Function at 0x140024470
Capabilities:
Delete file
Terminate process

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0xe8
lea rbp, [rsp + 0x80]
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400244b9
jmp 0x14002594f
mov eax, 0x10
mov qword [rbp + 0x50], rax
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp - 0x60], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp - 0x58], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp - 0x50], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp - 0x48], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp - 0x40], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp - 0x38], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp - 0x30], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp - 0x28], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp - 0x20], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp - 0x18], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp - 0x10], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp - 8], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp + 8], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp + 0x10], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp + 0x18], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp + 0x20], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp + 0x28], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp + 0x30], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp + 0x38], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp + 0x40], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp + 0x48], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x50]
mov rcx, rsp
mov qword [rbp + 0x58], rcx
call fcn.1400456e0
sub rsp, rax
mov rax, rsp
mov qword [rbp + 0x60], rax
mov dword [rax], 0x5021c2c7
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400246be
jmp 0x14002594f
jmp 0x1400246c3
mov rax, qword [rbp + 0x60]
mov eax, dword [rax]
mov dword [rbp - 0x64], eax
sub eax, 0x87830be1
je 0x1400257ea
jmp 0x1400246dc
mov eax, dword [rbp - 0x64]
sub eax, 0x926c6cf5
je 0x14002584e
jmp 0x1400246ef
mov eax, dword [rbp - 0x64]
sub eax, 0x9e5c023c
je 0x140025767
jmp 0x140024702
mov eax, dword [rbp - 0x64]
sub eax, 0xa03e9dbc
je 0x140025869
jmp 0x140024715
mov eax, dword [rbp - 0x64]
sub eax, 0xaead02f4
je 0x14002548a
jmp 0x140024728
mov eax, dword [rbp - 0x64]
sub eax, 0xb70342ed
je 0x140025157
jmp 0x14002473b
mov eax, dword [rbp - 0x64]
sub eax, 0xba6768d5
je 0x1400256f4
jmp 0x14002474e
mov eax, dword [rbp - 0x64]
sub eax, 0xbc1c7c4e
je 0x140024dfa
jmp 0x140024761
mov eax, dword [rbp - 0x64]
sub eax, 0xd6fb6f30
je 0x1400253ef
jmp 0x140024774
mov eax, dword [rbp - 0x64]
sub eax, 0xd9816964
je 0x140024d8f
jmp 0x140024787
mov eax, dword [rbp - 0x64]
sub eax, 0xdae86620
je 0x140025577
jmp 0x14002479a
mov eax, dword [rbp - 0x64]
sub eax, 0xe834828d
je 0x140025006
jmp 0x1400247ad
mov eax, dword [rbp - 0x64]
sub eax, 0xe83522af
je 0x140024b0c
jmp 0x1400247c0
mov eax, dword [rbp - 0x64]
sub eax, 0xfee10626
je 0x140024d80
jmp 0x1400247d3
mov eax, dword [rbp - 0x64]
sub eax, 0x256067d
je 0x1400250c5
jmp 0x1400247e6
mov eax, dword [rbp - 0x64]
sub eax, 0xe956a4e
je 0x140024cc8
jmp 0x1400247f9
mov eax, dword [rbp - 0x64]
sub eax, 0x102c3bbe
je 0x1400251e9
jmp 0x14002480c
mov eax, dword [rbp - 0x64]
sub eax, 0x1db2918e
je 0x14002535d
jmp 0x14002481f
mov eax, dword [rbp - 0x64]
sub eax, 0x29a82e67
je 0x140024c0d
jmp 0x140024832
mov eax, dword [rbp - 0x64]
sub eax, 0x43c86057
je 0x140024b89
jmp 0x140024845
mov eax, dword [rbp - 0x64]
sub eax, 0x5021c2c7
je 0x140024933
jmp 0x140024858
mov eax, dword [rbp - 0x64]
sub eax, 0x51dd111f
je 0x14002565e
jmp 0x14002486b
mov eax, dword [rbp - 0x64]
sub eax, 0x53a20107
je 0x1400252b3
jmp 0x14002487e
mov eax, dword [rbp - 0x64]
sub eax, 0x553a2708
