Function at 0x140024780
Capabilities:
Delete file
Terminate process

Disassembly:
push rbp
sub rsp, 0xd0
lea rbp, [rsp + 0x80]
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400247c2
jmp 0x140025ad3
mov eax, 0x10
mov qword [rbp + 0x40], rax
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp - 0x60], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp - 0x58], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp - 0x50], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp - 0x48], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp - 0x40], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp - 0x38], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp - 0x30], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp + 0x38], rcx
mov qword [rbp - 0x28], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp + 0x28], rcx
mov qword [rbp - 0x20], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp - 0x18], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp - 0x10], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp - 8], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp + 8], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp + 0x10], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp + 0x18], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x40]
mov rcx, rsp
mov qword [rbp + 0x20], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp + 0x28]
mov rcx, rsp
mov qword [rbp + 0x30], rcx
mov dword [rax], 0
sub rsp, 0x20
xor eax, eax
mov ecx, eax
call fcn.140025fe0
mov rcx, qword [rbp + 0x38]
add rsp, 0x20
mov rdx, rax
mov rax, qword [rbp + 0x40]
mov qword [rcx], rdx
call fcn.140046420
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x48], rax
mov dword [rax], 0x30c64d4f
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024995
jmp 0x140025ad3
jmp 0x14002499a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400249cc
jmp 0x140025bfd
mov rax, qword [rbp + 0x48]
mov eax, dword [rax]
mov dword [rbp - 0x64], eax
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024a07
jmp 0x140025bfd
mov eax, dword [rbp - 0x64]
sub eax, 0x841631f0
je 0x140024fb9
jmp 0x140024a1a
mov eax, dword [rbp - 0x64]
sub eax, 0x85daf236
je 0x140025385
jmp 0x140024a2d
mov eax, dword [rbp - 0x64]
sub eax, 0x951e1b1c
je 0x1400257ef
jmp 0x140024a40
mov eax, dword [rbp - 0x64]
sub eax, 0x97a23728
je 0x140025406
jmp 0x140024a53
mov eax, dword [rbp - 0x64]
sub eax, 0xab3c5600
je 0x1400259df
jmp 0x140024a66
mov eax, dword [rbp - 0x64]
sub eax, 0xbf2164e7
je 0x140025885
jmp 0x140024a79
mov eax, dword [rbp - 0x64]
sub eax, 0xc2afe743
je 0x140024de2
jmp 0x140024a8c
mov eax, dword [rbp - 0x64]
sub eax, 0xc7fd421d
je 0x140024ccf
jmp 0x140024a9f
mov eax, dword [rbp - 0x64]
sub eax, 0xe6f8b8c6
je 0x140024f0e
jmp 0x140024ab2
mov eax, dword [rbp - 0x64]
sub eax, 0xea8b611b
je 0x140025a5e
jmp 0x140024ac5
mov eax, dword [rbp - 0x64]
sub eax, 0xebfecbe9
je 0x14002574b
jmp 0x140024ad8
mov eax, dword [rbp - 0x64]
sub eax, 0x73ab35d
je 0x1400256ba
jmp 0x140024aeb
mov eax, dword [rbp - 0x64]
sub eax, 0x7d0f011
je 0x140025677
jmp 0x140024afe
mov eax, dword [rbp - 0x64]
sub eax, 0xb1e40c0
je 0x140025248
jmp 0x140024b11
mov eax, dword [rbp - 0x64]
sub eax, 0x13847b85
je 0x140025036
jmp 0x140024b24
mov eax, dword [rbp - 0x64]
sub eax, 0x2396da76
je 0x14002597b
jmp 0x140024b37
mov eax, dword [rbp - 0x64]
sub eax, 0x2ba46a17
je 0x140025637
jmp 0x140024b4a
mov eax, dword [rbp - 0x64]
sub eax, 0x30c64d4f
je 0x140024c0d
jmp 0x140024b5d
mov eax, dword [rbp - 0x64]
sub eax, 0x3546054b
je 0x140024d65
jmp 0x140024b70
mov eax, dword [rbp - 0x64]
sub eax, 0x3be4aa91
je 0x1400255b0
jmp 0x140024b83
mov eax, dword [rbp - 0x64]
sub eax, 0x4031385f
je 0x140024e8a
jmp 0x140024b96
mov eax, dword [rbp - 0x64]
sub eax, 0x4206d8a9
je 0x140025436
jmp 0x140024ba9
