Function at 0x4075a0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x106c
call fcn.00423ad0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1070], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x106c], eax
mov eax, dword [0x43a080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1068], 0xbe8aa616
mov eax, dword [ebp - 0x1068]
mov dword [ebp - 0x1074], eax
sub eax, 0x83804a83
je 0x408a19
jmp 0x4075f2
mov eax, dword [ebp - 0x1074]
sub eax, 0x8507a48e
je 0x407fdb
jmp 0x407608
mov eax, dword [ebp - 0x1074]
sub eax, 0x85639ba9
je 0x40897c
jmp 0x40761e
mov eax, dword [ebp - 0x1074]
sub eax, 0x8c992632
je 0x4083c7
jmp 0x407634
mov eax, dword [ebp - 0x1074]
sub eax, 0x9a9da5f5
je 0x408548
jmp 0x40764a
mov eax, dword [ebp - 0x1074]
sub eax, 0x9dd05a14
je 0x408b91
jmp 0x407660
mov eax, dword [ebp - 0x1074]
sub eax, 0xa656fcec
je 0x407c40
jmp 0x407676
mov eax, dword [ebp - 0x1074]
sub eax, 0xa7968778
je 0x4086ad
jmp 0x40768c
mov eax, dword [ebp - 0x1074]
sub eax, 0xaaf1e08e
je 0x40883c
jmp 0x4076a2
mov eax, dword [ebp - 0x1074]
sub eax, 0xac1f0153
je 0x40808d
jmp 0x4076b8
mov eax, dword [ebp - 0x1074]
sub eax, 0xb5f099b9
je 0x408bd0
jmp 0x4076ce
mov eax, dword [ebp - 0x1074]
sub eax, 0xb7f570da
je 0x408664
jmp 0x4076e4
mov eax, dword [ebp - 0x1074]
sub eax, 0xb83dc673
je 0x408569
jmp 0x4076fa
mov eax, dword [ebp - 0x1074]
sub eax, 0xbe8aa616
je 0x407ba3
jmp 0x407710
mov eax, dword [ebp - 0x1074]
sub eax, 0xc189edae
je 0x407f7f
jmp 0x407726
mov eax, dword [ebp - 0x1074]
sub eax, 0xc4c01325
je 0x408ac8
jmp 0x40773c
mov eax, dword [ebp - 0x1074]
sub eax, 0xc6588ca1
je 0x4084af
jmp 0x407752
mov eax, dword [ebp - 0x1074]
sub eax, 0xc9cddab3
je 0x408b0f
jmp 0x407768
mov eax, dword [ebp - 0x1074]
sub eax, 0xce42f9aa
je 0x4089ed
jmp 0x40777e
mov eax, dword [ebp - 0x1074]
sub eax, 0xd33fe4b2
je 0x4085df
jmp 0x407794
mov eax, dword [ebp - 0x1074]
sub eax, 0xd3b4a6a9
je 0x407f22
jmp 0x4077aa
mov eax, dword [ebp - 0x1074]
sub eax, 0xd9bb909e
je 0x407eac
jmp 0x4077c0
mov eax, dword [ebp - 0x1074]
sub eax, 0xdb53f552
je 0x408775
jmp 0x4077d6
mov eax, dword [ebp - 0x1074]
sub eax, 0xdda989d7
je 0x40873e
jmp 0x4077ec
mov eax, dword [ebp - 0x1074]
sub eax, 0xded6d3f5
je 0x408b82
jmp 0x407802
mov eax, dword [ebp - 0x1074]
sub eax, 0xdf9a9f3d
je 0x4081f6
jmp 0x407818
mov eax, dword [ebp - 0x1074]
sub eax, 0xe52b5f95
je 0x408a51
jmp 0x40782e
mov eax, dword [ebp - 0x1074]
sub eax, 0xecd0b6c4
je 0x408112
jmp 0x407844
mov eax, dword [ebp - 0x1074]
sub eax, 0xed7206d9
je 0x407d6c
jmp 0x40785a
mov eax, dword [ebp - 0x1074]
sub eax, 0xef0d87d0
je 0x408359
jmp 0x407870
mov eax, dword [ebp - 0x1074]
sub eax, 0xefb649ab
je 0x408b39
jmp 0x407886
mov eax, dword [ebp - 0x1074]
sub eax, 0xf17fd32b
je 0x4088f7
jmp 0x40789c
mov eax, dword [ebp - 0x1074]
sub eax, 0xf523b8f7
je 0x407d5d
jmp 0x4078b2
mov eax, dword [ebp - 0x1074]
sub eax, 0xf7a2bebb
je 0x408432
jmp 0x4078c8
mov eax, dword [ebp - 0x1074]
sub eax, 0xfd6a2539
je 0x40889c
jmp 0x4078de
mov eax, dword [ebp - 0x1074]
sub eax, 0xfd863274
je 0x4081e7
jmp 0x4078f4
mov eax, dword [ebp - 0x1074]
sub eax, 0x507c90f
je 0x407e8b
jmp 0x40790a
mov eax, dword [ebp - 0x1074]
sub eax, 0xc98f3db
je 0x407c65
jmp 0x407920
mov eax, dword [ebp - 0x1074]
sub eax, 0x1a485f74
je 0x407f8e
jmp 0x407936
mov eax, dword [ebp - 0x1074]
sub eax, 0x1a9b308b
je 0x408aaa
jmp 0x40794c
mov eax, dword [ebp - 0x1074]
sub eax, 0x27766bce
je 0x40802c
jmp 0x407962
mov eax, dword [ebp - 0x1074]
sub eax, 0x28db8095
je 0x408ab9
jmp 0x407978
mov eax, dword [ebp - 0x1074]
sub eax, 0x33bcb7da
je 0x408ba0
jmp 0x40798e
mov eax, dword [ebp - 0x1074]
sub eax, 0x372a605b
je 0x408213
jmp 0x4079a4
mov eax, dword [ebp - 0x1074]
sub eax, 0x378f5b40
je 0x408baf
jmp 0x4079ba
mov eax, dword [ebp - 0x1074]
sub eax, 0x399d1f9a
