Function at 0x40be10
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x60
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x60], eax
mov eax, dword [0x43f080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x440584]
mov eax, dword [0x440580]
mov edx, ecx
add edx, 0x1ff96660
sub edx, 1
sub edx, 0x1ff96660
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x56], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x55], al
mov dword [ebp - 0x5c], 0xd9972203
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x68], eax
sub eax, 0x81a2fa20
je 0x40c729
jmp 0x40be85
mov eax, dword [ebp - 0x68]
sub eax, 0x83ab19bc
je 0x40c4d6
jmp 0x40be98
mov eax, dword [ebp - 0x68]
sub eax, 0x88589b64
je 0x40caaa
jmp 0x40beab
mov eax, dword [ebp - 0x68]
sub eax, 0x95342a8e
je 0x40c8cf
jmp 0x40bebe
mov eax, dword [ebp - 0x68]
sub eax, 0x95be07d4
je 0x40c5a0
jmp 0x40bed1
mov eax, dword [ebp - 0x68]
sub eax, 0x9c1423d7
je 0x40ca70
jmp 0x40bee4
mov eax, dword [ebp - 0x68]
sub eax, 0x9d833c99
je 0x40c9ec
jmp 0x40bef7
mov eax, dword [ebp - 0x68]
sub eax, 0xa63e141d
je 0x40cabc
jmp 0x40bf0a
mov eax, dword [ebp - 0x68]
sub eax, 0xb41852fe
je 0x40c306
jmp 0x40bf1d
mov eax, dword [ebp - 0x68]
sub eax, 0xba5d64ec
je 0x40c823
jmp 0x40bf30
mov eax, dword [ebp - 0x68]
sub eax, 0xc719f1a4
je 0x40c3aa
jmp 0x40bf43
mov eax, dword [ebp - 0x68]
sub eax, 0xcbc2bc6c
je 0x40c783
jmp 0x40bf56
mov eax, dword [ebp - 0x68]
sub eax, 0xccd2eac4
je 0x40cad7
jmp 0x40bf69
mov eax, dword [ebp - 0x68]
sub eax, 0xce41c34b
je 0x40c48a
jmp 0x40bf7c
mov eax, dword [ebp - 0x68]
sub eax, 0xd1b3200d
je 0x40c621
jmp 0x40bf8f
mov eax, dword [ebp - 0x68]
sub eax, 0xd9972203
je 0x40c22d
jmp 0x40bfa2
mov eax, dword [ebp - 0x68]
sub eax, 0xe353540f
je 0x40c5b2
jmp 0x40bfb5
mov eax, dword [ebp - 0x68]
sub eax, 0xea465ff4
je 0x40c3b6
jmp 0x40bfc8
mov eax, dword [ebp - 0x68]
sub eax, 0xf43faabf
je 0x40c4ee
jmp 0x40bfdb
mov eax, dword [ebp - 0x68]
sub eax, 0xf4f08efa
je 0x40ca44
jmp 0x40bfee
mov eax, dword [ebp - 0x68]
sub eax, 0xf8f5ca3d
je 0x40c4e2
jmp 0x40c001
mov eax, dword [ebp - 0x68]
sub eax, 0xfa48b28c
je 0x40ca98
jmp 0x40c014
mov eax, dword [ebp - 0x68]
sub eax, 0x22380d1
je 0x40c7dd
jmp 0x40c027
mov eax, dword [ebp - 0x68]
sub eax, 0xa8d580f
je 0x40c951
jmp 0x40c03a
mov eax, dword [ebp - 0x68]
sub eax, 0x16065197
je 0x40c92c
jmp 0x40c04d
mov eax, dword [ebp - 0x68]
sub eax, 0x191ce431
je 0x40c41f
jmp 0x40c060
mov eax, dword [ebp - 0x68]
sub eax, 0x1a27d138
je 0x40c735
jmp 0x40c073
mov eax, dword [ebp - 0x68]
sub eax, 0x28089732
je 0x40c556
jmp 0x40c086
mov eax, dword [ebp - 0x68]
sub eax, 0x29772a6f
je 0x40c7d1
jmp 0x40c099
mov eax, dword [ebp - 0x68]
sub eax, 0x2d0c20c3
je 0x40c5be
jmp 0x40c0ac
mov eax, dword [ebp - 0x68]
sub eax, 0x2f3f2f4f
je 0x40c647
jmp 0x40c0bf
mov eax, dword [ebp - 0x68]
sub eax, 0x41d3773e
je 0x40c920
jmp 0x40c0d2
mov eax, dword [ebp - 0x68]
sub eax, 0x4266dd5d
je 0x40c58e
jmp 0x40c0e5
mov eax, dword [ebp - 0x68]
sub eax, 0x43159d66
je 0x40cac8
jmp 0x40c0f8
mov eax, dword [ebp - 0x68]
sub eax, 0x473c906c
je 0x40c571
jmp 0x40c10b
mov eax, dword [ebp - 0x68]
sub eax, 0x4a203f67
je 0x40c8f9
jmp 0x40c11e
mov eax, dword [ebp - 0x68]
sub eax, 0x4d3d709e
je 0x40c979
jmp 0x40c131
mov eax, dword [ebp - 0x68]
sub eax, 0x4dc19a24
je 0x40c662
jmp 0x40c144
mov eax, dword [ebp - 0x68]
sub eax, 0x58334f1a
je 0x40c278
jmp 0x40c157
mov eax, dword [ebp - 0x68]
sub eax, 0x5e4f01bd
je 0x40c914
jmp 0x40c16a
mov eax, dword [ebp - 0x68]
sub eax, 0x61fac73b
je 0x40c6b0
jmp 0x40c17d
mov eax, dword [ebp - 0x68]
sub eax, 0x63dce9fe
je 0x40c8db
jmp 0x40c190
mov eax, dword [ebp - 0x68]
sub eax, 0x6fd3db3b
je 0x40c885
jmp 0x40c1a3
mov eax, dword [ebp - 0x68]
