Function at 0x406b80
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x60
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x60], eax
mov eax, dword [0x432080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x56], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x55], al
mov dword [ebp - 0x5c], 0x5fa1df34
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x68], eax
sub eax, 0x81737fb2
je 0x40736f
jmp 0x406bed
mov eax, dword [ebp - 0x68]
sub eax, 0x846309da
je 0x4078fb
jmp 0x406c00
mov eax, dword [ebp - 0x68]
sub eax, 0x8e3c23b6
je 0x407bc4
jmp 0x406c13
mov eax, dword [ebp - 0x68]
sub eax, 0xa0bf6b97
je 0x4077a2
jmp 0x406c26
mov eax, dword [ebp - 0x68]
sub eax, 0xa1857c2e
je 0x407cc6
jmp 0x406c39
mov eax, dword [ebp - 0x68]
sub eax, 0xab359e57
je 0x407727
jmp 0x406c4c
mov eax, dword [ebp - 0x68]
sub eax, 0xb0469087
je 0x407574
jmp 0x406c5f
mov eax, dword [ebp - 0x68]
sub eax, 0xb13a2410
je 0x407c9a
jmp 0x406c72
mov eax, dword [ebp - 0x68]
sub eax, 0xb64d3f04
je 0x4072b6
jmp 0x406c85
mov eax, dword [ebp - 0x68]
sub eax, 0xbb9ac7e6
je 0x407d3b
jmp 0x406c98
mov eax, dword [ebp - 0x68]
sub eax, 0xbc2b0e4e
je 0x407d62
jmp 0x406cab
mov eax, dword [ebp - 0x68]
sub eax, 0xc0ce8fc6
je 0x407d9e
jmp 0x406cbe
mov eax, dword [ebp - 0x68]
sub eax, 0xc41f92be
je 0x407b5b
jmp 0x406cd1
mov eax, dword [ebp - 0x68]
sub eax, 0xc6509160
je 0x40725e
jmp 0x406ce4
mov eax, dword [ebp - 0x68]
sub eax, 0xc6c32799
je 0x407a2e
jmp 0x406cf7
mov eax, dword [ebp - 0x68]
sub eax, 0xc6eb7222
je 0x407580
jmp 0x406d0a
mov eax, dword [ebp - 0x68]
sub eax, 0xd41212ee
je 0x407a84
jmp 0x406d1d
mov eax, dword [ebp - 0x68]
sub eax, 0xd4321429
je 0x4074c5
jmp 0x406d30
mov eax, dword [ebp - 0x68]
sub eax, 0xd57f6f2f
je 0x407aa4
jmp 0x406d43
mov eax, dword [ebp - 0x68]
sub eax, 0xd721ca71
je 0x407bae
jmp 0x406d56
mov eax, dword [ebp - 0x68]
sub eax, 0xd82e0829
je 0x407a90
jmp 0x406d69
mov eax, dword [ebp - 0x68]
sub eax, 0xd8ae0094
je 0x407827
jmp 0x406d7c
mov eax, dword [ebp - 0x68]
sub eax, 0xe6611ff6
je 0x4077bc
jmp 0x406d8f
mov eax, dword [ebp - 0x68]
sub eax, 0xea7f1df0
je 0x4072fc
jmp 0x406da2
mov eax, dword [ebp - 0x68]
sub eax, 0xea8f051c
je 0x407cd8
jmp 0x406db5
mov eax, dword [ebp - 0x68]
sub eax, 0xeeae6074
je 0x40715c
jmp 0x406dc8
mov eax, dword [ebp - 0x68]
sub eax, 0xf7249b0a
je 0x407c2f
jmp 0x406ddb
mov eax, dword [ebp - 0x68]
sub eax, 0xf99ad493
je 0x407967
jmp 0x406dee
mov eax, dword [ebp - 0x68]
sub eax, 0xfd6d9179
je 0x40737b
jmp 0x406e01
mov eax, dword [ebp - 0x68]
sub eax, 0xff20125a
je 0x407d53
jmp 0x406e14
mov eax, dword [ebp - 0x68]
sub eax, 0x675f1ab
je 0x40767c
jmp 0x406e27
mov eax, dword [ebp - 0x68]
sub eax, 0x741dbc8
je 0x407b15
jmp 0x406e3a
mov eax, dword [ebp - 0x68]
sub eax, 0x882635f
je 0x407d6e
jmp 0x406e4d
mov eax, dword [ebp - 0x68]
sub eax, 0x10dcbf97
je 0x407ac3
jmp 0x406e60
mov eax, dword [ebp - 0x68]
sub eax, 0x1bc3a9db
je 0x4079da
jmp 0x406e73
mov eax, dword [ebp - 0x68]
sub eax, 0x1ddc2cc3
je 0x407d92
jmp 0x406e86
mov eax, dword [ebp - 0x68]
sub eax, 0x2332e071
je 0x407402
jmp 0x406e99
mov eax, dword [ebp - 0x68]
sub eax, 0x27cd694b
je 0x407592
jmp 0x406eac
mov eax, dword [ebp - 0x68]
sub eax, 0x295f831b
je 0x4078b5
jmp 0x406ebf
mov eax, dword [ebp - 0x68]
sub eax, 0x2ba42fcb
je 0x4076bc
jmp 0x406ed2
mov eax, dword [ebp - 0x68]
sub eax, 0x2c7f2c06
je 0x407796
jmp 0x406ee5
mov eax, dword [ebp - 0x68]
sub eax, 0x34ce28a1
je 0x40794f
jmp 0x406ef8
mov eax, dword [ebp - 0x68]
sub eax, 0x397198dd
je 0x407cba
jmp 0x406f0b
mov eax, dword [ebp - 0x68]
sub eax, 0x3dae1e57
je 0x407b84
jmp 0x406f1e
mov eax, dword [ebp - 0x68]
sub eax, 0x40900d74
je 0x4070d8
jmp 0x406f31
mov eax, dword [ebp - 0x68]
sub eax, 0x465d5aea
je 0x4071f3
jmp 0x406f44
mov eax, dword [ebp - 0x68]
sub eax, 0x479976f9
je 0x40738f
jmp 0x406f57
mov eax, dword [ebp - 0x68]
sub eax, 0x4875af31
je 0x4074aa
jmp 0x406f6a
mov eax, dword [ebp - 0x68]
sub eax, 0x4ae18c0f
je 0x40752e
jmp 0x406f7d
mov eax, dword [ebp - 0x68]
sub eax, 0x4d394173
je 0x4074e8
jmp 0x406f90
mov eax, dword [ebp - 0x68]
sub eax, 0x525c9a2a
je 0x407150
jmp 0x406fa3
mov eax, dword [ebp - 0x68]
sub eax, 0x54060ffe
je 0x407b67
jmp 0x406fb6
mov eax, dword [ebp - 0x68]
sub eax, 0x54ae81e7
je 0x407d47