je 0x140025549
jmp 0x140024891
mov eax, dword [rbp - 0x64]
sub eax, 0x59f298b8
je 0x140025270
jmp 0x1400248a4
mov eax, dword [rbp - 0x64]
sub eax, 0x5f978ea6
je 0x1400255ba
jmp 0x1400248b7
mov eax, dword [rbp - 0x64]
sub eax, 0x65c7fa47
je 0x140024a76
jmp 0x1400248ca
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400248fc
jmp 0x140025a82
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002492e
jmp 0x140025a82
jmp 0x1400258e6
mov rbx, qword [rbp + 0x48]
mov rcx, qword [rbp + 8]
mov rdx, qword [rbp + 0x10]
mov r8, qword [rbp + 0x18]
mov r9, qword [rbp + 0x20]
mov r10, qword [rbp + 0x28]
mov r11, qword [rbp + 0x30]
mov rsi, qword [rbp + 0x38]
mov rdi, qword [rbp + 0x40]
mov eax, 0x10
mov qword [rbp - 0x70], rax
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov r14, rsp
mov qword [rbx], r14
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov rbx, rsp
mov qword [rdi], rbx
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov rdi, rsp
mov qword [rsi], rdi
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov rsi, rsp
mov qword [r11], rsi
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov r11, rsp
mov qword [r10], r11
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov r10, rsp
mov qword [r9], r10
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov r9, rsp
mov qword [r8], r9
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x70]
mov r8, rsp
mov qword [rdx], r8
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp + 0x58]
mov rdx, rsp
mov qword [rcx], rdx
mov dword [rax], 0
xor eax, eax
mov ecx, eax
sub rsp, 0x20
call fcn.140025fe0
add rsp, 0x20
mov ecx, eax
sub rsp, 0x20
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
call fcn.140005d80
add rsp, 0x20
mov ecx, 0xf001f
xor edx, edx
lea r8, str.N0iFlag
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov rcx, qword [rbp + 0x48]
add rsp, 0x20
mov r8, rax
mov rax, qword [rbp + 0x60]
mov rdx, qword [rcx]
mov qword [rdx], r8
mov r8, qword [rcx]
mov ecx, 0x43c86057
mov edx, 0x65c7fa47
cmp qword [r8], 0
cmove ecx, edx
mov dword [rax], ecx
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024aa8
jmp 0x140025a87
xor eax, eax
mov r8d, eax
lea rdx, str.Can_not_Open_Device_
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov dword [rax], 0xe83522af
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024b07
jmp 0x140025a87
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024b3e
jmp 0x140025ab9
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp + 0x58]
mov dword [rcx], 0
mov dword [rax], 0x926c6cf5
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024b84
jmp 0x140025ab9
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024bbb
jmp 0x140025ad2
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp]
mov rdx, qword [rbp + 0x48]
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x29a82e67
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024c08
jmp 0x140025ad2
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024c3f
jmp 0x140025af2
mov rax, qword [rbp]
mov rcx, qword [rax]
mov edx, 0xf001f
xor r9d, r9d
xor eax, eax
sub rsp, 0x30
mov r8d, r9d
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rcx, qword [rbp + 0x40]
add rsp, 0x30
mov r8, rax
mov rax, qword [rbp + 0x60]
mov rdx, qword [rcx]
mov qword [rdx], r8
mov r8, qword [rcx]
mov ecx, 0xd9816964
mov edx, 0xe956a4e
cmp qword [r8], 0
cmove ecx, edx
mov dword [rax], ecx
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024cc3
jmp 0x140025af2
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024cfa
jmp 0x140025b49
xor eax, eax
mov r8d, eax
lea rdx, str.Can_not_Open_ViewMap_
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x58]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov dword [rcx], 0
mov dword [rax], 0xfee10626
