Function at 0x401010
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x58
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x58], eax
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x54], 0xc3648457
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x60], eax
sub eax, 0x813fc0a8
je 0x4015fc
jmp 0x40104c
mov eax, dword [ebp - 0x60]
sub eax, 0x85e56817
je 0x401809
jmp 0x40105f
mov eax, dword [ebp - 0x60]
sub eax, 0x872ac6d0
je 0x401654
jmp 0x401072
mov eax, dword [ebp - 0x60]
sub eax, 0x88774379
je 0x40170b
jmp 0x401085
mov eax, dword [ebp - 0x60]
sub eax, 0x8925c171
je 0x401608
jmp 0x401098
mov eax, dword [ebp - 0x60]
sub eax, 0x90b35f14
je 0x40190d
jmp 0x4010ab
mov eax, dword [ebp - 0x60]
sub eax, 0x9642ff7d
je 0x4014d5
jmp 0x4010be
mov eax, dword [ebp - 0x60]
sub eax, 0x96eb5064
je 0x401e58
jmp 0x4010d1
mov eax, dword [ebp - 0x60]
sub eax, 0x98994fc9
je 0x401e3a
jmp 0x4010e4
mov eax, dword [ebp - 0x60]
sub eax, 0x98f59899
je 0x401db0
jmp 0x4010f7
mov eax, dword [ebp - 0x60]
sub eax, 0x993bb3fa
je 0x401ab4
jmp 0x40110a
mov eax, dword [ebp - 0x60]
sub eax, 0x998d23d7
je 0x4014f1
jmp 0x40111d
mov eax, dword [ebp - 0x60]
sub eax, 0xa09bc241
je 0x401717
jmp 0x401130
mov eax, dword [ebp - 0x60]
sub eax, 0xa2f07a8e
je 0x4018ad
jmp 0x401143
mov eax, dword [ebp - 0x60]
sub eax, 0xa5449fc4
je 0x401c88
jmp 0x401156
mov eax, dword [ebp - 0x60]
sub eax, 0xa82fe156
je 0x40153f
jmp 0x401169
mov eax, dword [ebp - 0x60]
sub eax, 0xaa4a79cc
je 0x401bc3
jmp 0x40117c
mov eax, dword [ebp - 0x60]
sub eax, 0xabaa1944
je 0x401de4
jmp 0x40118f
mov eax, dword [ebp - 0x60]
sub eax, 0xae69fbbc
je 0x401e7c
jmp 0x4011a2
mov eax, dword [ebp - 0x60]
sub eax, 0xae7b5583
je 0x401e8b
jmp 0x4011b5
mov eax, dword [ebp - 0x60]
sub eax, 0xaf05baab
je 0x4017fd
jmp 0x4011c8
mov eax, dword [ebp - 0x60]
sub eax, 0xb69ebbd1
je 0x40169a
jmp 0x4011db
mov eax, dword [ebp - 0x60]
sub eax, 0xb6c5396f
je 0x401892
jmp 0x4011ee
mov eax, dword [ebp - 0x60]
sub eax, 0xbe86bb10
je 0x40195b
jmp 0x401201
mov eax, dword [ebp - 0x60]
sub eax, 0xc3648457
je 0x40141a
jmp 0x401214
mov eax, dword [ebp - 0x60]
sub eax, 0xc55c0215
je 0x401dc4
jmp 0x401227
mov eax, dword [ebp - 0x60]
sub eax, 0xc5e8fe69
je 0x4014e5
jmp 0x40123a
mov eax, dword [ebp - 0x60]
sub eax, 0xc8cd8639
je 0x401e4c
jmp 0x40124d
mov eax, dword [ebp - 0x60]
sub eax, 0xcc68406c
je 0x40146c
jmp 0x401260
mov eax, dword [ebp - 0x60]
sub eax, 0xe0c41dc8
je 0x401bcf
jmp 0x401273
mov eax, dword [ebp - 0x60]
sub eax, 0xe2eb2b48
je 0x401878
jmp 0x401286
mov eax, dword [ebp - 0x60]
sub eax, 0xe6f1b0ca
je 0x4019cb
jmp 0x401299
mov eax, dword [ebp - 0x60]
sub eax, 0x700764
je 0x4018bf
jmp 0x4012ac
mov eax, dword [ebp - 0x60]
sub eax, 0x573cf15
je 0x401c3a
jmp 0x4012bf
mov eax, dword [ebp - 0x60]
sub eax, 0x650883d
je 0x401627
jmp 0x4012d2
mov eax, dword [ebp - 0x60]
sub eax, 0x70e4853
je 0x401e64
jmp 0x4012e5
mov eax, dword [ebp - 0x60]
sub eax, 0x99f902a
je 0x401a8c
jmp 0x4012f8
mov eax, dword [ebp - 0x60]
sub eax, 0x15ac3b70
je 0x401e70
jmp 0x40130b
mov eax, dword [ebp - 0x60]
sub eax, 0x1d8d34d9
je 0x40186c
jmp 0x40131e
mov eax, dword [ebp - 0x60]
sub eax, 0x1f1efc8f
je 0x401c94
jmp 0x401331
mov eax, dword [ebp - 0x60]
sub eax, 0x2094806a
je 0x401bb7
jmp 0x401344
mov eax, dword [ebp - 0x60]
sub eax, 0x2590f641
je 0x40178a
jmp 0x401357
mov eax, dword [ebp - 0x60]
sub eax, 0x27c9c985
je 0x401ad1
jmp 0x40136a
mov eax, dword [ebp - 0x60]
sub eax, 0x2e0bc3e8
je 0x401981
jmp 0x40137d
mov eax, dword [ebp - 0x60]
sub eax, 0x384efec7
je 0x401da4
jmp 0x401390
mov eax, dword [ebp - 0x60]
sub eax, 0x476b2e65
je 0x401a3e
jmp 0x4013a3
mov eax, dword [ebp - 0x60]
sub eax, 0x4dae4998
je 0x401648
jmp 0x4013b6
mov eax, dword [ebp - 0x60]
sub eax, 0x53dcefc3
je 0x401d07
jmp 0x4013c9
mov eax, dword [ebp - 0x60]
sub eax, 0x6178ca71
je 0x401967
