Function at 0x140023ab0
Capabilities:
Delete file
Terminate process

Disassembly:
push rbp
sub rsp, 0xe0
lea rbp, [rsp + 0x80]
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140023af2
jmp 0x140024fda
mov eax, 0x10
mov qword [rbp + 0x48], rax
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp - 0x50], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp - 0x48], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp - 0x40], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp - 0x38], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp - 0x30], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp - 0x28], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp - 0x20], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp - 0x18], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp - 0x10], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp - 8], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp + 8], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp + 0x10], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp + 0x18], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp + 0x20], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp + 0x28], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp + 0x30], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp + 0x38], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp + 0x40], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x48]
mov rcx, rsp
mov qword [rbp + 0x50], rcx
call fcn.1400451b0
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x58], rax
mov dword [rax], 0x1ec2645
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140023cbe
jmp 0x140024fda
jmp 0x140023cc3
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140023cf5
jmp 0x1400250e9
mov rax, qword [rbp + 0x58]
mov eax, dword [rax]
mov dword [rbp - 0x54], eax
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140023d30
jmp 0x1400250e9
mov eax, dword [rbp - 0x54]
sub eax, 0x8210fa21
je 0x140024acf
jmp 0x140023d43
mov eax, dword [rbp - 0x54]
sub eax, 0x8bbb2585
je 0x140024e7c
jmp 0x140023d56
mov eax, dword [rbp - 0x54]
sub eax, 0x91dbc107
je 0x140024a34
jmp 0x140023d69
mov eax, dword [rbp - 0x54]
sub eax, 0x9ae78d62
je 0x14002427c
jmp 0x140023d7c
mov eax, dword [rbp - 0x54]
sub eax, 0xad038a25
je 0x1400249a5
jmp 0x140023d8f
mov eax, dword [rbp - 0x54]
sub eax, 0xb4ec203c
je 0x14002442b
jmp 0x140023da2
mov eax, dword [rbp - 0x54]
sub eax, 0xbf1c9ecc
je 0x1400240b7
jmp 0x140023db5
mov eax, dword [rbp - 0x54]
sub eax, 0xbfb8aacf
je 0x140024df9
jmp 0x140023dc8
mov eax, dword [rbp - 0x54]
sub eax, 0xd135b694
je 0x140024303
jmp 0x140023ddb
mov eax, dword [rbp - 0x54]
sub eax, 0xd8ba4e3b
je 0x140024845
jmp 0x140023dee
mov eax, dword [rbp - 0x54]
sub eax, 0xdd850d6b
je 0x1400246da
jmp 0x140023e01
mov eax, dword [rbp - 0x54]
sub eax, 0xf6197bc8
je 0x14002414d
jmp 0x140023e14
mov eax, dword [rbp - 0x54]
sub eax, 0xf67b6cee
je 0x140024996
jmp 0x140023e27
mov eax, dword [rbp - 0x54]
sub eax, 0xfde2d6e0
je 0x140024cf0
jmp 0x140023e3a
mov eax, dword [rbp - 0x54]
sub eax, 0x471d4e
je 0x140024c4c
jmp 0x140023e4d
mov eax, dword [rbp - 0x54]
sub eax, 0x1ec2645
je 0x140023f9a
jmp 0x140023e60
mov eax, dword [rbp - 0x54]
sub eax, 0xe7a852a
je 0x140024b99
jmp 0x140023e73
mov eax, dword [rbp - 0x54]
sub eax, 0x150e5803
je 0x140024f5f
jmp 0x140023e86
mov eax, dword [rbp - 0x54]
sub eax, 0x2ad16c29
je 0x140024ee0
jmp 0x140023e99
mov eax, dword [rbp - 0x54]
sub eax, 0x3fd8069b
je 0x1400248cc
jmp 0x140023eac
mov eax, dword [rbp - 0x54]
sub eax, 0x42408fd8
je 0x140024d86
jmp 0x140023ebf
mov eax, dword [rbp - 0x54]
sub eax, 0x444cda5b
je 0x1400243ae
jmp 0x140023ed2
mov eax, dword [rbp - 0x54]
sub eax, 0x4e84d3bd
je 0x1400241ca
jmp 0x140023ee5
mov eax, dword [rbp - 0x54]
sub eax, 0x514554fc
je 0x140024c0c
