Function at 0x40bd90
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41c4c2
mov eax, dword fs:[0]
push eax
sub esp, 0x4c8
mov eax, dword [0x42400c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x48c], edi
mov dword [ebp - 0x494], edi
xor eax, eax
mov dword [ebp - 0x49c], edi
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x464]
push eax
xorps xmm0, xmm0
mov dword [ebp - 0x488], eax
push 0x41e5d8
movups xmmword [ebp - 0x464], xmm0
mov dword [ebp - 0x454], eax
mov dword [ebp - 0x450], eax
call fcn.00404fa0
push 0x41ea2c
push str.wmic_path_win32_VideoController_get_name__adapterram
mov byte [ebp - 4], 1
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__popen]
mov esi, eax
mov dword [ebp - 0x484], esi
add esp, 8
nop word [eax + eax]
push esi
push 0x438
lea eax, [ebp - 0x44c]
push 1
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
add esp, 0x10
test eax, eax
je 0x40bf1f
push ecx
lea ecx, [ebp - 0x44c]
add eax, ecx
push eax
mov eax, ecx
lea ecx, [ebp - 0x4cc]
push eax
call fcn.004056e0
mov byte [ebp - 4], 2
mov ecx, eax
cmp dword [eax + 0x14], 0x10
jb 0x40be76
mov ecx, dword [eax]
mov edi, dword [eax + 0x10]
mov esi, dword [ebp - 0x450]
mov eax, esi
mov edx, dword [ebp - 0x454]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x40beba
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [ebp - 0x454], eax
lea eax, [ebp - 0x464]
cmovae eax, dword [ebp - 0x464]
lea esi, [eax + edx]
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + esi], 0
jmp 0x40bed3
mov byte [ebp - 0x490], 0
lea ecx, [ebp - 0x464]
push dword [ebp - 0x490]
push edi
call fcn.00405350
mov esi, dword [ebp - 0x484]
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x4b8]
cmp ecx, 0x10
jb 0x40be30
mov edx, dword [ebp - 0x4cc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40bf13
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40bf13
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0041aa32
jmp 0x40be23
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__pclose]
sub esp, 0x14
mov dword [ebp - 0x468], 0
lea eax, [ebp - 0x464]
mov byte [ebp - 0x47d], 0xa
xorps xmm0, xmm0
mov ecx, esp
movq qword [ebp - 0x470], xmm0
push eax
call fcn.00404570
mov dl, byte [ebp - 0x47d]
lea ecx, [ebp - 0x470]
call fcn.004073a0
add esp, 0x18
push 0
push 0x41e5d8
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 3
call fcn.00411150
mov edi, dword [ebp - 0x46c]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x470]
mov ecx, edi
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
jbe 0x40c528
mov dword [ebp - 0x484], 1
mov ecx, edi
mov eax, 0x2aaaaaab
sub ecx, esi
xorps xmm0, xmm0
imul ecx
mov ecx, dword [ebp - 0x484]
sar edx, 2
mov eax, edx
shr eax, 0x1f
dec eax
add eax, edx
cmp ecx, eax
jae 0x40c41b
sub esp, 0x18
movq qword [ebp - 0x47c], xmm0
lea eax, [ecx + ecx*2]
mov dword [ebp - 0x474], 0
lea eax, [esi + eax*8]
mov byte [ebp - 0x47d], 0x20
mov edi, esp
lea ecx, [ebp - 0x4b4]
push eax
call fcn.00404570
mov byte [ebp - 4], 4
lea esi, [ebp - 0x4b4]
cmp dword [ebp - 0x4a0], 0x10
mov eax, dword [ebp - 0x4a4]
cmovae esi, dword [ebp - 0x4b4]
test eax, eax
je 0x40c040
push eax
push 0xd
push esi
call sub.VCRUNTIME140.dll_memchr
mov ecx, eax
add esp, 0xc
test ecx, ecx
je 0x40c040
sub ecx, esi
jmp 0x40c043
or ecx, 0xffffffff
xorps xmm0, xmm0
lea eax, [ebp - 0x4b4]
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp dword [ebp - 0x4a4], ecx
cmovb ecx, dword [ebp - 0x4a4]
cmp dword [ebp - 0x4a0], 0x10
push ecx
cmovae eax, dword [ebp - 0x4b4]
mov ecx, edi
push eax
call fcn.00404fa0
mov eax, dword [ebp - 0x488]
or eax, 0xc
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp - 0x488], eax
cmp ecx, 0x10
jb 0x40c0d0
mov edx, dword [ebp - 0x4b4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40c0c6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40c0c6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0041aa32
add esp, 8
mov dl, byte [ebp - 0x47d]
lea ecx, [ebp - 0x47c]
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4a0], 0xf
mov byte [ebp - 0x4b4], 0
call fcn.004073a0
add esp, 0x18
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
push dword [ebp - 0x47c]
call fcn.00404570
lea ecx, [ebp - 0x4cc]
call fcn.00408a30
add esp, 0x18
mov byte [ebp - 4], 6
mov ecx, eax
cmp dword [eax + 0x14], 0x10
jb 0x40c12f
mov ecx, dword [eax]
mov edi, dword [eax + 0x10]
mov esi, dword [ebp - 0x450]
mov eax, esi
mov edx, dword [ebp - 0x454]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x40c173
lea eax, [edi + edx]
cmp esi, 0x10
mov dword [ebp - 0x454], eax
lea eax, [ebp - 0x464]
cmovae eax, dword [ebp - 0x464]
lea esi, [eax + edx]
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + esi], 0
jmp 0x40c18c
mov byte [ebp - 0x4d0], 0
lea ecx, [ebp - 0x464]
push dword [ebp - 0x4d0]
push edi
call fcn.00405350
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x4b8]
