Function at 0x40d7a0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x68
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x68], eax
mov eax, dword [0x43f080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x64], 0x52c5a292
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x70], eax
sub eax, 0x803445c0
je 0x40e1b6
jmp 0x40d7dc
mov eax, dword [ebp - 0x70]
sub eax, 0x80e959e6
je 0x40dc5f
jmp 0x40d7ef
mov eax, dword [ebp - 0x70]
sub eax, 0x848546f1
je 0x40debf
jmp 0x40d802
mov eax, dword [ebp - 0x70]
sub eax, 0x8f51d623
je 0x40e043
jmp 0x40d815
mov eax, dword [ebp - 0x70]
sub eax, 0xa234a70c
je 0x40e108
jmp 0x40d828
mov eax, dword [ebp - 0x70]
sub eax, 0xa516882f
je 0x40e089
jmp 0x40d83b
mov eax, dword [ebp - 0x70]
sub eax, 0xa5d2768c
je 0x40dc53
jmp 0x40d84e
mov eax, dword [ebp - 0x70]
sub eax, 0xaef82a31
je 0x40e477
jmp 0x40d861
mov eax, dword [ebp - 0x70]
sub eax, 0xb3b110fa
je 0x40ddb6
jmp 0x40d874
mov eax, dword [ebp - 0x70]
sub eax, 0xb3e03745
je 0x40decb
jmp 0x40d887
mov eax, dword [ebp - 0x70]
sub eax, 0xc4465721
je 0x40df36
jmp 0x40d89a
mov eax, dword [ebp - 0x70]
sub eax, 0xc58b483b
je 0x40dcaf
jmp 0x40d8ad
mov eax, dword [ebp - 0x70]
sub eax, 0xd39d10fc
je 0x40e4a3
jmp 0x40d8c0
mov eax, dword [ebp - 0x70]
sub eax, 0xdbe432bf
je 0x40e4cf
jmp 0x40d8d3
mov eax, dword [ebp - 0x70]
sub eax, 0xe5c8a4fe
je 0x40dc43
jmp 0x40d8e6
mov eax, dword [ebp - 0x70]
sub eax, 0xe94b50e8
je 0x40e156
jmp 0x40d8f9
mov eax, dword [ebp - 0x70]
sub eax, 0xef0749e7
je 0x40dc28
jmp 0x40d90c
mov eax, dword [ebp - 0x70]
sub eax, 0xf24f5513
je 0x40e2bf
jmp 0x40d91f
mov eax, dword [ebp - 0x70]
sub eax, 0xf63cb01c
je 0x40dea4
jmp 0x40d932
mov eax, dword [ebp - 0x70]
sub eax, 0xfa1bfd62
je 0x40e2cb
jmp 0x40d945
mov eax, dword [ebp - 0x70]
sub eax, 0xfe03f7c1
je 0x40df0a
jmp 0x40d958
mov eax, dword [ebp - 0x70]
sub eax, 0x9bf8cd5
je 0x40e525
jmp 0x40d96b
mov eax, dword [ebp - 0x70]
sub eax, 0xc1fed9b
je 0x40dcf1
jmp 0x40d97e
mov eax, dword [ebp - 0x70]
sub eax, 0xebba217
je 0x40e483
jmp 0x40d991
mov eax, dword [ebp - 0x70]
sub eax, 0x10970c49
je 0x40de5a
jmp 0x40d9a4
mov eax, dword [ebp - 0x70]
sub eax, 0x154d543c
je 0x40e519
jmp 0x40d9b7
mov eax, dword [ebp - 0x70]
sub eax, 0x1b0f324e
je 0x40df84
jmp 0x40d9ca
mov eax, dword [ebp - 0x70]
sub eax, 0x24eab606
je 0x40ddfc
jmp 0x40d9dd
mov eax, dword [ebp - 0x70]
sub eax, 0x2ae24ea8
je 0x40ddaa
jmp 0x40d9f0
mov eax, dword [ebp - 0x70]
sub eax, 0x2b23f54e
je 0x40e2a4
jmp 0x40da03
mov eax, dword [ebp - 0x70]
sub eax, 0x2d11bccd
je 0x40e552
jmp 0x40da16
mov eax, dword [ebp - 0x70]
sub eax, 0x2dfad408
je 0x40e4c3
jmp 0x40da29
mov eax, dword [ebp - 0x70]
sub eax, 0x318f6ef6
je 0x40e4df
jmp 0x40da3c
mov eax, dword [ebp - 0x70]
sub eax, 0x321086dc
je 0x40de4e
jmp 0x40da4f
mov eax, dword [ebp - 0x70]
sub eax, 0x36b75c93
je 0x40e0fc
jmp 0x40da62
mov eax, dword [ebp - 0x70]
sub eax, 0x3a8a0cc5
je 0x40de66
jmp 0x40da75
mov eax, dword [ebp - 0x70]
sub eax, 0x3dff16bb
je 0x40df16
jmp 0x40da88
mov eax, dword [ebp - 0x70]
sub eax, 0x3fe4cede
je 0x40dd64
jmp 0x40da9b
mov eax, dword [ebp - 0x70]
sub eax, 0x42bc654e
je 0x40e229
jmp 0x40daae
mov eax, dword [ebp - 0x70]
sub eax, 0x475adfb0
je 0x40e367
jmp 0x40dac1
mov eax, dword [ebp - 0x70]
sub eax, 0x528016aa
je 0x40e1aa
jmp 0x40dad4
mov eax, dword [ebp - 0x70]
sub eax, 0x52c5a292
je 0x40dbaa
jmp 0x40dae7
mov eax, dword [ebp - 0x70]
sub eax, 0x560699d8
je 0x40defa
jmp 0x40dafa
mov eax, dword [ebp - 0x70]
sub eax, 0x599a1ed4
je 0x40e534
jmp 0x40db0d
mov eax, dword [ebp - 0x70]
sub eax, 0x5e1e0647
je 0x40e319
jmp 0x40db20
mov eax, dword [ebp - 0x70]
sub eax, 0x5eb8ae2a
je 0x40e546
jmp 0x40db33
mov eax, dword [ebp - 0x70]
sub eax, 0x7194a36a
je 0x40e48f
jmp 0x40db46
mov eax, dword [ebp - 0x70]
sub eax, 0x753b1667
je 0x40e3e6
jmp 0x40db59
mov eax, dword [ebp - 0x70]
sub eax, 0x75d2dd56
