Function at 0x404fe0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x64
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x64], eax
mov eax, dword [0x435080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x43655c]
mov eax, dword [0x436558]
mov edx, ecx
sub edx, 0xc26ab621
sub edx, 1
add edx, 0xc26ab621
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x5a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x59], al
mov dword [ebp - 0x60], 0xec5d4bd2
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x6c], eax
sub eax, 0x81b73f64
je 0x405a2b
jmp 0x405055
mov eax, dword [ebp - 0x6c]
sub eax, 0x8ffeb447
je 0x405df2
jmp 0x405068
mov eax, dword [ebp - 0x6c]
sub eax, 0x905221d2
je 0x405de6
jmp 0x40507b
mov eax, dword [ebp - 0x6c]
sub eax, 0x97b970ef
je 0x40593f
jmp 0x40508e
mov eax, dword [ebp - 0x6c]
sub eax, 0xa682ec50
je 0x4060c6
jmp 0x4050a1
mov eax, dword [ebp - 0x6c]
sub eax, 0xa6d04e89
je 0x405bc0
jmp 0x4050b4
mov eax, dword [ebp - 0x6c]
sub eax, 0xa771a655
je 0x405f37
jmp 0x4050c7
mov eax, dword [ebp - 0x6c]
sub eax, 0xacdd7878
je 0x4054ce
jmp 0x4050da
mov eax, dword [ebp - 0x6c]
sub eax, 0xb45a5063
je 0x405895
jmp 0x4050ed
mov eax, dword [ebp - 0x6c]
sub eax, 0xbacfebcd
je 0x40555f
jmp 0x405100
mov eax, dword [ebp - 0x6c]
sub eax, 0xbcc6a3a5
je 0x4056ba
jmp 0x405113
mov eax, dword [ebp - 0x6c]
sub eax, 0xc3397756
je 0x405ee9
jmp 0x405126
mov eax, dword [ebp - 0x6c]
sub eax, 0xc436ae5c
je 0x405766
jmp 0x405139
mov eax, dword [ebp - 0x6c]
sub eax, 0xc4387794
je 0x4056d5
jmp 0x40514c
mov eax, dword [ebp - 0x6c]
sub eax, 0xc8880aaa
je 0x405823
jmp 0x40515f
mov eax, dword [ebp - 0x6c]
sub eax, 0xcb8fbfa3
je 0x4060dd
jmp 0x405172
mov eax, dword [ebp - 0x6c]
sub eax, 0xd0232bd5
je 0x405b72
jmp 0x405185
mov eax, dword [ebp - 0x6c]
sub eax, 0xd5f7b3cb
je 0x4059b2
jmp 0x405198
mov eax, dword [ebp - 0x6c]
sub eax, 0xdb373052
je 0x4056f3
jmp 0x4051ab
mov eax, dword [ebp - 0x6c]
sub eax, 0xe010efb6
je 0x405dfe
jmp 0x4051be
mov eax, dword [ebp - 0x6c]
sub eax, 0xe08ab852
je 0x405edd
jmp 0x4051d1
mov eax, dword [ebp - 0x6c]
sub eax, 0xec5d4bd2
je 0x4054a8
jmp 0x4051e4
mov eax, dword [ebp - 0x6c]
sub eax, 0xed08a17e
je 0x405c9f
jmp 0x4051f7
mov eax, dword [ebp - 0x6c]
sub eax, 0xee48f3e1
je 0x405f8f
jmp 0x40520a
mov eax, dword [ebp - 0x6c]
sub eax, 0xef290537
je 0x405904
jmp 0x40521d
mov eax, dword [ebp - 0x6c]
sub eax, 0xf01f3b3a
je 0x405afc
jmp 0x405230
mov eax, dword [ebp - 0x6c]
sub eax, 0xf0766142
je 0x405f9b
jmp 0x405243
mov eax, dword [ebp - 0x6c]
sub eax, 0xf261a757
je 0x405e36
jmp 0x405256
mov eax, dword [ebp - 0x6c]
sub eax, 0xf4e40ca4
je 0x40607e
jmp 0x405269
mov eax, dword [ebp - 0x6c]
sub eax, 0xf57008ea
je 0x405d12
jmp 0x40527c
mov eax, dword [ebp - 0x6c]
sub eax, 0xfe1337ba
je 0x40582f
jmp 0x40528f
mov eax, dword [ebp - 0x6c]
sub eax, 0x91469d7
je 0x405862
jmp 0x4052a2
mov eax, dword [ebp - 0x6c]
sub eax, 0xa305424
je 0x405fc7
jmp 0x4052b5
mov eax, dword [ebp - 0x6c]
sub eax, 0x11cf83c7
je 0x405d2d
jmp 0x4052c8
mov eax, dword [ebp - 0x6c]
sub eax, 0x127785f5
je 0x405610
jmp 0x4052db
mov eax, dword [ebp - 0x6c]
sub eax, 0x14662ee9
je 0x40609c
jmp 0x4052ee
mov eax, dword [ebp - 0x6c]
sub eax, 0x161bad2e
je 0x405af0
jmp 0x405301
mov eax, dword [ebp - 0x6c]
sub eax, 0x17701d85
je 0x405b66
jmp 0x405314
mov eax, dword [ebp - 0x6c]