jmp 0x140023ef8
mov eax, dword [rbp - 0x54]
sub eax, 0x5d96ec73
je 0x1400247b3
jmp 0x140023f0b
mov eax, dword [rbp - 0x54]
sub eax, 0x69b26589
je 0x140024606
jmp 0x140023f1e
mov eax, dword [rbp - 0x54]
sub eax, 0x6e83b559
je 0x1400247a4
jmp 0x140023f31
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140023f63
jmp 0x1400250ee
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140023f95
jmp 0x1400250ee
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140023fcc
jmp 0x1400250f3
mov rcx, qword [rbp]
mov rdx, qword [rbp + 8]
mov r8, qword [rbp + 0x10]
mov eax, 0x10
mov qword [rbp - 0x60], rax
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r9, rsp
mov qword [r8], r9
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x60]
mov r8, rsp
mov qword [rdx], r8
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x18]
mov rdx, rsp
mov qword [rcx], rdx
mov dword [rax], 0
xor eax, eax
mov ecx, eax
sub rsp, 0x20
call fcn.140025770
add rsp, 0x20
mov ecx, eax
sub rsp, 0x20
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call fcn.140005bb0
add rsp, 0x20
mov ecx, 0xf001f
xor edx, edx
lea r8, str.N0iFlag
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov r8, qword [rbp + 0x20]
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 0x58]
mov qword [r8], rcx
mov ecx, 0x4e84d3bd
mov edx, 0xbf1c9ecc
cmp qword [r8], 0
cmove ecx, edx
mov dword [rax], ecx
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400240b2
jmp 0x1400250f3
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400240e9
jmp 0x1400251ac
xor eax, eax
mov r8d, eax
lea rdx, str.Can_not_Open_Device_
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x58]
mov dword [rax], 0xf6197bc8
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024148
jmp 0x1400251ac
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002417f
jmp 0x1400251de
mov rax, qword [rbp + 0x58]
mov rcx, qword [rbp + 0x18]
mov dword [rcx], 0
mov dword [rax], 0x2ad16c29
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400241c5
jmp 0x1400251de
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400241fc
jmp 0x1400251f7
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
mov edx, 0xf001f
xor r9d, r9d
xor eax, eax
sub rsp, 0x30
mov r8d, r9d
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp - 8]
add rsp, 0x30
mov r8, rax
mov rax, qword [rbp + 0x58]
mov qword [rdx], r8
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x9ae78d62
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024277
jmp 0x1400251f7
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400242ae
jmp 0x140025245
mov rax, qword [rbp + 0x58]
mov rcx, qword [rbp - 8]
mov r8, qword [rcx]
mov ecx, 0xb4ec203c
mov edx, 0xd135b694
cmp r8, 0
cmove ecx, edx
mov dword [rax], ecx
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400242fe
jmp 0x140025245
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024335
jmp 0x140025268
xor eax, eax
mov r8d, eax
lea rdx, str.Can_not_Open_ViewMap_
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rax, qword [rbp + 0x58]
mov dword [rax], 0x444cda5b
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400243a9
jmp 0x140025268
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400243e0
jmp 0x1400252af
mov rax, qword [rbp + 0x58]
mov rcx, qword [rbp + 0x18]
mov dword [rcx], 0
mov dword [rax], 0x2ad16c29
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024426
jmp 0x1400252af
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002445d
jmp 0x1400252c8
mov rcx, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x30]
mov rax, qword [rbp + 0x38]
mov rcx, qword [rcx]
mov qword [rdx], rcx
mov rcx, qword [rdx]
movsxd r8, dword [rcx + 0x40]
mov ecx, 0x1cc
movabs r9, 0x50aead311eeb4bed
sub rcx, r9
add rcx, r8
movabs r8, 0x50aead311eeb4bed
add rcx, r8
mov rdx, qword [rdx]
