Function at 0x40b6f0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x58
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x58], eax
mov eax, dword [0x43f080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x54], 0x763497db
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x60], eax
sub eax, 0x899f38b4
je 0x40c449
jmp 0x40b72c
mov eax, dword [ebp - 0x60]
sub eax, 0xa333a372
je 0x40bdb5
jmp 0x40b73f
mov eax, dword [ebp - 0x60]
sub eax, 0xa3ab8170
je 0x40bba7
jmp 0x40b752
mov eax, dword [ebp - 0x60]
sub eax, 0xa90620de
je 0x40c2dd
jmp 0x40b765
mov eax, dword [ebp - 0x60]
sub eax, 0xab858c81
je 0x40c43d
jmp 0x40b778
mov eax, dword [ebp - 0x60]
sub eax, 0xadc36016
je 0x40c493
jmp 0x40b78b
mov eax, dword [ebp - 0x60]
sub eax, 0xb032d8d1
je 0x40bec8
jmp 0x40b79e
mov eax, dword [ebp - 0x60]
sub eax, 0xb9ea0cb9
je 0x40bf22
jmp 0x40b7b1
mov eax, dword [ebp - 0x60]
sub eax, 0xba7339cc
je 0x40c05b
jmp 0x40b7c4
mov eax, dword [ebp - 0x60]
sub eax, 0xc90e39fa
je 0x40c4a2
jmp 0x40b7d7
mov eax, dword [ebp - 0x60]
sub eax, 0xcfee257b
je 0x40c2e9
jmp 0x40b7ea
mov eax, dword [ebp - 0x60]
sub eax, 0xd41fd1d0
je 0x40c4cc
jmp 0x40b7fd
mov eax, dword [ebp - 0x60]
sub eax, 0xd9d689d7
je 0x40c41d
jmp 0x40b810
mov eax, dword [ebp - 0x60]
sub eax, 0xea360b9a
je 0x40c076
jmp 0x40b823
mov eax, dword [ebp - 0x60]
sub eax, 0xedec9c9c
je 0x40bde2
jmp 0x40b836
mov eax, dword [ebp - 0x60]
sub eax, 0xf2049b47
je 0x40bd8f
jmp 0x40b849
mov eax, dword [ebp - 0x60]
sub eax, 0xf67c9d04
je 0x40c0bc
jmp 0x40b85c
mov eax, dword [ebp - 0x60]
sub eax, 0xfd01bc13
je 0x40c455
jmp 0x40b86f
mov eax, dword [ebp - 0x60]
sub eax, 0x152947b
je 0x40c1e7
jmp 0x40b882
mov eax, dword [ebp - 0x60]
sub eax, 0x30a163f
je 0x40c39e
jmp 0x40b895
mov eax, dword [ebp - 0x60]
sub eax, 0x5d817f0
je 0x40c4c0
jmp 0x40b8a8
mov eax, dword [ebp - 0x60]
sub eax, 0x65ac2df
je 0x40bbb3
jmp 0x40b8bb
mov eax, dword [ebp - 0x60]
sub eax, 0x6dceb72
je 0x40c4ae
jmp 0x40b8ce
mov eax, dword [ebp - 0x60]
sub eax, 0x1973ad1a
je 0x40bd74
jmp 0x40b8e1
mov eax, dword [ebp - 0x60]
sub eax, 0x1b0db9c3
je 0x40bd9b
jmp 0x40b8f4
mov eax, dword [ebp - 0x60]
sub eax, 0x1e4989ea
je 0x40c283
jmp 0x40b907
mov eax, dword [ebp - 0x60]
sub eax, 0x246cebfd
je 0x40c210
jmp 0x40b91a
mov eax, dword [ebp - 0x60]
sub eax, 0x2c8ca15d
je 0x40bb12
jmp 0x40b92d
mov eax, dword [ebp - 0x60]
sub eax, 0x305f4c0c
je 0x40bc2c
jmp 0x40b940
mov eax, dword [ebp - 0x60]
sub eax, 0x310d0d93
je 0x40c116
jmp 0x40b953
mov eax, dword [ebp - 0x60]
sub eax, 0x31d51303
je 0x40c411
jmp 0x40b966
mov eax, dword [ebp - 0x60]
sub eax, 0x3de88730
je 0x40bd2e
jmp 0x40b979
mov eax, dword [ebp - 0x60]
sub eax, 0x40633dcb
je 0x40c10a
jmp 0x40b98c
mov eax, dword [ebp - 0x60]
sub eax, 0x419123ff
je 0x40bfb1
jmp 0x40b99f
mov eax, dword [ebp - 0x60]
sub eax, 0x42dacb68
je 0x40bcaf
jmp 0x40b9b2
mov eax, dword [ebp - 0x60]
sub eax, 0x4492a432
je 0x40bb97
jmp 0x40b9c5
mov eax, dword [ebp - 0x60]
sub eax, 0x45027fa5
je 0x40bbc5
jmp 0x40b9d8
mov eax, dword [ebp - 0x60]
sub eax, 0x5027f33d
je 0x40c1f3
jmp 0x40b9eb
mov eax, dword [ebp - 0x60]
sub eax, 0x51746808
je 0x40bd22
jmp 0x40b9fe
mov eax, dword [ebp - 0x60]
sub eax, 0x51a7d2a2
je 0x40bfff
jmp 0x40ba11
mov eax, dword [ebp - 0x60]
sub eax, 0x530b35db
je 0x40c2d1
jmp 0x40ba24
mov eax, dword [ebp - 0x60]
sub eax, 0x54d3e18a
je 0x40bc69
jmp 0x40ba37
mov eax, dword [ebp - 0x60]
sub eax, 0x5658ffc7
je 0x40c189
jmp 0x40ba4a
mov eax, dword [ebp - 0x60]
sub eax, 0x5b716012
je 0x40be55
jmp 0x40ba5d
mov eax, dword [ebp - 0x60]
sub eax, 0x5f0d5788
je 0x40bed4
jmp 0x40ba70
mov eax, dword [ebp - 0x60]
sub eax, 0x6395a7ac
je 0x40bc4b
jmp 0x40ba83
mov eax, dword [ebp - 0x60]
sub eax, 0x664a3827
je 0x40c31f
jmp 0x40ba96
mov eax, dword [ebp - 0x60]
sub eax, 0x6c5b5733
je 0x40c32b
jmp 0x40baa9
mov eax, dword [ebp - 0x60]
sub eax, 0x7517939d
je 0x40bdd0
jmp 0x40babc
mov eax, dword [ebp - 0x60]
