Function at 0x5e715f5e
Capabilities:
Write file on windows

Disassembly:
call fcn.5e6bcbe6
mov eax, eax
jmp fcn.5e6bba08
mov eax, dword [ebp + 8]
push esi
push dword [ebp + 0xc]
nop
nop
nop
mov esi, ecx
lea ecx, [esi + 0xc]
mov dword [esi], 0x610e0704
mov eax, eax
mov dword [esi + 8], eax
call fcn.5e6b2a72
xor eax, eax
mov dword [esi + 0x38], eax
mov dword [esi + 0x50], eax
mov dword [esi + 0x68], eax
mov eax, eax
mov dword [esi + 0x80], eax
nop
nop
nop
mov dword [esi + 0x98], eax
mov eax, esi
pop esi
nop
pop ebp
ret 8
mov ecx, ecx
push ebp
mov ebp, esp
mov ecx, ecx
mov ecx, dword [ebp + 8]
mov eax, dword [ecx - 0x20]
mov ecx, ecx
inc eax
mov dword [ecx - 0x20], eax
pop ebp
ret 4
jmp 0x5e6c725b
mov ecx, ecx
push esi
mov eax, eax
mov esi, ecx
push dword [esi + 0x40]
call fcn.5e6d68f8
pop ecx
mov ecx, esi
nop
nop
pop esi
jmp fcn.5e6cadbd
test dword [0x6106c856], 0xb3188873
jne 0x5e6d5133
xor al, 0x3c
in eax, 0x4a
push ebx
pushfd
adc ecx, dword [edi + 0x14caa678]
out dx, eax
inc ecx
imul esi, dword [ecx], 0x2e
push esp
outsb dx, byte [esi]
xchg al, ch
dec byte [edi]
insb byte es:[edi], dx
mul dword [ebx + 0x4c0528b9]
push 0xffffffffffffffe1
xor bh, byte [0x53fd1922]
les ebx, [ebp - 0x24]
pop ss
test eax, 0xd2bbf2bd
and byte [ebx + 0x56], dl
push ebx
push esi
cmp byte [0x610a05a9], 0x8f
js 0x5e72948d
push edi
mov edi, ecx
mov eax, 0x1000
mov esi, dword [edi + 0x4c]
cmp word [0x610d092e], 0x9672
jns 0x5e6d5186
adc byte [ebp + 0x6276057d], bl
loopne 0x5e6d51b5
int 0x1c
jge 0x5e6d51a0
jmp 0x30b61a56
lea ebx, [edi + 0x40]
push ebx
mov ebx, dword [edi + 0x48]
sub ebx, esi
pop ebx
cmovb esi, dword [edi + 0x48]
and esi, 0xfffff000
push ebx
mov ebx, esi
sub ebx, eax
pop ebx
cmovb esi, eax
cmp dword [ebx], 0
je 0x5e6d51ad
cmp dword [edi + 0x44], esi
je 0x5e6d51fc
mov ecx, ecx
push esi
mov ecx, ebx
cmp dword [0x610c8499], 0x1289aba1
test byte [ecx], cl
mov eax, dword [0x781289ab]
cld
stosd dword es:[edi], eax
mov dword [edx], edx
js 0x5e6d51e4
cld
push ebx
sub byte [esi*2 - 0x71a41321], bh
mov bl, 0x44
sbb eax, 0x21e38a8
test ah, ch
loope 0x5e6d5249
xchg byte [0xc16c5132], ah
push ss
jno 0x5e6d51b9
push 0x74807874
xlatb
mov bh, 0x3a
aam 0xe8
push ds
add byte [eax], al
add byte [ebx + 0xa75003b], al
call fcn.5e6d5207
cmp dword [ebx], 0
jne 0x5e6d51f8
nop
mov eax, 0x8007000e
mov ecx, ecx
jmp 0x5e6d51fe
nop
mov dword [edi + 0x44], esi
xor eax, eax
pop edi
mov ecx, ecx
pop esi
nop
nop
nop
pop ebx
ret
inc ebx
in al, 0x70
cmp eax, 0x5e31213
test dword [esi], ecx
das
pop edx
xchg esp, eax
cmp ebx, edi
cdq
hlt
add al, 0xff
jbe 0x5e6e3631
cmp word [0x6104b559], 0x3a23
jne 0x5e713387
call fcn.5e6dfb0a
mov dword [edi], eax
test dword [0x6105b123], 0xc2f6b490
jae 0x5e6e3629
sbb esp, ebx
sbb ah, ch
scasb al, byte es:[edi]
