Function at 0x10001320
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x90
mov eax, dword [ebp + 8]
mov dword [ebp - 0x94], eax
mov eax, dword [0x10067200]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x90], 0x6781ebf6
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x98], eax
sub eax, 0x8329d67d
je 0x10001b63
jmp 0x10001364
mov eax, dword [ebp - 0x98]
sub eax, 0x858c39fa
je 0x10001c22
jmp 0x1000137a
mov eax, dword [ebp - 0x98]
sub eax, 0x874e5ab0
je 0x10001ff0
jmp 0x10001390
mov eax, dword [ebp - 0x98]
sub eax, 0x930930f0
je 0x10001a4a
jmp 0x100013a6
mov eax, dword [ebp - 0x98]
sub eax, 0x98527681
je 0x10001ca6
jmp 0x100013bc
mov eax, dword [ebp - 0x98]
sub eax, 0x9ebe3165
je 0x10001d73
jmp 0x100013d2
mov eax, dword [ebp - 0x98]
sub eax, 0xa343e339
je 0x10001c74
jmp 0x100013e8
mov eax, dword [ebp - 0x98]
sub eax, 0xaa84cf21
je 0x10001999
jmp 0x100013fe
mov eax, dword [ebp - 0x98]
sub eax, 0xad82c261
je 0x10001f5f
jmp 0x10001414
mov eax, dword [ebp - 0x98]
sub eax, 0xafc4704b
je 0x10001edf
jmp 0x1000142a
mov eax, dword [ebp - 0x98]
sub eax, 0xb81ad98a
je 0x10001874
jmp 0x10001440
mov eax, dword [ebp - 0x98]
sub eax, 0xb9d8067b
je 0x10001a3b
jmp 0x10001456
mov eax, dword [ebp - 0x98]
sub eax, 0xc46267a9
je 0x10001f7f
jmp 0x1000146c
mov eax, dword [ebp - 0x98]
sub eax, 0xc536b5f7
je 0x10001f2f
jmp 0x10001482
mov eax, dword [ebp - 0x98]
sub eax, 0xc5b4ef67
je 0x10001e2f
jmp 0x10001498
mov eax, dword [ebp - 0x98]
sub eax, 0xc90861ef
je 0x10001c13
jmp 0x100014ae
mov eax, dword [ebp - 0x98]
sub eax, 0xd8c6d5c4
je 0x1000192d
jmp 0x100014c4
mov eax, dword [ebp - 0x98]
sub eax, 0xdc81fdbe
je 0x10001b0b
jmp 0x100014da
mov eax, dword [ebp - 0x98]
sub eax, 0xe174bd69
je 0x10001a9b
jmp 0x100014f0
mov eax, dword [ebp - 0x98]
sub eax, 0xe6bba7d2
je 0x10001ab8
jmp 0x10001506
mov eax, dword [ebp - 0x98]
sub eax, 0xe9dde21b
je 0x10001ccc
jmp 0x1000151c
mov eax, dword [ebp - 0x98]
sub eax, 0xff2bc1d4
je 0x10001f8e
jmp 0x10001532
mov eax, dword [ebp - 0x98]
sub eax, 0x3acc5c5
je 0x10001c4c
jmp 0x10001548
mov eax, dword [ebp - 0x98]
sub eax, 0x3f55565
je 0x100017fe
jmp 0x1000155e
mov eax, dword [ebp - 0x98]
sub eax, 0x6ac6ac9
je 0x1000194b
jmp 0x10001574
mov eax, dword [ebp - 0x98]
sub eax, 0xad8d1af
je 0x10001d55
jmp 0x1000158a
mov eax, dword [ebp - 0x98]
sub eax, 0x10de6f11
je 0x10001eb3
jmp 0x100015a0
mov eax, dword [ebp - 0x98]
sub eax, 0x177b3277
je 0x10001765
jmp 0x100015b6
mov eax, dword [ebp - 0x98]
sub eax, 0x25601d11
je 0x10001ea4
jmp 0x100015cc
mov eax, dword [ebp - 0x98]
sub eax, 0x2c7d7f39
je 0x10001a19
jmp 0x100015e2
mov eax, dword [ebp - 0x98]
sub eax, 0x3144b70b
je 0x10001ef8
jmp 0x100015f8
mov eax, dword [ebp - 0x98]
sub eax, 0x34bdac94
je 0x10001b1a
jmp 0x1000160e
mov eax, dword [ebp - 0x98]
sub eax, 0x35ef9ed1
je 0x10001f07
jmp 0x10001624
mov eax, dword [ebp - 0x98]
sub eax, 0x37bf8e3e
je 0x10001aed
jmp 0x1000163a
mov eax, dword [ebp - 0x98]
sub eax, 0x3a7b3cb5
je 0x10001e49
jmp 0x10001650
mov eax, dword [ebp - 0x98]
sub eax, 0x443f6eeb
je 0x1000195a
jmp 0x10001666
mov eax, dword [ebp - 0x98]
sub eax, 0x5452bf0d
je 0x10001c8d
jmp 0x1000167c
mov eax, dword [ebp - 0x98]
sub eax, 0x64c5694a
je 0x10001d09
jmp 0x10001692
mov eax, dword [ebp - 0x98]
sub eax, 0x6520354e
je 0x10001f6e
jmp 0x100016a8
mov eax, dword [ebp - 0x98]
sub eax, 0x6781ebf6
je 0x100016ef
jmp 0x100016be
mov eax, dword [ebp - 0x98]
sub eax, 0x6910918c
je 0x10001ad6
jmp 0x100016d4
mov eax, dword [ebp - 0x98]
sub eax, 0x6b405e1a
je 0x100017ef
jmp 0x100016ea
jmp 0x10002037
mov ecx, dword [0x10068558]
mov eax, dword [0x10068554]
mov edx, ecx
