Function at 0x40b2c0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x9c
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa0], eax
mov eax, dword [0x43c080]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x9c], 0x558100e2
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], eax
sub eax, 0x84f23bf3
je 0x40bd69
jmp 0x40b304
mov eax, dword [ebp - 0xa4]
sub eax, 0x8e5e9faa
je 0x40bf65
jmp 0x40b31a
mov eax, dword [ebp - 0xa4]
sub eax, 0x8fa6fc6b
je 0x40bf1c
jmp 0x40b330
mov eax, dword [ebp - 0xa4]
sub eax, 0x96fde710
je 0x40c050
jmp 0x40b346
mov eax, dword [ebp - 0xa4]
sub eax, 0x97457675
je 0x40bbe6
jmp 0x40b35c
mov eax, dword [ebp - 0xa4]
sub eax, 0x99c794af
je 0x40b8ee
jmp 0x40b372
mov eax, dword [ebp - 0xa4]
sub eax, 0x9d0a19f1
je 0x40b85e
jmp 0x40b388
mov eax, dword [ebp - 0xa4]
sub eax, 0xab186ed5
je 0x40bf3c
jmp 0x40b39e
mov eax, dword [ebp - 0xa4]
sub eax, 0xad194723
je 0x40bb78
jmp 0x40b3b4
mov eax, dword [ebp - 0xa4]
sub eax, 0xaf246799
je 0x40b9e9
jmp 0x40b3ca
mov eax, dword [ebp - 0xa4]
sub eax, 0xb19d39b0
je 0x40beb9
jmp 0x40b3e0
mov eax, dword [ebp - 0xa4]
sub eax, 0xb441b667
je 0x40ba4b
jmp 0x40b3f6
mov eax, dword [ebp - 0xa4]
sub eax, 0xb8db2300
je 0x40b982
jmp 0x40b40c
mov eax, dword [ebp - 0xa4]
sub eax, 0xc189029a
je 0x40c0aa
jmp 0x40b422
mov eax, dword [ebp - 0xa4]
sub eax, 0xc671a149
je 0x40bc80
jmp 0x40b438
mov eax, dword [ebp - 0xa4]
sub eax, 0xc692087e
je 0x40c036
jmp 0x40b44e
mov eax, dword [ebp - 0xa4]
sub eax, 0xd8cd399b
je 0x40ba07
jmp 0x40b464
mov eax, dword [ebp - 0xa4]
sub eax, 0xda393ed2
je 0x40b7cc
jmp 0x40b47a
mov eax, dword [ebp - 0xa4]
sub eax, 0xf2dfb60f
je 0x40bbad
jmp 0x40b490
mov eax, dword [ebp - 0xa4]
sub eax, 0x2bd9d80
je 0x40bc49
jmp 0x40b4a6
mov eax, dword [ebp - 0xa4]
sub eax, 0x8c1da77
je 0x40be99
jmp 0x40b4bc
mov eax, dword [ebp - 0xa4]
sub eax, 0xfa87e0b
je 0x40be8a
jmp 0x40b4d2
mov eax, dword [ebp - 0xa4]
sub eax, 0x10a1b4b1
je 0x40c025
jmp 0x40b4e8
mov eax, dword [ebp - 0xa4]
sub eax, 0x12ad460c
je 0x40b939
jmp 0x40b4fe
mov eax, dword [ebp - 0xa4]
sub eax, 0x1481aec0
je 0x40bee1
jmp 0x40b514
mov eax, dword [ebp - 0xa4]
sub eax, 0x165e28d0
je 0x40bec8
jmp 0x40b52a
mov eax, dword [ebp - 0xa4]
sub eax, 0x1acfd7f3
je 0x40bb69
jmp 0x40b540
mov eax, dword [ebp - 0xa4]
sub eax, 0x1f2801d4
je 0x40b8d7
jmp 0x40b556
mov eax, dword [ebp - 0xa4]
sub eax, 0x214a9673
je 0x40b813
jmp 0x40b56c
mov eax, dword [ebp - 0xa4]
sub eax, 0x28b95c38
je 0x40b7bd
jmp 0x40b582
mov eax, dword [ebp - 0xa4]
sub eax, 0x2d7f6aa6
je 0x40bad0
jmp 0x40b598
mov eax, dword [ebp - 0xa4]
sub eax, 0x2f748681
je 0x40c016
jmp 0x40b5ae
mov eax, dword [ebp - 0xa4]
sub eax, 0x35cfa077
je 0x40bdb2
jmp 0x40b5c4
mov eax, dword [ebp - 0xa4]
sub eax, 0x39536458
je 0x40ba62
jmp 0x40b5da
mov eax, dword [ebp - 0xa4]
sub eax, 0x3a44afc4
je 0x40ba1e
jmp 0x40b5f0
mov eax, dword [ebp - 0xa4]
sub eax, 0x3f2c6ffb
je 0x40bf0d
jmp 0x40b606
mov eax, dword [ebp - 0xa4]
sub eax, 0x558100e2
je 0x40b6d1
jmp 0x40b61c
mov eax, dword [ebp - 0xa4]
sub eax, 0x56626515
je 0x40bc06
jmp 0x40b632
mov eax, dword [ebp - 0xa4]
sub eax, 0x58e3eefc
je 0x40bfb6
jmp 0x40b648
mov eax, dword [ebp - 0xa4]
sub eax, 0x5f258fef
je 0x40bcb6
jmp 0x40b65e
mov eax, dword [ebp - 0xa4]
sub eax, 0x628620fd
je 0x40b8c8
jmp 0x40b674
mov eax, dword [ebp - 0xa4]
sub eax, 0x6378f80d
je 0x40c120
jmp 0x40b68a
mov eax, dword [ebp - 0xa4]
sub eax, 0x745a403c
je 0x40bbcd
jmp 0x40b6a0
mov eax, dword [ebp - 0xa4]
sub eax, 0x79487f87
je 0x40b79c
jmp 0x40b6b6
mov eax, dword [ebp - 0xa4]
sub eax, 0x7cb5f55b
je 0x40ba3c
jmp 0x40b6cc
jmp 0x40c139
mov eax, dword [ebp - 0xa0]
push eax
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x90], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x8c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x88], ecx
sub esp, 0x104
mov ecx, esp