movsxd r8, dword [rdx + 0x1c8]
xor edx, edx
sub rdx, rcx
xor ecx, ecx
sub rcx, r8
add rdx, rcx
xor ecx, ecx
sub rcx, rdx
mov dword [rax], ecx
mov eax, dword [rax]
shl eax, 1
sub eax, 0xf73554f8
add eax, 1
add eax, 0xf73554f8
movsxd rcx, eax
sub rsp, 0x20
call fcn.140045198
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x40]
add rsp, 0x20
mov r8, rax
mov rax, qword [rbp + 0x38]
mov qword [rcx], r8
mov rcx, qword [rcx]
mov rdx, qword [rdx]
movsxd r8, dword [rax]
sub rsp, 0x20
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp + 0x30]
add rsp, 0x20
mov rax, qword [rax]
mov dword [rax + 0x1c4], 1
mov ecx, 0x7d0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rbp + 0x28]
add rsp, 0x20
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x40]
add rsp, 0x20
mov rax, qword [rbp + 0x50]
mov rcx, qword [rcx]
mov qword [rax], rcx
mov rcx, qword [rax]
add rcx, 0xc4
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov r10, qword [rbp + 0x40]
mov r9, qword [rbp + 0x10]
mov r8, qword [rbp - 0x10]
mov rdx, qword [rbp + 0x50]
mov rcx, qword [rbp - 0x18]
add rsp, 0x20
mov rax, qword [rbp + 0x58]
mov r11, qword [r10]
movabs r10, 0xb91492a1c9250d64
sub r11, r10
add r11, 0x1cc
movabs r10, 0xb91492a1c9250d64
add r11, r10
mov r10, qword [r9]
mov qword [r10], r11
mov r9, qword [r9]
mov r9, qword [r9]
mov qword [r8], r9
mov rdx, qword [rdx]
add rdx, 0x40
mov qword [rcx], rdx
mov dword [rax], 0x69b26589
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024601
jmp 0x1400252c8
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024638
jmp 0x14002543f
mov rax, qword [rbp + 8]
mov rcx, qword [rbp + 0x50]
mov rdx, qword [rbp - 0x10]
mov r8, qword [rbp - 0x18]
mov r8, qword [r8]
movsxd r9, dword [r8]
mov r8, qword [rdx]
xor edx, edx
sub rdx, r9
sub r8, rdx
mov rdx, qword [rax]
mov qword [rdx], r8
mov rcx, qword [rcx]
movsxd rdx, dword [rcx + 0x1c8]
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.1400019b0
mov rcx, qword [rbp]
add rsp, 0x20
mov r8, rax
mov rax, qword [rbp + 0x58]
mov rdx, qword [rcx]
mov qword [rdx], r8
mov r8, qword [rcx]
mov ecx, 0xdd850d6b
mov edx, 0x5d96ec73
cmp qword [r8], 0
cmovne ecx, edx
mov dword [rax], ecx
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400246d5
jmp 0x14002543f
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002470c
jmp 0x1400254af
xor eax, eax
mov r8d, eax
lea rdx, str.Error_Code:0x0
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x28]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x18]
add rsp, 0x20
mov rax, qword [rbp + 0x58]
mov dword [rcx], 0
mov dword [rax], 0x6e83b559
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002479f
jmp 0x1400254af
jmp 0x140024fd5
mov rax, qword [rbp + 0x58]
mov dword [rax], 0x2ad16c29
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400247e5
jmp 0x140025515
sub rsp, 0x20
call qword [0x140049148]
mov rcx, qword [rbp - 0x20]
add rsp, 0x20
mov dl, al
mov rax, qword [rbp + 0x58]
cmp dl, 0
setne dl
and dl, 1
mov byte [rcx], dl
mov dword [rax], 0xd8ba4e3b
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024840
jmp 0x140025515
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024877
jmp 0x140025543
mov rax, qword [rbp + 0x58]
mov rcx, qword [rbp - 0x20]
mov r8b, byte [rcx]
mov ecx, 0x3fd8069b
mov edx, 0xad038a25
test r8b, 1
cmovne ecx, edx
mov dword [rax], ecx
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400248c7
jmp 0x140025543
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400248fe
jmp 0x140025566
xor eax, eax
mov r8d, eax
lea rdx, str.Error_Code:0x1
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x28]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x18]
add rsp, 0x20
mov rax, qword [rbp + 0x58]
mov dword [rcx], 0
mov dword [rax], 0xf67b6cee
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024991
jmp 0x140025566
