Function at 0x40cfd0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x105c
call fcn.0042a0f0
mov eax, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov eax, dword [0x441080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1044], 0x2c8fc1bb
mov eax, dword [ebp - 0x1044]
mov dword [ebp - 0x1048], eax
sub eax, 0x80cfcab0
je 0x40dfd5
jmp 0x40d016
mov eax, dword [ebp - 0x1048]
sub eax, 0x82947ec3
je 0x40dd20
jmp 0x40d02c
mov eax, dword [ebp - 0x1048]
sub eax, 0x859ecf79
je 0x40dca9
jmp 0x40d042
mov eax, dword [ebp - 0x1048]
sub eax, 0x8e3af195
je 0x40d716
jmp 0x40d058
mov eax, dword [ebp - 0x1048]
sub eax, 0x925a7e7e
je 0x40d707
jmp 0x40d06e
mov eax, dword [ebp - 0x1048]
sub eax, 0x929f8def
je 0x40d907
jmp 0x40d084
mov eax, dword [ebp - 0x1048]
sub eax, 0x96a51c34
je 0x40de6f
jmp 0x40d09a
mov eax, dword [ebp - 0x1048]
sub eax, 0x9760b23a
je 0x40dd92
jmp 0x40d0b0
mov eax, dword [ebp - 0x1048]
sub eax, 0x985178f3
je 0x40dc9a
jmp 0x40d0c6
mov eax, dword [ebp - 0x1048]
sub eax, 0x9b59457f
je 0x40d85e
jmp 0x40d0dc
mov eax, dword [ebp - 0x1048]
sub eax, 0x9b71cb24
je 0x40d691
jmp 0x40d0f2
mov eax, dword [ebp - 0x1048]
sub eax, 0x9e3c09f8
je 0x40df5e
jmp 0x40d108
mov eax, dword [ebp - 0x1048]
sub eax, 0xa5e4addf
je 0x40da70
jmp 0x40d11e
mov eax, dword [ebp - 0x1048]
sub eax, 0xa9346f4a
je 0x40de51
jmp 0x40d134
mov eax, dword [ebp - 0x1048]
sub eax, 0xac33e5f2
je 0x40da1f
jmp 0x40d14a
mov eax, dword [ebp - 0x1048]
sub eax, 0xaff00384
je 0x40d8af
jmp 0x40d160
mov eax, dword [ebp - 0x1048]
sub eax, 0xb14ba709
je 0x40d7b5
jmp 0x40d176
mov eax, dword [ebp - 0x1048]
sub eax, 0xba9e0da3
je 0x40db65
jmp 0x40d18c
mov eax, dword [ebp - 0x1048]
sub eax, 0xc1de3f7b
je 0x40debf
jmp 0x40d1a2
mov eax, dword [ebp - 0x1048]
sub eax, 0xc2bef8d3
je 0x40dccf
jmp 0x40d1b8
mov eax, dword [ebp - 0x1048]
sub eax, 0xca287cd6
je 0x40d76c
jmp 0x40d1ce
mov eax, dword [ebp - 0x1048]
sub eax, 0xcb9d6842
je 0x40db04
jmp 0x40d1e4
mov eax, dword [ebp - 0x1048]
sub eax, 0xceee99c6
je 0x40df7c
jmp 0x40d1fa
mov eax, dword [ebp - 0x1048]
sub eax, 0xd18d9daa
je 0x40db1f
jmp 0x40d210
mov eax, dword [ebp - 0x1048]
sub eax, 0xd79c7f0e
je 0x40dd71
jmp 0x40d226
mov eax, dword [ebp - 0x1048]
sub eax, 0xdacbbf36
je 0x40dad4
jmp 0x40d23c
mov eax, dword [ebp - 0x1048]
sub eax, 0xdcc53a6e
je 0x40dedc
jmp 0x40d252
mov eax, dword [ebp - 0x1048]
sub eax, 0xe0c1ceb4
je 0x40dfb7
jmp 0x40d268
mov eax, dword [ebp - 0x1048]
sub eax, 0xe16f611d
je 0x40db40
jmp 0x40d27e
mov eax, dword [ebp - 0x1048]
sub eax, 0xe459b6e1
je 0x40dc2c
jmp 0x40d294
mov eax, dword [ebp - 0x1048]
sub eax, 0xe5e7fc57
je 0x40d9bf
jmp 0x40d2aa
mov eax, dword [ebp - 0x1048]
sub eax, 0xfc511b4b
je 0x40daf5
jmp 0x40d2c0
mov eax, dword [ebp - 0x1048]
sub eax, 0xfd8a81ec
je 0x40dea2
jmp 0x40d2d6
mov eax, dword [ebp - 0x1048]
sub eax, 0xff60d343
je 0x40d605
jmp 0x40d2ec
mov eax, dword [ebp - 0x1048]
sub eax, 0x88d8a8c
je 0x40dbe3
jmp 0x40d302
mov eax, dword [ebp - 0x1048]
sub eax, 0x13041cfb
je 0x40da7f
jmp 0x40d318
mov eax, dword [ebp - 0x1048]
sub eax, 0x188894cb
je 0x40db56
jmp 0x40d32e
mov eax, dword [ebp - 0x1048]
sub eax, 0x2731ee3f
