Function at 0x40c090
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x4c
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x4c], eax
mov eax, dword [0x440080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x48], 0x8e9c528a
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x54], eax
sub eax, 0x8a11f889
je 0x40cd39
jmp 0x40c0cc
mov eax, dword [ebp - 0x54]
sub eax, 0x8e9c528a
je 0x40c461
jmp 0x40c0df
mov eax, dword [ebp - 0x54]
sub eax, 0x91c743e2
je 0x40c6c7
jmp 0x40c0f2
mov eax, dword [ebp - 0x54]
sub eax, 0x9a7162ac
je 0x40cd4d
jmp 0x40c105
mov eax, dword [ebp - 0x54]
sub eax, 0xa164e13e
je 0x40cd2d
jmp 0x40c118
mov eax, dword [ebp - 0x54]
sub eax, 0xa41520bc
je 0x40cdce
jmp 0x40c12b
mov eax, dword [ebp - 0x54]
sub eax, 0xa4a6761c
je 0x40c585
jmp 0x40c13e
mov eax, dword [ebp - 0x54]
sub eax, 0xa56f7cbf
je 0x40c892
jmp 0x40c151
mov eax, dword [ebp - 0x54]
sub eax, 0xa9db8ebc
je 0x40c965
jmp 0x40c164
mov eax, dword [ebp - 0x54]
sub eax, 0xade47ae3
je 0x40cbb3
jmp 0x40c177
mov eax, dword [ebp - 0x54]
sub eax, 0xb1a589ac
je 0x40c74a
jmp 0x40c18a
mov eax, dword [ebp - 0x54]
sub eax, 0xb2ccd28d
je 0x40c9d8
jmp 0x40c19d
mov eax, dword [ebp - 0x54]
sub eax, 0xb2dc0223
je 0x40c4d4
jmp 0x40c1b0
mov eax, dword [ebp - 0x54]
sub eax, 0xb61e705d
je 0x40c7ff
jmp 0x40c1c3
mov eax, dword [ebp - 0x54]
sub eax, 0xb669f06c
je 0x40ca4b
jmp 0x40c1d6
mov eax, dword [ebp - 0x54]
sub eax, 0xb72811bf
je 0x40c5fa
jmp 0x40c1e9
mov eax, dword [ebp - 0x54]
sub eax, 0xc58209a4
je 0x40c6bb
jmp 0x40c1fc
mov eax, dword [ebp - 0x54]
sub eax, 0xc5c68037
je 0x40c83b
jmp 0x40c20f
mov eax, dword [ebp - 0x54]
sub eax, 0xc7c1c7a3
je 0x40cbf8
jmp 0x40c222
mov eax, dword [ebp - 0x54]
sub eax, 0xcefc9598
je 0x40cdfb
jmp 0x40c235
mov eax, dword [ebp - 0x54]
sub eax, 0xd0428b09
je 0x40c80b
jmp 0x40c248
mov eax, dword [ebp - 0x54]
sub eax, 0xd1cd81b5
je 0x40cc13
jmp 0x40c25b
mov eax, dword [ebp - 0x54]
sub eax, 0xd6d7aa99
je 0x40cd81
jmp 0x40c26e
mov eax, dword [ebp - 0x54]
sub eax, 0xddbad109
je 0x40cde9
jmp 0x40c281
mov eax, dword [ebp - 0x54]
sub eax, 0xe17b4675
je 0x40cd9d
jmp 0x40c294
mov eax, dword [ebp - 0x54]
sub eax, 0xe2c0b658
je 0x40c829
jmp 0x40c2a7
mov eax, dword [ebp - 0x54]
sub eax, 0xe40b6950
je 0x40ca66
jmp 0x40c2ba
mov eax, dword [ebp - 0x54]
sub eax, 0xe6a67725
je 0x40cb6a
jmp 0x40c2cd
mov eax, dword [ebp - 0x54]
sub eax, 0xef12109f
je 0x40cc1f
jmp 0x40c2e0
mov eax, dword [ebp - 0x54]
sub eax, 0x554e599
je 0x40cdad
jmp 0x40c2f3
mov eax, dword [ebp - 0x54]
sub eax, 0x558b7f2
je 0x40cddd
jmp 0x40c306
mov eax, dword [ebp - 0x54]
sub eax, 0x559fba4
je 0x40cb52
jmp 0x40c319
mov eax, dword [ebp - 0x54]
sub eax, 0xef5b005
je 0x40c6af
jmp 0x40c32c
mov eax, dword [ebp - 0x54]
sub eax, 0x1399793a
je 0x40c886
jmp 0x40c33f
mov eax, dword [ebp - 0x54]
sub eax, 0x13c8bb0c
je 0x40c8d8
jmp 0x40c352
mov eax, dword [ebp - 0x54]
sub eax, 0x1873d924
je 0x40c72f
jmp 0x40c365
mov eax, dword [ebp - 0x54]
sub eax, 0x1e9e2364
je 0x40c959
jmp 0x40c378
mov eax, dword [ebp - 0x54]
sub eax, 0x1f1c4b62
je 0x40cd61
jmp 0x40c38b
mov eax, dword [ebp - 0x54]
sub eax, 0x2c070793
je 0x40cb5e
jmp 0x40c39e
mov eax, dword [ebp - 0x54]
sub eax, 0x3c1ee200
je 0x40cc2b
jmp 0x40c3b1
mov eax, dword [ebp - 0x54]
sub eax, 0x45156b32
je 0x40c81d
jmp 0x40c3c4
mov eax, dword [ebp - 0x54]
sub eax, 0x4b55e267
je 0x40cad9
jmp 0x40c3d7
mov eax, dword [ebp - 0x54]
sub eax, 0x617cb844
je 0x40c591
jmp 0x40c3ea
mov eax, dword [ebp - 0x54]
sub eax, 0x629adb5b
je 0x40c640
jmp 0x40c3fd
mov eax, dword [ebp - 0x54]
sub eax, 0x650ebb10
je 0x40c7f3
