4], str.VirtualQuery_failed_with_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, 0x3ba
call fcn.0055a4a0
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x84]
mov dword [esp + 4], str.wrong_BaseAddress__p__p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3bb
call fcn.0055a4a0
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x84]
mov dword [esp + 4], str.wrong_AllocationBase__p__p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3bc
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 4], str.wrong_RegionSize_0x_Ix_n
cmp eax, 0x100000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3bd
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], str.wrong_State_0x_lx_n
cmp eax, 0x1000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3be
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], str.wrong_AllocationProtect_0x_lx_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3bf
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.wrong_Protect_0x_lx_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3c0
call fcn.0055a4a0
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], str.wrong_Type_0x_lx_n
cmp eax, 0x40000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0x1000
mov dword [esp + 4], 0x10000
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
call edi
sub esp, 0x10
mov dword [ebp - 0x84], eax
mov eax, 0x3c3
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.VirtualAlloc_failed_with_error__ld_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x84]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
lea ecx, [ebp - 0x5c]
mov dword [esp + 8], 0x1c
mov dword [esp + 4], ecx
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [ebp - 0xa0]
call eax
sub esp, 0xc
mov esi, eax
mov eax, 0x3c6
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], esi
mov dword [esp + 4], str.VirtualQuery_failed_with_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, 0x3c7
call fcn.0055a4a0
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x84]
mov dword [esp + 4], str.wrong_BaseAddress__p__p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3c8
call fcn.0055a4a0
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x84]
mov dword [esp + 4], str.wrong_AllocationBase__p__p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3c9
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 4], str.wrong_RegionSize_0x_Ix_n
cmp eax, 0x10000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3ca
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], str.wrong_State_0x_lx_n
cmp eax, 0x1000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3cb
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], str.wrong_AllocationProtect_0x_lx_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3cc
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.wrong_Protect_0x_lx_n
cmp eax, 2
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3cd
call fcn.0055a4a0
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], str.wrong_Type_0x_lx_n
cmp eax, 0x40000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0x80000
mov dword [esp + 4], 0x100000
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
call edi
sub esp, 0x10
mov esi, eax
mov eax, 0x3d0
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.VirtualAlloc_failed_with_error__lu_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebp - 0x84], esi
sete al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 8], 0x4000
mov dword [esp + 4], 0x10000
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [ebp - 0xb4]
call eax
sub esp, 0xc
mov esi, eax
mov eax, 0x3d3
call fcn.0055a4a0
xor eax, eax
test esi, esi
mov dword [esp + 4], str.VirtualFree_succeeded_n
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3d4
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.VirtualFree_failed_with__lu_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 0x57
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov edx, dword [ebp - 0x94]
call edx
sub esp, 4
mov esi, eax
mov eax, 0x3d7
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], esi
mov dword [esp + 4], str.UnmapViewOfFile_failed_with_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov esi, dword [ebp - 0x90]
call esi
sub esp, 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x100000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x18000004
mov dword [esp + 4], 0
mov dword [esp], 0xffffffff
mov ecx, dword [ebp - 0x98]
call ecx
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x3dd
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFileMappingA_failed_with_error__ld_n
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x8c]
xor eax, eax
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.0055ab70
lea eax, [ebp - 0x70]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov ebx, eax
mov eax, 0x3e0
call fcn.0055a4a0
xor eax, eax
test ebx, ebx
mov dword [esp + 8], ebx
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3e1
call fcn.0055a4a0
mov edx, dword [ebp - 0x6c]
mov eax, 1
cmp edx, 0x18000000
je 0x55dc57
mov ecx, dword [0x8f0770]
test ecx, ecx
sete cl
xor eax, eax
cmp edx, 0x8000000
sete al
and eax, ecx
mov dword [esp + 8], edx
mov dword [esp + 4], str.NtQuerySection_wrong_attr__08lx_n
mov dword [esp], eax
call fcn.0055ab70
test byte [ebp - 0x69], 0x10
jne 0x55fe70
mov eax, dword [ebp - 0x8c]
mov ebx, dword fs:[0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x90]
call eax
sub esp, 4
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0x1000
mov dword [esp + 4], 0x10000
mov dword [esp], 0
call edi
sub esp, 0x10
mov esi, eax
mov eax, 0x408
