Function at 0x411610
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x64
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x64], eax
mov eax, dword [0x443080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x60], 0xeacb69d5
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x6c], eax
sub eax, 0x894d7294
je 0x411ae3
jmp 0x41164c
mov eax, dword [ebp - 0x6c]
sub eax, 0x8c91a92c
je 0x411d94
jmp 0x41165f
mov eax, dword [ebp - 0x6c]
sub eax, 0x8cde68ea
je 0x411b54
jmp 0x411672
mov eax, dword [ebp - 0x6c]
sub eax, 0x920e3b77
je 0x41217f
jmp 0x411685
mov eax, dword [ebp - 0x6c]
sub eax, 0x94225f9b
je 0x412146
jmp 0x411698
mov eax, dword [ebp - 0x6c]
sub eax, 0x97e8b3ac
je 0x41207b
jmp 0x4116ab
mov eax, dword [ebp - 0x6c]
sub eax, 0x9b9c4a4c
je 0x4121fb
jmp 0x4116be
mov eax, dword [ebp - 0x6c]
sub eax, 0x9bf08554
je 0x411e13
jmp 0x4116d1
mov eax, dword [ebp - 0x6c]
sub eax, 0x9fafd56f
je 0x411f0a
jmp 0x4116e4
mov eax, dword [ebp - 0x6c]
sub eax, 0xa01e3872
je 0x412087
jmp 0x4116f7
mov eax, dword [ebp - 0x6c]
sub eax, 0xa21a3307
je 0x411fb2
jmp 0x41170a
mov eax, dword [ebp - 0x6c]
sub eax, 0xaa637efc
je 0x412417
jmp 0x41171d
mov eax, dword [ebp - 0x6c]
sub eax, 0xad4f49d7
je 0x412427
jmp 0x411730
mov eax, dword [ebp - 0x6c]
sub eax, 0xaf742355
je 0x411e97
jmp 0x411743
mov eax, dword [ebp - 0x6c]
sub eax, 0xb0ebfc92
je 0x411d88
jmp 0x411756
mov eax, dword [ebp - 0x6c]
sub eax, 0xb1e78ab5
je 0x411b0e
jmp 0x411769
mov eax, dword [ebp - 0x6c]
sub eax, 0xbb8653f4
je 0x412000
jmp 0x41177c
mov eax, dword [ebp - 0x6c]
sub eax, 0xbcfeaed2
je 0x411afe
jmp 0x41178f
mov eax, dword [ebp - 0x6c]
sub eax, 0xbd5fcedc
je 0x411da0
jmp 0x4117a2
mov eax, dword [ebp - 0x6c]
sub eax, 0xbdd7277d
je 0x412305
jmp 0x4117b5
mov eax, dword [ebp - 0x6c]
sub eax, 0xc317d2b1
je 0x412268
jmp 0x4117c8
mov eax, dword [ebp - 0x6c]
sub eax, 0xc95a90e4
je 0x41239d
jmp 0x4117db
mov eax, dword [ebp - 0x6c]
sub eax, 0xcb1205b6
je 0x4121db
jmp 0x4117ee
mov eax, dword [ebp - 0x6c]
sub eax, 0xccb35d63
je 0x4121c0
jmp 0x411801
mov eax, dword [ebp - 0x6c]
sub eax, 0xcf0dbcd4
je 0x412173
jmp 0x411814
mov eax, dword [ebp - 0x6c]
sub eax, 0xd3931e64
je 0x412483
jmp 0x411827
mov eax, dword [ebp - 0x6c]
sub eax, 0xd4b3abe2
je 0x411c90
jmp 0x41183a
mov eax, dword [ebp - 0x6c]
sub eax, 0xd6e6cbcb
je 0x41234f
jmp 0x41184d
mov eax, dword [ebp - 0x6c]
sub eax, 0xde803f22
je 0x412161
jmp 0x411860
mov eax, dword [ebp - 0x6c]
sub eax, 0xe00d73dc
je 0x4122e7
jmp 0x411873
mov eax, dword [ebp - 0x6c]
sub eax, 0xe6a019f9
je 0x4123eb
jmp 0x411886
mov eax, dword [ebp - 0x6c]
sub eax, 0xea4939c1
je 0x411e8b
jmp 0x411899
mov eax, dword [ebp - 0x6c]
sub eax, 0xeacb69d5
je 0x411a53
jmp 0x4118ac
mov eax, dword [ebp - 0x6c]
sub eax, 0xf1ea5688
je 0x411bc0
jmp 0x4118bf
mov eax, dword [ebp - 0x6c]
sub eax, 0xf3fad012
je 0x411bae
jmp 0x4118d2
mov eax, dword [ebp - 0x6c]
sub eax, 0xf50db77c
je 0x411cda
jmp 0x4118e5
mov eax, dword [ebp - 0x6c]
sub eax, 0x133e39f0
je 0x4122f3
jmp 0x4118f8
mov eax, dword [ebp - 0x6c]
sub eax, 0x1f1bab9b
je 0x4122db
jmp 0x41190b
mov eax, dword [ebp - 0x6c]
sub eax, 0x24db2852
je 0x412474
jmp 0x41191e