jmp 0x40c410
mov eax, dword [ebp - 0x54]
sub eax, 0x6c414ba5
je 0x40cc96
jmp 0x40c423
mov eax, dword [ebp - 0x54]
sub eax, 0x7103fc66
je 0x40cbce
jmp 0x40c436
mov eax, dword [ebp - 0x54]
sub eax, 0x7801111d
je 0x40cbda
jmp 0x40c449
mov eax, dword [ebp - 0x54]
sub eax, 0x7fe3495f
je 0x40c798
jmp 0x40c45c
jmp 0x40ce27
mov ecx, dword [0x44156c]
mov eax, dword [0x441568]
mov edx, ecx
add edx, 0x1873de8e
sub edx, 1
sub edx, 0x1873de8e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd6d7aa99
mov ecx, 0xb2dc0223
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x50]
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
sub esp, 0xffc
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x40]
mov dword [eax], edx
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
mov ecx, dword [0x44156c]
mov eax, dword [0x441568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd6d7aa99
mov ecx, 0xa4a6761c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov dword [ebp - 0x48], 0x617cb844
jmp 0x40ce27
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
mov edx, dword [ebp - 0x38]
mov esi, 0xffffffff
mov eax, 0x91c743e2
mov ecx, 0xb72811bf
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov eax, dword [0x44156c]
mov ecx, dword [0x441568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe17b4675
mov ecx, 0x629adb5b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov byte [ebp - 0x41], 0
mov ecx, dword [0x44156c]
mov eax, dword [0x441568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe17b4675
mov ecx, 0xef5b005
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov dword [ebp - 0x48], 0xc58209a4
jmp 0x40ce27
mov dword [ebp - 0x48], 0x9a7162ac
jmp 0x40ce27
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x34]
mov dword [eax], ecx
mov eax, dword [ebp - 0x34]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x1d], al
mov dword [ebp - 0x48], 0x1873d924
jmp 0x40ce27
mov dl, byte [ebp - 0x1d]
mov eax, 0xd0428b09
mov ecx, 0xb1a589ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov eax, dword [0x44156c]
mov ecx, dword [0x441568]
mov edx, eax
sub edx, 0x1c5e62b6
sub edx, 1
add edx, 0x1c5e62b6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x554e599
mov ecx, 0x7fe3495f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x41], 0
mov eax, dword [0x44156c]
mov ecx, dword [0x441568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x554e599
mov ecx, 0x650ebb10
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov dword [ebp - 0x48], 0xb61e705d
jmp 0x40ce27
mov dword [ebp - 0x48], 0x9a7162ac
jmp 0x40ce27
mov eax, dword [ebp - 0x30]
mov byte [eax], 0
mov dword [ebp - 0x48], 0x45156b32
jmp 0x40ce27
mov dword [ebp - 0x48], 0xe2c0b658
jmp 0x40ce27
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x48], 0xc5c68037
jmp 0x40ce27
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, eax
mov eax, 0x1399793a
mov ecx, 0xa56f7cbf
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov dword [ebp - 0x48], 0x3c1ee200
jmp 0x40ce27
mov eax, dword [0x44156c]
mov ecx, dword [0x441568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa41520bc
mov ecx, 0x13c8bb0c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov eax, dword [ebp - 0x24]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x15], al
mov ecx, dword [0x44156c]
mov eax, dword [0x441568]
mov edx, ecx
sub edx, 0xd4c4edcd
sub edx, 1
add edx, 0xd4c4edcd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa41520bc
mov ecx, 0x1e9e2364
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov dword [ebp - 0x48], 0xa9db8ebc
jmp 0x40ce27
