Function at 0x40b2d0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x54
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x54], eax
mov eax, dword [0x43d080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x43e58c]
mov eax, dword [0x43e588]
mov edx, ecx
add edx, 0x87d30e1
sub edx, 1
sub edx, 0x87d30e1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x4a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x49], al
mov dword [ebp - 0x50], 0x9df88b76
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x5c], eax
sub eax, 0x80f36a20
je 0x40ba78
jmp 0x40b345
mov eax, dword [ebp - 0x5c]
sub eax, 0x909f27f1
je 0x40b8bf
jmp 0x40b358
mov eax, dword [ebp - 0x5c]
sub eax, 0x934ca0cf
je 0x40bf44
jmp 0x40b36b
mov eax, dword [ebp - 0x5c]
sub eax, 0x9472d908
je 0x40bdb2
jmp 0x40b37e
mov eax, dword [ebp - 0x5c]
sub eax, 0x9aa4a734
je 0x40bfe6
jmp 0x40b391
mov eax, dword [ebp - 0x5c]
sub eax, 0x9df88b76
je 0x40b6ed
jmp 0x40b3a4
mov eax, dword [ebp - 0x5c]
sub eax, 0xa357b608
je 0x40b984
jmp 0x40b3b7
mov eax, dword [ebp - 0x5c]
sub eax, 0xa8283308
je 0x40be12
jmp 0x40b3ca
mov eax, dword [ebp - 0x5c]
sub eax, 0xb4dd3d0a
je 0x40bfcb
jmp 0x40b3dd
mov eax, dword [ebp - 0x5c]
sub eax, 0xb82df45f
je 0x40bcac
jmp 0x40b3f0
mov eax, dword [ebp - 0x5c]
sub eax, 0xbbb8ff5a
je 0x40be79
jmp 0x40b403
mov eax, dword [ebp - 0x5c]
sub eax, 0xc3109565
je 0x40ba84
jmp 0x40b416
mov eax, dword [ebp - 0x5c]
sub eax, 0xc3ff9a3b
je 0x40b871
jmp 0x40b429
mov eax, dword [ebp - 0x5c]
sub eax, 0xcb61df7d
je 0x40bbc6
jmp 0x40b43c
mov eax, dword [ebp - 0x5c]
sub eax, 0xcba14da7
je 0x40bbba
jmp 0x40b44f
mov eax, dword [ebp - 0x5c]
sub eax, 0xd1481b0c
je 0x40bda6
jmp 0x40b462
mov eax, dword [ebp - 0x5c]
sub eax, 0xd393cbd9
je 0x40bac4
jmp 0x40b475
mov eax, dword [ebp - 0x5c]
sub eax, 0xd9f08655
je 0x40b853
jmp 0x40b488
mov eax, dword [ebp - 0x5c]
sub eax, 0xe1a4ba11
je 0x40bc5e
jmp 0x40b49b
mov eax, dword [ebp - 0x5c]
sub eax, 0xe2e5b8d0
je 0x40bdf7
jmp 0x40b4ae
mov eax, dword [ebp - 0x5c]
sub eax, 0xe5a6bb81
je 0x40b713
jmp 0x40b4c1
mov eax, dword [ebp - 0x5c]
sub eax, 0xe668ae24
je 0x40b7c8
jmp 0x40b4d4
mov eax, dword [ebp - 0x5c]
sub eax, 0xe67cc6cf
je 0x40bff2
jmp 0x40b4e7
mov eax, dword [ebp - 0x5c]
sub eax, 0xe8685e32
je 0x40bbf3
jmp 0x40b4fa
mov eax, dword [ebp - 0x5c]
sub eax, 0xef39d471
je 0x40bbe1
jmp 0x40b50d
mov eax, dword [ebp - 0x5c]
sub eax, 0xf64ad812
je 0x40bfd7
jmp 0x40b520
mov eax, dword [ebp - 0x5c]
sub eax, 0xf6d3be76
je 0x40bb5e
jmp 0x40b533
mov eax, dword [ebp - 0x5c]
sub eax, 0xf73cfa0c
je 0x40baeb
jmp 0x40b546
mov eax, dword [ebp - 0x5c]
sub eax, 0x39c8022
je 0x40be62
jmp 0x40b559
mov eax, dword [ebp - 0x5c]
sub eax, 0x12a9b480
je 0x40ba32
jmp 0x40b56c
mov eax, dword [ebp - 0x5c]
sub eax, 0x1682f2e3
je 0x40c030
jmp 0x40b57f
mov eax, dword [ebp - 0x5c]
sub eax, 0x1afc7c69
je 0x40b865
jmp 0x40b592
mov eax, dword [ebp - 0x5c]
sub eax, 0x1bbd13dd
je 0x40bdd9
jmp 0x40b5a5
mov eax, dword [ebp - 0x5c]
sub eax, 0x1f206c56
je 0x40be1e
jmp 0x40b5b8
mov eax, dword [ebp - 0x5c]
sub eax, 0x22b573aa
je 0x40b9ce
jmp 0x40b5cb
mov eax, dword [ebp - 0x5c]
sub eax, 0x23d80bd4
je 0x40bf70
jmp 0x40b5de
mov eax, dword [ebp - 0x5c]
sub eax, 0x2766ec1b
je 0x40badf
jmp 0x40b5f1
mov eax, dword [ebp - 0x5c]
sub eax, 0x2bd4a907
je 0x40bf7c
jmp 0x40b604
mov eax, dword [ebp - 0x5c]
sub eax, 0x2d84b23c
je 0x40b978
jmp 0x40b617
mov eax, dword [ebp - 0x5c]
sub eax, 0x30b3d60a
je 0x40b7bc
jmp 0x40b62a
mov eax, dword [ebp - 0x5c]
sub eax, 0x35762e26
je 0x40b834
jmp 0x40b63d
mov eax, dword [ebp - 0x5c]
sub eax, 0x44336229
je 0x40beec
jmp 0x40b650
mov eax, dword [ebp - 0x5c]
sub eax, 0x5b270f0d
je 0x40b9ab
jmp 0x40b663
mov eax, dword [ebp - 0x5c]
sub eax, 0x5c625d64
je 0x40bf50
