Function at 0x406ee0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x105c
call fcn.00424170
mov eax, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov eax, dword [0x43a080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1030], eax
mov dword [ebp - 0x1044], 0xe806ae8e
mov eax, dword [ebp - 0x1044]
mov dword [ebp - 0x1048], eax
sub eax, 0x86100f39
je 0x407f55
jmp 0x406f2f
mov eax, dword [ebp - 0x1048]
sub eax, 0x872af5d6
je 0x407548
jmp 0x406f45
mov eax, dword [ebp - 0x1048]
sub eax, 0x89b18be0
je 0x4077d2
jmp 0x406f5b
mov eax, dword [ebp - 0x1048]
sub eax, 0x8c368a59
je 0x407a28
jmp 0x406f71
mov eax, dword [ebp - 0x1048]
sub eax, 0x97756099
je 0x407c1b
jmp 0x406f87
mov eax, dword [ebp - 0x1048]
sub eax, 0x9fef3fa2
je 0x407c8d
jmp 0x406f9d
mov eax, dword [ebp - 0x1048]
sub eax, 0xa14b173d
je 0x40806c
jmp 0x406fb3
mov eax, dword [ebp - 0x1048]
sub eax, 0xaab492ed
je 0x4078ff
jmp 0x406fc9
mov eax, dword [ebp - 0x1048]
sub eax, 0xac9ef0c6
je 0x407cde
jmp 0x406fdf
mov eax, dword [ebp - 0x1048]
sub eax, 0xaca2b2b6
je 0x40807b
jmp 0x406ff5
mov eax, dword [ebp - 0x1048]
sub eax, 0xb69f9eb7
je 0x40781b
jmp 0x40700b
mov eax, dword [ebp - 0x1048]
sub eax, 0xb8ba4140
je 0x407557
jmp 0x407021
mov eax, dword [ebp - 0x1048]
sub eax, 0xb907f952
je 0x407ced
jmp 0x407037
mov eax, dword [ebp - 0x1048]
sub eax, 0xc1935a2a
je 0x40757a
jmp 0x40704d
mov eax, dword [ebp - 0x1048]
sub eax, 0xcb45ac75
je 0x407b9f
jmp 0x407063
mov eax, dword [ebp - 0x1048]
sub eax, 0xcd9d95ea
je 0x407e19
jmp 0x407079
mov eax, dword [ebp - 0x1048]
sub eax, 0xd09b6359
je 0x407490
jmp 0x40708f
mov eax, dword [ebp - 0x1048]
sub eax, 0xd12d3ead
je 0x40805d
jmp 0x4070a5
mov eax, dword [ebp - 0x1048]
sub eax, 0xd387834d
je 0x407f72
jmp 0x4070bb
mov eax, dword [ebp - 0x1048]
sub eax, 0xd5e198c3
je 0x407666
jmp 0x4070d1
mov eax, dword [ebp - 0x1048]
sub eax, 0xd81e84ca
je 0x40776c
jmp 0x4070e7
mov eax, dword [ebp - 0x1048]
sub eax, 0xd8cdd8d1
je 0x4078ae
jmp 0x4070fd
mov eax, dword [ebp - 0x1048]
sub eax, 0xe2118115
je 0x407b4e
jmp 0x407113
mov eax, dword [ebp - 0x1048]
sub eax, 0xe63220b8
je 0x407d34
jmp 0x407129
mov eax, dword [ebp - 0x1048]
sub eax, 0xe806ae8e
je 0x40741a
jmp 0x40713f
mov eax, dword [ebp - 0x1048]
sub eax, 0xf17ee540
je 0x40795f
jmp 0x407155
mov eax, dword [ebp - 0x1048]
sub eax, 0xf7b40484
je 0x40777b
jmp 0x40716b
mov eax, dword [ebp - 0x1048]
sub eax, 0xfa847887
je 0x4075f0
jmp 0x407181
mov eax, dword [ebp - 0x1048]
sub eax, 0xfb502cea
je 0x407950
jmp 0x407197
mov eax, dword [ebp - 0x1048]
sub eax, 0xfb7590e0
je 0x407f38
jmp 0x4071ad
mov eax, dword [ebp - 0x1048]
sub eax, 0x75a07d2
je 0x4077aa
jmp 0x4071c3
mov eax, dword [ebp - 0x1048]
sub eax, 0x8f2ca9a
je 0x407bb5
jmp 0x4071d9
mov eax, dword [ebp - 0x1048]
sub eax, 0xa018911
je 0x407dfb
jmp 0x4071ef
mov eax, dword [ebp - 0x1048]
sub eax, 0xf42736f
je 0x40800d
jmp 0x407205
mov eax, dword [ebp - 0x1048]
sub eax, 0x143f6926
je 0x4080e0
jmp 0x40721b
mov eax, dword [ebp - 0x1048]
sub eax, 0x1b33f9f7
je 0x407b7e
jmp 0x407231
mov eax, dword [ebp - 0x1048]
sub eax, 0x28617569
je 0x407d85
jmp 0x407247
mov eax, dword [ebp - 0x1048]
sub eax, 0x2c6cd61b
je 0x407e0a
jmp 0x40725d
mov eax, dword [ebp - 0x1048]
sub eax, 0x2cc274d0
je 0x407bc4
jmp 0x407273
mov eax, dword [ebp - 0x1048]
sub eax, 0x2ef43036
je 0x407b5d
jmp 0x407289
mov eax, dword [ebp - 0x1048]
sub eax, 0x2fca1048
je 0x407ff7
jmp 0x40729f
mov eax, dword [ebp - 0x1048]