je 0x40dcd2
jmp 0x40db6c
mov eax, dword [ebp - 0x70]
sub eax, 0x799b49eb
je 0x40dedf
jmp 0x40db7f
mov eax, dword [ebp - 0x70]
sub eax, 0x7c45dcb7
je 0x40e373
jmp 0x40db92
mov eax, dword [ebp - 0x70]
sub eax, 0x7fef7448
je 0x40e028
jmp 0x40dba5
jmp 0x40e57f
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x6c]
push eax
sub esp, 0xffc
mov edx, esp
mov dword [ebp - 0x48], edx
push eax
mov edx, esp
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x58], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x58], eax
sete al
and al, 1
mov byte [ebp - 0x3d], al
mov dword [ebp - 0x64], 0xef0749e7
jmp 0x40e57f
mov dl, byte [ebp - 0x3d]
mov eax, 0x80e959e6
mov ecx, 0xe5c8a4fe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov byte [ebp - 0x49], 0
mov dword [ebp - 0x64], 0xa5d2768c
jmp 0x40e57f
mov dword [ebp - 0x64], 0x7194a36a
jmp 0x40e57f
mov eax, dword [ebp - 0x50]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x64], 0xc58b483b
jmp 0x40e57f
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x5c], eax
mov edx, 0xffffffff
mov eax, 0xb3b110fa
mov ecx, 0x75d2dd56
cmp dword [ebp - 0x5c], edx
cmove eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov eax, dword [ebp - 0x58]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x49], 0
mov dword [ebp - 0x64], 0xc1fed9b
jmp 0x40e57f
mov ecx, dword [0x44053c]
mov eax, dword [0x440538]
mov edx, ecx
sub edx, 0x30f05028
sub edx, 1
add edx, 0x30f05028
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2dfad408
mov ecx, 0x3fe4cede
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov eax, dword [0x44053c]
mov ecx, dword [0x440538]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2dfad408
mov ecx, 0x2ae24ea8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov dword [ebp - 0x64], 0x7194a36a
jmp 0x40e57f
mov eax, dword [0x44053c]
mov ecx, dword [0x440538]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdbe432bf
mov ecx, 0x24eab606
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov byte [ebp - 0x5d], 0
mov eax, dword [0x44053c]
mov ecx, dword [0x440538]
mov edx, eax
sub edx, 0x9e2d703e
sub edx, 1
add edx, 0x9e2d703e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdbe432bf
mov ecx, 0x321086dc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov dword [ebp - 0x64], 0x10970c49
jmp 0x40e57f
mov dword [ebp - 0x64], 0x3a8a0cc5
jmp 0x40e57f
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x44]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x64], 0xf63cb01c
jmp 0x40e57f
mov edx, dword [ebp - 0x38]
mov eax, 0x848546f1
mov ecx, 0xb3e03745
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov dword [ebp - 0x64], 0x7c45dcb7
jmp 0x40e57f
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x64], 0x799b49eb
jmp 0x40e57f
mov edx, dword [ebp - 0x34]
mov eax, 0x3dff16bb
mov ecx, 0x560699d8
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov byte [ebp - 0x5d], 1
mov dword [ebp - 0x64], 0xfe03f7c1
jmp 0x40e57f
mov dword [ebp - 0x64], 0x7c45dcb7
jmp 0x40e57f
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x64], 0xc4465721
jmp 0x40e57f
mov eax, dword [0x44053c]
mov ecx, dword [0x440538]
mov edx, eax
add edx, 0x1023d0e7
sub edx, 1
sub edx, 0x1023d0e7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x318f6ef6
mov ecx, 0x1b0f324e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
lea eax, [ebp - 0x14]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x21], al
mov ecx, dword [0x44053c]
mov eax, dword [0x440538]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x318f6ef6
mov ecx, 0x7fef7448
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov dl, byte [ebp - 0x21]
mov eax, 0x8f51d623
mov ecx, 0xa234a70c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov eax, dword [0x44053c]
mov ecx, dword [0x440538]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x154d543c