sub edx, 0x54da71ae
sub edx, 1
add edx, 0x54da71ae
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc46267a9
mov ecx, 0x177b3277
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10002037
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
push eax
mov eax, esp
mov dword [ebp - 0x70], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
push eax
mov eax, esp
mov dword [ebp - 0x68], eax
push eax
mov eax, esp
mov dword [ebp - 0x64], eax
push eax
mov eax, esp
mov dword [ebp - 0x60], eax
push eax
mov eax, esp
mov dword [ebp - 0x5c], eax
mov eax, dword [0x10068558]
mov ecx, dword [0x10068554]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc46267a9
mov ecx, 0x6b405e1a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10002037
mov dword [ebp - 0x90], 0x3f55565
jmp 0x10002037
mov ecx, dword [0x10068558]
mov eax, dword [0x10068554]
mov edx, ecx
add edx, 0x6dbab467
sub edx, 1
sub edx, 0x6dbab467
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xff2bc1d4
mov ecx, 0xb81ad98a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10002037
mov eax, dword [ebp - 0x94]
push eax
mov ecx, esp
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x84], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10007ee0
add esp, 0xc
mov eax, dword [ebp - 0x84]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
setne al
and al, 1
mov byte [ebp - 0x51], al
mov eax, dword [0x10068558]
mov ecx, dword [0x10068554]
mov edx, eax
sub edx, 0xdc8bdf7b
sub edx, 1
add edx, 0xdc8bdf7b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xff2bc1d4
mov ecx, 0xd8c6d5c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10002037
mov dl, byte [ebp - 0x51]
mov eax, 0x6ac6ac9
mov ecx, 0x443f6eeb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10002037
mov dword [ebp - 0x90], 0x6520354e
jmp 0x10002037
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x88]
lea eax, [ebp - 0x18]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x90], 0xaa84cf21
jmp 0x10002037
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x8c]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x7c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov dword [ebp - 0x90], 0x2c7d7f39
jmp 0x10002037
mov edx, dword [ebp - 0x78]
mov esi, 0xffffffff
mov eax, 0x930930f0
mov ecx, 0xb9d8067b
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10002037
mov dword [ebp - 0x90], 0x6520354e
jmp 0x10002037
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov dword [ebp - 0x90], 0xe174bd69
jmp 0x10002037
mov eax, dword [ebp - 0x74]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x49], al
mov dword [ebp - 0x90], 0xe6bba7d2
jmp 0x10002037
mov dl, byte [ebp - 0x49]
mov eax, 0x6910918c
mov ecx, 0x34bdac94
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10002037
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x90], 0x37bf8e3e
jmp 0x10002037
mov eax, dword [ebp - 0x48]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x90], 0xdc81fdbe
jmp 0x10002037
mov dword [ebp - 0x90], 0x6520354e
jmp 0x10002037
mov eax, dword [0x10068558]
mov ecx, dword [0x10068554]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x874e5ab0
mov ecx, 0x8329d67d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10002037
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov ecx, dword [0x10068558]
mov eax, dword [0x10068554]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x874e5ab0
mov ecx, 0xc90861ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10002037
mov dword [ebp - 0x90], 0x858c39fa
jmp 0x10002037
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x90], 0x3acc5c5
jmp 0x10002037
