Function at 0x410ee0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x88
mov eax, dword [ebp + 8]
mov dword [ebp - 0x90], eax
mov eax, dword [0x442080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x8c], 0xb2259b6c
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x94], eax
sub eax, 0x80b020bf
je 0x411c53
jmp 0x410f25
mov eax, dword [ebp - 0x94]
sub eax, 0x821149af
je 0x411e0e
jmp 0x410f3b
mov eax, dword [ebp - 0x94]
sub eax, 0x8abcdec7
je 0x412432
jmp 0x410f51
mov eax, dword [ebp - 0x94]
sub eax, 0x8add796b
je 0x4121ba
jmp 0x410f67
mov eax, dword [ebp - 0x94]
sub eax, 0x8d15a7f3
je 0x41180b
jmp 0x410f7d
mov eax, dword [ebp - 0x94]
sub eax, 0x9035d606
je 0x411a97
jmp 0x410f93
mov eax, dword [ebp - 0x94]
sub eax, 0x996c409e
je 0x411b93
jmp 0x410fa9
mov eax, dword [ebp - 0x94]
sub eax, 0x9addf6d8
je 0x4123a0
jmp 0x410fbf
mov eax, dword [ebp - 0x94]
sub eax, 0x9c5aef8c
je 0x411c62
jmp 0x410fd5
mov eax, dword [ebp - 0x94]
sub eax, 0x9f21308d
je 0x412258
jmp 0x410feb
mov eax, dword [ebp - 0x94]
sub eax, 0xa5442a9b
je 0x411597
jmp 0x411001
mov eax, dword [ebp - 0x94]
sub eax, 0xa9165eae
je 0x411e9f
jmp 0x411017
mov eax, dword [ebp - 0x94]
sub eax, 0xaa854592
je 0x411a3e
jmp 0x41102d
mov eax, dword [ebp - 0x94]
sub eax, 0xab1c7a1d
je 0x4121e2
jmp 0x411043
mov eax, dword [ebp - 0x94]
sub eax, 0xab86fc48
je 0x412136
jmp 0x411059
mov eax, dword [ebp - 0x94]
sub eax, 0xafba3403
je 0x41249c
jmp 0x41106f
mov eax, dword [ebp - 0x94]
sub eax, 0xb0d73cd0
je 0x4121f1
jmp 0x411085
mov eax, dword [ebp - 0x94]
sub eax, 0xb2259b6c
je 0x4114c0
jmp 0x41109b
mov eax, dword [ebp - 0x94]
sub eax, 0xb40c5bef
je 0x4123d0
jmp 0x4110b1
mov eax, dword [ebp - 0x94]
sub eax, 0xb637f3db
je 0x412249
jmp 0x4110c7
mov eax, dword [ebp - 0x94]
sub eax, 0xc3fad8de
je 0x41230c
jmp 0x4110dd
mov eax, dword [ebp - 0x94]
sub eax, 0xcf1c6d16
je 0x41171d
jmp 0x4110f3
mov eax, dword [ebp - 0x94]
sub eax, 0xd10e50d7
je 0x411ac4
jmp 0x411109
mov eax, dword [ebp - 0x94]
sub eax, 0xd264471c
je 0x4116d4
jmp 0x41111f
mov eax, dword [ebp - 0x94]
sub eax, 0xd432b976
je 0x411ce3
jmp 0x411135
mov eax, dword [ebp - 0x94]
sub eax, 0xd6f89743
je 0x411d69
jmp 0x41114b
mov eax, dword [ebp - 0x94]
sub eax, 0xdffb2067
je 0x411fa2
jmp 0x411161
mov eax, dword [ebp - 0x94]
sub eax, 0xe11952e6
je 0x411aa6
jmp 0x411177
mov eax, dword [ebp - 0x94]
sub eax, 0xe27fc448
je 0x411774
jmp 0x41118d
mov eax, dword [ebp - 0x94]
sub eax, 0xe49f33a0
je 0x412389
jmp 0x4111a3
mov eax, dword [ebp - 0x94]
sub eax, 0xe4b79a27
je 0x411b3a
jmp 0x4111b9
mov eax, dword [ebp - 0x94]
sub eax, 0xe6d27ab9
je 0x411c71
jmp 0x4111cf
mov eax, dword [ebp - 0x94]
sub eax, 0xea26bad6
je 0x411ef0
jmp 0x4111e5
mov eax, dword [ebp - 0x94]
sub eax, 0xee59ee49
je 0x411bf3
jmp 0x4111fb
mov eax, dword [ebp - 0x94]
sub eax, 0xf164dfa8
je 0x411683
jmp 0x411211
mov eax, dword [ebp - 0x94]
sub eax, 0xf2f1efe9
je 0x4119de
jmp 0x411227
mov eax, dword [ebp - 0x94]
sub eax, 0xf4e1e501
je 0x411ba2
jmp 0x41123d
mov eax, dword [ebp - 0x94]
sub eax, 0xf9beb26d
je 0x41192a
jmp 0x411253
mov eax, dword [ebp - 0x94]
sub eax, 0xfaffb7b0
je 0x4123b2
jmp 0x411269
mov eax, dword [ebp - 0x94]
sub eax, 0xfb0a996d
je 0x4118ca
jmp 0x41127f
mov eax, dword [ebp - 0x94]
sub eax, 0x78662d0
je 0x4121c9
jmp 0x411295
mov eax, dword [ebp - 0x94]
sub eax, 0x7dddb4f
je 0x4118d9
jmp 0x4112ab
mov eax, dword [ebp - 0x94]
sub eax, 0x8ac827c
je 0x41153d
jmp 0x4112c1
mov eax, dword [ebp - 0x94]
sub eax, 0x10b21371
je 0x411feb
jmp 0x4112d7
mov eax, dword [ebp - 0x94]
sub eax, 0x1111926b
je 0x411ccc
jmp 0x4112ed
mov eax, dword [ebp - 0x94]
sub eax, 0x1190447c
je 0x411dba
jmp 0x411303
mov eax, dword [ebp - 0x94]
sub eax, 0x1edee8ed
je 0x411d16
jmp 0x411319
mov eax, dword [ebp - 0x94]
sub eax, 0x2b638634
je 0x4120a2
jmp 0x41132f
mov eax, dword [ebp - 0x94]
sub eax, 0x2b9cf119
je 0x41185c
jmp 0x411345
mov eax, dword [ebp - 0x94]
sub eax, 0x2d7b70c5
je 0x41160d
jmp 0x41135b
mov eax, dword [ebp - 0x94]
sub eax, 0x35175948
je 0x4119ed
jmp 0x411371
mov eax, dword [ebp - 0x94]
sub eax, 0x36bfbdb4
je 0x4120c0
jmp 0x411387
mov eax, dword [ebp - 0x94]
sub eax, 0x399409c5
je 0x412330
