Function at 0x407db0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1bc
mov eax, dword [ebp + 8]
mov eax, dword [0x432080]
xor eax, ebp
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.0041cc70
mov eax, dword [ebp + 8]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x1a4], 0x238dd27f
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1a8], eax
sub eax, 0x81a50395
je 0x408e59
jmp 0x407e23
mov eax, dword [ebp - 0x1a8]
sub eax, 0x83dbac7d
je 0x409389
jmp 0x407e39
mov eax, dword [ebp - 0x1a8]
sub eax, 0x8951557d
je 0x4086e7
jmp 0x407e4f
mov eax, dword [ebp - 0x1a8]
sub eax, 0x89f5aff6
je 0x408c10
jmp 0x407e65
mov eax, dword [ebp - 0x1a8]
sub eax, 0x8c401de9
je 0x40905c
jmp 0x407e7b
mov eax, dword [ebp - 0x1a8]
sub eax, 0x9a9e5eaa
je 0x40904d
jmp 0x407e91
mov eax, dword [ebp - 0x1a8]
sub eax, 0x9f91f6ca
je 0x4086d8
jmp 0x407ea7
mov eax, dword [ebp - 0x1a8]
sub eax, 0xac57a5b6
je 0x4093a7
jmp 0x407ebd
mov eax, dword [ebp - 0x1a8]
sub eax, 0xaf5c9843
je 0x4084db
jmp 0x407ed3
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb20ac385
je 0x408832
jmp 0x407ee9
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb6039328
je 0x4091b4
jmp 0x407eff
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb7ca4875
je 0x408f14
jmp 0x407f15
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbb78f947
je 0x4092a4
jmp 0x407f2b
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbc66eda7
je 0x409281
jmp 0x407f41
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc09e8b06
je 0x409193
jmp 0x407f57
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc3e505fc
je 0x4084fc
jmp 0x407f6d
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc71658e6
je 0x408ce4
jmp 0x407f83
mov eax, dword [ebp - 0x1a8]
sub eax, 0xcbb4dd1b
je 0x409304
jmp 0x407f99
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd399babc
je 0x408978
jmp 0x407faf
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd6aceb8c
je 0x408db8
jmp 0x407fc5
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd96e786f
je 0x409205
jmp 0x407fdb
mov eax, dword [ebp - 0x1a8]
sub eax, 0xdbbac7f8
je 0x408f61
jmp 0x407ff1
mov eax, dword [ebp - 0x1a8]
sub eax, 0xdc216ba7
je 0x409313
jmp 0x408007
mov eax, dword [ebp - 0x1a8]
sub eax, 0xe05d486c
je 0x408cf3
jmp 0x40801d
mov eax, dword [ebp - 0x1a8]
sub eax, 0xe39451aa
je 0x408a31
jmp 0x408033
mov eax, dword [ebp - 0x1a8]
sub eax, 0xf0345b1d
je 0x408c1f
jmp 0x408049
mov eax, dword [ebp - 0x1a8]
sub eax, 0xf2013aac
je 0x408a06
jmp 0x40805f
mov eax, dword [ebp - 0x1a8]
sub eax, 0xf5721227
je 0x4083e5
jmp 0x408075
mov eax, dword [ebp - 0x1a8]
sub eax, 0xf5eeb104
je 0x4092c8
jmp 0x40808b
mov eax, dword [ebp - 0x1a8]
sub eax, 0xf8190a67
je 0x4087d5
jmp 0x4080a1
mov eax, dword [ebp - 0x1a8]
sub eax, 0x6778e1
je 0x408b24
jmp 0x4080b7
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc250fb1
je 0x409328
jmp 0x4080cd
mov eax, dword [ebp - 0x1a8]
sub eax, 0xce3fd49
je 0x408b15
jmp 0x4080e3
mov eax, dword [ebp - 0x1a8]
sub eax, 0x10bb3008
je 0x408853
jmp 0x4080f9
mov eax, dword [ebp - 0x1a8]
sub eax, 0x130ab159
je 0x40868f
jmp 0x40810f
mov eax, dword [ebp - 0x1a8]
sub eax, 0x145615f2
je 0x408619
jmp 0x408125
mov eax, dword [ebp - 0x1a8]
sub eax, 0x1d1c8134
je 0x409272
jmp 0x40813b
mov eax, dword [ebp - 0x1a8]
sub eax, 0x1e8688d5
je 0x408e68
jmp 0x408151
mov eax, dword [ebp - 0x1a8]
sub eax, 0x238dd27f
je 0x4083be
jmp 0x408167
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2ccc27c5
je 0x4089cd
jmp 0x40817d
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2ce5003d
je 0x4092b3
jmp 0x408193
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3102a691
je 0x408a82
jmp 0x4081a9
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3a7b0b4a
je 0x409398
jmp 0x4081bf
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3b18668a
je 0x408b45
jmp 0x4081d5
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3b40d6ba
je 0x409178
