Function at 0x406d20
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x54
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x50], eax
mov eax, dword [0x433080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x434584]
mov eax, dword [0x434580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x46], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x45], al
mov dword [ebp - 0x4c], 0x2ee2a004
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x58], eax
sub eax, 0x862a8f86
je 0x407c51
jmp 0x406d8d
mov eax, dword [ebp - 0x58]
sub eax, 0x973b06e7
je 0x407611
jmp 0x406da0
mov eax, dword [ebp - 0x58]
sub eax, 0x9bcce4a8
je 0x407abc
jmp 0x406db3
mov eax, dword [ebp - 0x58]
sub eax, 0x9c83eff8
je 0x4074fc
jmp 0x406dc6
mov eax, dword [ebp - 0x58]
sub eax, 0x9c96e8b7
je 0x4077e9
jmp 0x406dd9
mov eax, dword [ebp - 0x58]
sub eax, 0x9cb29208
je 0x4071cd
jmp 0x406dec
mov eax, dword [ebp - 0x58]
sub eax, 0x9e828d35
je 0x407918
jmp 0x406dff
mov eax, dword [ebp - 0x58]
sub eax, 0xa807b610
je 0x407592
jmp 0x406e12
mov eax, dword [ebp - 0x58]
sub eax, 0xbe277247
je 0x407804
jmp 0x406e25
mov eax, dword [ebp - 0x58]
sub eax, 0xbe85589a
je 0x4079b4
jmp 0x406e38
mov eax, dword [ebp - 0x58]
sub eax, 0xc4aed365
je 0x407ac8
jmp 0x406e4b
mov eax, dword [ebp - 0x58]
sub eax, 0xc597f48e
je 0x407408
jmp 0x406e5e
mov eax, dword [ebp - 0x58]
sub eax, 0xc83bc750
je 0x4073ba
jmp 0x406e71
mov eax, dword [ebp - 0x58]
sub eax, 0xc9b160d1
je 0x40737d
jmp 0x406e84
mov eax, dword [ebp - 0x58]
sub eax, 0xcbd1da98
je 0x4079c0
jmp 0x406e97
mov eax, dword [ebp - 0x58]
sub eax, 0xd0cf7df9
je 0x407810
jmp 0x406eaa
mov eax, dword [ebp - 0x58]
sub eax, 0xd5881ef4
je 0x4073a8
jmp 0x406ebd
mov eax, dword [ebp - 0x58]
sub eax, 0xd77dfeb2
je 0x4072a6
jmp 0x406ed0
mov eax, dword [ebp - 0x58]
sub eax, 0xf13cf523
je 0x4078eb
jmp 0x406ee3
mov eax, dword [ebp - 0x58]
sub eax, 0xf4c85902
je 0x407c5d
jmp 0x406ef6
mov eax, dword [ebp - 0x58]
sub eax, 0xfb2e1a1f
je 0x40747b
jmp 0x406f09
mov eax, dword [ebp - 0x58]
sub eax, 0xfdbd0c72
je 0x4076bf
jmp 0x406f1c
mov eax, dword [ebp - 0x58]
sub eax, 0xfe4e1e65
je 0x407ade
jmp 0x406f2f
mov eax, dword [ebp - 0x58]
sub eax, 0xfe1aff
je 0x407795
jmp 0x406f42
mov eax, dword [ebp - 0x58]
sub eax, 0x2d7130e
je 0x40724c
jmp 0x406f55
mov eax, dword [ebp - 0x58]
sub eax, 0x4ff0ef9
je 0x40772a
jmp 0x406f68
mov eax, dword [ebp - 0x58]
sub eax, 0x644aca2
je 0x407c69
jmp 0x406f7b
mov eax, dword [ebp - 0x58]
sub eax, 0x12f5a91b
je 0x407a30
jmp 0x406f8e
mov eax, dword [ebp - 0x58]
sub eax, 0x146e2df2
je 0x407a09
jmp 0x406fa1
mov eax, dword [ebp - 0x58]
sub eax, 0x14e94fa1
je 0x40782a
jmp 0x406fb4
mov eax, dword [ebp - 0x58]
sub eax, 0x1cca3ac0
je 0x407bdc
jmp 0x406fc7
mov eax, dword [ebp - 0x58]
sub eax, 0x1f537c46
je 0x407a4c
jmp 0x406fda
mov eax, dword [ebp - 0x58]
sub eax, 0x292009d4
je 0x407878
jmp 0x406fed
mov eax, dword [ebp - 0x58]
sub eax, 0x297bcd0e
je 0x4076b3
jmp 0x407000
mov eax, dword [ebp - 0x58]
sub eax, 0x2eb980b2
je 0x407c9f
jmp 0x407013
mov eax, dword [ebp - 0x58]
sub eax, 0x2ee2a004
je 0x4071a7
jmp 0x407026
mov eax, dword [ebp - 0x58]
