Function at 0x474440
Capabilities:
Get file size
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x39c
mov eax, dword [0x4f1080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x3a0], 0x86792027
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x3a4], eax
sub eax, 0x800cb3ff
je 0x4828cd
jmp 0x47447c
mov eax, dword [ebp - 0x3a4]
sub eax, 0x80e2b3d0
je 0x47f12b
jmp 0x474492
mov eax, dword [ebp - 0x3a4]
sub eax, 0x812b9440
je 0x47bf4a
jmp 0x4744a8
mov eax, dword [ebp - 0x3a4]
sub eax, 0x813a0b9f
je 0x47e1b9
jmp 0x4744be
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8157e1b4
je 0x4789e7
jmp 0x4744d4
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8224abfe
je 0x47ae43
jmp 0x4744ea
mov eax, dword [ebp - 0x3a4]
sub eax, 0x823eb6a5
je 0x478b7f
jmp 0x474500
mov eax, dword [ebp - 0x3a4]
sub eax, 0x826482e0
je 0x47edf7
jmp 0x474516
mov eax, dword [ebp - 0x3a4]
sub eax, 0x82667a83
je 0x4803e0
jmp 0x47452c
mov eax, dword [ebp - 0x3a4]
sub eax, 0x82ce28a6
je 0x47dc05
jmp 0x474542
mov eax, dword [ebp - 0x3a4]
sub eax, 0x82fd77d1
je 0x47a1b3
jmp 0x474558
mov eax, dword [ebp - 0x3a4]
sub eax, 0x82fd9627
je 0x47d64d
jmp 0x47456e
mov eax, dword [ebp - 0x3a4]
sub eax, 0x830bad36
je 0x47e9ce
jmp 0x474584
mov eax, dword [ebp - 0x3a4]
sub eax, 0x83132013
je 0x482591
jmp 0x47459a
mov eax, dword [ebp - 0x3a4]
sub eax, 0x836fb0fb
je 0x47d535
jmp 0x4745b0
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8400963e
je 0x478496
jmp 0x4745c6
mov eax, dword [ebp - 0x3a4]
sub eax, 0x84bdb4db
je 0x47c5cc
jmp 0x4745dc
mov eax, dword [ebp - 0x3a4]
sub eax, 0x84fcf7b7
je 0x47fca0
jmp 0x4745f2
mov eax, dword [ebp - 0x3a4]
sub eax, 0x86792027
je 0x477bc3
jmp 0x474608
mov eax, dword [ebp - 0x3a4]
sub eax, 0x86c617f4
je 0x482b64
jmp 0x47461e
mov eax, dword [ebp - 0x3a4]
sub eax, 0x86e2b28e
je 0x47d125
jmp 0x474634
mov eax, dword [ebp - 0x3a4]
sub eax, 0x87064215
je 0x483076
jmp 0x47464a
mov eax, dword [ebp - 0x3a4]
sub eax, 0x87433b17
je 0x47d2cc
jmp 0x474660
mov eax, dword [ebp - 0x3a4]
sub eax, 0x87817cd0
je 0x482b19
jmp 0x474676
mov eax, dword [ebp - 0x3a4]
sub eax, 0x87cfecdb
je 0x47b449
jmp 0x47468c
mov eax, dword [ebp - 0x3a4]
sub eax, 0x890b99f4
je 0x482a6f
jmp 0x4746a2
mov eax, dword [ebp - 0x3a4]
sub eax, 0x89371abd
je 0x47ed33
jmp 0x4746b8
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8996aa57
je 0x47db8f
jmp 0x4746ce
mov eax, dword [ebp - 0x3a4]
sub eax, 0x89a8d070
je 0x4787c2
jmp 0x4746e4
mov eax, dword [ebp - 0x3a4]
sub eax, 0x89b73731
je 0x48296d
jmp 0x4746fa
mov eax, dword [ebp - 0x3a4]
sub eax, 0x89ffff7b
je 0x47e52b
jmp 0x474710
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8a09a969
je 0x47dccc
jmp 0x474726
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8a271868
je 0x483094
jmp 0x47473c
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8a4a1631
je 0x482dd9
jmp 0x474752
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8a84b23a
je 0x4820c8
jmp 0x474768
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8abdcd13
je 0x47da77
jmp 0x47477e
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8ad2d5b4
je 0x47a9aa
jmp 0x474794
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8b7eb0cf
je 0x47acdb
jmp 0x4747aa
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8b9ec2e9
je 0x482802
jmp 0x4747c0
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8bd29cab
je 0x479570
jmp 0x4747d6
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8cb5498e
je 0x47fb33
jmp 0x4747ec
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8ccb813f
je 0x47c1e8
jmp 0x474802
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8cd57830
je 0x47c642
jmp 0x474818
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8d0e4b89
je 0x47f061
jmp 0x47482e
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8d4af1ec
je 0x47deb4
jmp 0x474844
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8e2b2bd2
je 0x47b4a9
jmp 0x47485a