jmp 0x4081eb
mov eax, dword [ebp - 0x1a8]
sub eax, 0x40ef0d77
je 0x40913d
jmp 0x408201
mov eax, dword [ebp - 0x1a8]
sub eax, 0x438b5ef7
je 0x408c70
jmp 0x408217
mov eax, dword [ebp - 0x1a8]
sub eax, 0x4c96637e
je 0x40875f
jmp 0x40822d
mov eax, dword [ebp - 0x1a8]
sub eax, 0x4d968296
je 0x408532
jmp 0x408243
mov eax, dword [ebp - 0x1a8]
sub eax, 0x4f5092ac
je 0x40914c
jmp 0x408259
mov eax, dword [ebp - 0x1a8]
sub eax, 0x515aede6
je 0x4088b7
jmp 0x40826f
mov eax, dword [ebp - 0x1a8]
sub eax, 0x525ae440
je 0x4092e9
jmp 0x408285
mov eax, dword [ebp - 0x1a8]
sub eax, 0x5d43e133
je 0x408453
jmp 0x40829b
mov eax, dword [ebp - 0x1a8]
sub eax, 0x5da4c962
je 0x40894e
jmp 0x4082b1
mov eax, dword [ebp - 0x1a8]
sub eax, 0x5e3dfc3c
je 0x4090ad
jmp 0x4082c7
mov eax, dword [ebp - 0x1a8]
sub eax, 0x613668da
je 0x40895d
jmp 0x4082dd
mov eax, dword [ebp - 0x1a8]
sub eax, 0x6c6d8e89
je 0x409295
jmp 0x4082f3
mov eax, dword [ebp - 0x1a8]
sub eax, 0x73d47f4c
je 0x40850b
jmp 0x408309
mov eax, dword [ebp - 0x1a8]
sub eax, 0x74073a7d
je 0x409169
jmp 0x40831f
mov eax, dword [ebp - 0x1a8]
sub eax, 0x7593e39d
je 0x4085f4
jmp 0x408335
mov eax, dword [ebp - 0x1a8]
sub eax, 0x76b65ce5
je 0x408b96
jmp 0x40834b
mov eax, dword [ebp - 0x1a8]
sub eax, 0x77f10281
je 0x408702
jmp 0x408361
mov eax, dword [ebp - 0x1a8]
sub eax, 0x784214b7
je 0x40893f
jmp 0x408377
mov eax, dword [ebp - 0x1a8]
sub eax, 0x78eaa538
je 0x408d42
jmp 0x40838d
mov eax, dword [ebp - 0x1a8]
sub eax, 0x7911d777
je 0x40886e
mov eax, dword [ebp - 0x174]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x1a4], 0xf5721227
jmp 0x4093d5
mov ecx, dword [0x433564]
mov eax, dword [0x433560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6c6d8e89
mov ecx, 0x5d43e133
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
cmp dword [ebp - 0x17c], 0
setne al
and al, 1
mov byte [ebp - 0x16d], al
mov ecx, dword [0x433564]
mov eax, dword [0x433560]
mov edx, ecx
sub edx, 0x4ffdaddf
sub edx, 1
add edx, 0x4ffdaddf
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6c6d8e89
mov ecx, 0xaf5c9843
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov dl, byte [ebp - 0x16d]
mov eax, 0xc3e505fc
mov ecx, 0x73d47f4c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0xbc66eda7
jmp 0x4093d5
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x1a4], 0x4d968296
jmp 0x4093d5
mov ecx, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x168]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x180], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x17c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
lea eax, [ebp - 0x110]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x1a4], 0x7593e39d
jmp 0x4093d5
mov edx, dword [ebp - 0x164]
mov esi, 0xffffffff
mov eax, 0x8951557d
mov ecx, 0x145615f2
cmp edx, esi
cmove eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov ecx, dword [0x433564]
mov eax, dword [0x433560]
mov edx, ecx
add edx, 0x5502c94e
sub edx, 1
sub edx, 0x5502c94e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbb78f947
mov ecx, 0x130ab159
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov eax, dword [0x433564]
mov ecx, dword [0x433560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbb78f947
mov ecx, 0x9f91f6ca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0xbc66eda7
jmp 0x4093d5
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x1a4], 0x77f10281
jmp 0x4093d5
mov eax, dword [ebp - 0x160]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x1a4], 0x4c96637e
jmp 0x4093d5
mov ecx, dword [0x433564]
mov eax, dword [0x433560]
mov edx, ecx
add edx, 0x563bd027
sub edx, 1
sub edx, 0x563bd027
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2ce5003d
mov ecx, 0xf8190a67
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov eax, dword [ebp - 0x15c]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x155], al
mov eax, dword [0x433564]
