Function at 0x411890
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x68
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x68], eax
mov eax, dword [0x446080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x64], 0xa35b9fa2
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x70], eax
sub eax, 0x8c8048e1
je 0x41233b
jmp 0x4118cc
mov eax, dword [ebp - 0x70]
sub eax, 0x8eb67835
je 0x411f4f
jmp 0x4118df
mov eax, dword [ebp - 0x70]
sub eax, 0x95dfeb0b
je 0x412123
jmp 0x4118f2
mov eax, dword [ebp - 0x70]
sub eax, 0x96458243
je 0x412539
jmp 0x411905
mov eax, dword [ebp - 0x70]
sub eax, 0x9bbb2bfa
je 0x411ceb
jmp 0x411918
mov eax, dword [ebp - 0x70]
sub eax, 0x9f2372c2
je 0x4121cb
jmp 0x41192b
mov eax, dword [ebp - 0x70]
sub eax, 0xa35b9fa2
je 0x411cd3
jmp 0x41193e
mov eax, dword [ebp - 0x70]
sub eax, 0xb2fb6c98
je 0x411d98
jmp 0x411951
mov eax, dword [ebp - 0x70]
sub eax, 0xb49c7842
je 0x4124ba
jmp 0x411964
mov eax, dword [ebp - 0x70]
sub eax, 0xba62c589
je 0x41220c
jmp 0x411977
mov eax, dword [ebp - 0x70]
sub eax, 0xba66e388
je 0x412652
jmp 0x41198a
mov eax, dword [ebp - 0x70]
sub eax, 0xbfbc0937
je 0x412016
jmp 0x41199d
mov eax, dword [ebp - 0x70]
sub eax, 0xc0110b3b
je 0x412363
jmp 0x4119b0
mov eax, dword [ebp - 0x70]
sub eax, 0xcce4dd80
je 0x4126e9
jmp 0x4119c3
mov eax, dword [ebp - 0x70]
sub eax, 0xd32c2014
je 0x4120b0
jmp 0x4119d6
mov eax, dword [ebp - 0x70]
sub eax, 0xd3892f2b
je 0x412632
jmp 0x4119e9
mov eax, dword [ebp - 0x70]
sub eax, 0xddb01bd1
je 0x41205c
jmp 0x4119fc
mov eax, dword [ebp - 0x70]
sub eax, 0xe822ee74
je 0x41252d
jmp 0x411a0f
mov eax, dword [ebp - 0x70]
sub eax, 0xe9ddcd7d
je 0x412108
jmp 0x411a22
mov eax, dword [ebp - 0x70]
sub eax, 0xec0c5f92
je 0x411e94
jmp 0x411a35
mov eax, dword [ebp - 0x70]
sub eax, 0xecd0df26
je 0x411e46
jmp 0x411a48
mov eax, dword [ebp - 0x70]
sub eax, 0xf2e5863a
je 0x41200a
jmp 0x411a5b
mov eax, dword [ebp - 0x70]
sub eax, 0xf7b1a92b
je 0x411de6
jmp 0x411a6e
mov eax, dword [ebp - 0x70]
sub eax, 0x1e0b2ce
je 0x41223a
jmp 0x411a81
mov eax, dword [ebp - 0x70]
sub eax, 0x1f2c42e
je 0x412726
jmp 0x411a94
mov eax, dword [ebp - 0x70]
sub eax, 0x4a8065f
je 0x411f63
jmp 0x411aa7
mov eax, dword [ebp - 0x70]
sub eax, 0xc7de8de
je 0x4121df
jmp 0x411aba
mov eax, dword [ebp - 0x70]
sub eax, 0xca125a2
je 0x411fa9
jmp 0x411acd
mov eax, dword [ebp - 0x70]
sub eax, 0x22dc136e
je 0x412347
jmp 0x411ae0
mov eax, dword [ebp - 0x70]
sub eax, 0x26c7a9a6
je 0x412732
jmp 0x411af3
mov eax, dword [ebp - 0x70]
sub eax, 0x2f1e267c
je 0x4120c8
jmp 0x411b06
mov eax, dword [ebp - 0x70]
sub eax, 0x39692d17
je 0x412686
jmp 0x411b19
mov eax, dword [ebp - 0x70]
sub eax, 0x397fa3a7
je 0x411d8c
jmp 0x411b2c
mov eax, dword [ebp - 0x70]
sub eax, 0x3af2181f
je 0x411e3a
jmp 0x411b3f
mov eax, dword [ebp - 0x70]
sub eax, 0x3ea31942
je 0x412282
jmp 0x411b52
mov eax, dword [ebp - 0x70]
sub eax, 0x443387dd
je 0x4121bf
jmp 0x411b65
mov eax, dword [ebp - 0x70]
sub eax, 0x44db6a65
je 0x412593
jmp 0x411b78
mov eax, dword [ebp - 0x70]
sub eax, 0x4d02cf94
je 0x4121fa
jmp 0x411b8b
mov eax, dword [ebp - 0x70]
sub eax, 0x553268d9
je 0x412744
jmp 0x411b9e
mov eax, dword [ebp - 0x70]
sub eax, 0x576d7355
je 0x412545
jmp 0x411bb1
mov eax, dword [ebp - 0x70]
sub eax, 0x58be7380
je 0x412218
jmp 0x411bc4
mov eax, dword [ebp - 0x70]
sub eax, 0x598712e0
je 0x412666
jmp 0x411bd7
mov eax, dword [ebp - 0x70]
sub eax, 0x5d2797bb
je 0x412447
jmp 0x411bea
mov eax, dword [ebp - 0x70]
sub eax, 0x5dfdda92
je 0x41242c
jmp 0x411bfd
mov eax, dword [ebp - 0x70]
sub eax, 0x63c9a34e
je 0x412750
jmp 0x411c10
mov eax, dword [ebp - 0x70]
sub eax, 0x673251b8
je 0x41263e
jmp 0x411c23
mov eax, dword [ebp - 0x70]
sub eax, 0x686ef283
je 0x4123d6
jmp 0x411c36
mov eax, dword [ebp - 0x70]
sub eax, 0x6e66eec8
je 0x4122c8
jmp 0x411c49
mov eax, dword [ebp - 0x70]
sub eax, 0x6f0ad018
je 0x412692
jmp 0x411c5c
mov eax, dword [ebp - 0x70]
sub eax, 0x6f77add2
je 0x4120bc
jmp 0x411c6f
mov eax, dword [ebp - 0x70]
sub eax, 0x6ff2ab2e
je 0x411d7c
jmp 0x411c82
mov eax, dword [ebp - 0x70]