je 0x40d967
jmp 0x40d344
mov eax, dword [ebp - 0x1048]
sub eax, 0x2c8fc1bb
je 0x40d4bf
jmp 0x40d35a
mov eax, dword [ebp - 0x1048]
sub eax, 0x3359f5dc
je 0x40d83d
jmp 0x40d370
mov eax, dword [ebp - 0x1048]
sub eax, 0x34ced4ea
je 0x40d5d1
jmp 0x40d386
mov eax, dword [ebp - 0x1048]
sub eax, 0x3fda3556
je 0x40d9ce
jmp 0x40d39c
mov eax, dword [ebp - 0x1048]
sub eax, 0x4005d717
je 0x40d61b
jmp 0x40d3b2
mov eax, dword [ebp - 0x1048]
sub eax, 0x43a20925
je 0x40d510
jmp 0x40d3c8
mov eax, dword [ebp - 0x1048]
sub eax, 0x48d50858
je 0x40de60
jmp 0x40d3de
mov eax, dword [ebp - 0x1048]
sub eax, 0x541db303
je 0x40d5e0
jmp 0x40d3f4
mov eax, dword [ebp - 0x1048]
sub eax, 0x553e952e
je 0x40d916
jmp 0x40d40a
mov eax, dword [ebp - 0x1048]
sub eax, 0x66f31814
je 0x40de08
jmp 0x40d420
mov eax, dword [ebp - 0x1048]
sub eax, 0x6c887cca
je 0x40db8c
jmp 0x40d436
mov eax, dword [ebp - 0x1048]
sub eax, 0x6effc727
je 0x40dfa8
jmp 0x40d44c
mov eax, dword [ebp - 0x1048]
sub eax, 0x703dafb5
je 0x40df92
jmp 0x40d462
mov eax, dword [ebp - 0x1048]
sub eax, 0x704b58a2
je 0x40df08
jmp 0x40d478
mov eax, dword [ebp - 0x1048]
sub eax, 0x71164998
je 0x40df6d
jmp 0x40d48e
mov eax, dword [ebp - 0x1048]
sub eax, 0x76716065
je 0x40d81c
jmp 0x40d4a4
mov eax, dword [ebp - 0x1048]
sub eax, 0x7e9f188a
je 0x40dfc6
jmp 0x40d4ba
jmp 0x40dfdf
mov eax, dword [0x44259c]
mov ecx, dword [0x442598]
mov edx, eax
sub edx, 0xfeef9a24
sub edx, 1
add edx, 0xfeef9a24
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x704b58a2
mov ecx, 0x43a20925
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov eax, dword [ebp + 8]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1038], eax
mov eax, dword [ebp - 0x1038]
mov dword [ebp - 0x1030], eax
mov ecx, dword [0x44259c]
mov eax, dword [0x442598]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x704b58a2
mov ecx, 0x34ced4ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0x541db303
jmp 0x40dfdf
mov edx, dword [ebp - 0x1030]
mov esi, 0xffffffff
mov eax, 0x8e3af195
mov ecx, 0xff60d343
cmp edx, esi
cmove eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov byte [ebp - 0x1031], 0
mov dword [ebp - 0x1044], 0x4005d717
jmp 0x40dfdf
mov ecx, dword [0x44259c]
mov eax, dword [0x442598]
mov edx, ecx
sub edx, 0xc324e9d1
sub edx, 1
add edx, 0xc324e9d1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9e3c09f8
mov ecx, 0x9b71cb24
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov ecx, dword [0x44259c]
mov eax, dword [0x442598]
mov edx, ecx
sub edx, 0x91ae804
sub edx, 1
add edx, 0x91ae804
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9e3c09f8
mov ecx, 0x925a7e7e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0xc1de3f7b
jmp 0x40dfdf
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x103c], eax
mov dword [ebp - 0x1044], 0xca287cd6
jmp 0x40dfdf
mov eax, dword [0x44259c]
mov ecx, dword [0x442598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x71164998
mov ecx, 0xb14ba709
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov eax, 0xffffffff
cmp dword [ebp - 0x103c], eax
sete al
and al, 1
mov byte [ebp - 0x102a], al
mov eax, dword [0x44259c]