jmp 0x41139d
mov eax, dword [ebp - 0x94]
sub eax, 0x3d93f9bf
je 0x411783
jmp 0x4113b3
mov eax, dword [ebp - 0x94]
sub eax, 0x4338ca63
je 0x411f93
jmp 0x4113c9
mov eax, dword [ebp - 0x94]
sub eax, 0x4702e3b0
je 0x411d49
jmp 0x4113df
mov eax, dword [ebp - 0x94]
sub eax, 0x58dd1c00
je 0x41231b
jmp 0x4113f5
mov eax, dword [ebp - 0x94]
sub eax, 0x5e59880f
je 0x41222b
jmp 0x41140b
mov eax, dword [ebp - 0x94]
sub eax, 0x6003ae46
je 0x411692
jmp 0x411421
mov eax, dword [ebp - 0x94]
sub eax, 0x626f8843
je 0x4120b1
jmp 0x411437
mov eax, dword [ebp - 0x94]
sub eax, 0x67b15792
je 0x41248a
jmp 0x41144d
mov eax, dword [ebp - 0x94]
sub eax, 0x68b3aa9f
je 0x411d2e
jmp 0x411463
mov eax, dword [ebp - 0x94]
sub eax, 0x703b720a
je 0x4122a9
jmp 0x411479
mov eax, dword [ebp - 0x94]
sub eax, 0x7716f4b1
je 0x411da2
jmp 0x41148f
mov eax, dword [ebp - 0x94]
sub eax, 0x7b2cb6a7
je 0x4122fa
mov eax, dword [ebp - 0x90]
push eax
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x80], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x7c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x78], ecx
sub esp, 0x104
mov ecx, esp
mov dword [ebp - 0x74], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x70], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x6c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x68], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x64], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x60], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x5c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x58], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x54], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x84], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x8c], 0x8ac827c
jmp 0x4124a6
mov eax, dword [ebp - 0x80]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.0042bb30
add esp, 0xc
mov eax, dword [ebp - 0x84]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x7c]
mov eax, 0xa5442a9b
mov ecx, 0x6003ae46
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov ecx, dword [0x44356c]
mov eax, dword [0x443568]
mov edx, ecx
sub edx, 0x8f705920
sub edx, 1
add edx, 0x8f705920
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc3fad8de
mov ecx, 0x2d7b70c5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov ecx, dword [0x44356c]
mov eax, dword [0x443568]
mov edx, ecx
sub edx, 0xe7ff8020
sub edx, 1
add edx, 0xe7ff8020
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc3fad8de
mov ecx, 0xf164dfa8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov dword [ebp - 0x8c], 0x9f21308d
jmp 0x4124a6
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x80]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov dword [ebp - 0x8c], 0xd264471c
jmp 0x4124a6
mov eax, dword [0x44356c]
mov ecx, dword [0x443568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x58dd1c00
mov ecx, 0xcf1c6d16
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov eax, dword [0x44356c]
mov ecx, dword [0x443568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x58dd1c00
mov ecx, 0xe27fc448
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov dword [ebp - 0x8c], 0x3d93f9bf
jmp 0x4124a6
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x48]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x74]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov edx, dword [ebp - 0x70]
mov esi, 0xffffffff
mov eax, 0x7dddb4f
mov ecx, 0x8d15a7f3
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov eax, dword [0x44356c]
mov ecx, dword [0x443568]
mov edx, eax
sub edx, 0xc5cfac57
sub edx, 1
add edx, 0xc5cfac57
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x399409c5
mov ecx, 0x2b9cf119
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov ecx, dword [0x44356c]
mov eax, dword [0x443568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x399409c5
mov ecx, 0xfb0a996d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov dword [ebp - 0x8c], 0x9f21308d
jmp 0x4124a6
mov eax, dword [0x44356c]
mov ecx, dword [0x443568]
mov edx, eax
add edx, 0x8bced03e
sub edx, 1
sub edx, 0x8bced03e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7f6309ae