invalid
jns 0x5e6e35c9
das
mov ah, 0xcd
invalid
pop ecx
test eax, eax
jne 0x5e6e3639
push 2
pop eax
nop
nop
nop
jmp 0x5e6e3a84
mov ecx, dword [ebp + 0x1c]
mov edx, 0x5e6e2814
test byte [0x610d2a4c], 0x3f
jae 0x5e6e3684
mov dl, 0xb0
adc al, 0x72
push 0x7a4e3446
int3
mov eax, dword [ebp - 0x44]
push ebx
mov ebx, ecx
and ebx, ecx
pop ebx
mov dword [ebp - 0x40], ecx
cmovne eax, edx
mov dword [ebp - 0x44], eax
push ecx
mov ecx, ebx
and ecx, ebx
pop ecx
jne 0x5e6e36ea
cmp byte [0x610afbb5], 0x2e
js 0x5e6f91d5
xor eax, eax
push edx
mov edx, dword [esi + 0x60]
sub edx, eax
pop edx
jne 0x5e6e36ea
mov eax, dword [esi + 0x64]
test byte [0x610825d5], 0xe2
jns 0x5e6bb9ef
push 0x10010
push eax
call dword [eax]
mov eax, eax
mov dword [esi + 0x60], eax
pop ecx
test byte [0x610ad5dd], 0x19
js 0x5e715616
pop ecx
test eax, eax
je 0x5e6e362e
lea eax, [esi + 8]
nop
nop
push eax
push edi
call fcn.5e6e2c29
pop ecx
pop ecx
test eax, eax
jne 0x5e6e3a84
mov eax, dword [ebp - 0x20]
nop
nop
nop
xor edx, edx
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x24]
nop
mov dword [ebp + 0xc], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], eax
nop
nop
nop
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
cmp dword [ebp + 0x1c], 0
xorps xmm0, xmm0
mov dword [edi + 8], edx
mov dword [edi + 0xc], edx
mov word [edi + 6], 0x101
mov ecx, dword [esi + 0x44]
mov dword [ebp - 4], edx
mov dword [ebp - 0x2c], edx
mov edx, dword [esi + 0x40]
movlpd qword [ebp - 0x34], xmm0
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x38], ecx
je 0x5e6e37d7
mov eax, dword [esi + 0x58]
or edx, 0xffffffff
nop
nop
and eax, dword [esi + 0x5c]
or dword [ebp - 0xc], 0xffffffff
cmp eax, 0xffffffff
je 0x5e6e3785
mov eax, dword [ebp - 8]
cmp dword [esi + 0x5c], eax
jb 0x5e6e3785
mov eax, dword [ebp + 0xc]
ja 0x5e6e3777
cmp dword [esi + 0x58], eax
jb 0x5e6e3785
mov edx, dword [esi + 0x58]
sub edx, eax
mov eax, dword [esi + 0x5c]
sbb eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov eax, dword [esi + 0x40]
and eax, ecx
push ebx
mov ebx, eax
sub ebx, 0xffffffff
pop ebx
mov eax, dword [ebp - 0xc]
je 0x5e6e37aa
cmp eax, ecx
jb 0x5e6e37aa
ja 0x5e6e37a5
push ecx
mov ecx, edx
sub ecx, dword [esi + 0x40]
pop ecx
jbe 0x5e6e37aa
mov edx, dword [esi + 0x40]
xor eax, eax
mov eax, eax
push eax
push edx
push dword [edi]
call fcn.5e6e0443
push dword [esi + 0x68]
nop
lea eax, [ebp - 0x44]
push dword [esi + 0x64]
mov ecx, ecx
push 0x200000
push eax
push dword [edi]
call fcn.5e6e0129
nop
nop
add esp, 0x20
mov ecx, ecx
jmp 0x5e6e384d
nop
nop
nop
mov eax, dword [ebp + 0x24]
test dword [0x61081d55], 0xf8ab60b8
jb 0x5e6d50f7
sub eax, dword [ebp + 0xc]
mov dword [ebp - 4], eax
mov ecx, ecx
mov eax, edx
mov eax, eax
and eax, ecx
push edx
mov edx, eax