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x64]
mov word [eax], 0
mov dword [ebp - 0x90], 0xa343e339
jmp 0x10002037
mov eax, dword [ebp - 0x64]
mov ax, word [eax]
mov word [ebp - 0x36], ax
mov dword [ebp - 0x90], 0x5452bf0d
jmp 0x10002037
mov ax, word [ebp - 0x36]
movzx eax, ax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x90], 0x98527681
jmp 0x10002037
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
movzx esi, word [eax + 6]
mov edx, dword [ebp - 0x34]
mov eax, 0x35ef9ed1
mov ecx, 0xe9dde21b
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10002037
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, dword [ebp - 0x68]
mov ecx, dword [ecx]
movzx edx, word [ecx + 0x14]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x90], 0x64c5694a
jmp 0x10002037
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x64]
movzx eax, word [eax]
imul eax, eax, 0x28
sub ecx, 0xce1f639a
add ecx, eax
add ecx, 0xce1f639a
mov eax, dword [ebp - 0x60]
mov dword [eax], ecx
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100141a0
call fcn.1000a250
add esp, 8
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x90], 0xad8d1af
jmp 0x10002037
mov edx, dword [ebp - 0x2c]
mov eax, 0x9ebe3165
mov ecx, 0x25601d11
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10002037
mov eax, dword [ebp - 0x5c]
mov dword [eax], 0
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x80]
mov edx, dword [eax]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x5c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x58]
mov byte [eax], cl
mov eax, dword [ebp - 0x80]
mov edx, dword [eax]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
sub edx, eax
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub ecx, 0x13110e4b
add ecx, eax
add ecx, 0x13110e4b
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10008040
add esp, 0xc
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x90], 0xc5b4ef67
jmp 0x10002037
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x90], 0x3a7b3cb5
jmp 0x10002037
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
mov eax, dword [ebp - 0x80]
mov esi, dword [eax]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add esi, 0xc3dc02b
add esi, eax
sub esi, 0xc3dc02b
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x28]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x58]
mov byte [eax], cl
mov dword [ebp - 0x90], 0x25601d11
jmp 0x10002037
mov dword [ebp - 0x90], 0x10de6f11
jmp 0x10002037
mov eax, dword [ebp - 0x64]
mov ax, word [eax]
xor ecx, ecx
sub cx, ax
xor eax, eax
sub ax, 1
add cx, ax
xor eax, eax
sub ax, cx
mov word [ebp - 0x1e], ax
mov dword [ebp - 0x90], 0xafc4704b
jmp 0x10002037
mov eax, dword [ebp - 0x64]
mov cx, word [ebp - 0x1e]
mov word [eax], cx
mov dword [ebp - 0x90], 0x3144b70b
jmp 0x10002037
mov dword [ebp - 0x90], 0xa343e339
jmp 0x10002037
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x90], 0xc536b5f7
jmp 0x10002037
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x88]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x90], 0xad82c261
jmp 0x10002037
mov dword [ebp - 0x90], 0x6520354e
jmp 0x10002037
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.100072c0
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x90], 0x177b3277
jmp 0x10002037
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x84], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10007ee0
add esp, 0xc
mov eax, dword [ebp - 0x84]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x90], 0xb81ad98a
jmp 0x10002037
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x90], 0x8329d67d
jmp 0x10001348