cmp ecx, 0x10
jb 0x40c1cc
mov edx, dword [ebp - 0x4cc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40c1c2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40c1c2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0041aa32
add esp, 8
mov esi, 1
mov ecx, dword [ebp - 0x478]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x47c]
sub ecx, edi
imul ecx
mov dword [ebp - 0x490], esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jae 0x40c323
lea eax, [esi + esi*2]
mov edx, dword [edi + eax*8 + 0x10]
lea ecx, [edi + eax*8]
test edx, edx
je 0x40c31d
mov eax, closesocket
sub eax, edx
cmp eax, 1
jb 0x40c662
cmp dword [ecx + 0x14], 0x10
jb 0x40c228
mov ecx, dword [ecx]
push edx
push ecx
push 1
push 0x41ea68
push ecx
push dword [ebp - 0x494]
lea ecx, [ebp - 0x4cc]
call fcn.0040a4d0
or dword [ebp - 0x488], 2
mov byte [ebp - 4], 7
lea edx, [ebp - 0x4cc]
cmp dword [ebp - 0x4b8], 0x10
mov ecx, dword [ebp - 0x454]
mov edi, dword [ebp - 0x4cc]
cmovae edx, edi
mov eax, dword [ebp - 0x450]
sub eax, ecx
mov dword [ebp - 0x498], ecx
mov ecx, dword [ebp - 0x4bc]
push ecx
push edx
cmp ecx, eax
ja 0x40c2c4
mov esi, dword [ebp - 0x498]
cmp dword [ebp - 0x450], 0x10
lea eax, [ecx + esi]
mov dword [ebp - 0x454], eax
lea eax, [ebp - 0x464]
cmovae eax, dword [ebp - 0x464]
add esi, eax
push esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x4bc]
add esp, 0xc
mov byte [eax + esi], 0
mov esi, dword [ebp - 0x490]
jmp 0x40c2e3
mov byte [ebp - 0x4d4], 0
push dword [ebp - 0x4d4]
push ecx
lea ecx, [ebp - 0x464]
call fcn.00405350
mov edi, dword [ebp - 0x4cc]
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x4b8]
cmp eax, 0x10
jb 0x40c31d
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x40c313
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c3d6
push ecx
push edi
call fcn.0041aa32
add esp, 8
inc esi
jmp 0x40c1d1
mov edx, dword [ebp - 0x450]
mov eax, edx
mov ecx, dword [ebp - 0x454]
sub eax, ecx
cmp eax, 1
jb 0x40c359
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x454], eax
lea eax, [ebp - 0x464]
cmovae eax, dword [ebp - 0x464]
mov word [eax + ecx], 0x3b
jmp 0x40c37a
push 1
push 0x41ea6c
mov byte [ebp - 0x494], 0
lea ecx, [ebp - 0x464]
push dword [ebp - 0x494]
push 1
call fcn.00405350
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x47c]
test ecx, ecx
je 0x40c404
mov edx, dword [ebp - 0x478]
push ecx
call fcn.0040a270
mov ecx, dword [ebp - 0x474]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x47c]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x40c3dc
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40c3dc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.0041aa32
add esp, 8
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x474], 0
inc dword [ebp - 0x484]
mov edi, dword [ebp - 0x46c]
mov esi, dword [ebp - 0x470]
jmp 0x40bfb1
mov eax, dword [ebp - 0x48c]
mov ecx, 0xf
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
movups xmm0, xmmword [ebp - 0x464]
mov byte [ebp - 0x464], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x454]
movq qword [eax + 0x10], xmm0
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x450], ecx
test esi, esi
je 0x40c4e7
push ecx
mov edx, edi
mov ecx, esi
call fcn.0040a270
mov ecx, dword [ebp - 0x468]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x470]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x40c4b9
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c600
push ecx
push esi
call fcn.0041aa32
mov ecx, dword [ebp - 0x450]
add esp, 8
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x468], 0
cmp ecx, 0x10
jb 0x40c51b
mov edx, dword [ebp - 0x464]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40c511
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c600
push ecx
push edx
call fcn.0041aa32
add esp, 8
mov edi, dword [ebp - 0x48c]
mov eax, edi
jmp 0x40c646
mov edi, dword [ebp - 0x48c]
xorps xmm0, xmm0
push 5
push str.ERROR
mov ecx, edi
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
call fcn.00404fa0
mov ecx, dword [ebp - 0x470]
test ecx, ecx
je 0x40c5d0
mov edx, dword [ebp - 0x46c]
push ecx
call fcn.0040a270
mov ecx, dword [ebp - 0x468]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x470]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x40c5a8
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40c600
push ecx
push esi
call fcn.0041aa32
add esp, 8
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x468], 0
mov ecx, dword [ebp - 0x450]
cmp ecx, 0x10
jb 0x40c521
mov edx, dword [ebp - 0x464]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40c606
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40c606
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0041aa32
add esp, 8
mov eax, edi
jmp 0x40c646
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041a4dc
mov esp, ebp
pop ebp
ret
call fcn.00401400
int3