jmp 0x40b676
mov eax, dword [ebp - 0x5c]
sub eax, 0x6210b94d
je 0x40b9ec
jmp 0x40b689
mov eax, dword [ebp - 0x5c]
sub eax, 0x64283f67
je 0x40bcb8
jmp 0x40b69c
mov eax, dword [ebp - 0x5c]
sub eax, 0x6782a96d
je 0x40b9da
jmp 0x40b6af
mov eax, dword [ebp - 0x5c]
sub eax, 0x6c96836d
je 0x40be2a
jmp 0x40b6c2
mov eax, dword [ebp - 0x5c]
sub eax, 0x78370281
je 0x40bd2b
jmp 0x40b6d5
mov eax, dword [ebp - 0x5c]
sub eax, 0x7c24504a
je 0x40bdcd
jmp 0x40b6e8
jmp 0x40c03a
mov al, byte [ebp - 0x4a]
mov cl, byte [ebp - 0x49]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x23d80bd4
mov ecx, 0xe5a6bb81
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
push eax
sub esp, 0xffc
mov eax, esp
mov dword [ebp - 0x2c], eax
mov ecx, dword [0x43e58c]
mov eax, dword [0x43e588]
mov edx, ecx
sub edx, 0xc85b9c8d
sub edx, 1
add edx, 0xc85b9c8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x23d80bd4
mov ecx, 0x30b3d60a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov dword [ebp - 0x50], 0xe668ae24
jmp 0x40c03a
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x58]
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x44]
mov dword [eax], edx
mov eax, dword [ebp - 0x40]
mov dword [eax], ecx
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
mov dword [ebp - 0x50], 0x35762e26
jmp 0x40c03a
mov edx, dword [ebp - 0x3c]
mov esi, 0xffffffff
mov eax, 0xc3ff9a3b
mov ecx, 0xd9f08655
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov eax, dword [ebp - 0x48]
mov byte [eax], 0
mov dword [ebp - 0x50], 0x1afc7c69
jmp 0x40c03a
mov dword [ebp - 0x50], 0xbbb8ff5a
jmp 0x40c03a
mov eax, dword [0x43e58c]
mov ecx, dword [0x43e588]
mov edx, eax
sub edx, 0x5017a0d5
sub edx, 1
add edx, 0x5017a0d5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2bd4a907
mov ecx, 0x909f27f1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x24], eax
mov ecx, dword [0x43e58c]
mov eax, dword [0x43e588]
mov edx, ecx
sub edx, 0xf347c8c
sub edx, 1
add edx, 0xf347c8c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2bd4a907
mov ecx, 0x2d84b23c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov dword [ebp - 0x50], 0xa357b608
jmp 0x40c03a
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
mov edx, dword [ebp - 0x38]
mov esi, 0xffffffff
mov eax, 0x6782a96d
mov ecx, 0x5b270f0d
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x48]
mov byte [eax], 0
mov dword [ebp - 0x50], 0x22b573aa
jmp 0x40c03a
mov dword [ebp - 0x50], 0xbbb8ff5a
jmp 0x40c03a
mov eax, dword [ebp - 0x34]
mov byte [eax], 0
mov dword [ebp - 0x50], 0x6210b94d
jmp 0x40c03a
mov eax, dword [0x43e58c]
mov ecx, dword [0x43e588]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb4dd3d0a
mov ecx, 0x12a9b480
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov eax, dword [0x43e58c]
mov ecx, dword [0x43e588]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb4dd3d0a
mov ecx, 0x80f36a20
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov dword [ebp - 0x50], 0xc3109565
jmp 0x40c03a
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x28]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x50], 0xd393cbd9
jmp 0x40c03a
mov edx, dword [ebp - 0x20]
mov eax, 0x2766ec1b
mov ecx, 0xf73cfa0c
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov dword [ebp - 0x50], 0x6c96836d
jmp 0x40c03a
mov ecx, dword [0x43e58c]
mov eax, dword [0x43e588]
mov edx, ecx
sub edx, 0x913419ce
sub edx, 1
add edx, 0x913419ce
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf64ad812
mov ecx, 0xf6d3be76
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov eax, dword [ebp - 0x28]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x19], al
mov eax, dword [0x43e58c]
mov ecx, dword [0x43e588]
mov edx, eax
add edx, 0x84d9d023
