Function at 0x406de0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x106c
call fcn.0041f4e0
mov eax, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov eax, dword [0x435080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1048], eax
mov eax, dword [ebp - 0x1048]
mov dword [ebp - 0x1040], eax
mov dword [ebp - 0x1054], 0x83ea8c34
mov eax, dword [ebp - 0x1054]
mov dword [ebp - 0x1058], eax
sub eax, 0x83ea8c34
je 0x4072e0
jmp 0x406e79
mov eax, dword [ebp - 0x1058]
sub eax, 0x88d4d680
je 0x407b8b
jmp 0x406e8f
mov eax, dword [ebp - 0x1058]
sub eax, 0x9010b3a7
je 0x407994
jmp 0x406ea5
mov eax, dword [ebp - 0x1058]
sub eax, 0x916c093f
je 0x407c10
jmp 0x406ebb
mov eax, dword [ebp - 0x1058]
sub eax, 0x9260f556
je 0x407ac5
jmp 0x406ed1
mov eax, dword [ebp - 0x1058]
sub eax, 0xa6b83553
je 0x407c01
jmp 0x406ee7
mov eax, dword [ebp - 0x1058]
sub eax, 0xa995cc1b
je 0x407a1a
jmp 0x406efd
mov eax, dword [ebp - 0x1058]
sub eax, 0xb5e236b0
je 0x407786
jmp 0x406f13
mov eax, dword [ebp - 0x1058]
sub eax, 0xb88c1110
je 0x40733e
jmp 0x406f29
mov eax, dword [ebp - 0x1058]
sub eax, 0xc54df148
je 0x40791e
jmp 0x406f3f
mov eax, dword [ebp - 0x1058]
sub eax, 0xcde3fbfa
je 0x40779c
jmp 0x406f55
mov eax, dword [ebp - 0x1058]
sub eax, 0xce5ee966
je 0x407a4f
jmp 0x406f6b
mov eax, dword [ebp - 0x1058]
sub eax, 0xd16075b7
je 0x407c6c
jmp 0x406f81
mov eax, dword [ebp - 0x1058]
sub eax, 0xd3518f0c
je 0x407c4f
jmp 0x406f97
mov eax, dword [ebp - 0x1058]
sub eax, 0xd5a1f5b0
je 0x407a29
jmp 0x406fad
mov eax, dword [ebp - 0x1058]
sub eax, 0xd867a868
je 0x407d48
jmp 0x406fc3
mov eax, dword [ebp - 0x1058]
sub eax, 0xdd1925d6
je 0x407598
jmp 0x406fd9
mov eax, dword [ebp - 0x1058]
sub eax, 0xdd24616a
je 0x4075db
jmp 0x406fef
mov eax, dword [ebp - 0x1058]
sub eax, 0xe0b2ac43
je 0x407b0e
jmp 0x407005
mov eax, dword [ebp - 0x1058]
sub eax, 0xe251c2c3
je 0x407cb5
jmp 0x40701b
mov eax, dword [ebp - 0x1058]
sub eax, 0xefcceb2d
je 0x407d39
jmp 0x407031
mov eax, dword [ebp - 0x1058]
sub eax, 0xf30bdad0
je 0x407328
jmp 0x407047
mov eax, dword [ebp - 0x1058]
sub eax, 0xfbbfaab7
je 0x407476
jmp 0x40705d
mov eax, dword [ebp - 0x1058]
sub eax, 0x3686ca
je 0x407b1d
jmp 0x407073
mov eax, dword [ebp - 0x1058]
sub eax, 0x877b5fd
je 0x40773b
jmp 0x407089
mov eax, dword [ebp - 0x1058]
sub eax, 0x9cc8ed7
je 0x40790f
jmp 0x40709f
mov eax, dword [ebp - 0x1058]
sub eax, 0xd250bdf
je 0x4075cc
jmp 0x4070b5
mov eax, dword [ebp - 0x1058]
sub eax, 0x12a2c2f6
je 0x407888
jmp 0x4070cb
mov eax, dword [ebp - 0x1058]
sub eax, 0x22f5cf83
je 0x40749b
jmp 0x4070e1
mov eax, dword [ebp - 0x1058]
sub eax, 0x30b0bbb2
je 0x407e1f
jmp 0x4070f7
mov eax, dword [ebp - 0x1058]
sub eax, 0x3897a02d
je 0x407e2e
jmp 0x40710d
mov eax, dword [ebp - 0x1058]
sub eax, 0x38f21098
je 0x407812
jmp 0x407123
mov eax, dword [ebp - 0x1058]
sub eax, 0x39b82b97
je 0x407e10
jmp 0x407139
mov eax, dword [ebp - 0x1058]
sub eax, 0x3a5a7830
je 0x407e3d
jmp 0x40714f
mov eax, dword [ebp - 0x1058]
sub eax, 0x3ee7737e