sub eax, 0x3528fc64
je 0x407657
jmp 0x4072b5
mov eax, dword [ebp - 0x1048]
sub eax, 0x35fc30b9
je 0x407a19
jmp 0x4072cb
mov eax, dword [ebp - 0x1048]
sub eax, 0x38589110
je 0x407f9e
jmp 0x4072e1
mov eax, dword [ebp - 0x1048]
sub eax, 0x3fb25658
je 0x4076dc
jmp 0x4072f7
mov eax, dword [ebp - 0x1048]
sub eax, 0x411d0c4c
je 0x4080ef
jmp 0x40730d
mov eax, dword [ebp - 0x1048]
sub eax, 0x45f48a58
je 0x407648
jmp 0x407323
mov eax, dword [ebp - 0x1048]
sub eax, 0x4ab8e97c
je 0x407b2d
jmp 0x407339
mov eax, dword [ebp - 0x1048]
sub eax, 0x4b12c17e
je 0x407a96
jmp 0x40734f
mov eax, dword [ebp - 0x1048]
sub eax, 0x517f0405
je 0x4080d1
jmp 0x407365
mov eax, dword [ebp - 0x1048]
sub eax, 0x545fc5bd
je 0x40808a
jmp 0x40737b
mov eax, dword [ebp - 0x1048]
sub eax, 0x548c8630
je 0x4079b0
jmp 0x407391
mov eax, dword [ebp - 0x1048]
sub eax, 0x55e1790e
je 0x407898
jmp 0x4073a7
mov eax, dword [ebp - 0x1048]
sub eax, 0x57d86d2c
je 0x407c3c
jmp 0x4073bd
mov eax, dword [ebp - 0x1048]
sub eax, 0x59f95717
je 0x407f29
jmp 0x4073d3
mov eax, dword [ebp - 0x1048]
sub eax, 0x5d38ac3a
je 0x407e8f
jmp 0x4073e9
mov eax, dword [ebp - 0x1048]
sub eax, 0x7159583f
je 0x407d13
jmp 0x4073ff
mov eax, dword [ebp - 0x1048]
sub eax, 0x75c357ef
je 0x407889
jmp 0x407415
jmp 0x40811d
mov ecx, dword [0x43b5a4]
mov eax, dword [0x43b5a0]
mov edx, ecx
add edx, 0xc5624208
sub edx, 1
sub edx, 0xc5624208
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x38589110
mov ecx, 0xd09b6359
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov eax, dword [ebp - 0x1030]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1038], eax
mov ecx, dword [0x43b5a4]
mov eax, dword [0x43b5a0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x38589110
mov ecx, 0x872af5d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov dword [ebp - 0x1044], 0xb8ba4140
jmp 0x40811d
mov edx, 0xffffffff
mov eax, 0xd5e198c3
mov ecx, 0xc1935a2a
cmp dword [ebp - 0x1038], edx
cmove eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov ecx, dword [0x43b5a4]
mov eax, dword [0x43b5a0]
mov edx, ecx
sub edx, 0x224d512e
sub edx, 1
add edx, 0x224d512e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2fca1048
mov ecx, 0xfa847887
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov byte [ebp - 0x1031], 0
mov eax, dword [0x43b5a4]
mov ecx, dword [0x43b5a0]
mov edx, eax
add edx, 0xac42ebda
sub edx, 1
sub edx, 0xac42ebda
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2fca1048
mov ecx, 0x45f48a58
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov dword [ebp - 0x1044], 0x3528fc64
jmp 0x40811d
mov dword [ebp - 0x1044], 0x86100f39
jmp 0x40811d
mov ecx, dword [0x43b5a4]
mov eax, dword [0x43b5a0]
mov edx, ecx
add edx, 0xc3926976
sub edx, 1
sub edx, 0xc3926976
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf42736f
mov ecx, 0x3fb25658
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x102c], eax
mov eax, dword [0x43b5a4]
mov ecx, dword [0x43b5a0]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf42736f
mov ecx, 0xd81e84ca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov dword [ebp - 0x1044], 0xf7b40484
jmp 0x40811d
mov eax, dword [ebp - 0x102c]
mov dword [ebp - 0x103c], eax
mov edx, 0xffffffff
mov eax, 0x55e1790e
mov ecx, 0x75a07d2
cmp dword [ebp - 0x103c], edx
cmove eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov eax, dword [ebp - 0x1038]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov byte [ebp - 0x1031], 0