mov ecx, dword [0x442598]
mov edx, eax
add edx, 0xba6c6dd9
sub edx, 1
sub edx, 0xba6c6dd9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x71164998
mov ecx, 0x76716065
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov dl, byte [ebp - 0x102a]
mov eax, 0x553e952e
mov ecx, 0x3359f5dc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov eax, dword [ebp - 0x1038]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1044], 0x9b59457f
jmp 0x40dfdf
mov eax, dword [0x44259c]
mov ecx, dword [0x442598]
mov edx, eax
sub edx, 0x244afe29
sub edx, 1
add edx, 0x244afe29
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xceee99c6
mov ecx, 0xaff00384
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov byte [ebp - 0x1031], 0
mov eax, dword [0x44259c]
mov ecx, dword [0x442598]
mov edx, eax
add edx, 0x99f02492
sub edx, 1
sub edx, 0x99f02492
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xceee99c6
mov ecx, 0x929f8def
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0xc1de3f7b
jmp 0x40dfdf
mov eax, dword [0x44259c]
mov ecx, dword [0x442598]
mov edx, eax
add edx, 0xc8714553
sub edx, 1
sub edx, 0xc8714553
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x703dafb5
mov ecx, 0x2731ee3f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov byte [ebp - 0x103d], 0
mov eax, dword [0x44259c]
mov ecx, dword [0x442598]
mov edx, eax
sub edx, 0x6a587fbd
sub edx, 1
add edx, 0x6a587fbd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x703dafb5
mov ecx, 0xe5e7fc57
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0x3fda3556
jmp 0x40dfdf
mov eax, dword [0x44259c]
mov ecx, dword [0x442598]
mov edx, eax
add edx, 0x7207e70e
sub edx, 1
sub edx, 0x7207e70e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6effc727
mov ecx, 0xac33e5f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov eax, dword [0x44259c]
mov ecx, dword [0x442598]
mov edx, eax
add edx, 0x9c2bd4b9
sub edx, 1
sub edx, 0x9c2bd4b9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6effc727
mov ecx, 0xa5e4addf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0x13041cfb
jmp 0x40dfdf
lea ecx, [ebp - 0x1010]
mov edx, dword [ebp - 0x1038]
lea eax, [ebp - 0x1018]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1029], al
mov dword [ebp - 0x1044], 0xdacbbf36
jmp 0x40dfdf
mov dl, byte [ebp - 0x1029]
mov eax, 0xfc511b4b
mov ecx, 0xcb9d6842
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0x96a51c34
jmp 0x40dfdf
mov eax, dword [ebp - 0x1018]
mov dword [ebp - 0x1028], eax
mov dword [ebp - 0x1044], 0xd18d9daa
jmp 0x40dfdf
mov edx, dword [ebp - 0x1028]
mov eax, 0xba9e0da3
mov ecx, 0xe16f611d
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov byte [ebp - 0x103d], 1
mov dword [ebp - 0x1044], 0x188894cb
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0x96a51c34
jmp 0x40dfdf
mov eax, dword [ebp - 0x1018]
mov dword [ebp - 0x1024], eax
lea eax, [ebp - 0x1010]
mov dword [ebp - 0x1020], eax
mov dword [ebp - 0x1044], 0x6c887cca
jmp 0x40dfdf
mov esi, dword [ebp - 0x103c]
mov ecx, dword [ebp - 0x1024]
mov edx, dword [ebp - 0x1020]
lea eax, [ebp - 0x1014]
xor edi, edi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub esp, 0x14