je 0x40872f
jmp 0x4079d0
mov eax, dword [ebp - 0x1074]
sub eax, 0x3b243076
je 0x408766
jmp 0x4079e6
mov eax, dword [ebp - 0x1074]
sub eax, 0x3d4d801e
je 0x407bc7
jmp 0x4079fc
mov eax, dword [ebp - 0x1074]
sub eax, 0x4a2359f9
je 0x407fcc
jmp 0x407a12
mov eax, dword [ebp - 0x1074]
sub eax, 0x4ba9693d
je 0x408334
jmp 0x407a28
mov eax, dword [ebp - 0x1074]
sub eax, 0x4f7ad016
je 0x40834a
jmp 0x407a3e
mov eax, dword [ebp - 0x1074]
sub eax, 0x514332a7
je 0x408a42
jmp 0x407a54
mov eax, dword [ebp - 0x1074]
sub eax, 0x5b9cf4df
je 0x407cdb
jmp 0x407a6a
mov eax, dword [ebp - 0x1074]
sub eax, 0x621d95ed
je 0x40809c
jmp 0x407a80
mov eax, dword [ebp - 0x1074]
sub eax, 0x6393ff29
je 0x4087eb
jmp 0x407a96
mov eax, dword [ebp - 0x1074]
sub eax, 0x65be0ee3
je 0x408289
jmp 0x407aac
mov eax, dword [ebp - 0x1074]
sub eax, 0x666cd0b5
je 0x4081c6
jmp 0x407ac2
mov eax, dword [ebp - 0x1074]
sub eax, 0x67ce1362
je 0x408b24
jmp 0x407ad8
mov eax, dword [ebp - 0x1074]
sub eax, 0x68145c84
je 0x408313
jmp 0x407aee
mov eax, dword [ebp - 0x1074]
sub eax, 0x6888e62e
je 0x407c56
jmp 0x407b04
mov eax, dword [ebp - 0x1074]
sub eax, 0x6c4e3821
je 0x4089fc
jmp 0x407b1a
mov eax, dword [ebp - 0x1074]
sub eax, 0x7006e5db
je 0x407de2
jmp 0x407b30
mov eax, dword [ebp - 0x1074]
sub eax, 0x73c2f452
je 0x408655
jmp 0x407b46
mov eax, dword [ebp - 0x1074]
sub eax, 0x73d04e5e
je 0x407fb6
jmp 0x407b5c
mov eax, dword [ebp - 0x1074]
sub eax, 0x75cd04eb
je 0x408906
mov eax, dword [ebp - 0x1070]
push eax
mov ecx, esp
mov dword [ebp - 0x104c], ecx
mov dword [ebp - 0x1054], eax
mov dword [ebp - 0x1068], 0x3d4d801e
jmp 0x408bfa
mov eax, dword [ebp - 0x106c]
mov dword [ebp - 0x1058], eax
mov eax, dword [ebp - 0x1058]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x105c], eax
mov edx, 0xffffffff
mov eax, 0xc98f3db
mov ecx, 0xa656fcec
cmp dword [ebp - 0x105c], edx
cmove eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov byte [ebp - 0x104d], 0
mov dword [ebp - 0x1068], 0x6888e62e
jmp 0x408bfa
mov dword [ebp - 0x1068], 0x6c4e3821
jmp 0x408bfa
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
sub edx, 0xf052f520
sub edx, 1
add edx, 0xf052f520
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x514332a7
mov ecx, 0x5b9cf4df
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov eax, dword [ebp - 0x1054]
mov dword [ebp - 0x1048], eax
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
add edx, 0xb759d0cc
sub edx, 1
sub edx, 0xb759d0cc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x514332a7
mov ecx, 0xf523b8f7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov dword [ebp - 0x1068], 0xed7206d9
jmp 0x408bfa
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
sub edx, 0x442b49c
sub edx, 1
add edx, 0x442b49c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe52b5f95
mov ecx, 0x7006e5db
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov eax, dword [ebp - 0x1048]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1060], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x1060], eax
sete al
and al, 1
mov byte [ebp - 0x1041], al
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe52b5f95
mov ecx, 0x507c90f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov dl, byte [ebp - 0x1041]
mov eax, 0x73d04e5e
mov ecx, 0xd9bb909e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
add edx, 0x6215e90a
sub edx, 1
sub edx, 0x6215e90a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1a9b308b
mov ecx, 0xd3b4a6a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov eax, dword [ebp - 0x105c]
mov dword [ebp - 0x1040], eax
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
mov edx, eax
add edx, 0xf36c06ef
sub edx, 1
sub edx, 0xf36c06ef
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1a9b308b