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.VirtualAlloc_failed_with_error__lu_n
mov dword [esp + 8], eax
xor eax, eax
test esi, esi
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov eax, 0x40b
call fcn.0055a4a0
mov dword [esp], esi
mov edi, dword [ebp - 0x94]
call edi
sub esp, 4
test eax, eax
sete al
mov dword [esp + 4], str.UnmapViewOfFile_should_fail_on_VirtualAlloc_mem_n
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x40c
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.got__lu__expected_ERROR_INVALID_ADDRESS_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 0x1e7
sete al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov eax, 0x40f
call fcn.0055a4a0
lea eax, [esi + 0x3000]
mov dword [esp], eax
call edi
sub esp, 4
test eax, eax
sete al
mov dword [esp + 4], str.UnmapViewOfFile_should_fail_on_VirtualAlloc_mem_n
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x410
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.got__lu__expected_ERROR_INVALID_ADDRESS_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 0x1e7
sete al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov eax, 0x413
call fcn.0055a4a0
mov dword [esp], 0xdeadbeef
call edi
sub esp, 4
test eax, eax
sete al
mov dword [esp + 4], str.UnmapViewOfFile_should_fail_on_VirtualAlloc_mem_n
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x414
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.got__lu__expected_ERROR_INVALID_ADDRESS_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 0x1e7
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x417
call fcn.0055a4a0
mov dword [esp], esi
mov dword [esp + 8], 0x8000
mov dword [esp + 4], 0
mov ecx, dword [ebp - 0xb4]
call ecx
sub esp, 0xc
mov dword [esp + 4], str.VirtualFree_failed_n
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x14], 0x5fda48
mov dword [esp + 0x10], 0x100000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 4
mov dword [esp + 4], 0
mov dword [esp], 0xffffffff
mov ecx, dword [ebp - 0x98]
call ecx
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x41d
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFileMappingA_failed_with_error__ld_n
mov dword [esp + 8], eax
mov esi, dword [ebp - 0x8c]
xor eax, eax
test esi, esi
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov ecx, dword [ebp - 0x9c]
call ecx
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x420
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_failed_with_error__ld_n
mov dword [esp + 8], eax
mov edi, dword [ebp - 0x84]
xor eax, eax
test edi, edi
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 8], 0x5fda48
mov dword [esp + 4], 0
mov dword [esp], 4
mov ecx, dword [ebp - 0xa4]
call ecx
sub esp, 0xc
mov dword [ebp - 0x88], eax
mov eax, 0x423
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.OpenFileMappingA_failed_with_error__ld_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x88]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x88]
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp], eax
mov edi, dword [ebp - 0x90]
call edi
sub esp, 4
mov esi, eax
mov eax, 0x426
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], esi
mov dword [esp + 4], str.CloseHandle_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp], eax
mov dword [ebp - 0x90], edi
call edi
sub esp, 4
mov esi, eax
mov eax, 0x429
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], esi
mov dword [esp + 4], str.CloseHandle_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov dword [esp + 4], 0x100000
mov eax, dword [ebp - 0x84]
mov esi, dword [sym.imp.kernel32.dll_IsBadReadPtr]
mov dword [esp], eax
call esi
sub esp, 8
mov edi, eax
mov eax, 0x42c
call fcn.0055a4a0
xor eax, eax
test edi, edi
mov dword [esp + 4], str.memory_is_not_accessible_n
sete al
mov dword [esp], eax
call fcn.0055ab70
lea eax, [ebp - 0x5c]
mov dword [esp + 8], 0x1c
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [ebp - 0xa0]
call eax
sub esp, 0xc
mov edi, eax
mov eax, 0x42f
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.VirtualQuery_error__ld_n
mov dword [esp], edi
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, 0x430
call fcn.0055a4a0
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x5c]
mov dword [esp + 4], str.got__p___expected__p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x431
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 0xc], 0x100000
mov dword [esp + 4], str.got__Ix___expected__x_n
cmp eax, 0x100000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x432
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.got__lx___expected_PAGE_READWRITE_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x433
call fcn.0055a4a0
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x58]
mov dword [esp + 4], str._p____p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x434
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], str._lx___PAGE_READWRITE_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x435
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], str._lx___MEM_COMMIT_n
cmp eax, 0x1000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x436
call fcn.0055a4a0
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], str._lx___MEM_MAPPED_n
cmp eax, 0x40000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 8], 0x5fda48
mov dword [esp + 4], 0
mov dword [esp], 4
mov ecx, dword [ebp - 0xa4]
call ecx
sub esp, 0xc
mov dword [ebp - 0x88], eax
mov eax, 0x43a
call fcn.0055a4a0
mov dword [esp + 4], str.OpenFileMappingA_succeeded_n
xor eax, eax
mov ecx, dword [ebp - 0x88]
test ecx, ecx
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x43b