mov dword [ebp - 0x1044], 0x89b18be0
jmp 0x40811d
mov eax, dword [0x43b5a4]
mov ecx, dword [0x43b5a0]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd12d3ead
mov ecx, 0xb69f9eb7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov ecx, dword [0x43b5a4]
mov eax, dword [0x43b5a0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd12d3ead
mov ecx, 0x75c357ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov dword [ebp - 0x1044], 0x86100f39
jmp 0x40811d
mov byte [ebp - 0x103d], 0
mov dword [ebp - 0x1044], 0xd8cdd8d1
jmp 0x40811d
mov eax, dword [0x43b5a4]
mov ecx, dword [0x43b5a0]
mov edx, eax
add edx, 0xc1f7e603
sub edx, 1
sub edx, 0xc1f7e603
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa14b173d
mov ecx, 0xaab492ed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov eax, dword [0x43b5a4]
mov ecx, dword [0x43b5a0]
mov edx, eax
sub edx, 0x53ca7578
sub edx, 1
add edx, 0x53ca7578
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa14b173d
mov ecx, 0xfb502cea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov dword [ebp - 0x1044], 0xf17ee540
jmp 0x40811d
mov eax, dword [0x43b5a4]
mov ecx, dword [0x43b5a0]
mov edx, eax
add edx, 0xe8ed91b6
sub edx, 1
sub edx, 0xe8ed91b6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaca2b2b6
mov ecx, 0x548c8630
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
lea eax, [ebp - 0x1010]
mov dword [ebp - 0x1028], eax
mov eax, dword [ebp - 0x1038]
mov dword [ebp - 0x1024], eax
mov eax, dword [0x43b5a4]
mov ecx, dword [0x43b5a0]
mov edx, eax
sub edx, 0xe18bc382
sub edx, 1
add edx, 0xe18bc382
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaca2b2b6
mov ecx, 0x35fc30b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov dword [ebp - 0x1044], 0x8c368a59
jmp 0x40811d
mov ecx, dword [0x43b5a4]
mov eax, dword [0x43b5a0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x545fc5bd
mov ecx, 0x4b12c17e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov ecx, dword [ebp - 0x1028]
mov edx, dword [ebp - 0x1024]
lea eax, [ebp - 0x1018]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x101d], al
mov eax, dword [0x43b5a4]
mov ecx, dword [0x43b5a0]
mov edx, eax
sub edx, 0x7e6a6ad3
sub edx, 1
add edx, 0x7e6a6ad3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x545fc5bd
mov ecx, 0x4ab8e97c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov dl, byte [ebp - 0x101d]
mov eax, 0xe2118115
mov ecx, 0x2ef43036
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov dword [ebp - 0x1044], 0xcd9d95ea
jmp 0x40811d
cmp dword [ebp - 0x1018], 0
sete al
and al, 1
mov byte [ebp - 0x101c], al
mov dword [ebp - 0x1044], 0x1b33f9f7
jmp 0x40811d
mov dl, byte [ebp - 0x101c]
mov eax, 0x2cc274d0
mov ecx, 0xcb45ac75
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov byte [ebp - 0x103d], 1
mov dword [ebp - 0x1044], 0x8f2ca9a
jmp 0x40811d
mov dword [ebp - 0x1044], 0xcd9d95ea
jmp 0x40811d
mov ecx, dword [ebp - 0x1018]
lea edx, [ebp - 0x1010]
mov esi, dword [ebp - 0x103c]
lea eax, [ebp - 0x1014]
xor edi, edi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub esp, 0x14
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x101b], al
mov dword [ebp - 0x1044], 0x97756099
jmp 0x40811d
mov dl, byte [ebp - 0x101b]
mov eax, 0x57d86d2c
mov ecx, 0xb907f952
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov eax, dword [0x43b5a4]
mov ecx, dword [0x43b5a0]
mov edx, eax
add edx, 0x8021fdd9