mov eax, dword [ebp - 0x6c]
sub eax, 0x27d7dfd7
je 0x41240b
jmp 0x411931
mov eax, dword [ebp - 0x6c]
sub eax, 0x286571a5
je 0x4121e7
jmp 0x411944
mov eax, dword [ebp - 0x6c]
sub eax, 0x2c6ce658
je 0x411fa6
jmp 0x411957
mov eax, dword [ebp - 0x6c]
sub eax, 0x323bcc0b
je 0x411ba2
jmp 0x41196a
mov eax, dword [ebp - 0x6c]
sub eax, 0x3b1612a3
je 0x411c42
jmp 0x41197d
mov eax, dword [ebp - 0x6c]
sub eax, 0x3b209ec7
je 0x412492
jmp 0x411990
mov eax, dword [ebp - 0x6c]
sub eax, 0x42a3e5a6
je 0x4120cd
jmp 0x4119a3
mov eax, dword [ebp - 0x6c]
sub eax, 0x45f977d5
je 0x412439
jmp 0x4119b6
mov eax, dword [ebp - 0x6c]
sub eax, 0x470c0493
je 0x411ce6
jmp 0x4119c9
mov eax, dword [ebp - 0x6c]
sub eax, 0x49a51c71
je 0x411d34
jmp 0x4119dc
mov eax, dword [ebp - 0x6c]
sub eax, 0x4c880a39
je 0x4124ad
jmp 0x4119ef
mov eax, dword [ebp - 0x6c]
sub eax, 0x54e23246
je 0x41221a
jmp 0x411a02
mov eax, dword [ebp - 0x6c]
sub eax, 0x554cc085
je 0x41233b
jmp 0x411a15
mov eax, dword [ebp - 0x6c]
sub eax, 0x58c3afb0
je 0x4124a1
jmp 0x411a28
mov eax, dword [ebp - 0x6c]
sub eax, 0x655ed36e
je 0x411c27
jmp 0x411a3b
mov eax, dword [ebp - 0x6c]
sub eax, 0x75fc94cb
je 0x411f8b
jmp 0x411a4e
jmp 0x4124b4
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x68]
push eax
mov edx, esp
mov dword [ebp - 0x4c], edx
push eax
mov edx, esp
mov dword [ebp - 0x48], edx
push eax
mov edx, esp
mov dword [ebp - 0x44], edx
push eax
sub esp, 0xffc
mov edx, esp
mov dword [ebp - 0x40], edx
push eax
mov edx, esp
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x5c], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x5c], eax
sete al
and al, 1
mov byte [ebp - 0x35], al
mov dword [ebp - 0x60], 0x894d7294
jmp 0x4124b4
mov dl, byte [ebp - 0x35]
mov eax, 0xf3fad012
mov ecx, 0xbcfeaed2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov byte [ebp - 0x4d], 0
mov dword [ebp - 0x60], 0xb1e78ab5
jmp 0x4124b4
mov eax, dword [0x44459c]
mov ecx, dword [0x444598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x27d7dfd7
mov ecx, 0x8cde68ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov eax, dword [0x44459c]
mov ecx, dword [0x444598]
mov edx, eax
add edx, 0xe58d6cb8
sub edx, 1
sub edx, 0xe58d6cb8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x27d7dfd7
mov ecx, 0x323bcc0b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov dword [ebp - 0x60], 0x554cc085
jmp 0x4124b4
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x60], 0xf1ea5688
jmp 0x4124b4
mov eax, dword [ebp - 0x34]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x4c]
mov esi, 0xffffffff
mov eax, 0x470c0493
mov ecx, 0x655ed36e
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov eax, dword [ebp - 0x5c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x60], 0x3b1612a3
jmp 0x4124b4
mov eax, dword [0x44459c]
mov ecx, dword [0x444598]
mov edx, eax
sub edx, 0x1b1409e3
sub edx, 1
add edx, 0x1b1409e3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaa637efc
mov ecx, 0xd4b3abe2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov byte [ebp - 0x4d], 0
mov eax, dword [0x44459c]
mov ecx, dword [0x444598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaa637efc