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.OpenFileMappingA_set_error__ld_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 2
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x88]
test eax, eax
je 0x55e260
mov dword [esp], eax
mov edi, dword [ebp - 0x90]
call edi
sub esp, 4
mov ebx, dword fs:[0x18]
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x14], 0x5fda48
mov dword [esp + 0x10], 0x100000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 4
mov dword [esp + 4], 0
mov dword [esp], 0xffffffff
mov eax, dword [ebp - 0x98]
call eax
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x43f
call fcn.0055a4a0
mov dword [esp + 4], str.CreateFileMappingA_failed_n
xor eax, eax
mov edx, dword [ebp - 0x8c]
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x440
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFileMappingA_set_error__ld_n
mov dword [esp + 8], eax
mov ecx, dword [ebx + 0x34]
xor eax, eax
test ecx, ecx
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp], eax
mov eax, dword [ebp - 0x90]
call eax
sub esp, 4
mov edi, eax
mov eax, 0x443
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], edi
mov dword [esp + 4], str.CloseHandle_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov dword [esp + 4], 0x100000
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
call esi
sub esp, 8
mov edi, eax
mov eax, 0x446
call fcn.0055a4a0
xor eax, eax
test edi, edi
mov dword [esp + 4], str.memory_is_not_accessible_n
sete al
lea edi, [ebp - 0x5c]
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 8], 0x1c
mov dword [esp + 4], edi
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov edi, dword [ebp - 0xa0]
call edi
sub esp, 0xc
mov edi, eax
mov eax, 0x449
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], edi
mov dword [esp + 4], str.VirtualQuery_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, 0x44a
call fcn.0055a4a0
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x5c]
mov dword [esp + 4], str.got__p___expected__p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x44b
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 0xc], 0x100000
mov dword [esp + 4], str.got__Ix___expected__x_n
cmp eax, 0x100000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x44c
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.got__lx___expected_PAGE_READWRITE_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x44d
call fcn.0055a4a0
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x58]
mov dword [esp + 4], str._p____p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x44e
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], str._lx___PAGE_READWRITE_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x44f
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], str._lx___MEM_COMMIT_n
cmp eax, 0x1000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x450
call fcn.0055a4a0
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], str._lx___MEM_MAPPED_n
cmp eax, 0x40000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp], eax
mov edx, dword [ebp - 0x94]
call edx
sub esp, 4
mov edi, eax
mov eax, 0x454
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], edi
mov dword [esp + 4], str.UnmapViewOfFile_failed_with_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov dword [esp + 4], 0x100000
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
call esi
sub esp, 8
mov edi, eax
mov eax, 0x457
call fcn.0055a4a0
mov dword [esp], edi
mov dword [esp + 4], str.memory_is_accessible_n
call fcn.0055ab70
lea ecx, [ebp - 0x5c]
mov dword [esp + 8], 0x1c
mov dword [esp + 4], ecx
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov edi, dword [ebp - 0xa0]
call edi
sub esp, 0xc
mov edi, eax
mov eax, 0x45a
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], edi
mov dword [esp + 4], str.VirtualQuery_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, 0x45b
call fcn.0055a4a0
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x5c]
mov dword [esp + 4], str.got__p___expected__p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x45c
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.got__lx___expected_PAGE_NOACCESS_n
cmp eax, 1
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x45d
call fcn.0055a4a0
mov eax, dword [ebp - 0x58]
mov dword [esp + 4], str._p___NULL_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x45e
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], 0x5fe4fc
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x45f
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], str._lx___MEM_FREE_n
cmp eax, 0x10000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x460
call fcn.0055a4a0
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], 0x5fe4fc
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xc0000000
mov dword [esp], str.testfile.xxx
mov ecx, dword [ebp - 0xa8]
call ecx
sub esp, 0x1c
mov edi, eax
mov eax, 0x464
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFile_error__lu_n
mov dword [esp + 8], eax
xor eax, eax
cmp edi, 0xffffffff
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp], edi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1000
mov ecx, dword [ebp - 0xac]
call ecx
sub esp, 0x10
mov dword [esp], edi
mov ecx, dword [ebp - 0xb0]
call ecx
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x14], 0x5fda48
mov dword [esp + 0x10], 0x100000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 4
mov dword [esp + 4], 0
mov dword [ebp - 0xa8], edi
mov dword [esp], edi
mov ecx, dword [ebp - 0x98]
call ecx
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x46a