sub eax, 0x2f43074b
je 0x407258
jmp 0x407039
mov eax, dword [ebp - 0x58]
sub eax, 0x2f456215
je 0x4074dd
jmp 0x40704c
mov eax, dword [ebp - 0x58]
sub eax, 0x324ed6b8
je 0x407a24
jmp 0x40705f
mov eax, dword [ebp - 0x58]
sub eax, 0x3ae31d2c
je 0x407605
jmp 0x407072
mov eax, dword [ebp - 0x58]
sub eax, 0x3df751fa
je 0x407c7b
jmp 0x407085
mov eax, dword [ebp - 0x58]
sub eax, 0x4cc11752
je 0x407a81
jmp 0x407098
mov eax, dword [ebp - 0x58]
sub eax, 0x550fce69
je 0x407bbc
jmp 0x4070ab
mov eax, dword [ebp - 0x58]
sub eax, 0x592f3001
je 0x407a69
jmp 0x4070be
mov eax, dword [ebp - 0x58]
sub eax, 0x5dc53852
je 0x407c93
jmp 0x4070d1
mov eax, dword [ebp - 0x58]
sub eax, 0x5e038b03
je 0x407c87
jmp 0x4070e4
mov eax, dword [ebp - 0x58]
sub eax, 0x6753502e
je 0x40751f
jmp 0x4070f7
mov eax, dword [ebp - 0x58]
sub eax, 0x682efba5
je 0x407a75
jmp 0x40710a
mov eax, dword [ebp - 0x58]
sub eax, 0x7139d16f
je 0x40765f
jmp 0x40711d
mov eax, dword [ebp - 0x58]
sub eax, 0x715fa95c
je 0x407966
jmp 0x407130
mov eax, dword [ebp - 0x58]
sub eax, 0x717bd1be
je 0x4077a1
jmp 0x407143
mov eax, dword [ebp - 0x58]
sub eax, 0x71d545bc
je 0x407b49
jmp 0x407156
mov eax, dword [ebp - 0x58]
sub eax, 0x73a1ecb3
je 0x407487
jmp 0x407169
mov eax, dword [ebp - 0x58]
sub eax, 0x77167aa8
je 0x407389
jmp 0x40717c
mov eax, dword [ebp - 0x58]
sub eax, 0x7c3c12b8
je 0x407be8
jmp 0x40718f
mov eax, dword [ebp - 0x58]
sub eax, 0x7e9d81d9
je 0x407906
jmp 0x4071a2
jmp 0x407ca6
mov al, byte [ebp - 0x46]
mov cl, byte [ebp - 0x45]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1cca3ac0
mov ecx, 0x9cb29208
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
mov ecx, dword [0x434584]
mov eax, dword [0x434580]
mov edx, ecx
add edx, 0xce31ea83
sub edx, 1
sub edx, 0xce31ea83
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1cca3ac0
mov ecx, 0x2d7130e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov dword [ebp - 0x4c], 0x2f43074b
jmp 0x407ca6
mov eax, dword [0x434584]
mov ecx, dword [0x434580]
mov edx, eax
add edx, 0x4192b5b3
sub edx, 1
sub edx, 0x4192b5b3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7c3c12b8
mov ecx, 0xd77dfeb2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov ecx, dword [ebp - 0x50]
mov esi, dword [ebp - 0x54]
push eax
mov eax, esp
push eax
mov edx, esp
mov dword [ebp - 0x3c], edx
push eax
mov edx, esp
mov dword [ebp - 0x38], edx
push eax
mov edx, esp
mov dword [ebp - 0x34], edx
push eax
mov edx, esp
mov dword [ebp - 0x30], edx
push eax
sub esp, 0xffc
mov edx, esp
mov dword [ebp - 0x2c], edx
push eax
mov edx, esp
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x40]
mov dword [edx], esi
mov dword [eax], ecx
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [0x434584]
mov ecx, dword [0x434580]
mov edx, eax
sub edx, 0x8ea180fd
sub edx, 1
add edx, 0x8ea180fd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7c3c12b8
mov ecx, 0xc9b160d1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov dword [ebp - 0x4c], 0x77167aa8
jmp 0x407ca6
mov edx, dword [ebp - 0x24]
mov esi, 0xffffffff
mov eax, 0x73a1ecb3
mov ecx, 0xd5881ef4
cmp edx, esi