sub edx, 1
sub edx, 0x84d9d023
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf64ad812
mov ecx, 0xcba14da7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov dword [ebp - 0x50], 0xcb61df7d
jmp 0x40c03a
mov dl, byte [ebp - 0x19]
mov eax, 0x64283f67
mov ecx, 0xef39d471
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov eax, dword [ebp - 0x34]
mov byte [eax], 1
mov dword [ebp - 0x50], 0xe8685e32
jmp 0x40c03a
mov ecx, dword [0x43e58c]
mov eax, dword [0x43e588]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9aa4a734
mov ecx, 0xe1a4ba11
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov eax, dword [0x43e58c]
mov ecx, dword [0x43e588]
mov edx, eax
sub edx, 0x6439017
sub edx, 1
add edx, 0x6439017
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9aa4a734
mov ecx, 0xb82df45f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov dword [ebp - 0x50], 0x6c96836d
jmp 0x40c03a
mov ecx, dword [0x43e58c]
mov eax, dword [0x43e588]
mov edx, ecx
sub edx, 0xbf45119f
sub edx, 1
add edx, 0xbf45119f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe67cc6cf
mov ecx, 0x78370281
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
mov esi, dword [eax]
mov eax, dword [ebp - 0x30]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x18], eax
mov eax, dword [0x43e58c]
mov ecx, dword [0x43e588]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe67cc6cf
mov ecx, 0xd1481b0c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov dword [ebp - 0x50], 0x9472d908
jmp 0x40c03a
mov edx, dword [ebp - 0x18]
mov eax, 0x7c24504a
mov ecx, 0x1bbd13dd
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov dword [ebp - 0x50], 0x6c96836d
jmp 0x40c03a
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
cmp eax, dword [ecx]
setne al
and al, 1
mov byte [ebp - 0x13], al
mov dword [ebp - 0x50], 0xe2e5b8d0
jmp 0x40c03a
mov dl, byte [ebp - 0x13]
mov eax, 0x1f206c56
mov ecx, 0xa8283308
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov dword [ebp - 0x50], 0x6c96836d
jmp 0x40c03a
mov dword [ebp - 0x50], 0xc3109565
jmp 0x40c03a
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x34]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x12], al
mov dword [ebp - 0x50], 0x39c8022
jmp 0x40c03a
mov eax, dword [ebp - 0x48]
mov cl, byte [ebp - 0x12]
and cl, 1
mov byte [eax], cl
mov dword [ebp - 0x50], 0xbbb8ff5a
jmp 0x40c03a
mov ecx, dword [0x43e58c]
mov eax, dword [0x43e588]
mov edx, ecx
add edx, 0xd219c5da
sub edx, 1
sub edx, 0xd219c5da
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1682f2e3
mov ecx, 0x44336229
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov eax, dword [ebp - 0x48]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x11], al
mov eax, dword [0x43e58c]
mov ecx, dword [0x43e588]
mov edx, eax
add edx, 0x960a5e29
sub edx, 1
sub edx, 0x960a5e29
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1682f2e3
mov ecx, 0x934ca0cf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40c03a
mov dword [ebp - 0x50], 0x5c625d64
jmp 0x40c03a
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00426be0
mov eax, dword [ebp - 0x60]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x50], 0xe5a6bb81
jmp 0x40c03a
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x50], 0x909f27f1
jmp 0x40c03a
mov dword [ebp - 0x50], 0x12a9b480
jmp 0x40c03a
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x50], 0xf6d3be76
jmp 0x40c03a
mov dword [ebp - 0x50], 0xe1a4ba11
jmp 0x40c03a
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
mov esi, dword [eax]
mov eax, dword [ebp - 0x30]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x50], 0x78370281
jmp 0x40c03a
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x50], 0x44336229
jmp 0x40b32f