Function at 0x401a50
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x98
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa0], eax
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x9c], 0x88c4ca61
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], eax
sub eax, 0x81d3b168
je 0x4027ae
jmp 0x401a95
mov eax, dword [ebp - 0xa4]
sub eax, 0x88c4ca61
je 0x401e62
jmp 0x401aab
mov eax, dword [ebp - 0xa4]
sub eax, 0x893afdb6
je 0x40252f
jmp 0x401ac1
mov eax, dword [ebp - 0xa4]
sub eax, 0x8aa657b3
je 0x402785
jmp 0x401ad7
mov eax, dword [ebp - 0xa4]
sub eax, 0x92c13198
je 0x401f85
jmp 0x401aed
mov eax, dword [ebp - 0xa4]
sub eax, 0xa57574b3
je 0x402794
jmp 0x401b03
mov eax, dword [ebp - 0xa4]
sub eax, 0xa7947425
je 0x402179
jmp 0x401b19
mov eax, dword [ebp - 0xa4]
sub eax, 0xa80188b6
je 0x402197
jmp 0x401b2f
mov eax, dword [ebp - 0xa4]
sub eax, 0xaf96c960
je 0x402465
jmp 0x401b45
mov eax, dword [ebp - 0xa4]
sub eax, 0xbe255f50
je 0x402674
jmp 0x401b5b
mov eax, dword [ebp - 0xa4]
sub eax, 0xc085fc4a
je 0x40269c
jmp 0x401b71
mov eax, dword [ebp - 0xa4]
sub eax, 0xc0be40fe
je 0x4023d7
jmp 0x401b87
mov eax, dword [ebp - 0xa4]
sub eax, 0xc1b6df96
je 0x40202e
jmp 0x401b9d
mov eax, dword [ebp - 0xa4]
sub eax, 0xc3742219
je 0x40203d
jmp 0x401bb3
mov eax, dword [ebp - 0xa4]
sub eax, 0xc566f779
je 0x40265d
jmp 0x401bc9
mov eax, dword [ebp - 0xa4]
sub eax, 0xcac5d05c
je 0x4027fe
jmp 0x401bdf
mov eax, dword [ebp - 0xa4]
sub eax, 0xd8f3f91c
je 0x402103
jmp 0x401bf5
mov eax, dword [ebp - 0xa4]
sub eax, 0xe4281446
je 0x402488
jmp 0x401c0b
mov eax, dword [ebp - 0xa4]
sub eax, 0xe6ee817b
je 0x4022a5
jmp 0x401c21
mov eax, dword [ebp - 0xa4]
sub eax, 0xe74bb2f3
je 0x40270f
jmp 0x401c37
mov eax, dword [ebp - 0xa4]
sub eax, 0xe882a396
je 0x4025de
jmp 0x401c4d
mov eax, dword [ebp - 0xa4]
sub eax, 0xeeb78433
je 0x40282a
jmp 0x401c63
mov eax, dword [ebp - 0xa4]
sub eax, 0xf1f34576
je 0x401f3a
jmp 0x401c79
mov eax, dword [ebp - 0xa4]
sub eax, 0xfbfdab1b
je 0x40216a
jmp 0x401c8f
mov eax, dword [ebp - 0xa4]
sub eax, 0x1982c9f4
je 0x402361
jmp 0x401ca5
mov eax, dword [ebp - 0xa4]
sub eax, 0x20ba918d
je 0x402296
jmp 0x401cbb
mov eax, dword [ebp - 0xa4]
sub eax, 0x24c8c89a
je 0x4021e8
jmp 0x401cd1
mov eax, dword [ebp - 0xa4]
sub eax, 0x25128bd1
je 0x402683
jmp 0x401ce7
mov eax, dword [ebp - 0xa4]
sub eax, 0x2733f6ba
je 0x401fbe
jmp 0x401cfd
mov eax, dword [ebp - 0xa4]
sub eax, 0x2fe3ad81
je 0x402278
jmp 0x401d13
mov eax, dword [ebp - 0xa4]
sub eax, 0x2ff10dc4
je 0x401ec5
jmp 0x401d29
mov eax, dword [ebp - 0xa4]
sub eax, 0x2ffb46ff
je 0x40208d
jmp 0x401d3f
mov eax, dword [ebp - 0xa4]
sub eax, 0x38f74c81
je 0x40233e
jmp 0x401d55
mov eax, dword [ebp - 0xa4]
sub eax, 0x3a5bc857
je 0x40232f
jmp 0x401d6b
mov eax, dword [ebp - 0xa4]
sub eax, 0x3d32a66f
je 0x4026be
jmp 0x401d81
mov eax, dword [ebp - 0xa4]
sub eax, 0x3f3bdab2
je 0x402810
jmp 0x401d97
mov eax, dword [ebp - 0xa4]
sub eax, 0x3f8c3808
je 0x40283f
jmp 0x401dad
mov eax, dword [ebp - 0xa4]
sub eax, 0x404774c5
je 0x4024f9
jmp 0x401dc3
mov eax, dword [ebp - 0xa4]
sub eax, 0x4fad7393
je 0x4027cc
jmp 0x401dd9
mov eax, dword [ebp - 0xa4]
sub eax, 0x66a33336
je 0x4024ae
jmp 0x401def
mov eax, dword [ebp - 0xa4]
sub eax, 0x70a9db80
je 0x402269
jmp 0x401e05
mov eax, dword [ebp - 0xa4]
sub eax, 0x73505c04
je 0x402302
jmp 0x401e1b
mov eax, dword [ebp - 0xa4]
sub eax, 0x7678c102
je 0x401f2b
jmp 0x401e31
mov eax, dword [ebp - 0xa4]
sub eax, 0x79b6965f
je 0x402851
jmp 0x401e47
mov eax, dword [ebp - 0xa4]
sub eax, 0x7e8fe9bd
je 0x402456
jmp 0x401e5d
jmp 0x40285b
mov eax, dword [ebp - 0xa0]
push eax
sub esp, 0x100
mov ecx, esp