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFileMappingA_failed_with_error__ld_n
mov dword [esp + 8], eax
mov edi, dword [ebp - 0x8c]
xor eax, eax
test edi, edi
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov ecx, dword [ebp - 0x9c]
call ecx
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x46d
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_failed_with_error__ld_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x84]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 8], 0x5fda48
mov dword [esp + 4], 0
mov dword [esp], 4
mov eax, dword [ebp - 0xa4]
call eax
sub esp, 0xc
mov dword [ebp - 0x88], eax
mov eax, 0x470
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.OpenFileMappingA_failed_with_error__ld_n
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x88]
xor eax, eax
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x88]
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp], eax
mov eax, dword [ebp - 0x90]
call eax
sub esp, 4
mov edi, eax
mov eax, 0x473
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], edi
lea edi, [ebp - 0x7c]
mov dword [esp + 4], str.CloseHandle_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov dword [esp + 0x10], edi
lea edi, [ebp - 0x70]
mov dword [esp + 8], edi
mov dword [esp + 0xc], 0x10
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov edi, eax
mov eax, 0x476
call fcn.0055a4a0
xor eax, eax
test edi, edi
mov dword [esp + 8], edi
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x477
call fcn.0055a4a0
mov eax, dword [ebp - 0x7c]
mov dword [esp + 4], str.NtQuerySection_wrong_size__Iu_n
cmp eax, 0x10
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x478
call fcn.0055a4a0
mov eax, dword [ebp - 0x6c]
mov dword [esp + 4], str.NtQuerySection_wrong_attr__08lx_n
cmp eax, 0x800000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x47a
call fcn.0055a4a0
mov eax, dword [ebp - 0x70]
mov dword [esp + 4], str.NtQuerySection_wrong_base__p_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x47b
call fcn.0055a4a0
mov eax, dword [ebp - 0x68]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x64]
mov dword [esp + 4], str.NtQuerySection_wrong_size__lx_08lx_n
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x68]
mov edx, dword [ebp - 0x64]
xor eax, 0x100000
or eax, edx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp], eax
mov eax, dword [ebp - 0x90]
call eax
sub esp, 4
mov edi, eax
mov eax, 0x47f
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], edi
mov dword [esp + 4], str.CloseHandle_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov dword [esp + 4], 0x100000
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
call esi
sub esp, 8
mov edi, eax
mov eax, 0x482
call fcn.0055a4a0
xor eax, eax
test edi, edi
mov dword [esp + 4], str.memory_is_not_accessible_n
sete al
lea edi, [ebp - 0x5c]
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 4], edi
mov dword [esp + 8], 0x1c
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov edx, dword [ebp - 0xa0]
call edx
sub esp, 0xc
mov edi, eax
mov eax, 0x485
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], edi
mov dword [esp + 4], str.VirtualQuery_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, 0x486
call fcn.0055a4a0
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x5c]
mov dword [esp + 4], str.got__p___expected__p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x487
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 0xc], 0x100000
mov dword [esp + 4], str.got__Ix___expected__x_n
cmp eax, 0x100000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x488
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.got__lx___expected_PAGE_READWRITE_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x489
call fcn.0055a4a0
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x58]
mov dword [esp + 4], str._p____p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x48a
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], str._lx___PAGE_READWRITE_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x48b
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], str._lx___MEM_COMMIT_n
cmp eax, 0x1000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x48c
call fcn.0055a4a0
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], str._lx___MEM_MAPPED_n
cmp eax, 0x40000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp + 8], 0x5fda48
mov dword [esp + 4], 0
mov dword [esp], 4
mov eax, dword [ebp - 0xa4]
call eax
sub esp, 0xc
mov dword [ebp - 0x88], eax
mov eax, 0x490
call fcn.0055a4a0
mov dword [esp + 4], str.OpenFileMappingA_succeeded_n
xor eax, eax
mov edi, dword [ebp - 0x88]
test edi, edi
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x491
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.OpenFileMappingA_set_error__ld_n
mov dword [esp + 8], eax
xor eax, eax
cmp dword [ebx + 0x34], 2
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x88]
mov dword [esp], eax
mov eax, dword [ebp - 0x90]
call eax
mov dword [ebx + 0x34], 0xdeadbeef
sub esp, 4
mov dword [esp + 0x14], 0x5fda48
mov dword [esp + 0x10], 0x100000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 4
mov dword [esp + 4], 0
mov edi, dword [ebp - 0xa8]
mov dword [esp], edi
mov ecx, dword [ebp - 0x98]
call ecx
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x495
call fcn.0055a4a0
mov dword [esp + 4], str.CreateFileMappingA_failed_n
xor eax, eax
mov edx, dword [ebp - 0x8c]
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x496
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFileMappingA_set_error__ld_n
mov dword [esp + 8], eax
mov ecx, dword [ebx + 0x34]