mov ecx, dword [0x433560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2ce5003d
mov ecx, 0xb20ac385
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov dl, byte [ebp - 0x155]
mov eax, 0x10bb3008
mov ecx, 0x613668da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x1a4], 0x7911d777
jmp 0x4093d5
mov eax, dword [ebp - 0x154]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov ecx, dword [0x433564]
mov eax, dword [0x433560]
mov edx, ecx
sub edx, 0x46d450af
sub edx, 1
add edx, 0x46d450af
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf5eeb104
mov ecx, 0x784214b7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0x5da4c962
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0xbc66eda7
jmp 0x4093d5
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x1a4], 0xd399babc
jmp 0x4093d5
mov eax, dword [ebp - 0x150]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1a4], 0x2ccc27c5
jmp 0x4093d5
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x190]
mov ecx, dword [ecx + 0x3c]
add eax, 0x3accf294
add eax, ecx
sub eax, 0x3accf294
mov dword [ebp - 0x194], eax
mov word [ebp - 0x196], 0
mov dword [ebp - 0x1a4], 0xf2013aac
jmp 0x4093d5
movzx eax, word [ebp - 0x196]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x194]
add eax, 4
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x1a4], 0xe39451aa
jmp 0x4093d5
mov eax, dword [0x433564]
mov ecx, dword [0x433560]
mov edx, eax
add edx, 0xe688b3a5
sub edx, 1
sub edx, 0xe688b3a5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x525ae440
mov ecx, 0x3102a691
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax + 2]
mov eax, dword [ebp - 0x14c]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x141], al
mov ecx, dword [0x433564]
mov eax, dword [0x433560]
mov edx, ecx
sub edx, 0x5c7b5f85
sub edx, 1
add edx, 0x5c7b5f85
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x525ae440
mov ecx, 0xce3fd49
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0x6778e1
jmp 0x4093d5
mov dl, byte [ebp - 0x141]
mov eax, 0x3b40d6ba
mov ecx, 0x3b18668a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov eax, dword [0x433564]
mov ecx, dword [0x433560]
mov edx, eax
sub edx, 0xb2817a85
sub edx, 1
add edx, 0xb2817a85
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcbb4dd1b
mov ecx, 0x76b65ce5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x140], eax
mov ecx, dword [0x433564]
mov eax, dword [0x433560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcbb4dd1b
mov ecx, 0x89f5aff6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0xf0345b1d
jmp 0x4093d5
mov eax, dword [0x433564]
mov ecx, dword [0x433560]
mov edx, eax
add edx, 0x7106cbbd
sub edx, 1
sub edx, 0x7106cbbd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdc216ba7
mov ecx, 0x438b5ef7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov eax, dword [ebp - 0x140]
xor ecx, ecx
sub ecx, 0x18
sub eax, ecx
mov ecx, dword [ebp - 0x194]
movzx edx, word [ecx + 0x14]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x13c], eax
mov eax, dword [0x433564]
mov ecx, dword [0x433560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdc216ba7
mov ecx, 0xc71658e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0xe05d486c
jmp 0x4093d5
movzx eax, word [ebp - 0x196]
imul edx, eax, 0x28
mov eax, dword [ebp - 0x13c]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x19c], eax
mov ecx, dword [ebp - 0x19c]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x42b969
call fcn.00420570
mov edx, eax
mov eax, 0x78eaa538
mov ecx, 0xdbbac7f8
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov ecx, dword [0x433564]
mov eax, dword [0x433560]
mov edx, ecx
add edx, 0x6e0211d8
sub edx, 1
sub edx, 0x6e0211d8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc250fb1
mov ecx, 0xd6aceb8c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x19c]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
mov dword [ebp - 0x138], eax