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8e4240ff
je 0x47c852
jmp 0x474870
mov eax, dword [ebp - 0x3a4]
sub eax, 0x8e6ac4ec
je 0x47ae64
jmp 0x474886
mov eax, dword [ebp - 0x3a4]
sub eax, 0x904ff6fc
je 0x48240d
jmp 0x47489c
mov eax, dword [ebp - 0x3a4]
sub eax, 0x90addcd8
je 0x47f45f
jmp 0x4748b2
mov eax, dword [ebp - 0x3a4]
sub eax, 0x9136a746
je 0x47c8a3
jmp 0x4748c8
mov eax, dword [ebp - 0x3a4]
sub eax, 0x91401a2c
je 0x479857
jmp 0x4748de
mov eax, dword [ebp - 0x3a4]
sub eax, 0x9146cfc8
je 0x47d05e
jmp 0x4748f4
mov eax, dword [ebp - 0x3a4]
sub eax, 0x9192d444
je 0x47b38a
jmp 0x47490a
mov eax, dword [ebp - 0x3a4]
sub eax, 0x91fbd262
je 0x47c73d
jmp 0x474920
mov eax, dword [ebp - 0x3a4]
sub eax, 0x92281147
je 0x47a0e5
jmp 0x474936
mov eax, dword [ebp - 0x3a4]
sub eax, 0x92471cca
je 0x478779
jmp 0x47494c
mov eax, dword [ebp - 0x3a4]
sub eax, 0x92613ce2
je 0x482e6c
jmp 0x474962
mov eax, dword [ebp - 0x3a4]
sub eax, 0x92b511c3
je 0x481afb
jmp 0x474978
mov eax, dword [ebp - 0x3a4]
sub eax, 0x93f324ce
je 0x47df22
jmp 0x47498e
mov eax, dword [ebp - 0x3a4]
sub eax, 0x942eae01
je 0x480c75
jmp 0x4749a4
mov eax, dword [ebp - 0x3a4]
sub eax, 0x94a2d09a
je 0x47929d
jmp 0x4749ba
mov eax, dword [ebp - 0x3a4]
sub eax, 0x94f52eb3
je 0x480d8d
jmp 0x4749d0
mov eax, dword [ebp - 0x3a4]
sub eax, 0x95253966
je 0x47daed
jmp 0x4749e6
mov eax, dword [ebp - 0x3a4]
sub eax, 0x952bb338
je 0x47ce7f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf2f85ba
mov ecx, 0xe4b0b4da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
sub edx, 0x5aadae37
sub edx, 1
add edx, 0x5aadae37
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd4651b07
mov ecx, 0x5272a3ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x62744a45
mov ecx, 0x89a8d070
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
add edx, 0x1f2b5780
sub edx, 1
sub edx, 0x1f2b5780
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x62744a45
mov ecx, 0x886dced
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
add edx, 0xa1e08daf
sub edx, 1
sub edx, 0xa1e08daf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8b9ec2e9
mov ecx, 0xb929a166
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
add edx, 0xadb566d8
sub edx, 1
sub edx, 0xadb566d8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5af063e6
mov ecx, 0xfba4f55d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [ebp - 0x370]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
sub esp, 4
mov dword [esp], eax
call fcn.004db35e
add esp, 4
mov dword [ebp - 0x398], eax
mov ecx, dword [ebp - 0x394]
mov edx, dword [ebp - 0x398]
mov esi, dword [ebp - 0x390]
lea eax, [ebp - 0x328]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x369], al
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x31dc3ef6
mov ecx, 0x1f108880
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x84fcf7b7
mov ecx, 0xd58d1f70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
sub edx, 0x22168f5e
sub edx, 1
add edx, 0x22168f5e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfbfb58e2
mov ecx, 0xd7caef2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xca8e951c
mov ecx, 0xa38dd150
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd862412d
mov ecx, 0x470cd19e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
sub edx, 0x790d3e12
sub edx, 1
add edx, 0x790d3e12
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x17fdf084
mov ecx, 0x9601834
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
add edx, 0xba72188d
sub edx, 1
sub edx, 0xba72188d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x38ee3979
mov ecx, 0xcdf34513
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov dl, byte [ebp - 0x351]
mov eax, 0x8e6ac4ec
mov ecx, 0x2c9a9c7e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
add edx, 0xfa045406
sub edx, 1
sub edx, 0xfa045406
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdea07f93
mov ecx, 0xe38cbe99