mov ecx, 0xf50db77c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov dword [ebp - 0x60], 0x554cc085
jmp 0x4124b4
mov eax, dword [0x44459c]
mov ecx, dword [0x444598]
mov edx, eax
sub edx, 0x97e76144
sub edx, 1
add edx, 0x97e76144
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xad4f49d7
mov ecx, 0x49a51c71
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov eax, dword [ebp - 0x48]
mov byte [eax], 0
mov eax, dword [0x44459c]
mov ecx, dword [0x444598]
mov edx, eax
sub edx, 0x23819680
sub edx, 1
add edx, 0x23819680
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xad4f49d7
mov ecx, 0xb0ebfc92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov dword [ebp - 0x60], 0x8c91a92c
jmp 0x4124b4
mov dword [ebp - 0x60], 0xbd5fcedc
jmp 0x4124b4
mov ecx, dword [0x44459c]
mov eax, dword [0x444598]
mov edx, ecx
sub edx, 0x7cb612a2
sub edx, 1
add edx, 0x7cb612a2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x45f977d5
mov ecx, 0x9bf08554
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x3c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x30], eax
mov eax, dword [0x44459c]
mov ecx, dword [0x444598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x45f977d5
mov ecx, 0xea4939c1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov dword [ebp - 0x60], 0xaf742355
jmp 0x4124b4
mov ecx, dword [0x44459c]
mov eax, dword [0x444598]
mov edx, ecx
add edx, 0x4eb60076
sub edx, 1
sub edx, 0x4eb60076
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x24db2852
mov ecx, 0x9fafd56f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov eax, dword [ebp - 0x30]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x29], al
mov ecx, dword [0x44459c]
mov eax, dword [0x444598]
mov edx, ecx
sub edx, 0x44c13562
sub edx, 1
add edx, 0x44c13562
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x24db2852
mov ecx, 0x75fc94cb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov dl, byte [ebp - 0x29]
mov eax, 0x2c6ce658
mov ecx, 0xa21a3307
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov dword [ebp - 0x60], 0x133e39f0
jmp 0x4124b4
mov eax, dword [0x44459c]
mov ecx, dword [0x444598]
mov edx, eax
add edx, 0xc2baf040
sub edx, 1
sub edx, 0xc2baf040
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd3931e64
mov ecx, 0xbb8653f4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov ecx, dword [0x44459c]
mov eax, dword [0x444598]
mov edx, ecx
add edx, 0x7daa6881
sub edx, 1
sub edx, 0x7daa6881
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd3931e64
mov ecx, 0x97e8b3ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov dword [ebp - 0x60], 0xa01e3872
jmp 0x4124b4
mov eax, dword [0x44459c]
mov ecx, dword [0x444598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3b209ec7
mov ecx, 0x42a3e5a6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov eax, dword [ebp - 0x28]
cmp eax, 0
sete al
and al, 1
mov byte [ebp - 0x21], al
mov ecx, dword [0x44459c]
mov eax, dword [0x444598]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3b209ec7
mov ecx, 0x94225f9b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov dl, byte [ebp - 0x21]
mov eax, 0x920e3b77