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024d7b
jmp 0x140025b49
jmp 0x1400258e6
mov rax, qword [rbp + 0x60]
mov dword [rax], 0x926c6cf5
jmp 0x1400258e6
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp + 0x38]
mov r8, qword [rbp - 8]
mov r9, qword [rbp + 0x40]
mov r9, qword [r9]
mov r10, qword [r9]
mov r9, qword [rdx]
mov qword [r9], r10
mov r9, qword [rdx]
mov r9, qword [r9]
movsxd r10, dword [r9 + 0x40]
mov r9d, 0x1cc
movabs r11, 0xd9851ac3fbc1817e
sub r9, r11
add r9, r10
movabs r10, 0xd9851ac3fbc1817e
add r9, r10
mov qword [r8], r9
mov rdx, qword [rdx]
mov rdx, qword [rdx]
movsxd rdx, dword [rdx + 0x1c8]
mov qword [rcx], rdx
mov dword [rax], 0xbc1c7c4e
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140024e2c
jmp 0x140025b9d
mov rax, qword [rbp + 0x30]
mov rdx, qword [rbp - 0x10]
mov rcx, qword [rbp - 8]
mov rcx, qword [rcx]
mov rdx, qword [rdx]
movabs r8, 0xb0a00b0dbd060859
sub rcx, r8
add rcx, rdx
movabs rdx, 0xb0a00b0dbd060859
add rcx, rdx
mov edx, ecx
mov rcx, qword [rax]
mov dword [rcx], edx
mov rax, qword [rax]
mov eax, dword [rax]
shl eax, 1
add eax, 0x1fb58af9
add eax, 1
sub eax, 0x1fb58af9
movsxd rcx, eax
sub rsp, 0x20
call fcn.1400456bc
mov rdx, qword [rbp + 0x40]
mov rcx, qword [rbp + 0x28]
add rsp, 0x20
mov r9, rax
mov rax, qword [rbp + 0x30]
mov r8, qword [rcx]
mov qword [r8], r9
mov rcx, qword [rcx]
mov rcx, qword [rcx]
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov rax, qword [rax]
movsxd r8, dword [rax]
sub rsp, 0x20
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp + 0x38]
add rsp, 0x20
mov rax, qword [rax]
mov rax, qword [rax]
mov dword [rax + 0x1c4], 1
mov ecx, 0x7d0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rbp + 0x40]
add rsp, 0x20
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x28]
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rcx]
mov rdx, qword [rcx]
mov rcx, qword [rax]
mov qword [rcx], rdx
mov rax, qword [rax]
mov rcx, qword [rax]
add rcx, 0xc4
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov r8, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x20]
add rsp, 0x20
mov rax, qword [rbp + 0x10]
mov r8, qword [r8]
mov r9, qword [r8]
xor r8d, r8d
sub r8, 0x1cc
sub r9, r8
mov r8, qword [rdx]
mov qword [r8], r9
mov rdx, qword [rdx]
mov r8, qword [rdx]
mov rdx, qword [rcx]
mov rdx, qword [rdx]
movsxd r9, dword [rdx + 0x40]
xor edx, edx
sub rdx, r9
sub r8, rdx
mov rdx, qword [rax]
mov qword [rdx], r8
mov rcx, qword [rcx]
mov rcx, qword [rcx]
movsxd rdx, dword [rcx + 0x1c8]
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.1400018d0
mov rcx, qword [rbp + 8]
add rsp, 0x20
mov r8, rax
mov rax, qword [rbp + 0x60]
mov rdx, qword [rcx]
mov qword [rdx], r8
mov r8, qword [rcx]
mov ecx, 0xe834828d
mov edx, 0xb70342ed
cmp qword [r8], 0
cmovne ecx, edx
mov dword [rax], ecx
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025001
jmp 0x140025b9d
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025038
jmp 0x140025d45
xor eax, eax
mov r8d, eax
lea rdx, str.Error_Code:0x0
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x40]
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rdx, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x18]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x256067d
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400250c0
jmp 0x140025d45
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400250f7
jmp 0x140025da0
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x58]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov dword [rcx], 0
mov dword [rax], 0x926c6cf5
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025152
jmp 0x140025da0
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025189
jmp 0x140025dce
sub rsp, 0x20
call qword [0x14004a148]
mov rcx, qword [rbp - 0x20]
add rsp, 0x20
mov dl, al
mov rax, qword [rbp + 0x60]