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
add edx, 0xf9c156d9
sub edx, 1
sub edx, 0xf9c156d9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7b03adef
mov ecx, 0xe8c84619
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
sub edx, 0xb491e1d8
sub edx, 1
add edx, 0xb491e1d8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xda3c6d45
mov ecx, 0x98ec8da5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x3a0], 0x4442aa70
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
add edx, 0x18c1be2
sub edx, 1
sub edx, 0x18c1be2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd5048cdc
mov ecx, 0x6377b27a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc5fb09b9
mov ecx, 0xdd14ffcd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
add edx, 0xf6baafde
sub edx, 1
sub edx, 0xf6baafde
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2637ad0f
mov ecx, 0x8cd57830
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
sub edx, 0xee417965
sub edx, 1
add edx, 0xee417965
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2c1e2a69
mov ecx, 0xdc427fc5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
lea eax, [ebp - 0x324]
add eax, 0x10c
sub esp, 4
mov dword [esp], eax
call fcn.004690d0
add esp, 4
mov eax, dword [ebp - 0x39c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
cmp eax, 0
sete al
and al, 1
mov byte [ebp - 0x33a], al
mov dword [ebp - 0x3a0], 0x30bcc753
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
add edx, 0x29664477
sub edx, 1
sub edx, 0x29664477
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5f2effbd
mov ecx, 0x9136a746
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
sub edx, 0x560b65f
sub edx, 1
add edx, 0x560b65f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x50193280
mov ecx, 0xc9bc22a7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
sub edx, 0xd0d58d7b
sub edx, 1
add edx, 0xd0d58d7b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb56f7ef8
mov ecx, 0x4bdbf9c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
add edx, 0x898d3600
sub edx, 1
sub edx, 0x898d3600
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd9732385
mov ecx, 0xe2a707a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
sub edx, 0x1f046cba
sub edx, 1
add edx, 0x1f046cba
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7e5175ac
mov ecx, 0xd96bb1a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
sub edx, 0xb732b821
sub edx, 1
add edx, 0xb732b821
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcb3dcb39
mov ecx, 0x6cbc006e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
sub edx, 0x257a5bea
sub edx, 1
add edx, 0x257a5bea
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa188a344
mov ecx, 0xb52fd162
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
add edx, 0xde422196
sub edx, 1
sub edx, 0xde422196
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcf0628e
mov ecx, 0x95253966
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
add edx, 0xbc7dfb2c
sub edx, 1
sub edx, 0xbc7dfb2c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6df76946
mov ecx, 0x186d61c7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
sub edx, 0xbf3fbbd7
sub edx, 1
add edx, 0xbf3fbbd7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcf0628e
mov ecx, 0x82ce28a6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
sub edx, 0xebef1f7c
sub edx, 1
add edx, 0xebef1f7c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xce815d86
mov ecx, 0x6527f4b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
add edx, 0xfd2b27cb
sub edx, 1
sub edx, 0xfd2b27cb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9a8526c4
mov ecx, 0x3125bcc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x759c100
mov ecx, 0x93f324ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [ebp - 0x384]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x380]
mov dword [eax], ecx
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
