Function at 0x406060
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x5c
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x5c], eax
mov eax, dword [0x431080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x58], 0x505a2a6b
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x64], eax
sub eax, 0x8467e3f4
je 0x406b45
jmp 0x40609c
mov eax, dword [ebp - 0x64]
sub eax, 0x848764e3
je 0x406945
jmp 0x4060af
mov eax, dword [ebp - 0x64]
sub eax, 0x89c11a80
je 0x4068b0
jmp 0x4060c2
mov eax, dword [ebp - 0x64]
sub eax, 0x9599f8d3
je 0x40648e
jmp 0x4060d5
mov eax, dword [ebp - 0x64]
sub eax, 0x96f63c10
je 0x406c14
jmp 0x4060e8
mov eax, dword [ebp - 0x64]
sub eax, 0x9fc4a374
je 0x4066ee
jmp 0x4060fb
mov eax, dword [ebp - 0x64]
sub eax, 0xb03beb26
je 0x4065ec
jmp 0x40610e
mov eax, dword [ebp - 0x64]
sub eax, 0xb569e5df
je 0x406ce7
jmp 0x406121
mov eax, dword [ebp - 0x64]
sub eax, 0xb580a222
je 0x4066dc
jmp 0x406134
mov eax, dword [ebp - 0x64]
sub eax, 0xc5ef924b
je 0x406c00
jmp 0x406147
mov eax, dword [ebp - 0x64]
sub eax, 0xcff8519f
je 0x4069ee
jmp 0x40615a
mov eax, dword [ebp - 0x64]
sub eax, 0xd3bec05d
je 0x406df5
jmp 0x40616d
mov eax, dword [ebp - 0x64]
sub eax, 0xd5d225e2
je 0x406864
jmp 0x406180
mov eax, dword [ebp - 0x64]
sub eax, 0xda9403ff
je 0x406c62
jmp 0x406193
mov eax, dword [ebp - 0x64]
sub eax, 0xdebcd029
je 0x4068c8
jmp 0x4061a6
mov eax, dword [ebp - 0x64]
sub eax, 0xe97fab62
je 0x406b93
jmp 0x4061b9
mov eax, dword [ebp - 0x64]
sub eax, 0xeb4ed392
je 0x4066d0
jmp 0x4061cc
mov eax, dword [ebp - 0x64]
sub eax, 0xeb60706e
je 0x4067bc
jmp 0x4061df
mov eax, dword [ebp - 0x64]
sub eax, 0xf13b19a0
je 0x406e60
jmp 0x4061f2
mov eax, dword [ebp - 0x64]
sub eax, 0xf41f2a05
je 0x406816
jmp 0x406205
mov eax, dword [ebp - 0x64]
sub eax, 0xf66c1787
je 0x40680a
jmp 0x406218
mov eax, dword [ebp - 0x64]
sub eax, 0xf6ad5a38
je 0x406d5e
jmp 0x40622b
mov eax, dword [ebp - 0x64]
sub eax, 0xfa218b8e
je 0x406755
jmp 0x40623e
mov eax, dword [ebp - 0x64]
sub eax, 0xfb22eec0
je 0x40664d
jmp 0x406251
mov eax, dword [ebp - 0x64]
sub eax, 0xfbda6be5
je 0x4068bc
jmp 0x406264
mov eax, dword [ebp - 0x64]
sub eax, 0x2486be0
je 0x406d1a
jmp 0x406277
mov eax, dword [ebp - 0x64]
sub eax, 0x4d216ac
je 0x406e23
jmp 0x40628a
mov eax, dword [ebp - 0x64]
sub eax, 0x5ff2d0c
je 0x406a1d
jmp 0x40629d
mov eax, dword [ebp - 0x64]
sub eax, 0x67bab8a
je 0x406776
jmp 0x4062b0
mov eax, dword [ebp - 0x64]
sub eax, 0x72af393
je 0x4066c4
jmp 0x4062c3
mov eax, dword [ebp - 0x64]
sub eax, 0x790460f
je 0x406501
jmp 0x4062d6
mov eax, dword [ebp - 0x64]
sub eax, 0x89f1a08
je 0x4068da
jmp 0x4062e9
mov eax, dword [ebp - 0x64]
sub eax, 0x16b37597
je 0x406bd9
jmp 0x4062fc
mov eax, dword [ebp - 0x64]
sub eax, 0x1f2d6bf0
je 0x406e11
jmp 0x40630f
mov eax, dword [ebp - 0x64]
sub eax, 0x2b8ef853
je 0x406d0e
jmp 0x406322
mov eax, dword [ebp - 0x64]
sub eax, 0x2dc2250b
je 0x406afc
jmp 0x406335
mov eax, dword [ebp - 0x64]
sub eax, 0x31a61d66
je 0x406d72
jmp 0x406348
mov eax, dword [ebp - 0x64]
sub eax, 0x3a57933a
je 0x406a2f
jmp 0x40635b
mov eax, dword [ebp - 0x64]
sub eax, 0x3ca67707
je 0x4069e2
jmp 0x40636e
mov eax, dword [ebp - 0x64]
sub eax, 0x4101e115
je 0x406e6c
jmp 0x406381
mov eax, dword [ebp - 0x64]
sub eax, 0x43dd2a89
je 0x406d48
jmp 0x406394
mov eax, dword [ebp - 0x64]
sub eax, 0x4aeb584e
je 0x406d92
jmp 0x4063a7
mov eax, dword [ebp - 0x64]
sub eax, 0x4b9cbda5
je 0x406607
jmp 0x4063ba
mov eax, dword [ebp - 0x64]
sub eax, 0x505a2a6b
je 0x40646a
jmp 0x4063cd
mov eax, dword [ebp - 0x64]
sub eax, 0x565eb189
je 0x406e05
jmp 0x4063e0
mov eax, dword [ebp - 0x64]
sub eax, 0x578d0549
je 0x406e78
jmp 0x4063f3
mov eax, dword [ebp - 0x64]
sub eax, 0x57d1bd31
je 0x406aa2
jmp 0x406406