sub edx, 0xffffffff
pop edx
je 0x5e6e3826
nop
nop
xor eax, eax
push ebx
mov ebx, eax
sub ebx, ecx
pop ebx
jb 0x5e6e3826
ja 0x5e6e381d
mov eax, dword [ebp - 4]
push ecx
mov ecx, eax
sub ecx, edx
pop ecx
jbe 0x5e6e3829
mov eax, edx
mov dword [ebp - 4], eax
mov ecx, ecx
jmp 0x5e6e3829
mov eax, dword [ebp - 4]
push dword [esi + 0x68]
nop
push dword [esi + 0x64]
push 0x200000
mov ecx, ecx
push eax
mov eax, dword [ebp + 0xc]
add eax, dword [ebp + 0x20]
mov ecx, ecx
push eax
mov ecx, ecx
push dword [edi]
call fcn.5e6e00d0
add esp, 0x18
push edx
mov edx, eax
and edx, eax
pop edx
jne 0x5e6e3a84
mov eax, eax
mov ecx, dword [ebp + 0x10]
push eax
mov eax, ebx
and eax, ebx
pop eax
cmovne ecx, eax
mov dword [ebp - 0x20], ecx
test byte [0x6104ef17], 0x49
js 0x5e6fb63b
mov dword [ebp - 0xc], 0x10010
push edx
mov edx, ebx
and edx, ebx
pop edx
je 0x5e6e389a
mov eax, eax
mov edx, dword [ebp - 0x10]
mov eax, eax
mov eax, dword [ebp - 0x18]
sub eax, edx
mov dword [ebp - 0xc], eax
lea eax, [edx + ebx]
jmp 0x5e6e389f
mov ecx, ecx
mov eax, dword [esi + 0x60]
push ecx
lea ecx, [ebp - 0xc]
push ecx
push eax
push edi
mov ecx, ecx
call 0x5e6e28d6
mov ebx, eax
nop
nop
add esp, 0x10
test ebx, ebx
jne 0x5e6e394c
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x1c]
adc ebx, eax
cmp byte [0x61034bc3], 0x13
js 0x5e6c727e
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp + 0x14], eax
je 0x5e6e38e4
mov eax, dword [ebp + 0x18]
mov dword [eax], edx
mov eax, dword [edi + 8]
add eax, dword [ebp + 0xc]
mov ecx, dword [edi + 0xc]
adc ecx, dword [ebp - 8]
push eax
mov eax, dword [ebp + 0x2c]
sub eax, 0
pop eax
je 0x5e6e392f
push ebx
mov ecx, ecx
push edx
push ecx
push eax
mov ecx, ecx
mov eax, dword [ebp + 0x2c]
push eax
cmp word [0x61053adf], 0xef38
js 0x5e712b79
call dword [eax]
cmp byte [0x610a1c60], 0x71
js 0x5e6bbcfd
add esp, 0x14
push ebx
mov ebx, eax
and ebx, eax
pop ebx
jne 0x5e6e3945
xor eax, eax
mov ebx, eax
cmp dword [ebp - 0xc], eax
je 0x5e6e394c
mov ebx, dword [ebp + 0x14]
mov eax, eax
mov ecx, dword [ebp - 0x20]
jmp 0x5e6e386a
mov eax, eax
push 0xa
mov eax, eax
pop ebx
nop
push dword [edi]
call fcn.5e6dfe07
mov eax, dword [ebp + 0xc]
add eax, dword [edi + 8]
mov dword [ebp + 0xc], eax
mov eax, dword [ebp - 8]
adc eax, dword [edi + 0xc]
mov dword [ebp - 8], eax
pop ecx
push ecx
mov ecx, ebx
and ecx, ebx
pop ecx
jne 0x5e6e3a80
mov edx, dword [ebp + 0x1c]
push ebx
mov ebx, edx
and ebx, edx
pop ebx
je 0x5e6e398f
mov eax, eax
mov eax, dword [ebp - 0x34]
mov ecx, ecx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x30]
mov eax, eax
jmp 0x5e6e3991
xor eax, eax
mov ecx, dword [ebp - 4]
push edx
mov edx, dword [edi + 8]
sub edx, ecx
pop edx
jne 0x5e6e3a79
push ebx
mov ebx, dword [edi + 0xc]
sub ebx, eax