add edx, 0xd0386fea
sub edx, 1
sub edx, 0xd0386fea
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x759c100
mov ecx, 0x20bde70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [ebp - 0x380]
call dword [eax]
mov eax, dword [ebp - 0x388]
mov eax, dword [eax]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x388]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
sub edx, 0x29e00f2c
sub edx, 1
add edx, 0x29e00f2c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb64fc89e
mov ecx, 0xbbd1b474
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc94a787a
mov ecx, 0x381fc3d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
add edx, 0x4a7c0998
sub edx, 1
sub edx, 0x4a7c0998
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x42fa35cc
mov ecx, 0x5c1cc0bc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov dword [ebp - 0x3a0], 0x6bbd6b2c
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
add edx, 0x63c1c26b
sub edx, 1
sub edx, 0x63c1c26b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7dbdb787
mov ecx, 0x512e6528
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
add edx, 0x23193472
sub edx, 1
sub edx, 0x23193472
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x16059159
mov ecx, 0x6ffca6bc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb056ef00
mov ecx, 0x3ca07bb3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
sub edx, 0x3b912ada
sub edx, 1
add edx, 0x3b912ada
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x37e8ce9c
mov ecx, 0x9ba284cf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov dword [ebp - 0x3a0], 0xa95483e4
jmp 0x48320f
mov dword [ebp - 0x3a0], 0xd58d1f70
jmp 0x48320f
mov edx, dword [ebp - 0x398]
mov esi, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x350]
lea eax, [ebp - 0x32c]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2c4928d4
mov ecx, 0x384fc229
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
add edx, 0x35ecaafb
sub edx, 1
sub edx, 0x35ecaafb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x22c18af3
mov ecx, 0x799a43f4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [0x4f25f4]
mov ecx, dword [0x4f25f0]
mov edx, eax
add edx, 0x6a683125
sub edx, 1
sub edx, 0x6a683125
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdef39947
mov ecx, 0x558ec464
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov eax, dword [ebp - 0x348]
sub esp, 4
mov dword [esp], eax
call fcn.004db367
add esp, 4
mov dword [ebp - 0x3a0], 0x33ba4e
jmp 0x48320f
mov eax, dword [ebp - 0x340]
sub esp, 4
mov dword [esp], eax
call fcn.004db367
add esp, 4
mov dword [ebp - 0x3a0], 0x9e5c25cf
jmp 0x48320f
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
sub edx, 0x6aae8061
sub edx, 1
add edx, 0x6aae8061
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2946ad18
mov ecx, 0x600091e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov dword [ebp - 0x38c], 0
mov ecx, dword [0x4f25f4]
mov eax, dword [0x4f25f0]
mov edx, ecx
add edx, 0x48f3411
sub edx, 1
sub edx, 0x48f3411
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x29426886
mov ecx, 0xc20ae04e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x3a0], eax
jmp 0x48320f
mov dword [ebp - 0x3a0], 0x8157e1b4
jmp 0x48320f
mov dword [ebp - 0x3a0], 0x2fc2c48f
jmp 0x48320f
mov dword [ebp - 0x3a0], 0x4961c4ab
jmp 0x48320f
mov dword [ebp - 0x3a0], 0x2da764f8
jmp 0x48320f
mov dword [ebp - 0x3a0], 0x5aeab115
jmp 0x48320f
lea eax, [ebp - 0x324]
add eax, 0x10c
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, eax
mov eax, dword [ebp - 0x388]
mov dword [eax], ecx
mov dword [ebp - 0x3a0], 0xfea693ec
jmp 0x48320f
lea eax, [ebp - 0x324]
add eax, 8
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x3a0], 0x36a2f6e2
jmp 0x48320f
mov dword [ebp - 0x3a0], 0x63b0361d
jmp 0x48320f
mov dword [ebp - 0x3a0], 0x2fcb8e1f
jmp 0x48320f
mov dword [ebp - 0x3a0], 0xbd174aec
jmp 0x48320f
jmp 0x474460