mov eax, dword [ebp - 0x64]
sub eax, 0x582843ac
je 0x406af0
jmp 0x406419
mov eax, dword [ebp - 0x64]
sub eax, 0x5c398c9d
je 0x406a02
jmp 0x40642c
mov eax, dword [ebp - 0x64]
sub eax, 0x603f5dd3
je 0x406bf4
jmp 0x40643f
mov eax, dword [ebp - 0x64]
sub eax, 0x6bb919c6
je 0x406d02
jmp 0x406452
mov eax, dword [ebp - 0x64]
sub eax, 0x6d7638a7
je 0x4069c7
jmp 0x406465
jmp 0x406e85
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x58], 0x9599f8d3
jmp 0x406e85
mov ecx, dword [0x432564]
mov eax, dword [0x432560]
mov edx, ecx
sub edx, 0x211e7d2c
sub edx, 1
add edx, 0x211e7d2c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4aeb584e
mov ecx, 0x790460f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x60]
push eax
sub esp, 0xffc
mov edx, esp
mov dword [ebp - 0x38], edx
push eax
mov edx, esp
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x2d], al
mov ecx, dword [0x432564]
mov eax, dword [0x432560]
mov edx, ecx
add edx, 0x1f553d98
sub edx, 1
sub edx, 0x1f553d98
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4aeb584e
mov ecx, 0xb03beb26
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov dl, byte [ebp - 0x2d]
mov eax, 0xb580a222
mov ecx, 0x4b9cbda5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov eax, dword [0x432564]
mov ecx, dword [0x432560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd3bec05d
mov ecx, 0xfb22eec0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov byte [ebp - 0x49], 0
mov ecx, dword [0x432564]
mov eax, dword [0x432560]
mov edx, ecx
add edx, 0x2bbe163d
sub edx, 1
sub edx, 0x2bbe163d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd3bec05d
mov ecx, 0x72af393
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov dword [ebp - 0x58], 0xeb4ed392
jmp 0x406e85
mov dword [ebp - 0x58], 0xf6ad5a38
jmp 0x406e85
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x58], 0x9fc4a374
jmp 0x406e85
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x44]
mov dword [eax], ecx
mov edx, dword [ebp - 0x44]
mov esi, 0xffffffff
mov eax, 0xf41f2a05
mov ecx, 0xfa218b8e
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x49], 0
mov dword [ebp - 0x58], 0x67bab8a
jmp 0x406e85
mov eax, dword [0x432564]
mov ecx, dword [0x432560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x565eb189
mov ecx, 0xeb60706e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov eax, dword [0x432564]
mov ecx, dword [0x432560]
mov edx, eax
sub edx, 0x28295e6f
sub edx, 1
add edx, 0x28295e6f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x565eb189
mov ecx, 0xf66c1787
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov dword [ebp - 0x58], 0xf6ad5a38
jmp 0x406e85
mov eax, dword [0x432564]
mov ecx, dword [0x432560]
mov edx, eax
add edx, 0x9a1fcd38
sub edx, 1
sub edx, 0x9a1fcd38
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1f2d6bf0
mov ecx, 0xd5d225e2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov eax, dword [ebp - 0x40]
mov byte [eax], 0
mov eax, dword [0x432564]
mov ecx, dword [0x432560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1f2d6bf0
mov ecx, 0x89c11a80
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov dword [ebp - 0x58], 0xfbda6be5
jmp 0x406e85
mov dword [ebp - 0x58], 0xdebcd029
jmp 0x406e85
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x58], 0x89f1a08
jmp 0x406e85
mov ecx, dword [0x432564]
mov eax, dword [0x432560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4d216ac
mov ecx, 0x848764e3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x28]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x21], al
mov eax, dword [0x432564]
mov ecx, dword [0x432560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4d216ac
mov ecx, 0x6d7638a7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov dl, byte [ebp - 0x21]