mov dword [ebp - 0x84], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x80], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x7c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x78], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x74], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x70], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x6c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x68], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x64], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x94], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x90]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.004260b0
add esp, 0xc
mov eax, dword [ebp - 0x94]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov dword [ebp - 0x9c], 0x79487f87
jmp 0x40c139
mov edx, dword [ebp - 0x8c]
mov eax, 0x28b95c38
mov ecx, 0xda393ed2
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40c139
mov dword [ebp - 0x9c], 0x10a1b4b1
jmp 0x40c139
mov eax, dword [ebp - 0x8c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x90]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x9c], 0x214a9673
jmp 0x40c139
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x8c]
mov ecx, dword [ecx]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x9c], 0x9d0a19f1
jmp 0x40c139
mov eax, dword [ebp - 0x58]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov edx, dword [ebp - 0x80]
mov esi, 0xffffffff
mov eax, 0x1f2801d4
mov ecx, 0x628620fd
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40c139
mov dword [ebp - 0x9c], 0x10a1b4b1
jmp 0x40c139
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x9c], 0x99c794af
jmp 0x40c139
mov eax, dword [ebp - 0x54]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x9c], 0x12ad460c
jmp 0x40c139
mov eax, dword [0x43d58c]
mov ecx, dword [0x43d588]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc692087e
mov ecx, 0xb8db2300
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40c139
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x49], al
mov eax, dword [0x43d58c]
mov ecx, dword [0x43d588]
mov edx, eax
add edx, 0xb944a7e8
sub edx, 1
sub edx, 0xb944a7e8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc692087e
mov ecx, 0xaf246799
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40c139
mov dl, byte [ebp - 0x49]
mov eax, 0xd8cd399b
mov ecx, 0xb441b667
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40c139
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x9c], 0x3a44afc4
jmp 0x40c139
mov eax, dword [ebp - 0x48]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x9c], 0x7cb5f55b
jmp 0x40c139
mov dword [ebp - 0x9c], 0x10a1b4b1
jmp 0x40c139
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x9c], 0x39536458
jmp 0x40c139
mov ecx, dword [0x43d58c]
mov eax, dword [0x43d588]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x96fde710
mov ecx, 0x2d7f6aa6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40c139
mov eax, dword [ebp - 0x44]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [0x43d58c]
mov ecx, dword [0x43d588]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x96fde710
mov ecx, 0x1acfd7f3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40c139
mov dword [ebp - 0x9c], 0xad194723
jmp 0x40c139
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x40]
sub ecx, 0xe78e3a03
add ecx, eax
add ecx, 0xe78e3a03
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
mov word [eax], 0
mov dword [ebp - 0x9c], 0xf2dfb60f
jmp 0x40c139
mov eax, dword [ebp - 0x6c]
movzx eax, word [eax]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x9c], 0x745a403c
jmp 0x40c139
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + 6]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x9c], 0x97457675
jmp 0x40c139
mov edx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x34]
mov eax, 0x8fa6fc6b
mov ecx, 0x56626515
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40c139
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
add eax, 0xe27b59d2
add eax, 0x18
sub eax, 0xe27b59d2
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
sub eax, 0x716172dd
add eax, ecx
add eax, 0x716172dd
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x6c]