xor eax, eax
test ecx, ecx
sete al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp], eax
mov eax, dword [ebp - 0x90]
call eax
sub esp, 4
mov edi, eax
mov eax, 0x499
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], edi
mov dword [esp + 4], str.CloseHandle_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov dword [esp + 4], 0x100000
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
call esi
sub esp, 8
mov edi, eax
mov eax, 0x49c
call fcn.0055a4a0
xor eax, eax
test edi, edi
mov dword [esp + 4], str.memory_is_not_accessible_n
sete al
mov dword [esp], eax
call fcn.0055ab70
lea eax, [ebp - 0x5c]
mov dword [esp + 8], 0x1c
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov edx, dword [ebp - 0xa0]
call edx
sub esp, 0xc
mov edi, eax
mov eax, 0x49f
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], edi
mov dword [esp + 4], str.VirtualQuery_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, 0x4a0
call fcn.0055a4a0
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x5c]
mov dword [esp + 4], str.got__p___expected__p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4a1
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 0xc], 0x100000
mov dword [esp + 4], str.got__Ix___expected__x_n
cmp eax, 0x100000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4a2
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.got__lx___expected_PAGE_READWRITE_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4a3
call fcn.0055a4a0
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x58]
mov dword [esp + 4], str._p____p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4a4
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], str._lx___PAGE_READWRITE_n
cmp eax, 4
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4a5
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], str._lx___MEM_COMMIT_n
cmp eax, 0x1000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4a6
call fcn.0055a4a0
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], str._lx___MEM_MAPPED_n
cmp eax, 0x40000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [ebx + 0x34], 0xdeadbeef
mov dword [esp], eax
mov eax, dword [ebp - 0x94]
call eax
sub esp, 4
mov edi, eax
mov eax, 0x4aa
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], edi
mov dword [esp + 4], str.UnmapViewOfFile_failed_with_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov dword [esp + 4], 0x100000
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
call esi
sub esp, 8
mov esi, eax
mov eax, 0x4ad
call fcn.0055a4a0
mov dword [esp], esi
lea esi, [ebp - 0x5c]
mov dword [esp + 4], str.memory_is_accessible_n
call fcn.0055ab70
mov dword [esp + 4], esi
mov dword [esp + 8], 0x1c
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov edx, dword [ebp - 0xa0]
call edx
sub esp, 0xc
mov esi, eax
mov eax, 0x4b0
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], esi
mov dword [esp + 4], str.VirtualQuery_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, 0x4b1
call fcn.0055a4a0
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x5c]
mov dword [esp + 4], str.got__p___expected__p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4b2
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.got__lx___expected_PAGE_NOACCESS_n
cmp eax, 1
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4b3
call fcn.0055a4a0
mov eax, dword [ebp - 0x58]
mov dword [esp + 4], str._p___NULL_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4b4
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], 0x5fe4fc
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4b5
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], str._lx___MEM_FREE_n
cmp eax, 0x10000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4b6
call fcn.0055a4a0
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], 0x5fe4fc
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x3000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 2
mov dword [esp + 4], 0
mov edi, dword [ebp - 0xa8]
mov dword [esp], edi
mov ecx, dword [ebp - 0x98]
call ecx
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x4b9
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFileMappingA_failed_with_error__lu_n
mov dword [esp + 8], eax
mov esi, dword [ebp - 0x8c]
xor eax, eax
test esi, esi
setne al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 0x10], 0x3000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov esi, dword [ebp - 0x9c]
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x4bc
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_failed_with_error__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x84]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov esi, dword [ebp - 0x84]
lea eax, [esi + 0x64]
mov dword [esp], eax
mov edx, dword [ebp - 0x94]
call edx
sub esp, 4
mov esi, eax
mov eax, 0x4bf
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], esi
mov dword [esp + 4], str.UnmapViewOfFile_failed_with_error__lu_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov dword [esp + 0x10], 0x3000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov esi, dword [ebp - 0x9c]
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x4c2
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_failed_with_error__lu_n
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x84]
xor eax, eax
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
add eax, 0x1000
mov dword [esp], eax
mov edx, dword [ebp - 0x94]
call edx
sub esp, 4
mov esi, eax
mov eax, 0x4c5
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], esi