mov dword [ebp - 0x88], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x84], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x80], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x7c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x78], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x74], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x70], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x6c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x68], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x9c], 0x2ff10dc4
jmp 0x40285b
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x1c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.0040c4a0
add esp, 0xc
mov eax, dword [ebp - 0x8c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x94], eax
mov eax, 0x7678c102
mov ecx, 0xf1f34576
cmp dword [ebp - 0x94], 0
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40285b
mov dword [ebp - 0x9c], 0xcac5d05c
jmp 0x40285b
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
lea eax, [ebp - 0x1c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x9c], 0x92c13198
jmp 0x40285b
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x60]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x9c], 0x2733f6ba
jmp 0x40285b
mov eax, dword [ebp - 0x5c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov edx, dword [ebp - 0x84]
mov esi, 0xffffffff
mov eax, 0xc3742219
mov ecx, 0xc1b6df96
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40285b
mov dword [ebp - 0x9c], 0xcac5d05c
jmp 0x40285b
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x9c], 0x2ffb46ff
jmp 0x40285b
mov ecx, dword [0x421394]
mov eax, dword [0x421390]
mov edx, ecx
add edx, 0x3c38e88d
sub edx, 1
sub edx, 0x3c38e88d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3f3bdab2
mov ecx, 0xd8f3f91c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40285b
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x58]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x51], al
mov eax, dword [0x421394]
mov ecx, dword [0x421390]
mov edx, eax
add edx, 0x8248c991
sub edx, 1
sub edx, 0x8248c991
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3f3bdab2
mov ecx, 0xfbfdab1b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40285b
mov dword [ebp - 0x9c], 0xa7947425
jmp 0x40285b
mov dl, byte [ebp - 0x51]
mov eax, 0xa80188b6
mov ecx, 0xe6ee817b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40285b
mov eax, dword [0x421394]
mov ecx, dword [0x421390]
mov edx, eax
sub edx, 0xc1bf6f85
sub edx, 1
add edx, 0xc1bf6f85
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xeeb78433
mov ecx, 0x24c8c89a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40285b
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov ecx, dword [0x421394]
mov eax, dword [0x421390]
mov edx, ecx
sub edx, 0x74295082
sub edx, 1
add edx, 0x74295082
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xeeb78433
mov ecx, 0x70a9db80
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40285b
mov dword [ebp - 0x9c], 0x2fe3ad81
jmp 0x40285b
mov eax, dword [ebp - 0x50]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x9c], 0x20ba918d
jmp 0x40285b
mov dword [ebp - 0x9c], 0xcac5d05c
jmp 0x40285b
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x9c], 0x73505c04
jmp 0x40285b
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov edx, dword [eax + 0x3c]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
mov word [eax], 0
mov dword [ebp - 0x9c], 0x3a5bc857
jmp 0x40285b
mov dword [ebp - 0x9c], 0x38f74c81
jmp 0x40285b
mov eax, dword [ebp - 0x70]
movzx eax, word [eax]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x9c], 0x1982c9f4
jmp 0x40285b
mov ecx, dword [0x421394]
mov eax, dword [0x421390]
mov edx, ecx
add edx, 0xfd64f2ea
sub edx, 1
sub edx, 0xfd64f2ea
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3f8c3808
mov ecx, 0xc0be40fe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40285b
mov eax, dword [ebp - 0x44]
add eax, 2