sub eax, 0x182b9e94
je 0x405c51
jmp 0x405327
mov eax, dword [ebp - 0x6c]
sub eax, 0x1d17ecd8
je 0x4060ba
jmp 0x40533a
mov eax, dword [ebp - 0x6c]
sub eax, 0x265681f5
je 0x4056e7
jmp 0x40534d
mov eax, dword [ebp - 0x6c]
sub eax, 0x2b400d83
je 0x405b1e
jmp 0x405360
mov eax, dword [ebp - 0x6c]
sub eax, 0x2d63f912
je 0x405aaa
jmp 0x405373
mov eax, dword [ebp - 0x6c]
sub eax, 0x3604a89d
je 0x40556b
jmp 0x405386
mov eax, dword [ebp - 0x6c]
sub eax, 0x36a12bc2
je 0x406028
jmp 0x405399
mov eax, dword [ebp - 0x6c]
sub eax, 0x3be7ddd5
je 0x4058a1
jmp 0x4053ac
mov eax, dword [ebp - 0x6c]
sub eax, 0x3c566a6f
je 0x4058bb
jmp 0x4053bf
mov eax, dword [ebp - 0x6c]
sub eax, 0x41b1b374
je 0x406090
jmp 0x4053d2
mov eax, dword [ebp - 0x6c]
sub eax, 0x56408398
je 0x40559d
jmp 0x4053e5
mov eax, dword [ebp - 0x6c]
sub eax, 0x578d8f56
je 0x405fbb
jmp 0x4053f8
mov eax, dword [ebp - 0x6c]
sub eax, 0x5ebce00d
je 0x405e84
jmp 0x40540b
mov eax, dword [ebp - 0x6c]
sub eax, 0x5f0af042
je 0x4060ae
jmp 0x40541e
mov eax, dword [ebp - 0x6c]
sub eax, 0x6430dc0a
je 0x405c45
jmp 0x405431
mov eax, dword [ebp - 0x6c]
sub eax, 0x7187c447
je 0x405924
jmp 0x405444
mov eax, dword [ebp - 0x6c]
sub eax, 0x744f4eab
je 0x405a37
jmp 0x405457
mov eax, dword [ebp - 0x6c]
sub eax, 0x7955be51
je 0x40584e
jmp 0x40546a
mov eax, dword [ebp - 0x6c]
sub eax, 0x7ab91fd8
je 0x405d98
jmp 0x40547d
mov eax, dword [ebp - 0x6c]
sub eax, 0x7c0ccbcd
je 0x405910
jmp 0x405490
mov eax, dword [ebp - 0x6c]
sub eax, 0x7ca2b955
je 0x405883
jmp 0x4054a3
jmp 0x4060e7
mov al, byte [ebp - 0x5a]
mov cl, byte [ebp - 0x59]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x578d8f56
mov ecx, 0xacdd7878
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
mov ecx, dword [0x43655c]
mov eax, dword [0x436558]
mov edx, ecx
sub edx, 0x258b6362
sub edx, 1
add edx, 0x258b6362
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x578d8f56
mov ecx, 0xbacfebcd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov dword [ebp - 0x60], 0x3604a89d
jmp 0x4060e7
mov ecx, dword [ebp - 0x68]
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
sub esp, 0xffc
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x54]
mov dword [eax], ecx
mov dword [ebp - 0x60], 0x56408398
jmp 0x4060e7
mov ecx, dword [0x43655c]
mov eax, dword [0x436558]
mov edx, ecx
add edx, 0x65001c3
sub edx, 1
sub edx, 0x65001c3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa305424
mov ecx, 0x127785f5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x31], al
mov eax, dword [0x43655c]
mov ecx, dword [0x436558]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa305424
mov ecx, 0xbcc6a3a5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov dl, byte [ebp - 0x31]
mov eax, 0xdb373052
mov ecx, 0xc4387794
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov eax, dword [ebp - 0x58]
mov byte [eax], 0
mov dword [ebp - 0x60], 0x265681f5
jmp 0x4060e7
mov dword [ebp - 0x60], 0xc3397756
jmp 0x4060e7
mov ecx, dword [0x43655c]
mov eax, dword [0x436558]
mov edx, ecx
add edx, 0xe7b72d93
sub edx, 1
sub edx, 0xe7b72d93
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x36a12bc2
mov ecx, 0xc436ae5c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov ecx, dword [0x43655c]
mov eax, dword [0x436558]
mov edx, ecx
add edx, 0xdc57453f
sub edx, 1