mov edx, eax
mov eax, 0x88d8a8c
mov ecx, 0x859ecf79
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov eax, dword [0x44259c]
mov ecx, dword [0x442598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe0c1ceb4
mov ecx, 0xe459b6e1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov ecx, dword [0x44259c]
mov eax, dword [0x442598]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe0c1ceb4
mov ecx, 0x985178f3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0x96a51c34
jmp 0x40dfdf
mov eax, dword [ebp - 0x1014]
cmp eax, dword [ebp - 0x1018]
setne al
and al, 1
mov byte [ebp - 0x101a], al
mov dword [ebp - 0x1044], 0xc2bef8d3
jmp 0x40dfdf
mov eax, dword [0x44259c]
mov ecx, dword [0x442598]
mov edx, eax
add edx, 0x398d1261
sub edx, 1
sub edx, 0x398d1261
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7e9f188a
mov ecx, 0x82947ec3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov eax, dword [0x44259c]
mov ecx, dword [0x442598]
mov edx, eax
add edx, 0x8521c790
sub edx, 1
sub edx, 0x8521c790
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7e9f188a
mov ecx, 0xd79c7f0e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov dl, byte [ebp - 0x101a]
mov eax, 0x48d50858
mov ecx, 0x9760b23a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov ecx, dword [0x44259c]
mov eax, dword [0x442598]
mov edx, ecx
sub edx, 0x86ec738a
sub edx, 1
add edx, 0x86ec738a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x80cfcab0
mov ecx, 0x66f31814
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov eax, dword [0x44259c]
mov ecx, dword [0x442598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x80cfcab0
mov ecx, 0xa9346f4a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0x96a51c34
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0x13041cfb
jmp 0x40dfdf
mov eax, dword [ebp - 0x1038]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x103c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1044], 0xfd8a81ec
jmp 0x40dfdf
mov al, byte [ebp - 0x103d]
and al, 1
mov byte [ebp - 0x1031], al
mov dword [ebp - 0x1044], 0xc1de3f7b
jmp 0x40dfdf
mov al, byte [ebp - 0x1031]
and al, 1
mov byte [ebp - 0x1019], al
mov dword [ebp - 0x1044], 0xdcc53a6e
jmp 0x40dfdf
mov al, byte [ebp - 0x1019]
and al, 1
movzx eax, al
mov dword [ebp - 0x104c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042a0e0
mov eax, dword [ebp - 0x104c]
add esp, 0x105c
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp + 8]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1038], eax
mov dword [ebp - 0x1044], 0x43a20925
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0x9b71cb24
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0xb14ba709
jmp 0x40dfdf
mov byte [ebp - 0x1031], 0
mov dword [ebp - 0x1044], 0xaff00384
jmp 0x40dfdf
mov byte [ebp - 0x103d], 0
mov dword [ebp - 0x1044], 0x2731ee3f
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0xac33e5f2
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0xe459b6e1
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0x82947ec3
jmp 0x40dfdf
mov dword [ebp - 0x1044], 0x66f31814
jmp 0x40cffa