sub edx, 1
sub edx, 0x8021fdd9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x517f0405
mov ecx, 0x9fef3fa2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov eax, dword [0x43b5a4]
mov ecx, dword [0x43b5a0]
mov edx, eax
sub edx, 0xd852c9ad
sub edx, 1
add edx, 0xd852c9ad
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x517f0405
mov ecx, 0xac9ef0c6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov dword [ebp - 0x1044], 0xcd9d95ea
jmp 0x40811d
mov eax, dword [ebp - 0x1014]
cmp eax, dword [ebp - 0x1018]
setne al
and al, 1
mov byte [ebp - 0x101a], al
mov dword [ebp - 0x1044], 0x7159583f
jmp 0x40811d
mov dl, byte [ebp - 0x101a]
mov eax, 0x2c6cd61b
mov ecx, 0xe63220b8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov eax, dword [0x43b5a4]
mov ecx, dword [0x43b5a0]
mov edx, eax
add edx, 0xef3408e1
sub edx, 1
sub edx, 0xef3408e1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x143f6926
mov ecx, 0x28617569
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov ecx, dword [0x43b5a4]
mov eax, dword [0x43b5a0]
mov edx, ecx
sub edx, 0x3ae20a47
sub edx, 1
add edx, 0x3ae20a47
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x143f6926
mov ecx, 0xa018911
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov dword [ebp - 0x1044], 0xcd9d95ea
jmp 0x40811d
mov dword [ebp - 0x1044], 0xf17ee540
jmp 0x40811d
mov ecx, dword [0x43b5a4]
mov eax, dword [0x43b5a0]
mov edx, ecx
add edx, 0x1e25facc
sub edx, 1
sub edx, 0x1e25facc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x411d0c4c
mov ecx, 0x5d38ac3a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov eax, dword [ebp - 0x1038]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x103c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov ecx, dword [0x43b5a4]
mov eax, dword [0x43b5a0]
mov edx, ecx
add edx, 0x6a57b54f
sub edx, 1
sub edx, 0x6a57b54f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x411d0c4c
mov ecx, 0x59f95717
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x40811d
mov dword [ebp - 0x1044], 0xfb7590e0
jmp 0x40811d
mov al, byte [ebp - 0x103d]
and al, 1
mov byte [ebp - 0x1031], al
mov dword [ebp - 0x1044], 0x86100f39
jmp 0x40811d
mov al, byte [ebp - 0x1031]
and al, 1
mov byte [ebp - 0x1019], al
mov dword [ebp - 0x1044], 0xd387834d
jmp 0x40811d
mov al, byte [ebp - 0x1019]
and al, 1
movzx eax, al
mov dword [ebp - 0x104c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00424160
mov eax, dword [ebp - 0x104c]
add esp, 0x105c
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x1030]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1038], eax
mov dword [ebp - 0x1044], 0xd09b6359
jmp 0x40811d
mov byte [ebp - 0x1031], 0
mov dword [ebp - 0x1044], 0xfa847887
jmp 0x40811d
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1044], 0x3fb25658
jmp 0x40811d
mov dword [ebp - 0x1044], 0xb69f9eb7
jmp 0x40811d
mov dword [ebp - 0x1044], 0xaab492ed
jmp 0x40811d
mov dword [ebp - 0x1044], 0x548c8630
jmp 0x40811d
mov ecx, dword [ebp - 0x1028]
mov edx, dword [ebp - 0x1024]
lea eax, [ebp - 0x1018]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
mov dword [ebp - 0x1044], 0x4b12c17e
jmp 0x40811d
mov dword [ebp - 0x1044], 0x9fef3fa2
jmp 0x40811d
mov dword [ebp - 0x1044], 0x28617569
jmp 0x40811d
mov eax, dword [ebp - 0x1038]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x103c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1044], 0x5d38ac3a
jmp 0x406f13