sub eax, 0x71216760
je 0x412708
jmp 0x411c95
mov eax, dword [ebp - 0x70]
sub eax, 0x76335fc6
je 0x411f34
jmp 0x411ca8
mov eax, dword [ebp - 0x70]
sub eax, 0x7e127bbf
je 0x41271a
jmp 0x411cbb
mov eax, dword [ebp - 0x70]
sub eax, 0x7fd8de91
je 0x412171
jmp 0x411cce
jmp 0x41277c
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x64], 0x9bbb2bfa
jmp 0x41277c
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x6c]
push eax
mov edx, esp
mov dword [ebp - 0x4c], edx
push eax
mov edx, esp
mov dword [ebp - 0x48], edx
push eax
sub esp, 0xffc
mov edx, esp
mov dword [ebp - 0x44], edx
push eax
mov edx, esp
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x54]
mov dword [eax], ecx
mov edx, dword [ebp - 0x54]
mov esi, 0xffffffff
mov eax, 0xb2fb6c98
mov ecx, 0x6ff2ab2e
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov byte [ebp - 0x55], 0
mov dword [ebp - 0x64], 0x397fa3a7
jmp 0x41277c
mov dword [ebp - 0x64], 0xba66e388
jmp 0x41277c
mov eax, dword [0x447564]
mov ecx, dword [0x447560]
mov edx, eax
sub edx, 0x9ad902cb
sub edx, 1
add edx, 0x9ad902cb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x39692d17
mov ecx, 0xf7b1a92b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x447564]
mov ecx, dword [0x447560]
mov edx, eax
add edx, 0x5a309e19
sub edx, 1
sub edx, 0x5a309e19
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x39692d17
mov ecx, 0x3af2181f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov dword [ebp - 0x64], 0xecd0df26
jmp 0x41277c
mov eax, dword [0x447564]
mov ecx, dword [0x447560]
mov edx, eax
add edx, 0x978e3af5
sub edx, 1
sub edx, 0x978e3af5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6f0ad018
mov ecx, 0xec0c5f92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x35], al
mov eax, dword [0x447564]
mov ecx, dword [0x447560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6f0ad018
mov ecx, 0x76335fc6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov dl, byte [ebp - 0x35]
mov eax, 0xbfbc0937
mov ecx, 0x8eb67835
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x64], 0x4a8065f
jmp 0x41277c
mov eax, dword [0x447564]
mov ecx, dword [0x447560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcce4dd80
mov ecx, 0xca125a2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov eax, dword [ebp - 0x34]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x55], 0
mov eax, dword [0x447564]
mov ecx, dword [0x447560]
mov edx, eax
add edx, 0xaed411c0
sub edx, 1
sub edx, 0xaed411c0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcce4dd80
mov ecx, 0xf2e5863a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov dword [ebp - 0x64], 0xba66e388
jmp 0x41277c
mov eax, dword [0x447564]
mov ecx, dword [0x447560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x71216760
mov ecx, 0xddb01bd1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov eax, dword [ebp - 0x4c]
mov byte [eax], 0
mov eax, dword [0x447564]
mov ecx, dword [0x447560]
mov edx, eax
add edx, 0x249b76ee
sub edx, 1
sub edx, 0x249b76ee
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x71216760
mov ecx, 0xd32c2014
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov dword [ebp - 0x64], 0x6f77add2
jmp 0x41277c
mov dword [ebp - 0x64], 0x2f1e267c
jmp 0x41277c
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
mov eax, dword [ebp - 0x40]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x64], 0xe9ddcd7d
jmp 0x41277c
mov edx, dword [ebp - 0x30]
mov eax, 0x95dfeb0b
mov ecx, 0x9f2372c2
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov eax, dword [0x447564]
mov ecx, dword [0x447560]
mov edx, eax
sub edx, 0x15e9988b
sub edx, 1
add edx, 0x15e9988b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7e127bbf
mov ecx, 0x7fd8de91
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov eax, dword [0x447564]
mov ecx, dword [0x447560]
mov edx, eax
add edx, 0x75687cbe
sub edx, 1
sub edx, 0x75687cbe
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7e127bbf
mov ecx, 0x443387dd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov dword [ebp - 0x64], 0x576d7355