sub eax, 0x763497db
je 0x40bafa
jmp 0x40bacf
mov eax, dword [ebp - 0x60]
sub eax, 0x7b5e3547
je 0x40bc57
jmp 0x40bae2
mov eax, dword [ebp - 0x60]
sub eax, 0x7e1143ee
je 0x40bfa5
jmp 0x40baf5
jmp 0x40c4d3
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x54], 0x2c8ca15d
jmp 0x40c4d3
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x5c]
push eax
mov edx, esp
mov dword [ebp - 0x38], edx
push eax
sub esp, 0xffc
mov edx, esp
mov dword [ebp - 0x34], edx
push eax
mov edx, esp
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x50], eax
mov edx, 0xffffffff
mov eax, 0x65ac2df
mov ecx, 0x4492a432
cmp dword [ebp - 0x50], edx
cmove eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov byte [ebp - 0x41], 0
mov dword [ebp - 0x54], 0xa3ab8170
jmp 0x40c4d3
mov dword [ebp - 0x54], 0x6c5b5733
jmp 0x40c4d3
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x54], 0x45027fa5
jmp 0x40c4d3
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x40]
mov dword [eax], ecx
mov edx, dword [ebp - 0x40]
mov esi, 0xffffffff
mov eax, 0x7b5e3547
mov ecx, 0x305f4c0c
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov eax, dword [ebp - 0x50]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x41], 0
mov dword [ebp - 0x54], 0x6395a7ac
jmp 0x40c4d3
mov dword [ebp - 0x54], 0x6c5b5733
jmp 0x40c4d3
mov eax, dword [ebp - 0x3c]
mov byte [eax], 0
mov dword [ebp - 0x54], 0x54d3e18a
jmp 0x40c4d3
mov eax, dword [0x44058c]
mov ecx, dword [0x440588]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xab858c81
mov ecx, 0x42dacb68
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov ecx, dword [0x44058c]
mov eax, dword [0x440588]
mov edx, ecx
add edx, 0x46e7cdce
sub edx, 1
sub edx, 0x46e7cdce
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xab858c81
mov ecx, 0x51746808
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov dword [ebp - 0x54], 0x3de88730
jmp 0x40c4d3
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x30]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x26], al
mov dword [ebp - 0x54], 0x1973ad1a
jmp 0x40c4d3
mov dl, byte [ebp - 0x26]
mov eax, 0xf2049b47
mov ecx, 0x1b0db9c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov dword [ebp - 0x54], 0xcfee257b
jmp 0x40c4d3
mov eax, dword [ebp - 0x30]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x25], al
mov dword [ebp - 0x54], 0xa333a372
jmp 0x40c4d3
mov dl, byte [ebp - 0x25]
mov eax, 0x5f0d5788
mov ecx, 0x7517939d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov eax, dword [ebp - 0x3c]
mov byte [eax], 1
mov dword [ebp - 0x54], 0xedec9c9c
jmp 0x40c4d3
mov ecx, dword [0x44058c]
mov eax, dword [0x440588]
mov edx, ecx
add edx, 0x8d2922d1
sub edx, 1
sub edx, 0x8d2922d1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x899f38b4
mov ecx, 0x5b716012
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov ecx, dword [0x44058c]
mov eax, dword [0x440588]
mov edx, ecx
add edx, 0xf1f3e028
sub edx, 1
sub edx, 0xf1f3e028
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x899f38b4
mov ecx, 0xb032d8d1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov dword [ebp - 0x54], 0xcfee257b
jmp 0x40c4d3
mov eax, dword [0x44058c]
mov ecx, dword [0x440588]
mov edx, eax
add edx, 0x36f176f4
sub edx, 1
sub edx, 0x36f176f4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfd01bc13
mov ecx, 0xb9ea0cb9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
mov esi, dword [eax]
mov eax, dword [ebp - 0x38]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x24], eax
mov eax, dword [0x44058c]
mov ecx, dword [0x440588]
mov edx, eax
add edx, 0xdd46f7c6
sub edx, 1
sub edx, 0xdd46f7c6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfd01bc13
mov ecx, 0x7e1143ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov dword [ebp - 0x54], 0x419123ff
jmp 0x40c4d3
mov eax, dword [0x44058c]
mov ecx, dword [0x440588]
mov edx, eax
add edx, 0xa14f0454
sub edx, 1