mov eax, dword [0x433564]
mov ecx, dword [0x433560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc250fb1
mov ecx, 0x81a50395
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0x1e8688d5
jmp 0x4093d5
mov eax, dword [ebp - 0x138]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x19d], al
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
sub edx, eax
mov ecx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 0xc]
add ecx, 0xdfbc66e1
add ecx, eax
sub ecx, 0xdfbc66e1
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0041cdd0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 8]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x19c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x1a4], 0xb7ca4875
jmp 0x4093d5
mov esi, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x130]
lea eax, [ebp - 0x120]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x19d], al
mov dword [ebp - 0x1a4], 0xdbbac7f8
jmp 0x4093d5
mov ecx, dword [0x433564]
mov eax, dword [0x433560]
mov edx, ecx
sub edx, 0xc5c6063
sub edx, 1
add edx, 0xc5c6063
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x83dbac7d
mov ecx, 0x7fa75145
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0x8c401de9
jmp 0x4093d5
mov eax, dword [0x433564]
mov ecx, dword [0x433560]
mov edx, eax
sub edx, 0x39fbe43c
sub edx, 1
add edx, 0x39fbe43c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3a7b0b4a
mov ecx, 0x5e3dfc3c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov ax, word [ebp - 0x196]
add ax, 0xf18d
add ax, 1
sub ax, 0xf18d
mov word [ebp - 0x126], ax
mov ecx, dword [0x433564]
mov eax, dword [0x433560]
mov edx, ecx
add edx, 0xbc4d5fed
sub edx, 1
sub edx, 0xbc4d5fed
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3a7b0b4a
mov ecx, 0x40ef0d77
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0x4f5092ac
jmp 0x4093d5
mov ax, word [ebp - 0x126]
mov word [ebp - 0x196], ax
mov dword [ebp - 0x1a4], 0x74073a7d
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0xf2013aac
jmp 0x4093d5
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x1a4], 0xc09e8b06
jmp 0x4093d5
mov eax, dword [ebp - 0x124]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1a4], 0xb6039328
jmp 0x4093d5
mov eax, dword [0x433564]
mov ecx, dword [0x433560]
mov edx, eax
sub edx, 0x16b4ee6c
sub edx, 1
add edx, 0x16b4ee6c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xac57a5b6
mov ecx, 0xd96e786f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov eax, dword [ebp - 0x188]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x178]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [0x433564]
mov ecx, dword [0x433560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xac57a5b6
mov ecx, 0x1d1c8134
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0xbc66eda7
jmp 0x4093d5
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.0041bf80
add esp, 0x1bc
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1a4], 0x5d43e133
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0x130ab159
jmp 0x4093d5
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x1a4], 0xf8190a67
jmp 0x4093d5
mov eax, dword [ebp - 0x154]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1a4], 0x515aede6
jmp 0x4093d5
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x1a4], 0x3102a691
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0x76b65ce5
jmp 0x4093d5
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x1a4], 0x438b5ef7
jmp 0x4093d5
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x19c]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
mov dword [ebp - 0x1a4], 0xd6aceb8c
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0x7fa75145
jmp 0x4093d5
mov dword [ebp - 0x1a4], 0x5e3dfc3c
jmp 0x4093d5
mov eax, dword [ebp - 0x188]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x178]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1a4], 0xd96e786f
jmp 0x407e07