je 0x4078ee
jmp 0x407165
mov eax, dword [ebp - 0x1058]
sub eax, 0x41aee52c
je 0x40734d
jmp 0x40717b
mov eax, dword [ebp - 0x1058]
sub eax, 0x46d888e3
je 0x407897
jmp 0x407191
mov eax, dword [ebp - 0x1058]
sub eax, 0x480ad5b7
je 0x40774a
jmp 0x4071a7
mov eax, dword [ebp - 0x1058]
sub eax, 0x49ecdf4d
je 0x407765
jmp 0x4071bd
mov eax, dword [ebp - 0x1058]
sub eax, 0x4a14a82a
je 0x407509
jmp 0x4071d3
mov eax, dword [ebp - 0x1058]
sub eax, 0x5311804d
je 0x4073c3
jmp 0x4071e9
mov eax, dword [ebp - 0x1058]
sub eax, 0x5442cf71
je 0x4075b6
jmp 0x4071ff
mov eax, dword [ebp - 0x1058]
sub eax, 0x59f5c1a9
je 0x407657
jmp 0x407215
mov eax, dword [ebp - 0x1058]
sub eax, 0x602ee6c1
je 0x407dca
jmp 0x40722b
mov eax, dword [ebp - 0x1058]
sub eax, 0x674c6d15
je 0x407e01
jmp 0x407241
mov eax, dword [ebp - 0x1058]
sub eax, 0x6d7016a9
je 0x407602
jmp 0x407257
mov eax, dword [ebp - 0x1058]
sub eax, 0x6e848eb6
je 0x407d74
jmp 0x40726d
mov eax, dword [ebp - 0x1058]
sub eax, 0x71756df5
je 0x4075a7
jmp 0x407283
mov eax, dword [ebp - 0x1058]
sub eax, 0x73bea277
je 0x407df2
jmp 0x407299
mov eax, dword [ebp - 0x1058]
sub eax, 0x76c4aae2
je 0x407307
jmp 0x4072af
mov eax, dword [ebp - 0x1058]
sub eax, 0x77fc1d53
je 0x4076cd
jmp 0x4072c5
mov eax, dword [ebp - 0x1058]
sub eax, 0x7b48495a
je 0x407467
jmp 0x4072db
jmp 0x407e47
mov eax, dword [ebp - 0x1040]
mov ecx, 0xffffffff
cmp eax, ecx
sete al
and al, 1
mov byte [ebp - 0x1039], al
mov dword [ebp - 0x1054], 0x76c4aae2
jmp 0x407e47
mov dl, byte [ebp - 0x1039]
mov eax, 0x41aee52c
mov ecx, 0xf30bdad0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov byte [ebp - 0x1041], 0
mov dword [ebp - 0x1054], 0xb88c1110
jmp 0x407e47
mov dword [ebp - 0x1054], 0xd16075b7
jmp 0x407e47
mov ecx, dword [0x4365bc]
mov eax, dword [0x4365b8]
mov edx, ecx
add edx, 0x42ec1977
sub edx, 1
sub edx, 0x42ec1977
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6e848eb6
mov ecx, 0x5311804d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x104c], eax
mov eax, dword [ebp - 0x104c]
mov dword [ebp - 0x1038], eax
mov eax, dword [0x4365bc]
mov ecx, dword [0x4365b8]
mov edx, eax
sub edx, 0x1bcaa431
sub edx, 1
add edx, 0x1bcaa431
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6e848eb6
mov ecx, 0x7b48495a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov dword [ebp - 0x1054], 0xfbbfaab7
jmp 0x407e47
mov edx, dword [ebp - 0x1038]
mov esi, 0xffffffff
mov eax, 0x5442cf71
mov ecx, 0x22f5cf83
cmp edx, esi
cmove eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov ecx, dword [0x4365bc]
mov eax, dword [0x4365b8]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x602ee6c1
mov ecx, 0x4a14a82a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov eax, dword [ebp - 0x1048]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov byte [ebp - 0x1041], 0
mov ecx, dword [0x4365bc]
mov eax, dword [0x4365b8]
mov edx, ecx
add edx, 0x496c2cf6
sub edx, 1
sub edx, 0x496c2cf6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x602ee6c1