mov ecx, 0xf9beb26d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x44], eax
mov ecx, dword [0x44356c]
mov eax, dword [0x443568]
mov edx, ecx
add edx, 0xda278acf
sub edx, 1
sub edx, 0xda278acf
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7f6309ae
mov ecx, 0xf2f1efe9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov dword [ebp - 0x8c], 0x35175948
jmp 0x4124a6
mov eax, dword [0x44356c]
mov ecx, dword [0x443568]
mov edx, eax
sub edx, 0x26d13581
sub edx, 1
add edx, 0x26d13581
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe49f33a0
mov ecx, 0xaa854592
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
mov eax, dword [0x44356c]
mov ecx, dword [0x443568]
mov edx, eax
sub edx, 0x64fae3b8
sub edx, 1
add edx, 0x64fae3b8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe49f33a0
mov ecx, 0x9035d606
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov dword [ebp - 0x8c], 0xe11952e6
jmp 0x4124a6
mov edx, dword [ebp - 0x6c]
mov eax, 0xd10e50d7
mov ecx, 0xe6d27ab9
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov ecx, dword [0x44356c]
mov eax, dword [0x443568]
mov edx, ecx
add edx, 0xea1dcb47
sub edx, 1
sub edx, 0xea1dcb47
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9addf6d8
mov ecx, 0xe4b79a27
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [0x44356c]
mov ecx, dword [0x443568]
mov edx, eax
sub edx, 0x8b65d2e
sub edx, 1
add edx, 0x8b65d2e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9addf6d8
mov ecx, 0x996c409e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov dword [ebp - 0x8c], 0xf4e1e501
jmp 0x4124a6
mov eax, dword [0x44356c]
mov ecx, dword [0x443568]
mov edx, eax
add edx, 0x1bce6a44
sub edx, 1
sub edx, 0x1bce6a44
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfaffb7b0
mov ecx, 0xee59ee49
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov eax, dword [ebp - 0x40]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x44356c]
mov ecx, dword [0x443568]
mov edx, eax
add edx, 0x7b44450e
sub edx, 1
sub edx, 0x7b44450e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfaffb7b0
mov ecx, 0x80b020bf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov dword [ebp - 0x8c], 0x9c5aef8c
jmp 0x4124a6
mov dword [ebp - 0x8c], 0x9f21308d
jmp 0x4124a6
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x64]
mov dword [eax], ecx
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x8c], 0x1111926b
jmp 0x4124a6
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x8c], 0xd432b976
jmp 0x4124a6
mov eax, dword [ebp - 0x38]
mov edx, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x3c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x60]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5c]
mov word [eax], 0
mov dword [ebp - 0x8c], 0x1edee8ed
jmp 0x4124a6
mov eax, dword [ebp - 0x5c]
movzx eax, word [eax]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x8c], 0x68b3aa9f
jmp 0x4124a6
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
movzx eax, word [eax + 6]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x8c], 0x4702e3b0
jmp 0x4124a6
mov edx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
mov eax, 0xb0d73cd0
mov ecx, 0xd6f89743
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
add eax, 0x9db52b66
add eax, 0x18
sub eax, 0x9db52b66
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
sub eax, 0x3b58fadb
add eax, ecx
add eax, 0x3b58fadb
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x8c], 0x7716f4b1
jmp 0x4124a6
mov eax, dword [ebp - 0x5c]
movzx eax, word [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x8c], 0x1190447c
jmp 0x4124a6
mov eax, dword [ebp - 0x28]
imul edx, eax, 0x28
mov ecx, dword [ebp - 0x2c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x58]
mov dword [eax], ecx
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x43aff7
call fcn.0042f430
add esp, 8
mov edx, eax
mov eax, 0x821149af
mov ecx, 0x626f8843
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov eax, dword [ebp - 0x54]
mov dword [eax], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x78]
mov edx, dword [eax]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub edx, eax