mov eax, dword [rbp - 0x64]
sub eax, 0x5281c2d1
je 0x14002551d
jmp 0x140024bbc
mov eax, dword [rbp - 0x64]
sub eax, 0x5d3d2703
je 0x1400258f8
jmp 0x140024bcf
mov eax, dword [rbp - 0x64]
sub eax, 0x666c6542
je 0x14002548b
jmp 0x140024be2
mov eax, dword [rbp - 0x64]
sub eax, 0x779651d9
je 0x1400250f9
jmp 0x140024bf5
mov eax, dword [rbp - 0x64]
sub eax, 0x7b33dd31
je 0x1400252de
jmp 0x140024c08
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024c3f
jmp 0x140025c02
mov rax, qword [rbp - 0x28]
mov rax, qword [rax]
mov ecx, eax
sub rsp, 0x20
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call fcn.140005d90
add rsp, 0x20
mov ecx, 0xf001f
xor edx, edx
lea r8, str.N0iFlag
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov r8, qword [rbp - 0x18]
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 0x48]
mov qword [r8], rcx
mov ecx, 0xc2afe743
mov edx, 0xc7fd421d
cmp qword [r8], 0
cmove ecx, edx
mov dword [rax], ecx
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024cca
jmp 0x140025c02
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024d01
jmp 0x140025c60
xor eax, eax
mov r8d, eax
lea rdx, str.Can_not_Open_Device_
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov dword [rax], 0x3546054b
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024d60
jmp 0x140025c60
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024d97
jmp 0x140025c92
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x20]
mov dword [rcx], 0
mov dword [rax], 0xab3c5600
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024ddd
jmp 0x140025c92
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024e14
jmp 0x140025cab
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
mov edx, 0xf001f
xor r9d, r9d
xor eax, eax
sub rsp, 0x30
mov r8d, r9d
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rcx, qword [rbp - 0x10]
add rsp, 0x30
mov rdx, rax
mov rax, qword [rbp + 0x48]
mov qword [rcx], rdx
mov dword [rax], 0x4031385f
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024e85
jmp 0x140025cab
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024ebc
jmp 0x140025cef
mov rax, qword [rbp + 0x48]
mov r8, qword [rbp - 0x10]
mov ecx, 0x13847b85
mov edx, 0xe6f8b8c6
cmp qword [r8], 0
cmove ecx, edx
mov dword [rax], ecx
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024f09
jmp 0x140025cef
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024f40
jmp 0x140025d0f
xor eax, eax
mov r8d, eax
lea rdx, str.Can_not_Open_ViewMap_
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov dword [rax], 0x841631f0
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024fb4
jmp 0x140025d0f
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024feb
jmp 0x140025d56
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x20]
mov dword [rcx], 0
mov dword [rax], 0xab3c5600
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025031
jmp 0x140025d56
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025068
jmp 0x140025d6f
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp]
mov r8, qword [rbp - 8]
mov rdx, qword [rbp - 0x10]
mov rdx, qword [rdx]
mov qword [r8], rdx
mov rdx, qword [r8]
movsxd rdx, dword [rdx + 0x40]
xor r9d, r9d
sub r9, rdx
mov edx, 0x1cc
sub rdx, r9
mov r8, qword [r8]
movsxd r8, dword [r8 + 0x1c8]
movabs r9, 0xd343af9614e61f10
sub rdx, r9
add rdx, r8
movabs r8, 0xd343af9614e61f10
add rdx, r8
mov dword [rcx], edx
mov dword [rax], 0x779651d9
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400250f4
jmp 0x140025d6f
jmp 0x140025a6a
mov rax, qword [rbp]
mov eax, dword [rax]
shl eax, 1
add eax, 0x984f1e2d
add eax, 1
sub eax, 0x984f1e2d
movsxd rcx, eax
sub rsp, 0x20
call fcn.140046400
mov rdx, qword [rbp - 0x10]
mov rcx, qword [rbp + 8]
add rsp, 0x20
mov r8, rax
mov rax, qword [rbp]
mov qword [rcx], r8
mov rcx, qword [rcx]
mov rdx, qword [rdx]