mov dword [esp + 4], str.UnmapViewOfFile_failed_with_error__lu_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov dword [esp + 0x10], 0x3000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 4
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov esi, dword [ebp - 0x9c]
call esi
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x4c8
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_failed_with_error__lu_n
mov dword [esp + 8], eax
mov esi, dword [ebp - 0x84]
xor eax, eax
test esi, esi
setne al
mov dword [esp], eax
call fcn.0055ab70
mov esi, dword [ebp - 0x84]
lea eax, [esi + 0x1064]
mov dword [esp], eax
mov edx, dword [ebp - 0x94]
call edx
sub esp, 4
mov esi, eax
mov eax, 0x4cb
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], esi
mov dword [esp + 4], str.UnmapViewOfFile_failed_with_error__lu_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov esi, dword [ebp - 0x90]
call esi
sub esp, 4
mov dword [esp], edi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x24
mov dword [esp + 0xc], 0
mov dword [esp + 8], 2
mov dword [esp + 4], 0
mov ecx, dword [ebp - 0x98]
call ecx
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x4d0
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFileMappingA_failed_with_error__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x8c]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
lea eax, [ebp - 0x7c]
mov dword [esp + 0xc], 0x10
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x70]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov esi, eax
mov eax, 0x4d3
call fcn.0055a4a0
xor eax, eax
test esi, esi
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4d4
call fcn.0055a4a0
mov eax, dword [ebp - 0x7c]
mov dword [esp + 4], str.NtQuerySection_wrong_size__Iu_n
cmp eax, 0x10
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4d5
call fcn.0055a4a0
mov eax, dword [ebp - 0x6c]
mov dword [esp + 4], str.NtQuerySection_wrong_attr__08lx_n
cmp eax, 0x800000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4d7
call fcn.0055a4a0
mov eax, dword [ebp - 0x70]
mov dword [esp + 4], str.NtQuerySection_wrong_base__p_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4d8
call fcn.0055a4a0
mov eax, dword [ebp - 0x68]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x64]
mov dword [esp + 4], str.NtQuerySection_wrong_size__lx_08lx_n
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x68]
mov edx, dword [ebp - 0x64]
xor eax, 0x24
or eax, edx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov esi, dword [ebp - 0x90]
call esi
sub esp, 4
mov dword [esp], edi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x3456
mov edx, dword [ebp - 0xac]
call edx
sub esp, 0x10
mov dword [esp], edi
mov edx, dword [ebp - 0xb0]
call edx
sub esp, 4
mov dword [esp], edi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 2
mov dword [esp + 4], 0
mov ecx, dword [ebp - 0x98]
call ecx
sub esp, 0x18
mov dword [ebp - 0x8c], eax
mov eax, 0x4df
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.CreateFileMappingA_failed_with_error__lu_n
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0x8c]
xor eax, eax
test ecx, ecx
setne al
mov dword [esp], eax
call fcn.0055ab70
lea eax, [ebp - 0x7c]
mov dword [esp + 0xc], 0x10
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x70]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov ebx, eax
mov eax, 0x4e2
call fcn.0055a4a0
xor eax, eax
test ebx, ebx
mov dword [esp + 8], ebx
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
lea ebx, [ebp - 0x8c]
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4e3
call fcn.0055a4a0
mov eax, dword [ebp - 0x7c]
mov dword [esp + 4], str.NtQuerySection_wrong_size__Iu_n
cmp eax, 0x10
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4e4
call fcn.0055a4a0
mov eax, dword [ebp - 0x6c]
mov dword [esp + 4], str.NtQuerySection_wrong_attr__08lx_n
cmp eax, 0x800000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4e6
call fcn.0055a4a0
mov eax, dword [ebp - 0x70]
mov dword [esp + 4], str.NtQuerySection_wrong_base__p_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4e7
call fcn.0055a4a0
mov eax, dword [ebp - 0x68]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x64]
mov dword [esp + 4], str.NtQuerySection_wrong_size__lx_08lx_n
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x68]
mov edx, dword [ebp - 0x64]
xor eax, 0x3456
or eax, edx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call esi
mov dword [ebp - 0xa8], edi
sub esp, 4
mov dword [ebp - 0x78], 0x3457
mov dword [ebp - 0x74], 0
mov dword [esp + 0x18], edi
lea edi, [ebp - 0x78]
mov dword [esp + 0x14], 0x8000000
mov dword [esp + 0x10], 2
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 5
mov dword [esp], ebx
call dword [0x8e0654]
sub esp, 0x1c
mov esi, eax
mov eax, 0x4ee
call fcn.0055a4a0
xor eax, eax
cmp esi, 0xc0000040
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtCreateSection_failed__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0xa8]
mov dword [esp + 0xc], edi
mov dword [esp + 0x14], 0x1000000
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 2
mov dword [esp + 8], 0
mov dword [esp + 4], 5
mov dword [esp], ebx
call dword [0x8e0654]
sub esp, 0x1c
mov esi, eax
mov eax, 0x4f1
call fcn.0055a4a0
xor eax, eax
cmp esi, 0xc000012f
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtCreateSection_failed__lx_n
mov dword [esp], eax
call fcn.0055ab70
test esi, esi
je 0x560288
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x78], 0x3452
mov dword [ebp - 0x74], 0
mov dword [esp + 0xc], edi
mov dword [esp], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], 0x8000000
mov dword [esp + 0x10], 2
mov dword [esp + 8], 0