pop ebx
jne 0x5e6e3a79
test edx, edx
je 0x5e6e39bc
nop
mov eax, dword [ebp - 0x2c]
mov ecx, ecx
xor edx, edx
jmp 0x5e6e3a00
mov eax, eax
mov eax, dword [ebp + 0x24]
cmp byte [0x60ffc6b4], 0xa3
je 0x5e6e39ee
retf 0x2be8
xor edx, edx
push ebx
mov ebx, dword [ebp + 0xc]
sub ebx, eax
pop ebx
jne 0x5e6e39fe
cmp dword [ebp - 8], edx
je 0x5e6e3a12
mov eax, edx
push ecx
mov ecx, eax
and ecx, eax
pop ecx
jne 0x5e6e3a12
mov ebx, dword [ebp + 0x14]
mov eax, eax
jmp 0x5e6e3721
push eax
mov eax, dword [ebp + 0x28]
sub eax, 0
pop eax
je 0x5e6e3a4f
mov ecx, dword [ebp + 0x14]
test ecx, ecx
je 0x5e6e3a53
test dword [str.LEzP], 0x507a454c
jo 0x5e729db9
mov edx, dword [ebp + 0x18]
mov eax, dword [edx]
push ecx
mov ecx, eax
sub ecx, dword [ebp - 0x18]
pop ecx
jb 0x5e6e3a48
push 7
jmp 0x5e6e3630
mov byte [eax + ecx], 0
inc eax
mov dword [edx], eax
xor eax, eax
jmp 0x5e6e3a84
push 1
lea eax, [ebp + 0x17]
mov byte [ebp + 0x17], dl
push eax
mov eax, dword [ebp + 0x10]
mov eax, eax
push eax
call dword [eax]
add esp, 0xc
push edx
mov edx, eax
sub edx, 1
pop edx
je 0x5e6e3a4f
mov ecx, ecx
push 9
jmp 0x5e6e3630
push 0xb
jmp 0x5e6e3630
mov ecx, ecx
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
mov ecx, ecx
ret
nop
nop
mov byte [ebp - 4], 0
nop
nop
call dword [ecx + 8]
mov ecx, dword [esi]
or dword [ebp - 4], 0xffffffff
push esi
call dword [ecx + 8]
nop
mov eax, ebx
mov ecx, ecx
pop esi
mov ecx, dword [ebp - 0xc]
nop
nop
nop
pop edi
mov eax, eax
pop ebx
mov eax, eax
mov dword fs:[0], ecx
mov esp, ebp
mov ecx, ecx
pop ebp
ret
mov eax, eax
ret
ret
mov eax, dword [eax]
push ecx
mov ecx, dword [eax]
sub ecx, 0xe06d7363
pop ecx
jne 0x5e7133da
push ecx
mov ecx, dword [eax + 0x10]
sub ecx, 3
pop ecx
jne 0x5e7133da
push ebx
mov ebx, dword [eax + 0x14]
sub ebx, 0x19930520
pop ebx
je 0x5e7133be
cmp dword [eax + 0x14], 0x19930521
je 0x5e7133be
cmp dword [eax + 0x14], 0x19930522
jne 0x5e7133da
push edx
mov edx, dword [eax + 0x1c]
sub edx, 0
pop edx
jne 0x5e7133da
call fcn.5e71aa1e
xor ecx, ecx
inc ecx
mov dword [eax + 0x3ac], ecx
mov eax, ecx
pop ebp
ret
xor eax, eax
pop ebp
ret
nop
nop
mov eax, ebx
nop
jmp fcn.5e71565e
and dword [eax + 0x70], 0xfffffffd
nop
jmp 0x5e7154b3
test byte [0x61079f64], 0x75
jno 0x5e715f9a
adc al, 0xc7
adc dword [eax + 0x60], esp
pop es
cmp bl, dl
invalid
ret 0x8922
push ebp
nop
mov ebp, esp
sub esp, 0x1fc
mov eax, dword [0x610e8864]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
cmp dword [0x610dc679], 0x72d0ad07
jns 0x5e715fe2
push ebp
jnp 0x5e715f78
sub byte [ecx - 0x338751e3], dh
je 0x5e715ff4
mov ebp, 0x7d1cdcc2
jmp 0x5e715fdd
cld
mov esp, 0xaf4fdbec
stc
add dword [esi + esi + 0x537a6542], edx
jp 0x5e716032
aam 0x39
in al, dx
mov esi, dword [ebp + 8]
push edi
push esi
test byte [0x610a847c], 0x1f