movsxd r8, dword [rax]
sub rsp, 0x20
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp - 8]
add rsp, 0x20
mov rax, qword [rax]
mov dword [rax + 0x1c4], 1
mov ecx, 0x7d0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rbp - 0x10]
add rsp, 0x20
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 8]
add rsp, 0x20
mov rax, qword [rbp + 0x10]
mov rcx, qword [rcx]
mov qword [rax], rcx
mov rcx, qword [rax]
add rcx, 0xc4
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov r8, qword [rbp + 8]
mov rdx, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x10]
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov r8, qword [r8]
xor r9d, r9d
sub r9, 0x1cc
sub r8, r9
mov qword [rdx], r8
mov rdx, qword [rdx]
mov r8, qword [rcx]
movsxd r8, dword [r8 + 0x40]
movabs r9, 0x832c302745ed2b3e
add rdx, r9
add rdx, r8
movabs r8, 0x832c302745ed2b3e
sub rdx, r8
mov qword [rax], rdx
mov rcx, qword [rcx]
movsxd rdx, dword [rcx + 0x1c8]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.1400019a0
mov r8, qword [rbp + 0x30]
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 0x48]
mov qword [r8], rcx
mov ecx, 0xb1e40c0
mov edx, 0x85daf236
cmp qword [r8], 0
cmovne ecx, edx
mov dword [rax], ecx
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002527a
jmp 0x140025dce
xor eax, eax
mov r8d, eax
lea rdx, str.Error_Code:0x0
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov dword [rax], 0x7b33dd31
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400252d9
jmp 0x140025dce
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025310
jmp 0x140025e00
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x20]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov dword [rcx], 0
mov dword [rax], 0xab3c5600
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025380
jmp 0x140025e00
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400253b7
jmp 0x140025e43
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x30]
mov rdx, qword [0x14004b148]
mov qword [rcx], rdx
mov dword [rax], 0x97a23728
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025401
jmp 0x140025e43
jmp 0x140025a6a
mov rax, qword [rbp - 0x30]
mov rax, qword [rax]
sub rsp, 0x20
call rax
add rsp, 0x20
mov r8b, al
mov rax, qword [rbp + 0x48]
mov ecx, 0x4206d8a9
mov edx, 0x5281c2d1
cmp r8b, 0
cmovne ecx, edx
mov dword [rax], ecx
jmp 0x140025a6a
xor eax, eax
mov r8d, eax
lea rdx, str.Error_Code:0x1
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rdx, qword [rbp - 0x18]
mov rcx, qword [rbp - 0x38]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x666c6542
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400254bd
jmp 0x140025e60
mov rax, qword [rbp - 0x38]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x20]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov dword [rcx], 0
mov dword [rax], 0xab3c5600
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025518
jmp 0x140025e60
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002554f
jmp 0x140025e8e
mov rcx, qword [rbp + 0x10]
mov rax, qword [0x14004b150]
mov rcx, qword [rcx]
sub rsp, 0x20
call rax
mov rcx, qword [rbp - 0x40]
add rsp, 0x20
mov dl, al
mov rax, qword [rbp + 0x48]
mov byte [rcx], dl
mov dword [rax], 0x3be4aa91
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400255ab
jmp 0x140025e8e
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400255e2
jmp 0x140025ebd
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x40]
mov r8b, byte [rcx]
mov ecx, 0x2ba46a17
mov edx, 0x73ab35d
cmp r8b, 0
cmovne ecx, edx
mov dword [rax], ecx
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025632
jmp 0x140025ebd
jmp 0x140025a6a
xor eax, eax
mov r8d, eax
lea rdx, str.Error_Code:0x2
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x48]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x7d0f011
jmp 0x140025a6a