jmp 0x140024fd5
mov rax, qword [rbp + 0x58]
mov dword [rax], 0x2ad16c29
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400249d7
jmp 0x1400255cc
mov rax, qword [rbp + 0x58]
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp + 0x50]
mov r8, qword [rbp - 0x28]
mov r9, qword [0x140049150]
mov qword [r8], r9
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x91dbc107
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024a2f
jmp 0x1400255cc
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024a66
jmp 0x1400255f7
mov rax, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x30]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rsp, 0x20
call rax
add rsp, 0x20
mov r8b, al
mov rax, qword [rbp + 0x58]
mov ecx, 0x8210fa21
mov edx, 0x514554fc
cmp r8b, 0
cmovne ecx, edx
mov dword [rax], ecx
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024aca
jmp 0x1400255f7
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024b01
jmp 0x14002562e
xor eax, eax
mov r8d, eax
lea rdx, str.Error_Code:0x2
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x28]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x18]
add rsp, 0x20
mov rax, qword [rbp + 0x58]
mov dword [rcx], 0
mov dword [rax], 0xe7a852a
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024b94
jmp 0x14002562e
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024bcb
jmp 0x140025694
mov rax, qword [rbp + 0x58]
mov dword [rax], 0x2ad16c29
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024c07
jmp 0x140025694
jmp 0x140024fd5
mov rax, qword [rbp + 0x58]
mov rcx, qword [rbp - 0x48]
mov rdx, qword [rbp + 0x10]
mov r8, qword [rbp - 0x40]
mov r9, qword [rbp + 0x50]
mov r10, qword [rbp - 0x38]
mov r11, qword [0x140049158]
mov qword [r10], r11
mov r9, qword [r9]
mov r9d, dword [r9 + 0x40]
mov dword [r8], r9d
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x471d4e
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024c7e
jmp 0x1400256a3
mov rcx, qword [rbp - 0x40]
mov rax, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x48]
mov rdx, qword [rdx]
mov rax, qword [rax]
mov r8d, dword [rcx]
xor ecx, ecx
sub rsp, 0x20
call rax
add rsp, 0x20
mov r8b, al
mov rax, qword [rbp + 0x58]
mov ecx, 0xbfb8aacf
mov edx, 0xfde2d6e0
cmp r8b, 0
cmovne ecx, edx
mov dword [rax], ecx
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024ceb
jmp 0x1400256a3
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024d22
jmp 0x1400256e3
xor eax, eax
mov r8d, eax
lea rdx, [0x140046a22]
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x58]
mov dword [rax], 0x42408fd8
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024d81
jmp 0x1400256e3
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024db8
jmp 0x140025715
mov rax, qword [rbp + 0x58]
mov dword [rax], 0xbfb8aacf
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024df4
jmp 0x140025715
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024e2b
jmp 0x140025724
xor ecx, ecx
sub rsp, 0x20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov rax, qword [rbp + 0x58]
add rsp, 0x20
mov dword [rax], 0x8bbb2585
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024e77
jmp 0x140025724
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024eae
jmp 0x140025743
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024ee0
jmp 0x140025743
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024f12
jmp 0x140025748
mov rax, qword [rbp + 0x58]
mov rcx, qword [rbp - 0x50]
mov rdx, qword [rbp + 0x18]
mov edx, dword [rdx]
mov dword [rcx], edx
mov dword [rax], 0x150e5803
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024f5a
jmp 0x140025748
jmp 0x140024fd5
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024f91
jmp 0x140025763
mov rax, qword [rbp - 0x50]
mov eax, dword [rax]
mov dword [rbp - 0x64], eax