cmp dl, 0
setne dl
and dl, 1
mov byte [rcx], dl
mov dword [rax], 0x102c3bbe
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400251e4
jmp 0x140025dce
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002521b
jmp 0x140025dfc
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x20]
mov r8b, byte [rcx]
mov ecx, 0x59f298b8
mov edx, 0x1db2918e
test r8b, 1
cmovne ecx, edx
mov dword [rax], ecx
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002526b
jmp 0x140025dfc
jmp 0x1400258e6
xor eax, eax
mov r8d, eax
lea rdx, str.Error_Code:0x1
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rbp + 0x40]
mov rcx, qword [rbp - 0x28]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x53a20107
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400252e5
jmp 0x140025e1f
mov rax, qword [rbp - 0x28]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x58]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov dword [rcx], 0
mov dword [rax], 0x926c6cf5
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025358
jmp 0x140025e1f
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002538f
jmp 0x140025e65
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rbp + 0x20]
mov r8, qword [rbp - 0x30]
mov r9, qword [0x14004a150]
mov qword [r8], r9
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0xd6fb6f30
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400253ea
jmp 0x140025e65
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025421
jmp 0x140025e93
mov rcx, qword [rbp - 0x38]
mov rax, qword [rbp - 0x30]
mov rax, qword [rax]
mov rcx, qword [rcx]
sub rsp, 0x20
call rax
add rsp, 0x20
mov r8b, al
mov rax, qword [rbp + 0x60]
mov ecx, 0xaead02f4
mov edx, 0xdae86620
cmp r8b, 0
cmovne ecx, edx
mov dword [rax], ecx
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025485
jmp 0x140025e93
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400254bc
jmp 0x140025eca
xor eax, eax
mov r8d, eax
lea rdx, str.Error_Code:0x2
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x40]
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rdx, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x40]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x553a2708
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025544
jmp 0x140025eca
jmp 0x1400258e6
mov rax, qword [rbp - 0x40]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x58]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov dword [rcx], 0
mov dword [rax], 0x926c6cf5
jmp 0x1400258e6
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp + 0x18]
mov r8, qword [rbp - 0x50]
mov r9, qword [rbp + 0x20]
mov r10, qword [rbp - 0x48]
mov r11, qword [0x14004a158]
mov qword [r10], r11
mov r9, qword [r9]
mov r9, qword [r9]
mov r9d, dword [r9 + 0x40]
mov dword [r8], r9d
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x5f978ea6
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400255ec
jmp 0x140025f25
mov rcx, qword [rbp - 0x50]
mov rax, qword [rbp - 0x48]
mov rdx, qword [rbp - 0x58]
mov rdx, qword [rdx]
mov rax, qword [rax]
mov r8d, dword [rcx]
xor ecx, ecx
sub rsp, 0x20
call rax
add rsp, 0x20
mov r8b, al
mov rax, qword [rbp + 0x60]
mov ecx, 0x9e5c023c
mov edx, 0x51dd111f
cmp r8b, 0
cmovne ecx, edx
mov dword [rax], ecx
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025659
jmp 0x140025f25
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025690
jmp 0x140025f65
xor eax, eax
mov r8d, eax
lea rdx, [0x140047a32]
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov dword [rax], 0xba6768d5
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400256ef
jmp 0x140025f65
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025726
jmp 0x140025f97
mov rax, qword [rbp + 0x60]
mov dword [rax], 0x9e5c023c
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025762
jmp 0x140025f97