cmove eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov eax, dword [ebp - 0x44]
mov byte [eax], 0
mov dword [ebp - 0x4c], 0xc83bc750
jmp 0x407ca6
mov eax, dword [0x434584]
mov ecx, dword [0x434580]
mov edx, eax
sub edx, 0x69dcbd4f
sub edx, 1
add edx, 0x69dcbd4f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x862a8f86
mov ecx, 0xc597f48e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov ecx, dword [0x434584]
mov eax, dword [0x434580]
mov edx, ecx
add edx, 0x62f5565
sub edx, 1
sub edx, 0x62f5565
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x862a8f86
mov ecx, 0xfb2e1a1f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov dword [ebp - 0x4c], 0xc4aed365
jmp 0x407ca6
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
mov dword [ebp - 0x4c], 0x2f456215
jmp 0x407ca6
mov edx, dword [ebp - 0x38]
mov esi, 0xffffffff
mov eax, 0x973b06e7
mov ecx, 0x9c83eff8
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x44]
mov byte [eax], 0
mov dword [ebp - 0x4c], 0x6753502e
jmp 0x407ca6
mov ecx, dword [0x434584]
mov eax, dword [0x434580]
mov edx, ecx
add edx, 0xe2d5ed3e
sub edx, 1
sub edx, 0xe2d5ed3e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf4c85902
mov ecx, 0xa807b610
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov ecx, dword [0x434584]
mov eax, dword [0x434580]
mov edx, ecx
add edx, 0x1612acc9
sub edx, 1
sub edx, 0x1612acc9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf4c85902
mov ecx, 0x3ae31d2c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov dword [ebp - 0x4c], 0xc4aed365
jmp 0x407ca6
mov eax, dword [0x434584]
mov ecx, dword [0x434580]
mov edx, eax
add edx, 0xa5abe9ab
sub edx, 1
sub edx, 0xa5abe9ab
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x644aca2
mov ecx, 0x7139d16f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov eax, dword [ebp - 0x34]
mov byte [eax], 0
mov eax, dword [0x434584]
mov ecx, dword [0x434580]
mov edx, eax
add edx, 0x2f9538a1
sub edx, 1
sub edx, 0x2f9538a1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x644aca2
mov ecx, 0x297bcd0e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov dword [ebp - 0x4c], 0xfdbd0c72
jmp 0x407ca6
mov ecx, dword [0x434584]
mov eax, dword [0x434580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3df751fa
mov ecx, 0x4ff0ef9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov ecx, dword [0x434584]
mov eax, dword [0x434580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3df751fa
mov ecx, 0xfe1aff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov dword [ebp - 0x4c], 0x717bd1be
jmp 0x407ca6
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x28]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1f], al
mov dword [ebp - 0x4c], 0x9c96e8b7
jmp 0x407ca6
mov dl, byte [ebp - 0x1f]
mov eax, 0xbe277247
mov ecx, 0xd0cf7df9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov dword [ebp - 0x4c], 0x4cc11752
jmp 0x407ca6
mov eax, dword [ebp - 0x28]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x1e], al
mov dword [ebp - 0x4c], 0x14e94fa1
jmp 0x407ca6
mov eax, dword [0x434584]
mov ecx, dword [0x434580]
mov edx, eax
add edx, 0x1bfb7546
sub edx, 1
sub edx, 0x1bfb7546