mov eax, dword [0x1400492bc]
mov ecx, dword [0x1400492c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024fcc
jmp 0x140025763
mov eax, dword [rbp - 0x64]
lea rsp, [rbp + 0x60]
pop rbp
ret
jmp 0x140023cc3
mov eax, 0x10
mov qword [rbp - 0x70], rax
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.1400451b0
sub rsp, rax
mov rax, rsp
mov dword [rax], 0x1ec2645
jmp 0x140023af2
jmp 0x140023cf5
jmp 0x140023f63
mov rcx, qword [rbp]
mov rdx, qword [rbp + 8]
mov r8, qword [rbp + 0x10]
mov eax, 0x10
mov qword [rbp - 0x78], rax
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov r9, rsp
mov qword [r8], r9
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov r8, rsp
mov qword [rdx], r8
call fcn.1400451b0
sub rsp, rax
mov rax, qword [rbp + 0x18]
mov rdx, rsp
mov qword [rcx], rdx
mov dword [rax], 0
xor eax, eax
mov ecx, eax
sub rsp, 0x20
call fcn.140025770
add rsp, 0x20
mov ecx, eax
sub rsp, 0x20
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call fcn.140005bb0
add rsp, 0x20
mov ecx, 0xf001f
xor edx, edx
lea r8, str.N0iFlag
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov r8, qword [rbp + 0x20]
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 0x58]
mov qword [r8], rcx
mov ecx, 0x4e84d3bd
mov edx, 0xbf1c9ecc
cmp qword [r8], 0
cmove ecx, edx
mov dword [rax], ecx
jmp 0x140023fcc
xor eax, eax
mov r8d, eax
lea rdx, str.Can_not_Open_Device_
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x58]
mov dword [rax], 0xf6197bc8
jmp 0x1400240e9
mov rax, qword [rbp + 0x58]
mov rcx, qword [rbp + 0x18]
mov dword [rcx], 0
mov dword [rax], 0x2ad16c29
jmp 0x14002417f
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
mov edx, 0xf001f
xor r9d, r9d
xor eax, eax
sub rsp, 0x30
mov r8d, r9d
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp - 8]
add rsp, 0x30
mov r8, rax
mov rax, qword [rbp + 0x58]
mov qword [rdx], r8
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x9ae78d62
jmp 0x1400241fc
mov rax, qword [rbp + 0x58]
mov rcx, qword [rbp - 8]
mov r8, qword [rcx]
mov ecx, 0xb4ec203c
mov edx, 0xd135b694
cmp r8, 0
cmove ecx, edx
mov dword [rax], ecx
jmp 0x1400242ae
xor eax, eax
mov r8d, eax
lea rdx, str.Can_not_Open_ViewMap_
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rax, qword [rbp + 0x58]
mov dword [rax], 0x444cda5b
jmp 0x140024335
mov rax, qword [rbp + 0x58]
mov rcx, qword [rbp + 0x18]
mov dword [rcx], 0
mov dword [rax], 0x2ad16c29
jmp 0x1400243e0
mov rcx, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x30]
mov rax, qword [rbp + 0x38]
mov rcx, qword [rcx]
mov qword [rdx], rcx
mov rcx, qword [rdx]
movsxd r8, dword [rcx + 0x40]
mov ecx, 0x1cc
movabs r9, 0x50aead311eeb4bed
sub rcx, r9
add rcx, r8
movabs r8, 0x50aead311eeb4bed
add rcx, r8
mov rdx, qword [rdx]
movsxd r8, dword [rdx + 0x1c8]
xor edx, edx
sub rdx, rcx
xor ecx, ecx
sub rcx, r8
add rdx, rcx
xor ecx, ecx
sub rcx, rdx
mov dword [rax], ecx
mov eax, dword [rax]
shl eax, 1
sub eax, 0xf73554f8
add eax, 1
add eax, 0xf73554f8
movsxd rcx, eax
sub rsp, 0x20
call fcn.140045198
mov rdx, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x40]
add rsp, 0x20
mov r8, rax
mov rax, qword [rbp + 0x38]
mov qword [rcx], r8
mov rcx, qword [rcx]
mov rdx, qword [rdx]
movsxd r8, dword [rax]
sub rsp, 0x20
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp + 0x30]
add rsp, 0x20
mov rax, qword [rax]
mov dword [rax + 0x1c4], 1
mov ecx, 0x7d0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rbp + 0x28]
add rsp, 0x20
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x40]
add rsp, 0x20
mov rax, qword [rbp + 0x50]
mov rcx, qword [rcx]
mov qword [rax], rcx
mov rcx, qword [rax]
add rcx, 0xc4
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov r10, qword [rbp + 0x40]
mov r9, qword [rbp + 0x10]
mov r8, qword [rbp - 0x10]
mov rdx, qword [rbp + 0x50]
mov rcx, qword [rbp - 0x18]