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025799
jmp 0x140025fa6
xor ecx, ecx
sub rsp, 0x20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov rax, qword [rbp + 0x60]
add rsp, 0x20
mov dword [rax], 0x87830be1
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400257e5
jmp 0x140025fa6
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002581c
jmp 0x140025fc5
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002584e
jmp 0x140025fc5
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x60]
mov rdx, qword [rbp + 0x58]
mov edx, dword [rdx]
mov dword [rcx], edx
mov dword [rax], 0xa03e9dbc
jmp 0x1400258e6
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002589b
jmp 0x140025fca
mov rax, qword [rbp - 0x60]
mov eax, dword [rax]
mov dword [rbp - 0x74], eax
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x1400258d6
jmp 0x140025fca
mov eax, dword [rbp - 0x74]
lea rsp, [rbp + 0x68]
pop rbx
pop rdi
pop rsi
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x140025918
jmp 0x140025fd5
mov eax, dword [0x14004a2bc]
mov ecx, dword [0x14004a2c0]
mov edx, eax
sub edx, 1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
or al, cl
test al, 1
jne 0x14002594a
jmp 0x140025fd5
jmp 0x1400246c3
mov eax, 0x10
mov qword [rbp - 0x80], rax
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, qword [rbp - 0x80]
call fcn.1400456e0
sub rsp, rax
mov rax, rsp
mov dword [rax], 0x5021c2c7
jmp 0x1400244b9
jmp 0x1400248fc
xor eax, eax
mov r8d, eax
lea rdx, str.Can_not_Open_Device_
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov dword [rax], 0xe83522af
jmp 0x140024aa8
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp + 0x58]
mov dword [rcx], 0
mov dword [rax], 0x926c6cf5
jmp 0x140024b3e
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp]
mov rdx, qword [rbp + 0x48]
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x29a82e67
jmp 0x140024bbb
mov rax, qword [rbp]
mov rcx, qword [rax]
mov edx, 0xf001f
xor r9d, r9d
xor eax, eax
sub rsp, 0x30
mov r8d, r9d
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rcx, qword [rbp + 0x40]
add rsp, 0x30
mov r8, rax
mov rax, qword [rbp + 0x60]
mov rdx, qword [rcx]
mov qword [rdx], r8
mov r8, qword [rcx]
mov ecx, 0xd9816964
mov edx, 0xe956a4e
cmp qword [r8], 0
cmove ecx, edx
mov dword [rax], ecx
jmp 0x140024c3f
xor eax, eax
mov r8d, eax
lea rdx, str.Can_not_Open_ViewMap_
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x58]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov dword [rcx], 0
mov dword [rax], 0xfee10626
jmp 0x140024cfa
mov rax, qword [rbp + 0x30]
mov rdx, qword [rbp - 0x10]
mov rcx, qword [rbp - 8]
mov rcx, qword [rcx]
mov rdx, qword [rdx]
movabs r8, 0xb0a00b0dbd060859
sub rcx, r8
add rcx, rdx
movabs rdx, 0xb0a00b0dbd060859
add rcx, rdx
mov edx, ecx
mov rcx, qword [rax]
mov dword [rcx], edx
mov rax, qword [rax]
mov eax, dword [rax]
shl eax, 1
add eax, 0x1fb58af9
add eax, 1
sub eax, 0x1fb58af9
movsxd rcx, eax
sub rsp, 0x20
call fcn.1400456bc
mov rdx, qword [rbp + 0x40]
mov rcx, qword [rbp + 0x28]
add rsp, 0x20
mov r9, rax
mov rax, qword [rbp + 0x30]
mov r8, qword [rcx]
mov qword [r8], r9
mov rcx, qword [rcx]
mov rcx, qword [rcx]
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov rax, qword [rax]
movsxd r8, dword [rax]
sub rsp, 0x20
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp + 0x38]
add rsp, 0x20
mov rax, qword [rax]
mov rax, qword [rax]
mov dword [rax + 0x1c4], 1
mov ecx, 0x7d0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rax, qword [rbp + 0x40]
add rsp, 0x20
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x28]
add rsp, 0x20
mov rax, qword [rbp + 0x20]
mov rcx, qword [rcx]
mov rdx, qword [rcx]
mov rcx, qword [rax]
mov qword [rcx], rdx
mov rax, qword [rax]
mov rcx, qword [rax]
add rcx, 0xc4