sub edx, 0xdc57453f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x36a12bc2
mov ecx, 0xc8880aaa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov dword [ebp - 0x60], 0xfe1337ba
jmp 0x4060e7
mov edx, dword [ebp - 0x48]
mov esi, 0xffffffff
mov eax, 0x7ca2b955
mov ecx, 0x7955be51
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x60], 0x91469d7
jmp 0x4060e7
mov eax, dword [ebp - 0x30]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x58]
mov byte [eax], 0
mov dword [ebp - 0x60], 0xc3397756
jmp 0x4060e7
mov eax, dword [ebp - 0x44]
mov byte [eax], 0
mov dword [ebp - 0x60], 0xb45a5063
jmp 0x4060e7
mov dword [ebp - 0x60], 0x3be7ddd5
jmp 0x4060e7
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x60], 0x3c566a6f
jmp 0x4060e7
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, eax
mov eax, 0xef290537
mov ecx, 0x7c0ccbcd
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov dword [ebp - 0x60], 0xe010efb6
jmp 0x4060e7
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x60], 0x7187c447
jmp 0x4060e7
mov edx, dword [ebp - 0x24]
mov eax, 0xf01f3b3a
mov ecx, 0x97b970ef
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov ecx, dword [0x43655c]
mov eax, dword [0x436558]
mov edx, ecx
sub edx, 0x5e3acfc9
sub edx, 1
add edx, 0x5e3acfc9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf4e40ca4
mov ecx, 0xd5f7b3cb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov eax, dword [ebp - 0x44]
mov byte [eax], 1
mov ecx, dword [0x43655c]
mov eax, dword [0x436558]
mov edx, ecx
add edx, 0xa44bde7f
sub edx, 1
sub edx, 0xa44bde7f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf4e40ca4
mov ecx, 0x81b73f64
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov dword [ebp - 0x60], 0x744f4eab
jmp 0x4060e7
mov ecx, dword [0x43655c]
mov eax, dword [0x436558]
mov edx, ecx
sub edx, 0x3c6ad98b
sub edx, 1
add edx, 0x3c6ad98b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x41b1b374
mov ecx, 0x2d63f912
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov eax, dword [0x43655c]
mov ecx, dword [0x436558]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x41b1b374
mov ecx, 0x161bad2e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov dword [ebp - 0x60], 0xe010efb6
jmp 0x4060e7
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x60], 0x2b400d83
jmp 0x4060e7
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x18]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, eax
mov eax, 0x17701d85
mov ecx, 0xd0232bd5
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov dword [ebp - 0x60], 0xe010efb6
jmp 0x4060e7
mov eax, dword [0x43655c]
mov ecx, dword [0x436558]
mov edx, eax
add edx, 0x64c09fc3
sub edx, 1
sub edx, 0x64c09fc3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x14662ee9
mov ecx, 0xa6d04e89
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ecx]
setne al
and al, 1
mov byte [ebp - 0x13], al
mov ecx, dword [0x43655c]
mov eax, dword [0x436558]
mov edx, ecx
sub edx, 0xd9f6b220
sub edx, 1
add edx, 0xd9f6b220
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x14662ee9
mov ecx, 0x6430dc0a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov dword [ebp - 0x60], 0x182b9e94
jmp 0x4060e7
mov eax, dword [0x43655c]
mov ecx, dword [0x436558]
mov edx, eax
add edx, 0x1a113325
sub edx, 1
sub edx, 0x1a113325
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5f0af042