mov eax, dword [ebp - 0x54]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x50]
mov byte [eax], cl
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x8c], 0xa9165eae
jmp 0x4124a6
mov eax, dword [0x44356c]
mov ecx, dword [0x443568]
mov edx, eax
sub edx, 0xa869c57a
sub edx, 1
add edx, 0xa869c57a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb40c5bef
mov ecx, 0xea26bad6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub ecx, 0xb89a44d3
add ecx, eax
add ecx, 0xb89a44d3
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x24]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0042bc90
add esp, 0xc
mov ecx, dword [0x44356c]
mov eax, dword [0x443568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb40c5bef
mov ecx, 0x4338ca63
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov dword [ebp - 0x8c], 0xdffb2067
jmp 0x4124a6
mov eax, dword [0x44356c]
mov ecx, dword [0x443568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8abcdec7
mov ecx, 0x10b21371
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x78]
mov esi, dword [eax]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, edi
sub esi, eax
mov eax, dword [ebp - 0x54]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x50]
mov byte [eax], cl
mov ecx, dword [0x44356c]
mov eax, dword [0x443568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8abcdec7
mov ecx, 0x2b638634
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov dword [ebp - 0x8c], 0x626f8843
jmp 0x4124a6
mov dword [ebp - 0x8c], 0x36bfbdb4
jmp 0x4124a6
mov ecx, dword [0x44356c]
mov eax, dword [0x443568]
mov edx, ecx
add edx, 0xca6fc85e
sub edx, 1
sub edx, 0xca6fc85e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x67b15792
mov ecx, 0xab86fc48
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov eax, dword [ebp - 0x5c]
mov ax, word [eax]
sub ax, 0x3298
add ax, 1
add ax, 0x3298
mov word [ebp - 0x16], ax
mov ecx, dword [0x44356c]
mov eax, dword [0x443568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x67b15792
mov ecx, 0x8add796b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov dword [ebp - 0x8c], 0x78662d0
jmp 0x4124a6
mov eax, dword [ebp - 0x5c]
mov cx, word [ebp - 0x16]
mov word [eax], cx
mov dword [ebp - 0x8c], 0xab1c7a1d
jmp 0x4124a6
mov dword [ebp - 0x8c], 0x1edee8ed
jmp 0x4124a6
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x8c], 0x5e59880f
jmp 0x4124a6
mov eax, dword [ebp - 0x14]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x8c], 0xb637f3db
jmp 0x4124a6
mov dword [ebp - 0x8c], 0x9f21308d
jmp 0x4124a6
mov eax, dword [0x44356c]
mov ecx, dword [0x443568]
mov edx, eax
add edx, 0x2b0888d8
sub edx, 1
sub edx, 0x2b0888d8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xafba3403
mov ecx, 0x703b720a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov eax, dword [0x44356c]
mov ecx, dword [0x443568]
mov edx, eax
add edx, 0xc5fbcd92
sub edx, 1
sub edx, 0xc5fbcd92
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xafba3403
mov ecx, 0x7b2cb6a7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x4124a6
mov dword [ebp - 0x8c], 0x2d7b70c5
jmp 0x4124a6
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x8c], 0xcf1c6d16
jmp 0x4124a6
mov dword [ebp - 0x8c], 0x2b9cf119
jmp 0x4124a6
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
mov dword [ebp - 0x8c], 0xaa854592
jmp 0x4124a6
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x8c], 0xe4b79a27
jmp 0x4124a6
mov eax, dword [ebp - 0x40]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x8c], 0xee59ee49
jmp 0x4124a6
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x24]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0042bc90
add esp, 0xc
mov dword [ebp - 0x8c], 0xea26bad6
jmp 0x4124a6
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x78]
mov esi, dword [eax]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, edi
sub esi, eax
mov eax, dword [ebp - 0x54]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x50]
mov byte [eax], cl
mov dword [ebp - 0x8c], 0x10b21371
jmp 0x4124a6
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x8c], 0xab86fc48
jmp 0x4124a6
mov dword [ebp - 0x8c], 0x703b720a
jmp 0x410f09