jno 0x5e716028
pop ss
fild qword [ebp + 0x726fe3a9]
fldcw word [eax + 0x1de3e92c]
into
invalid
jecxz 0x5e716065
jb 0x5e715fd1
test al, 0x2c
jmp 0xee3f7de2
call fcn.5e715ef6
mov edi, eax
nop
pop ecx
push edx
mov edx, edi
and edx, edi
pop edx
je 0x5e7163af
nop
nop
nop
push ebx
push 3
nop
nop
nop
call fcn.5e71eff1
pop ecx
cmp eax, 1
je 0x5e71634a
nop
nop
push 3
call fcn.5e71eff1
pop ecx
test eax, eax
jne 0x5e716070
cmp dword [0x610ec992], 1
je 0x5e71634a
xchg edx, eax
leave
push cs
popal
add dword [edi], ecx
test dl, bl
add al, byte [eax]
add byte [ecx + 0xfcfe], al
add byte [edi], cl
test byte [edx], dh
add eax, dword [eax]
add byte [ebx + 0x67ec68c0], cl
push cs
popal
cmp esi, 0xfc
je 0x5e7163ae
mov eax, eax
push str.Runtime_Error__n_nProgram:
push 0x314
push 0x610ec99a
call fcn.5e71e8bb
test word [0x610c5726], 0x114d
js 0x5e6e35fc
add esp, 0xc
xor ebx, ebx
push edx
mov edx, eax
and edx, eax
pop edx
jne 0x5e7163c4
push 0x104
push 0x610ec9cc
push ebx
mov word [0x610ecbd4], ax
mov ecx, ecx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
nop
nop
mov esi, 0x2fb
push ecx
mov ecx, eax
and ecx, eax
pop ecx
jne 0x5e716131
cmp byte [0x610d1854], 0x52
jne 0x5e716110
sbb dword [edx - 0x2b], esp
jp 0x5e716145
sbb dl, byte [esi - 0x28e85f4c]
push esp
mov ebp, 0x1da21f15
lcall 0xd63b, 0x86e31a9b
dec edi
in eax, dx
cld
add byte fs:[ecx - 0x54], al
sub esp, edx
mov al, 0x31
movsd dword es:[edi], dword [esi]
mov eax, dword [0x22c34236]
into
mov edx, 0x2068f0a8
push 0xc98b610e
push str._program_name_unknown_
mov ecx, ecx
push esi
push 0x610ec9cc
call fcn.5e71e8bb
add esp, 0xc
push ecx
mov ecx, eax
and ecx, eax
pop ecx
jne 0x5e7163c4
add byte [eax], al
push 0x610ec9cc
test word [0x61026a95], 0x5e55
jne 0x5e716164
shl byte [esi + edx*4], 1
and al, 0x96
push ds
and esp, dword [esi + ebx*4 + 0x40e5a7aa]
in eax, 0x40
pop ebx
jne 0x5e716176
inc ebp
sbb dword [edx + 0x6a], 0x2f56ba8f
sal byte [edi], 0x13
jo 0x5e71612f
aad 0x6f
mov esp, 0xb4cda1e2
call fcn.5e7112ca
mov ecx, ecx
inc eax
pop ecx
cmp eax, 0x3c
jbe 0x5e716234
push 0x610ec9cc
call fcn.5e7112ca
cmp byte [0x610023e0], 0xa8
jne 0x5e7161be
xchg esp, eax
wait
jo 0x5e71614b
ja 0x5e716143
stosd dword es:[edi], eax
cld
cmpsd dword [esi], dword es:[edi]
and ecx, esp
div bl
or al, 0xd8
jmp 0x5e71620e
int3
push 3
push 0x610e6850
lea ecx, [eax*2 + 0x610ec956]
mov eax, ecx
sub eax, 0x610ec9cc
mov ecx, ecx
sar eax, 1
nop
sub esi, eax
mov ecx, ecx
push esi
cmp byte [0x610d083d], 0xaa
jne 0x5e71621f
jb 0x5e716193
or eax, 0x3619a7b3
pop es
fidivr word [edi + 0x7cd0ec07]
lcall 0x366, 0x63a08a30
xor edi, edx
mov ah, byte [eax + 0x31036663]
xlatb
xor edx, dword [edx - 0x32b2f48]
and byte [0x62137af8], 0x3f
stosd dword es:[edi], eax
lea ebp, [edx]
clc
clc