jmp 0x4013dc
mov eax, dword [ebp - 0x60]
sub eax, 0x72508f08
je 0x401a98
jmp 0x4013ef
mov eax, dword [ebp - 0x60]
sub eax, 0x79adfee9
je 0x401b44
jmp 0x401402
mov eax, dword [ebp - 0x60]
sub eax, 0x7ae297b6
je 0x401851
jmp 0x401415
jmp 0x401ebc
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x5c]
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
sub esp, 0xffc
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], edx
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov dword [ebp - 0x54], 0xcc68406c
jmp 0x401ebc
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x44]
mov dword [eax], ecx
mov edx, dword [ebp - 0x44]
mov esi, 0xffffffff
mov eax, 0x998d23d7
mov ecx, 0x9642ff7d
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov byte [ebp - 0x4d], 0
mov dword [ebp - 0x54], 0xc5e8fe69
jmp 0x401ebc
mov dword [ebp - 0x54], 0x98f59899
jmp 0x401ebc
mov eax, dword [0x421394]
mov ecx, dword [0x421390]
mov edx, eax
add edx, 0x44e86751
sub edx, 1
sub edx, 0x44e86751
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xabaa1944
mov ecx, 0xa82fe156
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x40]
mov dword [eax], ecx
mov ecx, dword [0x421394]
mov eax, dword [0x421390]
mov edx, ecx
sub edx, 0x28877576
sub edx, 1
add edx, 0x28877576
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xabaa1944
mov ecx, 0x813fc0a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov dword [ebp - 0x54], 0x8925c171
jmp 0x401ebc
mov edx, dword [ebp - 0x40]
mov esi, 0xffffffff
mov eax, 0x872ac6d0
mov ecx, 0x650883d
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x4d], 0
mov dword [ebp - 0x54], 0x4dae4998
jmp 0x401ebc
mov dword [ebp - 0x54], 0x98f59899
jmp 0x401ebc
mov eax, dword [0x421394]
mov ecx, dword [0x421390]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x98994fc9
mov ecx, 0xb69ebbd1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov eax, dword [ebp - 0x3c]
mov byte [eax], 0
mov ecx, dword [0x421394]
mov eax, dword [0x421390]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x98994fc9
mov ecx, 0x88774379
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov dword [ebp - 0x54], 0xa09bc241
jmp 0x401ebc
mov ecx, dword [0x421394]
mov eax, dword [0x421390]
mov edx, ecx
sub edx, 0xc584baf3
sub edx, 1
add edx, 0xc584baf3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc8cd8639
mov ecx, 0x2590f641
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov ecx, dword [0x421394]
mov eax, dword [0x421390]
mov edx, ecx
sub edx, 0xc7d1026a
sub edx, 1
add edx, 0xc7d1026a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc8cd8639
mov ecx, 0xaf05baab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov dword [ebp - 0x54], 0x85e56817
jmp 0x401ebc
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
mov eax, dword [ebp - 0x30]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x2a], al
mov dword [ebp - 0x54], 0x7ae297b6
jmp 0x401ebc
mov dl, byte [ebp - 0x2a]
mov eax, 0x1d8d34d9
mov ecx, 0xe2eb2b48
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov dword [ebp - 0x54], 0xe0c41dc8
jmp 0x401ebc
mov eax, dword [ebp - 0x30]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x29], al
mov dword [ebp - 0x54], 0xb6c5396f
jmp 0x401ebc
mov dl, byte [ebp - 0x29]
mov eax, 0x6178ca71
mov ecx, 0xa2f07a8e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov eax, dword [ebp - 0x3c]
mov byte [eax], 1
mov dword [ebp - 0x54], 0x700764
jmp 0x401ebc
mov eax, dword [0x421394]
mov ecx, dword [0x421390]
mov edx, eax
add edx, 0x7e555e08
sub edx, 1
sub edx, 0x7e555e08
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x96eb5064
mov ecx, 0x90b35f14
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov eax, dword [0x421394]
mov ecx, dword [0x421390]
mov edx, eax
sub edx, 0xd054fc4b
sub edx, 1
add edx, 0xd054fc4b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x96eb5064