mov ecx, dword [0x44156c]
mov eax, dword [0x441568]
mov edx, ecx
add edx, 0x8e865836
sub edx, 1
sub edx, 0x8e865836
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x558b7f2
mov ecx, 0xb2ccd28d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov ecx, dword [0x44156c]
mov eax, dword [0x441568]
mov edx, ecx
sub edx, 0x335c6bda
sub edx, 1
add edx, 0x335c6bda
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x558b7f2
mov ecx, 0xb669f06c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov dl, byte [ebp - 0x15]
mov eax, 0xe6a67725
mov ecx, 0xe40b6950
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov ecx, dword [0x44156c]
mov eax, dword [0x441568]
mov edx, ecx
sub edx, 0x789a72e9
sub edx, 1
add edx, 0x789a72e9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xddbad109
mov ecx, 0x4b55e267
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov eax, dword [ebp - 0x30]
mov byte [eax], 1
mov ecx, dword [0x44156c]
mov eax, dword [0x441568]
mov edx, ecx
add edx, 0x30123df4
sub edx, 1
sub edx, 0x30123df4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xddbad109
mov ecx, 0x559fba4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov dword [ebp - 0x48], 0x2c070793
jmp 0x40ce27
mov dword [ebp - 0x48], 0x3c1ee200
jmp 0x40ce27
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
mov esi, dword [eax]
mov eax, dword [ebp - 0x2c]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x14], al
mov dword [ebp - 0x48], 0xade47ae3
jmp 0x40ce27
mov dl, byte [ebp - 0x14]
mov eax, 0x7103fc66
mov ecx, 0x7801111d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov dword [ebp - 0x48], 0x3c1ee200
jmp 0x40ce27
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x24]
cmp eax, dword [ecx]
setne al
and al, 1
mov byte [ebp - 0x13], al
mov dword [ebp - 0x48], 0xc7c1c7a3
jmp 0x40ce27
mov dl, byte [ebp - 0x13]
mov eax, 0xef12109f
mov ecx, 0xd1cd81b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov dword [ebp - 0x48], 0x3c1ee200
jmp 0x40ce27
mov dword [ebp - 0x48], 0xe2c0b658
jmp 0x40ce27
mov ecx, dword [0x44156c]
mov eax, dword [0x441568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcefc9598
mov ecx, 0x6c414ba5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x30]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x12], al
mov ecx, dword [0x44156c]
mov eax, dword [0x441568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcefc9598
mov ecx, 0xa164e13e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x48], eax
jmp 0x40ce27
mov dword [ebp - 0x48], 0x8a11f889
jmp 0x40ce27
mov al, byte [ebp - 0x12]
and al, 1
mov byte [ebp - 0x41], al
mov dword [ebp - 0x48], 0x9a7162ac
jmp 0x40ce27
mov al, byte [ebp - 0x41]
and al, 1
mov byte [ebp - 0x11], al
mov dword [ebp - 0x48], 0x1f1c4b62
jmp 0x40ce27
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00428c20
mov eax, dword [ebp - 0x58]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x4c]
mov esi, dword [ebp - 0x50]
push eax
mov edx, esp
push eax
mov eax, esp
mov dword [edx], esi
mov dword [eax], ecx
mov dword [ebp - 0x48], 0xb2dc0223
jmp 0x40ce27
mov byte [ebp - 0x41], 0
mov dword [ebp - 0x48], 0x629adb5b
jmp 0x40ce27
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x41], 0
mov dword [ebp - 0x48], 0x7fe3495f
jmp 0x40ce27
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x48], 0x13c8bb0c
jmp 0x40ce27
mov dword [ebp - 0x48], 0xb2ccd28d
jmp 0x40ce27
mov eax, dword [ebp - 0x30]
mov byte [eax], 1
mov dword [ebp - 0x48], 0x4b55e267
jmp 0x40ce27
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x48], 0x6c414ba5
jmp 0x40c0b6