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov r8, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x20]
add rsp, 0x20
mov rax, qword [rbp + 0x10]
mov r8, qword [r8]
mov r9, qword [r8]
xor r8d, r8d
sub r8, 0x1cc
sub r9, r8
mov r8, qword [rdx]
mov qword [r8], r9
mov rdx, qword [rdx]
mov r8, qword [rdx]
mov rdx, qword [rcx]
mov rdx, qword [rdx]
movsxd r9, dword [rdx + 0x40]
xor edx, edx
sub rdx, r9
sub r8, rdx
mov rdx, qword [rax]
mov qword [rdx], r8
mov rcx, qword [rcx]
mov rcx, qword [rcx]
movsxd rdx, dword [rcx + 0x1c8]
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call fcn.1400018d0
mov rcx, qword [rbp + 8]
add rsp, 0x20
mov r8, rax
mov rax, qword [rbp + 0x60]
mov rdx, qword [rcx]
mov qword [rdx], r8
mov r8, qword [rcx]
mov ecx, 0xe834828d
mov edx, 0xb70342ed
cmp qword [r8], 0
cmovne ecx, edx
mov dword [rax], ecx
jmp 0x140024e2c
xor eax, eax
mov r8d, eax
lea rdx, str.Error_Code:0x0
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x40]
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rdx, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x18]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x256067d
jmp 0x140025038
mov rax, qword [rbp - 0x18]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x58]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov dword [rcx], 0
mov dword [rax], 0x926c6cf5
jmp 0x1400250f7
sub rsp, 0x20
call qword [0x14004a148]
mov rcx, qword [rbp - 0x20]
add rsp, 0x20
mov dl, al
mov rax, qword [rbp + 0x60]
cmp dl, 0
setne dl
and dl, 1
mov byte [rcx], dl
mov dword [rax], 0x102c3bbe
jmp 0x140025189
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x20]
mov r8b, byte [rcx]
mov ecx, 0x59f298b8
mov edx, 0x1db2918e
test r8b, 1
cmovne ecx, edx
mov dword [rax], ecx
jmp 0x14002521b
mov rax, qword [rbp - 0x28]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
add rsp, 0x20
mov rax, qword [rbp + 0x48]
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x58]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov dword [rcx], 0
mov dword [rax], 0x926c6cf5
jmp 0x1400252e5
mov rax, qword [rbp + 0x60]
mov rcx, qword [rbp - 0x38]
mov rdx, qword [rbp + 0x20]
mov r8, qword [rbp - 0x30]
mov r9, qword [0x14004a150]
mov qword [r8], r9
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0xd6fb6f30
jmp 0x14002538f
mov rcx, qword [rbp - 0x38]
mov rax, qword [rbp - 0x30]
mov rax, qword [rax]
mov rcx, qword [rcx]
sub rsp, 0x20
call rax
add rsp, 0x20
mov r8b, al
mov rax, qword [rbp + 0x60]
mov ecx, 0xaead02f4
mov edx, 0xdae86620
cmp r8b, 0
cmovne ecx, edx
mov dword [rax], ecx
jmp 0x140025421
xor eax, eax
mov r8d, eax
lea rdx, str.Error_Code:0x2
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x40]
mov rax, qword [rax]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rdx, qword [rbp + 0x48]
mov rcx, qword [rbp - 0x40]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov qword [rcx], rdx
mov dword [rax], 0x553a2708
jmp 0x1400254bc
mov rcx, qword [rbp - 0x50]
mov rax, qword [rbp - 0x48]
mov rdx, qword [rbp - 0x58]
mov rdx, qword [rdx]
mov rax, qword [rax]
mov r8d, dword [rcx]
xor ecx, ecx
sub rsp, 0x20
call rax
add rsp, 0x20
mov r8b, al
mov rax, qword [rbp + 0x60]
mov ecx, 0x9e5c023c
mov edx, 0x51dd111f
cmp r8b, 0
cmovne ecx, edx
mov dword [rax], ecx
jmp 0x1400255ec
xor eax, eax
mov r8d, eax
lea rdx, [0x140047a32]
mov r9d, 0x10
sub rsp, 0x20
mov rcx, r8
call qword [sym.imp.USER32.dll_MessageBoxA]
add rsp, 0x20
mov rax, qword [rbp + 0x60]
mov dword [rax], 0xba6768d5
jmp 0x140025690
mov rax, qword [rbp + 0x60]
mov dword [rax], 0x9e5c023c
jmp 0x140025726
xor ecx, ecx
sub rsp, 0x20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov rax, qword [rbp + 0x60]
add rsp, 0x20
mov dword [rax], 0x87830be1
jmp 0x140025799
jmp 0x14002581c
mov rax, qword [rbp - 0x60]
mov eax, dword [rax]
jmp 0x14002589b
jmp 0x140025918