add rsp, 0x20
mov rax, qword [rbp + 0x58]
mov r11, qword [r10]
movabs r10, 0xb91492a1c9250d64
sub r11, r10
add r11, 0x1cc
movabs r10, 0xb91492a1c9250d64
add r11, r10
mov r10, qword [r9]
mov qword [r10], r11
mov r9, qword [r9]
mov r9, qword [r9]
mov qword [r8], r9
mov rdx, qword [rdx]
add rdx, 0x40
mov qword [rcx], rdx
mov dword [rax], 0x69b26589
jmp 0x14002445d
mov rax, qword [rbp + 8]
mov rcx, qword [rbp + 0x50]
mov rdx, qword [rbp - 0x10]
mov r8, qword [rbp - 0x18]
mov r8, qword [r8]
movsxd r9, dword [r8]
mov r8, qword [rdx]
xor edx, edx
sub rdx, r9
sub r8, rdx
mov rdx, qword [rax]
mov qword [rdx], r8
mov rcx, qword [rcx]
movsxd rdx, dword [rcx + 0x1c8]
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.1400019b0
mov rcx, qword [rbp]
add rsp, 0x20
mov r8, rax
mov rax, qword [rbp + 0x58]
mov rdx, qword [rcx]
mov qword [rdx], r8
mov r8, qword [rcx]
mov ecx, 0xdd850d6b
mov edx, 0x5d96ec73
cmp qword [r8], 0
cmovne ecx, edx
mov dword [rax], ecx
jmp 0x140024638
xor eax, eax
mov r8d, eax
lea rdx, str.Error_Code:0x0
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x28]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x18]
add rsp, 0x20
mov rax, qword [rbp + 0x58]
mov dword [rcx], 0
mov dword [rax], 0x6e83b559
jmp 0x14002470c
sub rsp, 0x20
call qword [0x140049148]
mov rcx, qword [rbp - 0x20]
add rsp, 0x20
mov dl, al
mov rax, qword [rbp + 0x58]
cmp dl, 0
setne dl
and dl, 1
mov byte [rcx], dl
mov dword [rax], 0xd8ba4e3b
jmp 0x1400247e5
mov rax, qword [rbp + 0x58]
mov rcx, qword [rbp - 0x20]
mov r8b, byte [rcx]
mov ecx, 0x3fd8069b
mov edx, 0xad038a25
test r8b, 1
cmovne ecx, edx
mov dword [rax], ecx
jmp 0x140024877
xor eax, eax
mov r8d, eax
lea rdx, str.Error_Code:0x1
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x28]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x18]
add rsp, 0x20
mov rax, qword [rbp + 0x58]
mov dword [rcx], 0
mov dword [rax], 0xf67b6cee
jmp 0x1400248fe
mov rax, qword [rbp + 0x58]
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp + 0x50]
mov r8, qword [rbp - 0x28]
mov r9, qword [0x140049150]
mov qword [r8], r9
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x91dbc107
jmp 0x1400249d7
mov rax, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x30]
mov rcx, qword [rcx]
mov rax, qword [rax]
sub rsp, 0x20
call rax
add rsp, 0x20
mov r8b, al
mov rax, qword [rbp + 0x58]
mov ecx, 0x8210fa21
mov edx, 0x514554fc
cmp r8b, 0
cmovne ecx, edx
mov dword [rax], ecx
jmp 0x140024a66
xor eax, eax
mov r8d, eax
lea rdx, str.Error_Code:0x2
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x28]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x18]
add rsp, 0x20
mov rax, qword [rbp + 0x58]
mov dword [rcx], 0
mov dword [rax], 0xe7a852a
jmp 0x140024b01
mov rax, qword [rbp + 0x58]
mov dword [rax], 0x2ad16c29
jmp 0x140024bcb
mov rcx, qword [rbp - 0x40]
mov rax, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x48]
mov rdx, qword [rdx]
mov rax, qword [rax]
mov r8d, dword [rcx]
xor ecx, ecx
sub rsp, 0x20
call rax
add rsp, 0x20
mov r8b, al
mov rax, qword [rbp + 0x58]
mov ecx, 0xbfb8aacf
mov edx, 0xfde2d6e0
cmp r8b, 0
cmovne ecx, edx
mov dword [rax], ecx
jmp 0x140024c7e
xor eax, eax
mov r8d, eax
lea rdx, [0x140046a22]
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x58]
mov dword [rax], 0x42408fd8
jmp 0x140024d22
mov rax, qword [rbp + 0x58]
mov dword [rax], 0xbfb8aacf
jmp 0x140024db8
xor ecx, ecx
sub rsp, 0x20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov rax, qword [rbp + 0x58]
add rsp, 0x20
mov dword [rax], 0x8bbb2585
jmp 0x140024e2b
jmp 0x140024eae
mov rax, qword [rbp + 0x58]
mov rcx, qword [rbp - 0x50]
mov rdx, qword [rbp + 0x18]
mov edx, dword [rdx]
mov dword [rcx], edx
mov dword [rax], 0x150e5803
jmp 0x140024f12
mov rax, qword [rbp - 0x50]
mov eax, dword [rax]
jmp 0x140024f91