mov ecx, 0xa516882f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov ecx, dword [0x44053c]
mov eax, dword [0x440538]
mov edx, ecx
add edx, 0xebcf09e7
sub edx, 1
sub edx, 0xebcf09e7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x154d543c
mov ecx, 0x36b75c93
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov dword [ebp - 0x64], 0x7c45dcb7
jmp 0x40e57f
mov eax, dword [0x44053c]
mov ecx, dword [0x440538]
mov edx, eax
add edx, 0x3488a3f9
sub edx, 1
sub edx, 0x3488a3f9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9bf8cd5
mov ecx, 0xe94b50e8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x44053c]
mov ecx, dword [0x440538]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9bf8cd5
mov ecx, 0x528016aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov dword [ebp - 0x64], 0x803445c0
jmp 0x40e57f
mov ecx, dword [0x44053c]
mov eax, dword [0x440538]
mov edx, ecx
sub edx, 0x94d54633
sub edx, 1
add edx, 0x94d54633
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x599a1ed4
mov ecx, 0x42bc654e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
cmp eax, ecx
setne al
and al, 1
mov byte [ebp - 0x16], al
mov ecx, dword [0x44053c]
mov eax, dword [0x440538]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x599a1ed4
mov ecx, 0x2b23f54e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov dl, byte [ebp - 0x16]
mov eax, 0xfa1bfd62
mov ecx, 0xf24f5513
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov dword [ebp - 0x64], 0x7c45dcb7
jmp 0x40e57f
mov eax, dword [0x44053c]
mov ecx, dword [0x440538]
mov edx, eax
sub edx, 0x1d52fdf6
sub edx, 1
add edx, 0x1d52fdf6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5eb8ae2a
mov ecx, 0x5e1e0647
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov eax, dword [0x44053c]
mov ecx, dword [0x440538]
mov edx, eax
sub edx, 0xf5253d26
sub edx, 1
add edx, 0xf5253d26
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5eb8ae2a
mov ecx, 0x475adfb0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov dword [ebp - 0x64], 0x3a8a0cc5
jmp 0x40e57f
mov ecx, dword [0x44053c]
mov eax, dword [0x440538]
mov edx, ecx
sub edx, 0xfca26bcc
sub edx, 1
add edx, 0xfca26bcc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2d11bccd
mov ecx, 0x753b1667
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov eax, dword [ebp - 0x58]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x5c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [ebp - 0x5d]
and al, 1
mov byte [ebp - 0x49], al
mov ecx, dword [0x44053c]
mov eax, dword [0x440538]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2d11bccd
mov ecx, 0xaef82a31
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40e57f
mov dword [ebp - 0x64], 0xebba217
jmp 0x40e57f
mov dword [ebp - 0x64], 0x7194a36a
jmp 0x40e57f
mov al, byte [ebp - 0x49]
and al, 1
mov byte [ebp - 0x15], al
mov dword [ebp - 0x64], 0xd39d10fc
jmp 0x40e57f
mov al, byte [ebp - 0x15]
and al, 1
movzx eax, al
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004276e0
mov eax, dword [ebp - 0x74]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x64], 0x3fe4cede
jmp 0x40e57f
mov byte [ebp - 0x5d], 0
mov dword [ebp - 0x64], 0x24eab606
jmp 0x40e57f
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
lea eax, [ebp - 0x14]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x64], 0x1b0f324e
jmp 0x40e57f
mov dword [ebp - 0x64], 0xa516882f
jmp 0x40e57f
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x64], 0xe94b50e8
jmp 0x40e57f
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x64], 0x42bc654e
jmp 0x40e57f
mov dword [ebp - 0x64], 0x5e1e0647
jmp 0x40e57f
mov eax, dword [ebp - 0x58]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x5c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [ebp - 0x5d]
and al, 1
mov byte [ebp - 0x49], al
mov dword [ebp - 0x64], 0x753b1667
jmp 0x40d7c6