jmp 0x41277c
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x64], 0xc7de8de
jmp 0x41277c
mov edx, dword [ebp - 0x2c]
mov eax, 0x58be7380
mov ecx, 0x4d02cf94
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov eax, dword [ebp - 0x4c]
mov byte [eax], 1
mov dword [ebp - 0x64], 0xba62c589
jmp 0x41277c
mov dword [ebp - 0x64], 0x576d7355
jmp 0x41277c
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x64], 0x1e0b2ce
jmp 0x41277c
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, eax
mov eax, 0x3ea31942
mov ecx, 0x22dc136e
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov eax, dword [0x447564]
mov ecx, dword [0x447560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1f2c42e
mov ecx, 0x6e66eec8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov ecx, dword [0x447564]
mov eax, dword [0x447560]
mov edx, ecx
sub edx, 0x9131f8bf
sub edx, 1
add edx, 0x9131f8bf
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1f2c42e
mov ecx, 0x8c8048e1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov dword [ebp - 0x64], 0x576d7355
jmp 0x41277c
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x64], 0xc0110b3b
jmp 0x41277c
mov ecx, dword [0x447564]
mov eax, dword [0x447560]
mov edx, ecx
sub edx, 0xba24a7e
sub edx, 1
add edx, 0xba24a7e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x26c7a9a6
mov ecx, 0x686ef283
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
cmp eax, ecx
setne al
and al, 1
mov byte [ebp - 0x13], al
mov eax, dword [0x447564]
mov ecx, dword [0x447560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x26c7a9a6
mov ecx, 0x5dfdda92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov dl, byte [ebp - 0x13]
mov eax, 0x96458243
mov ecx, 0x5d2797bb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov ecx, dword [0x447564]
mov eax, dword [0x447560]
mov edx, ecx
add edx, 0x94067767
sub edx, 1
sub edx, 0x94067767
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x553268d9
mov ecx, 0xb49c7842
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov ecx, dword [0x447564]
mov eax, dword [0x447560]
mov edx, ecx
sub edx, 0x8735543e
sub edx, 1
add edx, 0x8735543e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x553268d9
mov ecx, 0xe822ee74
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov dword [ebp - 0x64], 0x576d7355
jmp 0x41277c
mov dword [ebp - 0x64], 0x2f1e267c
jmp 0x41277c
mov eax, dword [0x447564]
mov ecx, dword [0x447560]
mov edx, eax
sub edx, 0xf13d5baa
sub edx, 1
add edx, 0xf13d5baa
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x63c9a34e
mov ecx, 0x44db6a65
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x4c]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x12], al
mov ecx, dword [0x447564]
mov eax, dword [0x447560]
mov edx, ecx
sub edx, 0x7fc3e41d
sub edx, 1
add edx, 0x7fc3e41d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x63c9a34e
mov ecx, 0xd3892f2b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x41277c
mov dword [ebp - 0x64], 0x673251b8
jmp 0x41277c
mov al, byte [ebp - 0x12]
and al, 1
mov byte [ebp - 0x55], al
mov dword [ebp - 0x64], 0xba66e388
jmp 0x41277c
mov al, byte [ebp - 0x55]
and al, 1
mov byte [ebp - 0x11], al
mov dword [ebp - 0x64], 0x598712e0
jmp 0x41277c
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042e880
mov eax, dword [ebp - 0x74]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x64], 0xf7b1a92b
jmp 0x41277c
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x64], 0xec0c5f92
jmp 0x41277c
mov eax, dword [ebp - 0x34]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x55], 0
mov dword [ebp - 0x64], 0xca125a2
jmp 0x41277c
mov eax, dword [ebp - 0x4c]
mov byte [eax], 0
mov dword [ebp - 0x64], 0xddb01bd1
jmp 0x41277c
mov dword [ebp - 0x64], 0x7fd8de91
jmp 0x41277c
mov dword [ebp - 0x64], 0x6e66eec8
jmp 0x41277c
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x64], 0x686ef283
jmp 0x41277c
mov dword [ebp - 0x64], 0xb49c7842
jmp 0x41277c
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x64], 0x44db6a65
jmp 0x4118b6