mov ax, word [eax]
mov word [ebp - 0x2a], ax
mov dword [ebp - 0x9c], 0x2bd9d80
jmp 0x40c139
mov ax, word [ebp - 0x2a]
movzx eax, ax
imul edx, eax, 0x28
mov ecx, dword [ebp - 0x30]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x9c], 0xc671a149
jmp 0x40c139
mov ecx, dword [ebp - 0x28]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x434e56
call fcn.004299b0
add esp, 8
mov edx, eax
mov eax, 0x5f258fef
mov ecx, 0xb19d39b0
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40c139
mov eax, dword [ebp - 0x64]
mov dword [eax], 0
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x88]
mov edx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0x143e286c
add edx, eax
sub edx, 0x143e286c
mov eax, dword [ebp - 0x64]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x60]
mov byte [eax], cl
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x68]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x68]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
add eax, 0xc295a9a6
add eax, ecx
sub eax, 0xc295a9a6
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x9c], 0x84f23bf3
jmp 0x40c139
mov eax, dword [0x43d58c]
mov ecx, dword [0x43d588]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc189029a
mov ecx, 0x35cfa077
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40c139
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00426210
add esp, 0xc
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x88]
mov esi, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub esi, 0xe6bdf026
add esi, eax
add esi, 0xe6bdf026
mov eax, dword [ebp - 0x64]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x18], eax
mov ecx, dword [0x43d58c]
mov eax, dword [0x43d588]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc189029a
mov ecx, 0xfa87e0b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40c139
mov dword [ebp - 0x9c], 0x8c1da77
jmp 0x40c139
mov eax, dword [ebp - 0x18]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x60]
mov byte [eax], cl
mov dword [ebp - 0x9c], 0xb19d39b0
jmp 0x40c139
mov dword [ebp - 0x9c], 0x165e28d0
jmp 0x40c139
mov eax, dword [ebp - 0x6c]
mov ax, word [eax]
mov word [ebp - 0x12], ax
mov dword [ebp - 0x9c], 0x1481aec0
jmp 0x40c139
mov cx, word [ebp - 0x12]
xor eax, eax
sub ax, cx
xor ecx, ecx
sub cx, 1
add ax, cx
xor ecx, ecx
sub cx, ax
mov eax, dword [ebp - 0x6c]
mov word [eax], cx
mov dword [ebp - 0x9c], 0x3f2c6ffb
jmp 0x40c139
mov dword [ebp - 0x9c], 0xf2dfb60f
jmp 0x40c139
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x9c], 0xab186ed5
jmp 0x40c139
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x9c], 0x8e5e9faa
jmp 0x40c139
mov eax, dword [0x43d58c]
mov ecx, dword [0x43d588]
mov edx, eax
sub edx, 0x627b6139
sub edx, 1
add edx, 0x627b6139
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6378f80d
mov ecx, 0x58e3eefc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40c139
mov eax, dword [ebp - 0x10]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x43d58c]
mov ecx, dword [0x43d588]
mov edx, eax
sub edx, 0x29644e00
sub edx, 1
add edx, 0x29644e00
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6378f80d
mov ecx, 0x2f748681
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40c139
mov dword [ebp - 0x9c], 0x10a1b4b1
jmp 0x40c139
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.00425390
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x9c], 0xb8db2300
jmp 0x40c139
mov eax, dword [ebp - 0x44]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x9c], 0x2d7f6aa6
jmp 0x40c139
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00426210
add esp, 0xc
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x88]
mov esi, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add esi, 0xed1cb014
add esi, eax
sub esi, 0xed1cb014
mov eax, dword [ebp - 0x64]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x9c], 0x35cfa077
jmp 0x40c139
mov eax, dword [ebp - 0x10]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x9c], 0x58e3eefc
jmp 0x40b2e8