mov eax, 0x3ca67707
mov ecx, 0xcff8519f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov dword [ebp - 0x58], 0x2486be0
jmp 0x406e85
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x58], 0x5c398c9d
jmp 0x406e85
mov edx, dword [ebp - 0x20]
mov eax, 0x2dc2250b
mov ecx, 0x5ff2d0c
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov eax, dword [ebp - 0x40]
mov byte [eax], 1
mov dword [ebp - 0x58], 0x3a57933a
jmp 0x406e85
mov ecx, dword [0x432564]
mov eax, dword [0x432560]
mov edx, ecx
add edx, 0xebaf5261
sub edx, 1
sub edx, 0xebaf5261
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf13b19a0
mov ecx, 0x57d1bd31
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov eax, dword [0x432564]
mov ecx, dword [0x432560]
mov edx, eax
sub edx, 0xbbad6c6e
sub edx, 1
add edx, 0xbbad6c6e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf13b19a0
mov ecx, 0x582843ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov dword [ebp - 0x58], 0x2486be0
jmp 0x406e85
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x44]
mov esi, dword [eax]
mov eax, dword [ebp - 0x3c]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x19], al
mov dword [ebp - 0x58], 0x8467e3f4
jmp 0x406e85
mov eax, dword [0x432564]
mov ecx, dword [0x432560]
mov edx, eax
add edx, 0x2c74c3b2
sub edx, 1
sub edx, 0x2c74c3b2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4101e115
mov ecx, 0xe97fab62
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov eax, dword [0x432564]
mov ecx, dword [0x432560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4101e115
mov ecx, 0x16b37597
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov dl, byte [ebp - 0x19]
mov eax, 0x603f5dd3
mov ecx, 0xc5ef924b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov dword [ebp - 0x58], 0x2486be0
jmp 0x406e85
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x58], 0x96f63c10
jmp 0x406e85
mov eax, dword [0x432564]
mov ecx, dword [0x432560]
mov edx, eax
sub edx, 0x2f47d6a9
sub edx, 1
add edx, 0x2f47d6a9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x578d0549
mov ecx, 0xda9403ff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setne al
and al, 1
mov byte [ebp - 0x12], al
mov ecx, dword [0x432564]
mov eax, dword [0x432560]
mov edx, ecx
sub edx, 0x467b5cd2
sub edx, 1
add edx, 0x467b5cd2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x578d0549
mov ecx, 0xb569e5df
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov dl, byte [ebp - 0x12]
mov eax, 0x2b8ef853
mov ecx, 0x6bb919c6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x406e85
mov dword [ebp - 0x58], 0x2486be0
jmp 0x406e85
mov dword [ebp - 0x58], 0xdebcd029
jmp 0x406e85
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x58], 0x43dd2a89
jmp 0x406e85
mov eax, dword [ebp - 0x40]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x49], al
mov dword [ebp - 0x58], 0xf6ad5a38
jmp 0x406e85
mov al, byte [ebp - 0x49]
and al, 1
mov byte [ebp - 0x11], al
mov dword [ebp - 0x58], 0x31a61d66
jmp 0x406e85
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041aec0
mov eax, dword [ebp - 0x68]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x58], 0x790460f
jmp 0x406e85
mov byte [ebp - 0x49], 0
mov dword [ebp - 0x58], 0xfb22eec0
jmp 0x406e85
mov dword [ebp - 0x58], 0xeb60706e
jmp 0x406e85
mov eax, dword [ebp - 0x40]
mov byte [eax], 0
mov dword [ebp - 0x58], 0xd5d225e2
jmp 0x406e85
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x28]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x58], 0x848764e3
jmp 0x406e85
mov dword [ebp - 0x58], 0x57d1bd31
jmp 0x406e85
mov dword [ebp - 0x58], 0xe97fab62
jmp 0x406e85
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x58], 0xda9403ff
jmp 0x406086