jmp 0x406fc9
mov eax, dword [ebp - 0x68]
sub eax, 0x57a158b6
je 0x407d80
jmp 0x406fdc
mov eax, dword [ebp - 0x68]
sub eax, 0x581bcfb1
je 0x4072aa
jmp 0x406fef
mov eax, dword [ebp - 0x68]
sub eax, 0x5ea39693
je 0x407ce4
jmp 0x407002
mov eax, dword [ebp - 0x68]
sub eax, 0x5fa1df34
je 0x4070b2
jmp 0x407015
mov eax, dword [ebp - 0x68]
sub eax, 0x641a3fcd
je 0x4071d4
jmp 0x407028
mov eax, dword [ebp - 0x68]
sub eax, 0x64443f9a
je 0x40789a
jmp 0x40703b
mov eax, dword [ebp - 0x68]
sub eax, 0x6a665191
je 0x407670
jmp 0x40704e
mov eax, dword [ebp - 0x68]
sub eax, 0x73277202
je 0x407a3a
jmp 0x407061
mov eax, dword [ebp - 0x68]
sub eax, 0x738f1129
je 0x40795b
jmp 0x407074
mov eax, dword [ebp - 0x68]
sub eax, 0x7d2d3ce4
je 0x407605
jmp 0x407087
mov eax, dword [ebp - 0x68]
sub eax, 0x7d704a7f
je 0x407acf
jmp 0x40709a
mov eax, dword [ebp - 0x68]
sub eax, 0x7f83e8f3
je 0x40777b
mov al, byte [ebp - 0x56]
mov cl, byte [ebp - 0x55]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x397198dd
mov ecx, 0x40900d74
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
mov edx, eax
add edx, 0xd16e33f6
sub edx, 1
sub edx, 0xd16e33f6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x397198dd
mov ecx, 0x525c9a2a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov dword [ebp - 0x5c], 0xeeae6074
jmp 0x407da5
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x64]
push eax
sub esp, 0xffc
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x50]
mov dword [eax], edx
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov dword [ebp - 0x5c], 0x641a3fcd
jmp 0x407da5
mov edx, dword [ebp - 0x48]
mov esi, 0xffffffff
mov eax, 0xfd6d9179
mov ecx, 0x465d5aea
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa1857c2e
mov ecx, 0xc6509160
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov eax, dword [ebp - 0x54]
mov byte [eax], 0
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa1857c2e
mov ecx, 0x581bcfb1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov dword [ebp - 0x5c], 0xb64d3f04
jmp 0x407da5
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xea8f051c
mov ecx, 0xea7f1df0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
add edx, 0x7946533d
sub edx, 1
sub edx, 0x7946533d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xea8f051c
mov ecx, 0x81737fb2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov dword [ebp - 0x5c], 0xd721ca71
jmp 0x407da5
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x5c], 0x479976f9
jmp 0x407da5
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
add edx, 0x722fce86
sub edx, 1
sub edx, 0x722fce86
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5ea39693
mov ecx, 0x2332e071
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov eax, dword [ebp - 0x30]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x44]
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x29], al
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
mov edx, eax
sub edx, 0x176aebbf
sub edx, 1
add edx, 0x176aebbf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5ea39693
mov ecx, 0x4875af31
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov dl, byte [ebp - 0x29]
mov eax, 0xc6eb7222
mov ecx, 0xd4321429
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x54]
mov byte [eax], 0
mov dword [ebp - 0x5c], 0x4d394173
jmp 0x407da5
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbb9ac7e6
mov ecx, 0x4ae18c0f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbb9ac7e6
mov ecx, 0xb0469087
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov dword [ebp - 0x5c], 0xd721ca71
jmp 0x407da5
mov eax, dword [ebp - 0x40]
mov byte [eax], 0
mov dword [ebp - 0x5c], 0x27cd694b
jmp 0x407da5
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
add edx, 0x5fd7586e
sub edx, 1
sub edx, 0x5fd7586e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x54ae81e7
mov ecx, 0x7d2d3ce4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x54ae81e7
mov ecx, 0x6a665191
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov dword [ebp - 0x5c], 0x675f1ab
jmp 0x407da5
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov eax, dword [ebp - 0x34]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x5c], 0x2ba42fcb
jmp 0x407da5