mov rax, qword [rbp - 0x48]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x20]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov dword [rcx], 0
mov dword [rax], 0xab3c5600
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400256ec
jmp 0x140025ee0
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp + 0x10]
mov r8, qword [rbp - 0x50]
mov r9, qword [0x14004b158]
mov qword [r8], r9
mov rdx, qword [rdx]
mov edx, dword [rdx + 0x40]
mov dword [rcx], edx
mov dword [rax], 0xebfecbe9
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025746
jmp 0x140025ee0
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002577d
jmp 0x140025f0d
mov rcx, qword [rbp - 0x58]
mov rax, qword [rbp - 0x50]
mov rdx, qword [rbp + 0x18]
mov rdx, qword [rdx]
mov rax, qword [rax]
mov r8d, dword [rcx]
xor ecx, ecx
sub rsp, 0x20
call rax
add rsp, 0x20
mov r8b, al
mov rax, qword [rbp + 0x48]
mov ecx, 0x5d3d2703
mov edx, 0x951e1b1c
cmp r8b, 0
cmovne ecx, edx
mov dword [rax], ecx
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400257ea
jmp 0x140025f0d
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025821
jmp 0x140025f4d
xor eax, eax
mov r8d, eax
lea rdx, [0x140048a12]
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov dword [rax], 0xbf2164e7
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025880
jmp 0x140025f4d
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400258b7
jmp 0x140025f7f
mov rax, qword [rbp + 0x48]
mov dword [rax], 0x5d3d2703
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400258f3
jmp 0x140025f7f
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002592a
jmp 0x140025f8e
xor ecx, ecx
sub rsp, 0x20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov rax, qword [rbp + 0x48]
add rsp, 0x20
mov dword [rax], 0x2396da76
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025976
jmp 0x140025f8e
jmp 0x140025a6a
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400259ad
jmp 0x140025fad
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400259df
jmp 0x140025fad
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025a11
jmp 0x140025fb2
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x60]
mov rdx, qword [rbp - 0x20]
mov edx, dword [rdx]
mov dword [rcx], edx
mov dword [rax], 0xea8b611b
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025a59
jmp 0x140025fb2
jmp 0x140025a6a
mov rax, qword [rbp - 0x60]
mov eax, dword [rax]
lea rsp, [rbp + 0x50]
pop rbp
ret
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025a9c
jmp 0x140025fcd
mov eax, dword [0x14004b2bc]
mov ecx, dword [0x14004b2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025ace
jmp 0x140025fcd
jmp 0x14002499a
mov eax, 0x10
mov qword [rbp - 0x70], rax
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov rcx, rsp
mov qword [rbp - 0x78], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov rcx, rsp
mov qword [rbp - 0x80], rcx
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x70]
call fcn.140046420
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov dword [rax], 0
sub rsp, 0x20
xor eax, eax
mov ecx, eax
call fcn.140025fe0
mov rcx, qword [rbp - 0x78]
add rsp, 0x20
mov rdx, rax
mov rax, qword [rbp - 0x70]
mov qword [rcx], rdx
call fcn.140046420
sub rsp, rax
mov rax, rsp
mov dword [rax], 0x30c64d4f
jmp 0x1400247c2
jmp 0x1400249cc
mov rax, qword [rbp - 0x28]
mov rax, qword [rax]
mov ecx, eax
sub rsp, 0x20
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call fcn.140005d90
add rsp, 0x20
mov ecx, 0xf001f
xor edx, edx
lea r8, str.N0iFlag
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov r8, qword [rbp - 0x18]
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp + 0x48]
mov qword [r8], rcx
mov ecx, 0xc2afe743
mov edx, 0xc7fd421d
cmp qword [r8], 0
cmove ecx, edx
mov dword [rax], ecx
jmp 0x140024c3f
xor eax, eax