jg 0x5e716192
inc ebp
dec edx
add byte [ebp + 5], cl
les ecx, [ebp + ecx*2 + 0x74a2cc08]
lds ebx, [0x793be851]
invalid
push ecx
call fcn.5e70db60
add esp, 0x14
push ebx
mov ebx, eax
and ebx, eax
pop ebx
jne 0x5e7163c4
mov ecx, ecx
push 0x610e6858
popal
test dword [0x61023f09], 0x3e306073
aas
add ah, byte [ecx + 0x73]
pushal
xor byte [esi], bh
jns 0x5e71627d
jp 0x5e71623a
into
dec ebp
mov esi, 0xa6e22d13
loop 0x5e7161f6
in al, dx
fmul qword [edi + 0x78]
mov cl, 0x8c
daa
and al, 0xb2
insd dword es:[edi], dx
xchg ebx, eax
adc eax, 0x6afde9e
fcomi st(3)
push ebp
pop esi
ja 0x5e7162aa
invalid
jbe 0x5e71623e
push cs
cmpsd dword [esi], dword es:[edi]
push 0x314
cmp word [0x6102155b], 0x7f0a
jns 0x5e7162bb
sbb dword cs:[edx - 0x3b93f27c], edx
sbb dword [edx - 0x3b93f27c], edx
int 0xf
imul esi, dword [ebx], 0x2c
pop ecx
js 0x5e716279
test dword [ebx - 0x2138f43a], eax
mov dl, 0xba
int 3
dec edx
insb byte es:[edi], dx
fbstp tbyte [esi + 0x69]
mov edi, 0xc291c018
pop ebx
sbb bh, byte [esi]
sal dword [ecx - 0x6a8ebcaa], 1
imul edi, dword [edi - 0x3d6e3fe8], 0xd13e1a5b
mov cl, 0x56
inc ebx
jno 0x5e71624e
scasd eax, dword es:[edi]
and dword [esi + 0x610ec99a], edi
mov esi, 0x610ec99a
push esi
call fcn.5e71ef50
add esp, 0xc
push ecx
mov ecx, eax
and ecx, eax
pop ecx
jne 0x5e7163c4
push edi
push 0x314
push esi
cmp dword [0x61077d45], 0x54b2c17b
jne 0x5e71631b
xchg ecx, eax
stosb byte es:[edi], al
popal
dec esp
mov eax, dword [0x94fd9730]
adc byte [edx + 0x56389b3], cl
mov esi, 0x5a186357
pop ds
sbb al, 0xb1
je 0x5e71628c
sub bh, al
mov dword [edi + 0x42], edx
xchg esi, eax
or eax, 0x63e05a5d
and eax, 0x1b267e1
test byte [esi + 0x2a3ffb84], bl
inc edx
and edx, ebx
inc ecx
call fcn.5e71ef50
add esp, 0xc
push ebx
mov ebx, eax
and ebx, eax
pop ebx
jne 0x5e7163c4
mov ecx, ecx
push 0x12010
nop
push str.Microsoft_Visual_C_Runtime_Library
nop
push esi
call fcn.5e71f040
add esp, 0xc
mov eax, eax
jmp 0x5e7163ae
push 0xfffffffffffffff4
nop
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
test esi, esi
je 0x5e7163ae
push ebx
mov ebx, esi
sub ebx, 0xffffffff
pop ebx
je 0x5e7163ae
xor ebx, ebx
mov ecx, ecx
mov ecx, ebx
mov al, byte [edi + ecx*2]
mov byte [ebp + ecx - 0x1f8], al
cmp word [edi + ecx*2], bx
je 0x5e716381
inc ecx
cmp ecx, 0x1f4
jb 0x5e716368
push ebx
nop
nop
lea eax, [ebp - 0x1fc]
mov byte [ebp - 5], bl
push eax
lea eax, [ebp - 0x1f8]
push eax
mov ecx, ecx
call fcn.5e7111f4
pop ecx
push eax
lea eax, [ebp - 0x1f8]
push eax
mov eax, eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
nop
nop
pop esi
nop
call int.5e712b26
nop
nop
mov esp, ebp
pop ebp
ret
push ebx
push ebx
push ebx
push ebx
nop
push ebx
call fcn.5e715dee
mov eax, eax
int3
lea ecx, [ebp - 0x78]
jmp fcn.5e6b44d5
add ecx, 4
jmp 0x5e6cadf7