mov ecx, 0xc189edae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov dword [ebp - 0x1068], 0x1a485f74
jmp 0x408bfa
mov eax, dword [ebp - 0x1040]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x104d], 0
mov dword [ebp - 0x1068], 0x6c4e3821
jmp 0x408bfa
mov byte [ebp - 0x1061], 0
mov dword [ebp - 0x1068], 0x4a2359f9
jmp 0x408bfa
mov dword [ebp - 0x1068], 0x8507a48e
jmp 0x408bfa
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
mov edx, eax
add edx, 0x7fbfc1d9
sub edx, 1
sub edx, 0x7fbfc1d9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x28db8095
mov ecx, 0x27766bce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
lea eax, [ebp - 0x1010]
mov dword [ebp - 0x103c], eax
mov eax, dword [ebp - 0x105c]
mov dword [ebp - 0x1038], eax
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x28db8095
mov ecx, 0xac1f0153
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov dword [ebp - 0x1068], 0x621d95ed
jmp 0x408bfa
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
sub edx, 0x5029f0eb
sub edx, 1
add edx, 0x5029f0eb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc4c01325
mov ecx, 0xecd0b6c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov eax, dword [ebp - 0x104c]
mov ecx, dword [ebp - 0x103c]
mov edx, dword [ebp - 0x1038]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1031], al
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc4c01325
mov ecx, 0x666cd0b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov dl, byte [ebp - 0x1031]
mov eax, 0xfd863274
mov ecx, 0xdf9a9f3d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov dword [ebp - 0x1068], 0x766e1609
jmp 0x408bfa
mov eax, dword [ebp - 0x104c]
mov eax, dword [eax]
mov dword [ebp - 0x1030], eax
mov dword [ebp - 0x1068], 0x372a605b
jmp 0x408bfa
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
sub edx, 0x39d2ec51
sub edx, 1
add edx, 0x39d2ec51
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc9cddab3
mov ecx, 0x65be0ee3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov eax, dword [ebp - 0x1030]
cmp eax, 0
sete al
and al, 1
mov byte [ebp - 0x1029], al
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
add edx, 0x64eadc56
sub edx, 1
sub edx, 0x64eadc56
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc9cddab3
mov ecx, 0x68145c84
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov dl, byte [ebp - 0x1029]
mov eax, 0xef0d87d0
mov ecx, 0x4ba9693d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov byte [ebp - 0x1061], 1
mov dword [ebp - 0x1068], 0x4f7ad016
jmp 0x408bfa
mov dword [ebp - 0x1068], 0x766e1609
jmp 0x408bfa
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x67ce1362
mov ecx, 0x8c992632
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov eax, dword [ebp - 0x104c]
mov eax, dword [eax]
mov dword [ebp - 0x1028], eax
lea eax, [ebp - 0x1010]
mov dword [ebp - 0x1024], eax
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
mov edx, eax
add edx, 0xfedc57a9
sub edx, 1
sub edx, 0xfedc57a9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x67ce1362
mov ecx, 0xf7a2bebb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov dword [ebp - 0x1068], 0x789d80af
jmp 0x408bfa
mov esi, dword [ebp - 0x1060]
mov ecx, dword [ebp - 0x1028]
mov edx, dword [ebp - 0x1024]
lea eax, [ebp - 0x1014]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x101d], al
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
mov edx, eax
add edx, 0x354a52fc
sub edx, 1
sub edx, 0x354a52fc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xefb649ab
mov ecx, 0x9a9da5f5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov dl, byte [ebp - 0x101d]
mov eax, 0xb83dc673
mov ecx, 0xb7f570da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
sub edx, 0xccd5c446
sub edx, 1
add edx, 0xccd5c446
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xded6d3f5