sub eax, 0x732b1aa3
je 0x40ca50
jmp 0x40c1b6
mov eax, dword [ebp - 0x68]
sub eax, 0x74b17930
je 0x40c2fa
jmp 0x40c1c9
mov eax, dword [ebp - 0x68]
sub eax, 0x793cf10e
je 0x40c5d8
jmp 0x40c1dc
mov eax, dword [ebp - 0x68]
sub eax, 0x7c1748ff
je 0x40ca7c
jmp 0x40c1ef
mov eax, dword [ebp - 0x68]
sub eax, 0x7cb5594a
je 0x40c354
jmp 0x40c202
mov eax, dword [ebp - 0x68]
sub eax, 0x7e76a356
je 0x40c62d
jmp 0x40c215
mov eax, dword [ebp - 0x68]
sub eax, 0x7f6ff071
je 0x40c879
jmp 0x40c228
jmp 0x40cae1
mov bl, byte [ebp - 0x56]
mov dh, byte [ebp - 0x55]
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9c1423d7
mov ecx, 0x58334f1a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
sub esp, 0xffc
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
mov eax, dword [0x440584]
mov ecx, dword [0x440580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9c1423d7
mov ecx, 0x74b17930
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov dword [ebp - 0x5c], 0xb41852fe
jmp 0x40cae1
mov eax, dword [0x440584]
mov ecx, dword [0x440580]
mov edx, eax
sub edx, 0x431895f5
sub edx, 1
add edx, 0x431895f5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7c1748ff
mov ecx, 0x7cb5594a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x50]
mov dword [eax], edx
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov eax, dword [0x440584]
mov ecx, dword [0x440580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7c1748ff
mov ecx, 0xc719f1a4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov dword [ebp - 0x5c], 0xea465ff4
jmp 0x40cae1
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov edx, dword [ebp - 0x48]
mov esi, 0xffffffff
mov eax, 0xf43faabf
mov ecx, 0x191ce431
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov ecx, dword [0x440584]
mov eax, dword [0x440580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfa48b28c
mov ecx, 0xce41c34b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov eax, dword [ebp - 0x54]
mov byte [eax], 0
mov eax, dword [0x440584]
mov ecx, dword [0x440580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfa48b28c
mov ecx, 0x83ab19bc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov dword [ebp - 0x5c], 0xf8f5ca3d
jmp 0x40cae1
mov dword [ebp - 0x5c], 0x4d3d709e
jmp 0x40cae1
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x44]
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x2d], al
mov dword [ebp - 0x5c], 0x28089732
jmp 0x40cae1
mov dl, byte [ebp - 0x2d]
mov eax, 0x95be07d4
mov ecx, 0x473c906c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x5c], 0x4266dd5d
jmp 0x40cae1
mov eax, dword [ebp - 0x54]
mov byte [eax], 0
mov dword [ebp - 0x5c], 0x4d3d709e
jmp 0x40cae1
mov eax, dword [ebp - 0x40]
mov byte [eax], 0
mov dword [ebp - 0x5c], 0xe353540f
jmp 0x40cae1
mov dword [ebp - 0x5c], 0x2d0c20c3
jmp 0x40cae1
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x5c], 0x793cf10e
jmp 0x40cae1
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, eax
mov eax, 0xd1b3200d
mov ecx, 0x7e76a356
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov dword [ebp - 0x5c], 0x16065197
jmp 0x40cae1
mov eax, dword [ebp - 0x34]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x21], al
mov dword [ebp - 0x5c], 0x2f3f2f4f
jmp 0x40cae1
mov dl, byte [ebp - 0x21]
mov eax, 0x22380d1
mov ecx, 0x4dc19a24
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov eax, dword [0x440584]
mov ecx, dword [0x440580]
mov edx, eax
sub edx, 0x12723b01
sub edx, 1
add edx, 0x12723b01
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x88589b64
mov ecx, 0x61fac73b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov eax, dword [ebp - 0x40]
mov byte [eax], 1
mov ecx, dword [0x440584]
mov eax, dword [0x440580]