sub edx, 0xa14f0454
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xadc36016
mov ecx, 0x51a7d2a2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov eax, dword [ebp - 0x24]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1d], al
mov eax, dword [0x44058c]
mov ecx, dword [0x440588]
mov edx, eax
add edx, 0x3972d477
sub edx, 1
sub edx, 0x3972d477
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xadc36016
mov ecx, 0xba7339cc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov dl, byte [ebp - 0x1d]
mov eax, 0xea360b9a
mov ecx, 0x310d0d93
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov eax, dword [0x44058c]
mov ecx, dword [0x440588]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc90e39fa
mov ecx, 0xf67c9d04
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov eax, dword [0x44058c]
mov ecx, dword [0x440588]
mov edx, eax
sub edx, 0x129f85ac
sub edx, 1
add edx, 0x129f85ac
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc90e39fa
mov ecx, 0x40633dcb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov dword [ebp - 0x54], 0xcfee257b
jmp 0x40c4d3
mov ecx, dword [0x44058c]
mov eax, dword [0x440588]
mov edx, ecx
add edx, 0x6f03d0d8
sub edx, 1
sub edx, 0x6f03d0d8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6dceb72
mov ecx, 0x5658ffc7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [0x44058c]
mov ecx, dword [0x440588]
mov edx, eax
add edx, 0x3b631c69
sub edx, 1
sub edx, 0x3b631c69
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6dceb72
mov ecx, 0x152947b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov dword [ebp - 0x54], 0x5027f33d
jmp 0x40c4d3
mov edx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x18]
mov eax, 0xa90620de
mov ecx, 0x246cebfd
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov ecx, dword [0x44058c]
mov eax, dword [0x440588]
mov edx, ecx
add edx, 0x68c4271f
sub edx, 1
sub edx, 0x68c4271f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5d817f0
mov ecx, 0x1e4989ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov eax, dword [0x44058c]
mov ecx, dword [0x440588]
mov edx, eax
add edx, 0x7ce9d002
sub edx, 1
sub edx, 0x7ce9d002
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5d817f0
mov ecx, 0x530b35db
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov dword [ebp - 0x54], 0xcfee257b
jmp 0x40c4d3
mov dword [ebp - 0x54], 0x3de88730
jmp 0x40c4d3
mov eax, dword [ebp - 0x50]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x3c]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x41], al
mov dword [ebp - 0x54], 0x664a3827
jmp 0x40c4d3
mov dword [ebp - 0x54], 0x6c5b5733
jmp 0x40c4d3
mov ecx, dword [0x44058c]
mov eax, dword [0x440588]
mov edx, ecx
add edx, 0x29842348
sub edx, 1
sub edx, 0x29842348
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd41fd1d0
mov ecx, 0x30a163f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov al, byte [ebp - 0x41]
and al, 1
mov byte [ebp - 0x11], al
mov ecx, dword [0x44058c]
mov eax, dword [0x440588]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd41fd1d0
mov ecx, 0x31d51303
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x40c4d3
mov dword [ebp - 0x54], 0xd9d689d7
jmp 0x40c4d3
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004275f0
mov eax, dword [ebp - 0x64]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x54], 0x42dacb68
jmp 0x40c4d3
mov dword [ebp - 0x54], 0x5b716012
jmp 0x40c4d3
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
mov esi, dword [eax]
mov eax, dword [ebp - 0x38]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x54], 0xb9ea0cb9
jmp 0x40c4d3
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x54], 0x51a7d2a2
jmp 0x40c4d3
mov dword [ebp - 0x54], 0xf67c9d04
jmp 0x40c4d3
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x54], 0x5658ffc7
jmp 0x40c4d3
mov dword [ebp - 0x54], 0x1e4989ea
jmp 0x40c4d3
mov dword [ebp - 0x54], 0x30a163f
jmp 0x40b716