mov r8d, eax
lea rdx, str.Can_not_Open_Device_
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov dword [rax], 0x3546054b
jmp 0x140024d01
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x20]
mov dword [rcx], 0
mov dword [rax], 0xab3c5600
jmp 0x140024d97
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
mov edx, 0xf001f
xor r9d, r9d
xor eax, eax
sub rsp, 0x30
mov r8d, r9d
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rcx, qword [rbp - 0x10]
add rsp, 0x30
mov rdx, rax
mov rax, qword [rbp + 0x48]
mov qword [rcx], rdx
mov dword [rax], 0x4031385f
jmp 0x140024e14
mov rax, qword [rbp + 0x48]
mov r8, qword [rbp - 0x10]
mov ecx, 0x13847b85
mov edx, 0xe6f8b8c6
cmp qword [r8], 0
cmove ecx, edx
mov dword [rax], ecx
jmp 0x140024ebc
xor eax, eax
mov r8d, eax
lea rdx, str.Can_not_Open_ViewMap_
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov dword [rax], 0x841631f0
jmp 0x140024f40
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x20]
mov dword [rcx], 0
mov dword [rax], 0xab3c5600
jmp 0x140024feb
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp]
mov r8, qword [rbp - 8]
mov rdx, qword [rbp - 0x10]
mov rdx, qword [rdx]
mov qword [r8], rdx
mov rdx, qword [r8]
movsxd rdx, dword [rdx + 0x40]
xor r9d, r9d
sub r9, rdx
mov edx, 0x1cc
sub rdx, r9
mov r8, qword [r8]
movsxd r8, dword [r8 + 0x1c8]
movabs r9, 0xd343af9614e61f10
sub rdx, r9
add rdx, r8
movabs r8, 0xd343af9614e61f10
add rdx, r8
mov dword [rcx], edx
mov dword [rax], 0x779651d9
jmp 0x140025068
xor eax, eax
mov r8d, eax
lea rdx, str.Error_Code:0x0
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov dword [rax], 0x7b33dd31
jmp 0x14002527a
mov rax, qword [rbp - 0x10]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x20]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov dword [rcx], 0
mov dword [rax], 0xab3c5600
jmp 0x140025310
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x30]
mov rdx, qword [0x14004b148]
mov qword [rcx], rdx
mov dword [rax], 0x97a23728
jmp 0x1400253b7
mov rax, qword [rbp - 0x38]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x20]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov dword [rcx], 0
mov dword [rax], 0xab3c5600
jmp 0x1400254bd
mov rcx, qword [rbp + 0x10]
mov rax, qword [0x14004b150]
mov rcx, qword [rcx]
sub rsp, 0x20
call rax
mov rcx, qword [rbp - 0x40]
add rsp, 0x20
mov dl, al
mov rax, qword [rbp + 0x48]
mov byte [rcx], dl
mov dword [rax], 0x3be4aa91
jmp 0x14002554f
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x40]
mov r8b, byte [rcx]
mov ecx, 0x2ba46a17
mov edx, 0x73ab35d
cmp r8b, 0
cmovne ecx, edx
mov dword [rax], ecx
jmp 0x1400255e2
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp + 0x10]
mov r8, qword [rbp - 0x50]
mov r9, qword [0x14004b158]
mov qword [r8], r9
mov rdx, qword [rdx]
mov edx, dword [rdx + 0x40]
mov dword [rcx], edx
mov dword [rax], 0xebfecbe9
jmp 0x1400256ec
mov rcx, qword [rbp - 0x58]
mov rax, qword [rbp - 0x50]
mov rdx, qword [rbp + 0x18]
mov rdx, qword [rdx]
mov rax, qword [rax]
mov r8d, dword [rcx]
xor ecx, ecx
sub rsp, 0x20
call rax
add rsp, 0x20
mov r8b, al
mov rax, qword [rbp + 0x48]
mov ecx, 0x5d3d2703
mov edx, 0x951e1b1c
cmp r8b, 0
cmovne ecx, edx
mov dword [rax], ecx
jmp 0x14002577d
xor eax, eax
mov r8d, eax
lea rdx, [0x140048a12]
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov dword [rax], 0xbf2164e7
jmp 0x140025821
mov rax, qword [rbp + 0x48]
mov dword [rax], 0x5d3d2703
jmp 0x1400258b7
xor ecx, ecx
sub rsp, 0x20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov rax, qword [rbp + 0x48]
add rsp, 0x20
mov dword [rax], 0x2396da76
jmp 0x14002592a
jmp 0x1400259ad
mov rax, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x60]
mov rdx, qword [rbp - 0x20]
mov edx, dword [rdx]
mov dword [rcx], edx
mov dword [rax], 0xea8b611b
jmp 0x140025a11
jmp 0x140025a9c