mov dword [esp + 4], 5
call dword [0x8e0654]
sub esp, 0x1c
mov esi, eax
mov eax, 0x4f6
call fcn.0055a4a0
xor eax, eax
test esi, esi
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtCreateSection_failed__lx_n
mov dword [esp], eax
call fcn.0055ab70
lea ecx, [ebp - 0x70]
mov dword [esp + 0x10], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0x10
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov esi, eax
mov eax, 0x4f8
call fcn.0055a4a0
xor eax, eax
test esi, esi
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4f9
call fcn.0055a4a0
mov eax, dword [ebp - 0x6c]
mov dword [esp + 4], str.NtQuerySection_wrong_attr__08lx_n
cmp eax, 0x800000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4fb
call fcn.0055a4a0
mov eax, dword [ebp - 0x70]
mov dword [esp + 4], str.NtQuerySection_wrong_base__p_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x4fc
call fcn.0055a4a0
mov eax, dword [ebp - 0x68]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x64]
mov dword [esp + 4], str.NtQuerySection_wrong_size__lx_08lx_n
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x68]
mov edx, dword [ebp - 0x64]
xor eax, 0x3452
or eax, edx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x78]
lea ecx, [ebp - 0x80]
lea edx, [ebp - 0x84]
mov dword [ebp - 0x80], eax
mov dword [esp + 0x18], ecx
mov dword [esp + 8], edx
mov dword [esp + 0x24], 2
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0650]
sub esp, 0x28
mov esi, eax
mov eax, 0x501
call fcn.0055a4a0
xor eax, eax
test esi, esi
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtMapViewOfSection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], 0xffffffff
mov dword [esp + 4], eax
call dword [0x8e064c]
mov ecx, dword [ebp - 0x78]
lea edx, [ebp - 0x84]
sub esp, 8
lea eax, [ecx + 1]
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x80], eax
mov dword [esp + 8], edx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x24], 2
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0650]
sub esp, 0x28
mov esi, eax
mov eax, 0x506
call fcn.0055a4a0
xor eax, eax
cmp esi, 0xc000001f
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtMapViewOfSection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov ecx, dword [ebp - 0x90]
call ecx
sub esp, 4
mov dword [esp + 0xc], edi
lea edi, [ebp - 0x40]
mov dword [esp], ebx
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x8000000
mov dword [esp + 0x10], 2
mov dword [esp + 8], 0
mov dword [esp + 4], 5
call dword [0x8e0654]
sub esp, 0x1c
mov esi, eax
mov eax, 0x50b
call fcn.0055a4a0
xor eax, eax
test esi, esi
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtCreateSection_failed__lx_n
mov dword [esp], eax
call fcn.0055ab70
lea edx, [ebp - 0x70]
mov dword [esp + 0x10], 0
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x10
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov esi, eax
mov eax, 0x50d
call fcn.0055a4a0
xor eax, eax
test esi, esi
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x50e
call fcn.0055a4a0
mov eax, dword [ebp - 0x6c]
mov dword [esp + 4], str.NtQuerySection_wrong_attr__08lx_n
cmp eax, 0x8000000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x510
call fcn.0055a4a0
mov eax, dword [ebp - 0x70]
mov dword [esp + 4], str.NtQuerySection_wrong_base__p_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x511
call fcn.0055a4a0
mov eax, dword [ebp - 0x68]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x64]
mov dword [esp + 4], str.NtQuerySection_wrong_size__lx_08lx_n
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x68]
mov edx, dword [ebp - 0x64]
xor ah, 0x40
or eax, edx
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
lea edx, [ebp - 0x70]
mov dword [esp + 0x10], 0
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0xf
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov esi, eax
mov eax, 0x514
call fcn.0055a4a0
xor eax, eax
cmp esi, 0xc0000004
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
lea edx, [ebp - 0x70]
mov dword [esp + 0x10], 0
mov dword [esp + 8], edx
mov dword [esp + 0xc], 0x11
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov esi, eax
mov eax, 0x516
call fcn.0055a4a0
xor eax, eax
test esi, esi
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 8], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x2f
mov dword [esp + 4], 1
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov esi, eax
mov eax, 0x518
call fcn.0055a4a0
xor eax, eax
cmp esi, 0xc0000004
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 8], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x30
mov dword [esp + 4], 1
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov esi, eax
mov eax, 0x51a
call fcn.0055a4a0
xor eax, eax
cmp esi, 0xc0000049
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 8], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x31
mov dword [esp + 4], 1
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
call dword [0x8e0648]
sub esp, 0x14
mov esi, eax
mov eax, 0x51c
call fcn.0055a4a0
xor eax, eax
cmp esi, 0xc0000049
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtQuerySection_failed_err__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov ecx, dword [ebp - 0x90]
call ecx
sub esp, 4
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov edi, dword [ebp - 0xa8]
mov dword [esp], edi
mov eax, dword [ebp - 0xac]
call eax
sub esp, 0x10
mov dword [esp], edi
mov eax, dword [ebp - 0xb0]
call eax
sub esp, 4
mov dword [esp + 0x18], edi
mov dword [esp], ebx
mov dword [esp + 0x14], 0x8000000
mov dword [esp + 0x10], 2
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 5
call dword [0x8e0654]
sub esp, 0x1c