mov ecx, 0xde803f22
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov eax, dword [ebp - 0x48]
mov byte [eax], 1
mov dword [ebp - 0x60], 0xcf0dbcd4
jmp 0x4124b4
mov dword [ebp - 0x60], 0x133e39f0
jmp 0x4124b4
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x4c]
mov esi, dword [eax]
mov eax, dword [ebp - 0x44]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x60], 0xccb35d63
jmp 0x4124b4
mov edx, dword [ebp - 0x20]
mov eax, 0xcb1205b6
mov ecx, 0x286571a5
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov dword [ebp - 0x60], 0x133e39f0
jmp 0x4124b4
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x60], 0x9b9c4a4c
jmp 0x4124b4
mov eax, dword [ebp - 0x3c]
mov esi, dword [eax]
mov edx, dword [ebp - 0x1c]
mov eax, 0xe00d73dc
mov ecx, 0x54e23246
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov eax, dword [0x44459c]
mov ecx, dword [0x444598]
mov edx, eax
add edx, 0x391fcb3c
sub edx, 1
sub edx, 0x391fcb3c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x58c3afb0
mov ecx, 0xc317d2b1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov ecx, dword [0x44459c]
mov eax, dword [0x444598]
mov edx, ecx
add edx, 0x3e86082d
sub edx, 1
sub edx, 0x3e86082d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x58c3afb0
mov ecx, 0x1f1bab9b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov dword [ebp - 0x60], 0x133e39f0
jmp 0x4124b4
mov dword [ebp - 0x60], 0xbd5fcedc
jmp 0x4124b4
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x60], 0xbdd7277d
jmp 0x4124b4
mov eax, dword [ebp - 0x18]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x48]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x4d], al
mov dword [ebp - 0x60], 0x554cc085
jmp 0x4124b4
mov al, byte [ebp - 0x4d]
and al, 1
mov byte [ebp - 0x11], al
mov dword [ebp - 0x60], 0xd6e6cbcb
jmp 0x4124b4
mov eax, dword [0x44459c]
mov ecx, dword [0x444598]
mov edx, eax
add edx, 0xd8632438
sub edx, 1
sub edx, 0xd8632438
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4c880a39
mov ecx, 0xc95a90e4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov eax, dword [0x44459c]
mov ecx, dword [0x444598]
mov edx, eax
sub edx, 0x633e540c
sub edx, 1
add edx, 0x633e540c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4c880a39
mov ecx, 0xe6a019f9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x4124b4
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042bf40
mov eax, dword [ebp - 0x70]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x60], 0x8cde68ea
jmp 0x4124b4
mov byte [ebp - 0x4d], 0
mov dword [ebp - 0x60], 0xd4b3abe2
jmp 0x4124b4
mov eax, dword [ebp - 0x48]
mov byte [eax], 0
mov dword [ebp - 0x60], 0x49a51c71
jmp 0x4124b4
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x3c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x60], 0x9bf08554
jmp 0x4124b4
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x60], 0x9fafd56f
jmp 0x4124b4
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x60], 0xbb8653f4
jmp 0x4124b4
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x60], 0x42a3e5a6
jmp 0x4124b4
mov dword [ebp - 0x60], 0xc317d2b1
jmp 0x4124b4
mov dword [ebp - 0x60], 0xc95a90e4
jmp 0x411636