mov ecx, 0xd33fe4b2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
sub edx, 0xd90163e6
sub edx, 1
add edx, 0xd90163e6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xded6d3f5
mov ecx, 0x73c2f452
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov dword [ebp - 0x1068], 0x766e1609
jmp 0x408bfa
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9dd05a14
mov ecx, 0xa7968778
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov eax, dword [ebp - 0x1014]
mov dword [ebp - 0x101c], eax
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
sub edx, 0x74a0371d
sub edx, 1
add edx, 0x74a0371d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9dd05a14
mov ecx, 0x399d1f9a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov dword [ebp - 0x1068], 0xdda989d7
jmp 0x408bfa
mov eax, dword [ebp - 0x104c]
mov esi, dword [eax]
mov edx, dword [ebp - 0x101c]
mov eax, 0xdb53f552
mov ecx, 0x3b243076
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov dword [ebp - 0x1068], 0x766e1609
jmp 0x408bfa
mov ecx, dword [0x43b57c]
mov eax, dword [0x43b578]
mov edx, ecx
sub edx, 0xef01af8c
sub edx, 1
add edx, 0xef01af8c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x33bcb7da
mov ecx, 0x6393ff29
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
mov edx, eax
add edx, 0x16290234
sub edx, 1
sub edx, 0x16290234
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x33bcb7da
mov ecx, 0xaaf1e08e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov dword [ebp - 0x1068], 0x8507a48e
jmp 0x408bfa
mov eax, dword [ebp - 0x105c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x378f5b40
mov ecx, 0xf17fd32b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov dword [ebp - 0x1068], 0x75cd04eb
jmp 0x408bfa
mov eax, dword [ebp - 0x1060]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [ebp - 0x1061]
and al, 1
mov byte [ebp - 0x104d], al
mov eax, dword [0x43b57c]
mov ecx, dword [0x43b578]
mov edx, eax
add edx, 0xf8c13072
sub edx, 1
sub edx, 0xf8c13072
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb5f099b9
mov ecx, 0xce42f9aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1068], eax
jmp 0x408bfa
mov dword [ebp - 0x1068], 0x6c4e3821
jmp 0x408bfa
mov al, byte [ebp - 0x104d]
and al, 1
mov byte [ebp - 0x1015], al
mov dword [ebp - 0x1068], 0x83804a83
jmp 0x408bfa
mov al, byte [ebp - 0x1015]
and al, 1
movzx eax, al
mov dword [ebp - 0x1078], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00423ac0
mov eax, dword [ebp - 0x1078]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1068], 0x5b9cf4df
jmp 0x408bfa
mov eax, dword [ebp - 0x1048]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1060], eax
mov dword [ebp - 0x1068], 0x7006e5db
jmp 0x408bfa
mov dword [ebp - 0x1068], 0xd3b4a6a9
jmp 0x408bfa
mov dword [ebp - 0x1068], 0x27766bce
jmp 0x408bfa
mov eax, dword [ebp - 0x104c]
mov ecx, dword [ebp - 0x103c]
mov edx, dword [ebp - 0x1038]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x1068], 0xecd0b6c4
jmp 0x408bfa
mov eax, dword [ebp - 0x1030]
mov dword [ebp - 0x1068], 0x65be0ee3
jmp 0x408bfa
mov eax, dword [ebp - 0x104c]
mov dword [ebp - 0x1068], 0x8c992632
jmp 0x408bfa
mov esi, dword [ebp - 0x1060]
mov ecx, dword [ebp - 0x1028]
mov edx, dword [ebp - 0x1024]
lea eax, [ebp - 0x1014]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x1068], 0xc6588ca1
jmp 0x408bfa
mov dword [ebp - 0x1068], 0xd33fe4b2
jmp 0x408bfa
mov dword [ebp - 0x1068], 0xa7968778
jmp 0x408bfa
mov dword [ebp - 0x1068], 0x6393ff29
jmp 0x408bfa
mov eax, dword [ebp - 0x105c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1068], 0xfd6a2539
jmp 0x408bfa
mov eax, dword [ebp - 0x1060]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [ebp - 0x1061]
and al, 1
mov byte [ebp - 0x104d], al
mov dword [ebp - 0x1068], 0x85639ba9
jmp 0x4075d6