mov ecx, 0xed08a17e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov ecx, dword [0x43655c]
mov eax, dword [0x436558]
mov edx, ecx
add edx, 0xcab6e5e9
sub edx, 1
sub edx, 0xcab6e5e9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5f0af042
mov ecx, 0xf57008ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov dl, byte [ebp - 0x13]
mov eax, 0x8ffeb447
mov ecx, 0x11cf83c7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov ecx, dword [0x43655c]
mov eax, dword [0x436558]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1d17ecd8
mov ecx, 0x7ab91fd8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov eax, dword [0x43655c]
mov ecx, dword [0x436558]
mov edx, eax
sub edx, 0xfbeaef8b
sub edx, 1
add edx, 0xfbeaef8b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1d17ecd8
mov ecx, 0x905221d2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov dword [ebp - 0x60], 0xe010efb6
jmp 0x4060e7
mov dword [ebp - 0x60], 0x3be7ddd5
jmp 0x4060e7
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x44]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x12], al
mov dword [ebp - 0x60], 0xf261a757
jmp 0x4060e7
mov eax, dword [0x43655c]
mov ecx, dword [0x436558]
mov edx, eax
sub edx, 0x6c2f6a38
sub edx, 1
add edx, 0x6c2f6a38
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa682ec50
mov ecx, 0x5ebce00d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov eax, dword [ebp - 0x58]
mov cl, byte [ebp - 0x12]
and cl, 1
mov byte [eax], cl
mov eax, dword [0x43655c]
mov ecx, dword [0x436558]
mov edx, eax
add edx, 0x6430801c
sub edx, 1
sub edx, 0x6430801c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa682ec50
mov ecx, 0xe08ab852
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov dword [ebp - 0x60], 0xc3397756
jmp 0x4060e7
mov eax, dword [0x43655c]
mov ecx, dword [0x436558]
mov edx, eax
sub edx, 0x5e6708dd
sub edx, 1
add edx, 0x5e6708dd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcb8fbfa3
mov ecx, 0xa771a655
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov eax, dword [ebp - 0x58]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x11], al
mov eax, dword [0x43655c]
mov ecx, dword [0x436558]
mov edx, eax
add edx, 0x75011e73
sub edx, 1
sub edx, 0x75011e73
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcb8fbfa3
mov ecx, 0xee48f3e1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4060e7
mov dword [ebp - 0x60], 0xf0766142
jmp 0x4060e7
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041eee0
mov eax, dword [ebp - 0x70]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x60], 0xacdd7878
jmp 0x4060e7
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x60], 0x127785f5
jmp 0x4060e7
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov dword [ebp - 0x60], 0xc436ae5c
jmp 0x4060e7
mov eax, dword [ebp - 0x44]
mov byte [eax], 1
mov dword [ebp - 0x60], 0xd5f7b3cb
jmp 0x4060e7
mov dword [ebp - 0x60], 0x2d63f912
jmp 0x4060e7
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x60], 0xa6d04e89
jmp 0x4060e7
mov dword [ebp - 0x60], 0xed08a17e
jmp 0x4060e7
mov dword [ebp - 0x60], 0x7ab91fd8
jmp 0x4060e7
mov eax, dword [ebp - 0x58]
mov cl, byte [ebp - 0x12]
and cl, 1
mov byte [eax], cl
mov dword [ebp - 0x60], 0x5ebce00d
jmp 0x4060e7
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x60], 0xa771a655
jmp 0x40503f