mov dword [ebp - 0x40], eax
mov ecx, dword [0x421394]
mov eax, dword [0x421390]
mov edx, ecx
sub edx, 0x25453344
sub edx, 1
add edx, 0x25453344
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3f8c3808
mov ecx, 0x7e8fe9bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40285b
mov dword [ebp - 0x9c], 0xaf96c960
jmp 0x40285b
mov eax, dword [ebp - 0x40]
movzx esi, word [eax]
mov edx, dword [ebp - 0x48]
mov eax, 0xa57574b3
mov ecx, 0xe4281446
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40285b
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, 0x18
sub eax, ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x9c], 0x66a33336
jmp 0x40285b
mov eax, dword [ebp - 0x38]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x3c]
sub ecx, 0xeb571d2f
add ecx, eax
add ecx, 0xeb571d2f
mov eax, dword [ebp - 0x70]
movzx eax, word [eax]
imul eax, eax, 0x28
add ecx, 0xe53fd5f7
add ecx, eax
sub ecx, 0xe53fd5f7
mov eax, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x9c], 0x404774c5
jmp 0x40285b
mov ecx, dword [ebp - 0x34]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x4193c0
call fcn.0040e730
add esp, 8
mov edx, eax
mov eax, 0x893afdb6
mov ecx, 0xbe255f50
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40285b
mov eax, dword [ebp - 0x68]
mov dword [eax], 0
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0x798b2064
add edx, eax
sub edx, 0x798b2064
mov eax, dword [ebp - 0x68]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x64]
mov byte [eax], cl
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
add eax, 0xb5afdbd2
add eax, ecx
sub eax, 0xb5afdbd2
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x9c], 0xe882a396
jmp 0x40285b
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0040c600
add esp, 0xc
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x98]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
xor esi, esi
sub esi, edi
add eax, esi
xor esi, esi
sub esi, eax
mov eax, dword [ebp - 0x68]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x23], al
mov dword [ebp - 0x9c], 0xc566f779
jmp 0x40285b
mov eax, dword [ebp - 0x64]
mov cl, byte [ebp - 0x23]
mov byte [eax], cl
mov dword [ebp - 0x9c], 0xbe255f50
jmp 0x40285b
mov dword [ebp - 0x9c], 0x25128bd1
jmp 0x40285b
mov eax, dword [ebp - 0x70]
mov ax, word [eax]
mov word [ebp - 0x22], ax
mov dword [ebp - 0x9c], 0xc085fc4a
jmp 0x40285b
mov cx, word [ebp - 0x22]
xor eax, eax
sub ax, 1
sub cx, ax
mov eax, dword [ebp - 0x70]
mov word [eax], cx
mov dword [ebp - 0x9c], 0x3d32a66f
jmp 0x40285b
mov eax, dword [0x421394]
mov ecx, dword [0x421390]
mov edx, eax
add edx, 0x3ae885a6
sub edx, 1
sub edx, 0x3ae885a6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x79b6965f
mov ecx, 0xe74bb2f3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40285b
mov ecx, dword [0x421394]
mov eax, dword [0x421390]
mov edx, ecx
sub edx, 0xa94bce7c
sub edx, 1
add edx, 0xa94bce7c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x79b6965f
mov ecx, 0x8aa657b3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x40285b
mov dword [ebp - 0x9c], 0x38f74c81
jmp 0x40285b
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x9c], 0x81d3b168
jmp 0x40285b
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x9c], 0x4fad7393
jmp 0x40285b
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x90]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x9c], 0xcac5d05c
jmp 0x40285b
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040b7cb
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x58]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x9c], 0xd8f3f91c
jmp 0x40285b
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x9c], 0x24c8c89a
jmp 0x40285b
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x9c], 0xc0be40fe
jmp 0x40285b
mov dword [ebp - 0x9c], 0xe74bb2f3
jmp 0x401a79