mov ecx, 0xdd1925d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov dword [ebp - 0x1054], 0x71756df5
jmp 0x407e47
mov dword [ebp - 0x1054], 0xd16075b7
jmp 0x407e47
mov byte [ebp - 0x104d], 0
mov dword [ebp - 0x1054], 0xd250bdf
jmp 0x407e47
mov dword [ebp - 0x1054], 0xdd24616a
jmp 0x407e47
lea eax, [ebp - 0x1010]
mov dword [ebp - 0x1034], eax
mov eax, dword [ebp - 0x1048]
mov dword [ebp - 0x1030], eax
mov dword [ebp - 0x1054], 0x6d7016a9
jmp 0x407e47
mov ecx, dword [ebp - 0x1034]
mov edx, dword [ebp - 0x1030]
lea eax, [ebp - 0x1018]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
mov edx, eax
mov eax, 0x59f5c1a9
mov ecx, 0x480ad5b7
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov ecx, dword [0x4365bc]
mov eax, dword [0x4365b8]
mov edx, ecx
sub edx, 0x96b7c54a
sub edx, 1
add edx, 0x96b7c54a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x73bea277
mov ecx, 0x77fc1d53
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov ecx, dword [0x4365bc]
mov eax, dword [0x4365b8]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x73bea277
mov ecx, 0x877b5fd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov dword [ebp - 0x1054], 0x916c093f
jmp 0x407e47
mov eax, dword [ebp - 0x1018]
mov dword [ebp - 0x102c], eax
mov dword [ebp - 0x1054], 0x49ecdf4d
jmp 0x407e47
mov edx, dword [ebp - 0x102c]
mov eax, 0x46d888e3
mov ecx, 0xb5e236b0
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov byte [ebp - 0x104d], 1
mov dword [ebp - 0x1054], 0xcde3fbfa
jmp 0x407e47
mov ecx, dword [0x4365bc]
mov eax, dword [0x4365b8]
mov edx, ecx
add edx, 0x3fc74e64
sub edx, 1
sub edx, 0x3fc74e64
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x674c6d15
mov ecx, 0x38f21098
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov ecx, dword [0x4365bc]
mov eax, dword [0x4365b8]
mov edx, ecx
add edx, 0x7ce72b16
sub edx, 1
sub edx, 0x7ce72b16
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x674c6d15
mov ecx, 0x12a2c2f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov dword [ebp - 0x1054], 0x916c093f
jmp 0x407e47
mov ecx, dword [ebp - 0x1018]
lea edx, [ebp - 0x1010]
mov esi, dword [ebp - 0x104c]
lea eax, [ebp - 0x1014]
xor edi, edi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub esp, 0x14
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1025], al
mov dword [ebp - 0x1054], 0x3ee7737e
jmp 0x407e47
mov dl, byte [ebp - 0x1025]
mov eax, 0x9cc8ed7
mov ecx, 0xc54df148
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov dword [ebp - 0x1054], 0x916c093f
jmp 0x407e47
mov ecx, dword [0x4365bc]
mov eax, dword [0x4365b8]
mov edx, ecx
add edx, 0xa97ec723
sub edx, 1
sub edx, 0xa97ec723
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x39b82b97
mov ecx, 0x9010b3a7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov eax, dword [ebp - 0x1014]
mov dword [ebp - 0x1024], eax
mov eax, dword [ebp - 0x1018]
mov dword [ebp - 0x1020], eax
mov ecx, dword [0x4365bc]