mov edx, ecx
sub edx, 0x8ae03e38
sub edx, 1
add edx, 0x8ae03e38
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x88589b64
mov ecx, 0x81a2fa20
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov dword [ebp - 0x5c], 0x1a27d138
jmp 0x40cae1
mov eax, dword [0x440584]
mov ecx, dword [0x440580]
mov edx, eax
add edx, 0xe7c51b51
sub edx, 1
sub edx, 0xe7c51b51
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa63e141d
mov ecx, 0xcbc2bc6c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov eax, dword [0x440584]
mov ecx, dword [0x440580]
mov edx, eax
sub edx, 0x21519caa
sub edx, 1
add edx, 0x21519caa
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa63e141d
mov ecx, 0x29772a6f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov dword [ebp - 0x5c], 0x16065197
jmp 0x40cae1
mov eax, dword [0x440584]
mov ecx, dword [0x440580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x43159d66
mov ecx, 0xba5d64ec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [0x440584]
mov ecx, dword [0x440580]
mov edx, eax
sub edx, 0xd3908442
sub edx, 1
add edx, 0xd3908442
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x43159d66
mov ecx, 0x7f6ff071
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov dword [ebp - 0x5c], 0x6fd3db3b
jmp 0x40cae1
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x44]
mov esi, dword [eax]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x20]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, eax
mov eax, 0x95342a8e
mov ecx, 0x63dce9fe
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov dword [ebp - 0x5c], 0x16065197
jmp 0x40cae1
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
cmp eax, dword [ecx]
setne al
and al, 1
mov byte [ebp - 0x19], al
mov dword [ebp - 0x5c], 0x4a203f67
jmp 0x40cae1
mov dl, byte [ebp - 0x19]
mov eax, 0x41d3773e
mov ecx, 0x5e4f01bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov dword [ebp - 0x5c], 0x16065197
jmp 0x40cae1
mov dword [ebp - 0x5c], 0x2d0c20c3
jmp 0x40cae1
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x5c], 0xa8d580f
jmp 0x40cae1
mov eax, dword [ebp - 0x18]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x40]
mov cl, byte [eax]
mov eax, dword [ebp - 0x54]
and cl, 1
mov byte [eax], cl
mov dword [ebp - 0x5c], 0x4d3d709e
jmp 0x40cae1
mov ecx, dword [0x440584]
mov eax, dword [0x440580]
mov edx, ecx
add edx, 0x7f31ed05
sub edx, 1
sub edx, 0x7f31ed05
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xccd2eac4
mov ecx, 0x9d833c99
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov eax, dword [ebp - 0x54]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x11], al
mov eax, dword [0x440584]
mov ecx, dword [0x440580]
mov edx, eax
add edx, 0x6291bd89
sub edx, 1
sub edx, 0x6291bd89
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xccd2eac4
mov ecx, 0xf4f08efa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40cae1
mov dword [ebp - 0x5c], 0x732b1aa3
jmp 0x40cae1
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00427fe0
mov eax, dword [ebp - 0x6c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x5c], 0x58334f1a
jmp 0x40cae1
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x50]
mov dword [eax], edx
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov dword [ebp - 0x5c], 0x7cb5594a
jmp 0x40cae1
mov eax, dword [ebp - 0x54]
mov byte [eax], 0
mov dword [ebp - 0x5c], 0xce41c34b
jmp 0x40cae1
mov eax, dword [ebp - 0x40]
mov byte [eax], 1
mov dword [ebp - 0x5c], 0x61fac73b
jmp 0x40cae1
mov dword [ebp - 0x5c], 0xcbc2bc6c
jmp 0x40cae1
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x5c], 0xba5d64ec
jmp 0x40cae1
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x5c], 0x9d833c99
jmp 0x40be6f