mov ecx, 0xbe86bb10
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov dword [ebp - 0x54], 0xe0c41dc8
jmp 0x401ebc
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x54], 0x2e0bc3e8
jmp 0x401ebc
mov eax, dword [ebp - 0x40]
mov esi, dword [eax]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, eax
mov eax, 0xe6f1b0ca
mov ecx, 0x72508f08
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov ecx, dword [0x421394]
mov eax, dword [0x421390]
mov edx, ecx
sub edx, 0x98508fb6
sub edx, 1
add edx, 0x98508fb6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x70e4853
mov ecx, 0x476b2e65
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov eax, dword [0x421394]
mov ecx, dword [0x421390]
mov edx, eax
add edx, 0x575b059b
sub edx, 1
sub edx, 0x575b059b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x70e4853
mov ecx, 0x99f902a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov dword [ebp - 0x54], 0xe0c41dc8
jmp 0x401ebc
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x54], 0x993bb3fa
jmp 0x401ebc
mov edx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
mov eax, 0xaa4a79cc
mov ecx, 0x27c9c985
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov ecx, dword [0x421394]
mov eax, dword [0x421390]
mov edx, ecx
sub edx, 0x4d6cf1ab
sub edx, 1
add edx, 0x4d6cf1ab
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x15ac3b70
mov ecx, 0x79adfee9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov ecx, dword [0x421394]
mov eax, dword [0x421390]
mov edx, ecx
sub edx, 0xd098e170
sub edx, 1
add edx, 0xd098e170
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x15ac3b70
mov ecx, 0x2094806a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov dword [ebp - 0x54], 0xe0c41dc8
jmp 0x401ebc
mov dword [ebp - 0x54], 0x85e56817
jmp 0x401ebc
mov ecx, dword [0x421394]
mov eax, dword [0x421390]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xae69fbbc
mov ecx, 0x573cf15
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [0x421394]
mov ecx, dword [0x421390]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xae69fbbc
mov ecx, 0xa5449fc4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov dword [ebp - 0x54], 0x1f1efc8f
jmp 0x401ebc
mov ecx, dword [0x421394]
mov eax, dword [0x421390]
mov edx, ecx
add edx, 0xa93f49f4
sub edx, 1
sub edx, 0xa93f49f4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xae7b5583
mov ecx, 0x53dcefc3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov eax, dword [ebp - 0x18]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x3c]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x4d], al
mov ecx, dword [0x421394]
mov eax, dword [0x421390]
mov edx, ecx
add edx, 0x8a302349
sub edx, 1
sub edx, 0x8a302349
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xae7b5583
mov ecx, 0x384efec7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x54], eax
jmp 0x401ebc
mov dword [ebp - 0x54], 0x98f59899
jmp 0x401ebc
mov al, byte [ebp - 0x4d]
and al, 1
mov byte [ebp - 0x11], al
mov dword [ebp - 0x54], 0xc55c0215
jmp 0x401ebc
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040bb90
mov eax, dword [ebp - 0x64]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x40]
mov dword [eax], ecx
mov dword [ebp - 0x54], 0xa82fe156
jmp 0x401ebc
mov eax, dword [ebp - 0x3c]
mov byte [eax], 0
mov dword [ebp - 0x54], 0xb69ebbd1
jmp 0x401ebc
mov dword [ebp - 0x54], 0x2590f641
jmp 0x401ebc
mov dword [ebp - 0x54], 0x90b35f14
jmp 0x401ebc
mov dword [ebp - 0x54], 0x476b2e65
jmp 0x401ebc
mov dword [ebp - 0x54], 0x79adfee9
jmp 0x401ebc
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x54], 0x573cf15
jmp 0x401ebc
mov eax, dword [ebp - 0x18]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x3c]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x4d], al
mov dword [ebp - 0x54], 0x53dcefc3
jmp 0x401036