mov esi, eax
mov eax, 0x52a
call fcn.0055a4a0
xor eax, eax
cmp esi, 0xc000011e
mov dword [esp + 8], esi
sete al
mov dword [esp + 4], str.NtCreateSection_failed__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 0x18], edi
mov dword [esp], ebx
mov dword [esp + 0x14], 0x1000000
mov dword [esp + 0x10], 2
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 5
call dword [0x8e0654]
sub esp, 0x1c
mov ebx, eax
mov eax, 0x52d
call fcn.0055a4a0
xor eax, eax
cmp ebx, 0xc0000020
mov dword [esp + 8], ebx
sete al
mov dword [esp + 4], str.NtCreateSection_failed__lx_n
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp], edi
mov ecx, dword [ebp - 0x90]
call ecx
sub esp, 4
mov dword [esp], str.testfile.xxx
mov eax, dword [ebp - 0xb8]
call eax
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
ret
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov eax, dword [ebp - 0x8c]
mov ebx, dword fs:[0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x9c]
call eax
sub esp, 0x14
mov dword [ebp - 0x84], eax
mov eax, 0x3e7
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.MapViewOfFile_failed_with_error__ld_n
mov dword [esp + 8], eax
mov esi, dword [ebp - 0x84]
xor eax, eax
test esi, esi
setne al
mov dword [esp], eax
call fcn.0055ab70
lea eax, [ebp - 0x5c]
mov dword [esp + 8], 0x1c
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [ebp - 0xa0]
call eax
sub esp, 0xc
mov esi, eax
mov eax, 0x3ea
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], esi
mov dword [esp + 4], str.VirtualQuery_failed_with_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, 0x3eb
call fcn.0055a4a0
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x84]
mov dword [esp + 4], str.wrong_BaseAddress__p__p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3ec
call fcn.0055a4a0
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x84]
mov dword [esp + 4], str.wrong_AllocationBase__p__p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3ed
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 4], str.wrong_RegionSize_0x_Ix_n
cmp eax, 0x100000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3ee
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], str.wrong_State_0x_lx_n
cmp eax, 0x1000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3ef
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], str.wrong_AllocationProtect_0x_lx_n
cmp eax, 0x204
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3f1
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.wrong_Protect_0x_lx_n
cmp eax, 0x204
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3f2
call fcn.0055a4a0
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], str.wrong_Type_0x_lx_n
cmp eax, 0x40000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0x1000
mov dword [esp + 4], 0x10000
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
call edi
sub esp, 0x10
mov dword [ebp - 0x84], eax
mov eax, 0x3f5
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.VirtualAlloc_failed_with_error__ld_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0x84]
xor eax, eax
test edx, edx
setne al
mov dword [esp], eax
call fcn.0055ab70
lea ecx, [ebp - 0x5c]
mov dword [esp + 8], 0x1c
mov dword [esp + 4], ecx
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [ebp - 0xa0]
call eax
sub esp, 0xc
mov esi, eax
mov eax, 0x3f8
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp], esi
mov dword [esp + 4], str.VirtualQuery_failed_with_error__ld_n
mov dword [esp + 8], eax
call fcn.0055ab70
mov eax, 0x3f9
call fcn.0055a4a0
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x84]
mov dword [esp + 4], str.wrong_BaseAddress__p__p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3fa
call fcn.0055a4a0
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x84]
mov dword [esp + 4], str.wrong_AllocationBase__p__p_n
cmp edx, eax
mov dword [esp + 8], eax
sete al
mov dword [esp + 0xc], edx
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3fb
call fcn.0055a4a0
mov eax, dword [ebp - 0x50]
mov dword [esp + 4], str.wrong_RegionSize_0x_Ix_n
cmp eax, 0x10000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3fc
call fcn.0055a4a0
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], str.wrong_State_0x_lx_n
cmp eax, 0x1000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3fd
call fcn.0055a4a0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], str.wrong_AllocationProtect_0x_lx_n
cmp eax, 0x204
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x3ff
call fcn.0055a4a0
mov eax, dword [ebp - 0x48]
mov dword [esp + 4], str.wrong_Protect_0x_lx_n
cmp eax, 0x202
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, 0x400
call fcn.0055a4a0
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], str.wrong_Type_0x_lx_n
cmp eax, 0x40000
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.0055ab70
mov eax, dword [ebp - 0x84]
mov dword [esp], eax
mov eax, dword [ebp - 0x94]
call eax
sub esp, 4
mov esi, eax
mov eax, 0x403
call fcn.0055a4a0
mov eax, dword [ebx + 0x34]
mov dword [esp + 4], str.UnmapViewOfFile_failed_with_error__ld_n
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.0055ab70
jmp 0x55dc75
mov eax, dword [ebp - 0x8c]
mov dword [esp], eax
mov eax, dword [ebp - 0x90]
call eax
sub esp, 4
jmp 0x55f788
xor edi, edi
cmp dword [ebx + 0x34], 3
jne 0x55c146
mov dword [esp + 0x14], 0x5fda48
mov esi, 0x5fda48
mov dword [esp + 0x10], 0xffa
mov dword [esp + 0xc], 0
mov dword [esp + 8], 4
mov dword [esp + 4], 0
mov dword [esp], 0xffffffff
mov eax, dword [ebp - 0x98]
call eax
mov ecx, eax
sub esp, 0x18
xor eax, eax
test ecx, ecx
setne al
mov edi, eax
jmp 0x55c146