mov eax, dword [0x4365b8]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x39b82b97
mov ecx, 0xa995cc1b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov dword [ebp - 0x1054], 0xd5a1f5b0
jmp 0x407e47
mov edx, dword [ebp - 0x1024]
mov esi, dword [ebp - 0x1020]
mov eax, 0x3686ca
mov ecx, 0xce5ee966
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov ecx, dword [0x4365bc]
mov eax, dword [0x4365b8]
mov edx, ecx
sub edx, 0x598b2560
sub edx, 1
add edx, 0x598b2560
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x30b0bbb2
mov ecx, 0x9260f556
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov eax, dword [0x4365bc]
mov ecx, dword [0x4365b8]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x30b0bbb2
mov ecx, 0xe0b2ac43
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov dword [ebp - 0x1054], 0x916c093f
jmp 0x407e47
mov ecx, dword [0x4365bc]
mov eax, dword [0x4365b8]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3897a02d
mov ecx, 0x88d4d680
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov ecx, dword [0x4365bc]
mov eax, dword [0x4365b8]
mov edx, ecx
add edx, 0xf6095b74
sub edx, 1
sub edx, 0xf6095b74
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3897a02d
mov ecx, 0xa6b83553
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov dword [ebp - 0x1054], 0xdd24616a
jmp 0x407e47
mov eax, dword [ebp - 0x1048]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x104c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov al, byte [ebp - 0x104d]
mov byte [ebp - 0x101a], al
mov dword [ebp - 0x1054], 0xd3518f0c
jmp 0x407e47
mov al, byte [ebp - 0x101a]
and al, 1
mov byte [ebp - 0x1041], al
mov dword [ebp - 0x1054], 0xd16075b7
jmp 0x407e47
mov eax, dword [0x4365bc]
mov ecx, dword [0x4365b8]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3a5a7830
mov ecx, 0xe251c2c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov al, byte [ebp - 0x1041]
and al, 1
mov byte [ebp - 0x1019], al
mov ecx, dword [0x4365bc]
mov eax, dword [0x4365b8]
mov edx, ecx
sub edx, 0xbfdffc40
sub edx, 1
add edx, 0xbfdffc40
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3a5a7830
mov ecx, 0xefcceb2d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x407e47
mov dword [ebp - 0x1054], 0xd867a868
jmp 0x407e47
mov al, byte [ebp - 0x1019]
and al, 1
movzx eax, al
mov dword [ebp - 0x105c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041f4d0
mov eax, dword [ebp - 0x105c]
add esp, 0x106c
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x104c], eax
mov dword [ebp - 0x1054], 0x5311804d
jmp 0x407e47
mov eax, dword [ebp - 0x1048]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov byte [ebp - 0x1041], 0
mov dword [ebp - 0x1054], 0x4a14a82a
jmp 0x407e47
mov dword [ebp - 0x1054], 0x77fc1d53
jmp 0x407e47
mov dword [ebp - 0x1054], 0x38f21098
jmp 0x407e47
mov dword [ebp - 0x1054], 0x9010b3a7
jmp 0x407e47
mov dword [ebp - 0x1054], 0x9260f556
jmp 0x407e47
mov dword [ebp - 0x1054], 0x88d4d680
jmp 0x407e47
mov dword [ebp - 0x1054], 0xe251c2c3
jmp 0x406e5d