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xff20125a
mov ecx, 0xab359e57
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov eax, dword [ebp - 0x28]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x22], al
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xff20125a
mov ecx, 0x7f83e8f3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov dword [ebp - 0x5c], 0x54060ffe
jmp 0x407da5
mov eax, dword [ebp - 0x34]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x21], al
mov dword [ebp - 0x5c], 0xe6611ff6
jmp 0x407da5
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbc2b0e4e
mov ecx, 0xd8ae0094
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
add edx, 0x7ec79b8a
sub edx, 1
sub edx, 0x7ec79b8a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbc2b0e4e
mov ecx, 0x64443f9a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov dl, byte [ebp - 0x21]
mov eax, 0xf99ad493
mov ecx, 0x295f831b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x882635f
mov ecx, 0x846309da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov eax, dword [ebp - 0x40]
mov byte [eax], 1
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
mov edx, eax
sub edx, 0x4996f8cc
sub edx, 1
add edx, 0x4996f8cc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x882635f
mov ecx, 0x34ce28a1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov dword [ebp - 0x5c], 0x738f1129
jmp 0x407da5
mov dword [ebp - 0x5c], 0x54060ffe
jmp 0x407da5
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
sub edx, 0x1a6b3e84
sub edx, 1
add edx, 0x1a6b3e84
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x57a158b6
mov ecx, 0x1bc3a9db
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x57a158b6
mov ecx, 0xc6c32799
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov dword [ebp - 0x5c], 0x73277202
jmp 0x407da5
mov eax, dword [ebp - 0x44]
mov esi, dword [eax]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, eax
mov eax, 0xd41212ee
mov ecx, 0xd82e0829
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov dword [ebp - 0x5c], 0x54060ffe
jmp 0x407da5
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x5c], 0xd57f6f2f
jmp 0x407da5
mov eax, dword [ebp - 0x34]
mov esi, dword [eax]
mov edx, dword [ebp - 0x18]
mov eax, 0x7d704a7f
mov ecx, 0x10dcbf97
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov dword [ebp - 0x5c], 0x54060ffe
jmp 0x407da5
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1ddc2cc3
mov ecx, 0x741dbc8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1ddc2cc3
mov ecx, 0xc41f92be
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov dword [ebp - 0x5c], 0x675f1ab
jmp 0x407da5
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x5c], 0x3dae1e57
jmp 0x407da5
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x40]
mov cl, byte [eax]
mov eax, dword [ebp - 0x54]
and cl, 1
mov byte [eax], cl
mov dword [ebp - 0x5c], 0xd721ca71
jmp 0x407da5
mov eax, dword [ebp - 0x54]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x11], al
mov dword [ebp - 0x5c], 0x8e3c23b6
jmp 0x407da5
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc0ce8fc6
mov ecx, 0xf7249b0a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc0ce8fc6
mov ecx, 0xb13a2410
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407da5
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041bf80
mov eax, dword [ebp - 0x6c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x5c], 0x40900d74
jmp 0x407da5
mov eax, dword [ebp - 0x54]
mov byte [eax], 0
mov dword [ebp - 0x5c], 0xc6509160
jmp 0x407da5
mov dword [ebp - 0x5c], 0xea7f1df0
jmp 0x407da5
mov eax, dword [ebp - 0x30]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x44]
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x5c], 0x2332e071
jmp 0x407da5
mov dword [ebp - 0x5c], 0x4ae18c0f
jmp 0x407da5
mov dword [ebp - 0x5c], 0x7d2d3ce4
jmp 0x407da5
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5c], 0xab359e57
jmp 0x407da5
mov dword [ebp - 0x5c], 0xd8ae0094
jmp 0x407da5
mov eax, dword [ebp - 0x40]
mov byte [eax], 1
mov dword [ebp - 0x5c], 0x846309da
jmp 0x407da5
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x5c], 0x1bc3a9db
jmp 0x407da5
mov dword [ebp - 0x5c], 0x741dbc8
jmp 0x407da5
mov dword [ebp - 0x5c], 0xf7249b0a
jmp 0x406bd7