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5e038b03
mov ecx, 0x292009d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov ecx, dword [0x434584]
mov eax, dword [0x434580]
mov edx, ecx
sub edx, 0x1f2071b9
sub edx, 1
add edx, 0x1f2071b9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5e038b03
mov ecx, 0xf13cf523
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov dl, byte [ebp - 0x1e]
mov eax, 0xcbd1da98
mov ecx, 0x7e9d81d9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov eax, dword [ebp - 0x34]
mov byte [eax], 1
mov dword [ebp - 0x4c], 0x9e828d35
jmp 0x407ca6
mov eax, dword [0x434584]
mov ecx, dword [0x434580]
mov edx, eax
sub edx, 0xb045cfd9
sub edx, 1
add edx, 0xb045cfd9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5dc53852
mov ecx, 0x715fa95c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov eax, dword [0x434584]
mov ecx, dword [0x434580]
mov edx, eax
sub edx, 0x411e5575
sub edx, 1
add edx, 0x411e5575
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5dc53852
mov ecx, 0xbe85589a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov dword [ebp - 0x4c], 0x4cc11752
jmp 0x407ca6
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
mov esi, dword [eax]
mov eax, dword [ebp - 0x30]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1d], al
mov dword [ebp - 0x4c], 0x146e2df2
jmp 0x407ca6
mov dl, byte [ebp - 0x1d]
mov eax, 0x324ed6b8
mov ecx, 0x12f5a91b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov dword [ebp - 0x4c], 0x4cc11752
jmp 0x407ca6
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x4c], 0x1f537c46
jmp 0x407ca6
mov edx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x18]
mov eax, 0x682efba5
mov ecx, 0x592f3001
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov dword [ebp - 0x4c], 0x4cc11752
jmp 0x407ca6
mov dword [ebp - 0x4c], 0x717bd1be
jmp 0x407ca6
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x34]
mov cl, byte [eax]
mov eax, dword [ebp - 0x44]
and cl, 1
mov byte [eax], cl
mov dword [ebp - 0x4c], 0x9bcce4a8
jmp 0x407ca6
mov dword [ebp - 0x4c], 0xc4aed365
jmp 0x407ca6
mov eax, dword [ebp - 0x44]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x11], al
mov dword [ebp - 0x4c], 0xfe4e1e65
jmp 0x407ca6
mov ecx, dword [0x434584]
mov eax, dword [0x434580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2eb980b2
mov ecx, 0x71d545bc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov ecx, dword [0x434584]
mov eax, dword [0x434580]
mov edx, ecx
sub edx, 0xb878d7ab
sub edx, 1
add edx, 0xb878d7ab
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2eb980b2
mov ecx, 0x550fce69
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x4c], eax
jmp 0x407ca6
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041d150
mov eax, dword [ebp - 0x5c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x4c], 0x9cb29208
jmp 0x407ca6
mov ecx, dword [ebp - 0x50]
mov esi, dword [ebp - 0x54]
push eax
mov eax, esp
push eax
mov edx, esp
mov dword [ebp - 0x60], edx
mov edx, dword [ebp - 0x40]
mov dword [edx], esi
mov dword [eax], ecx
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x60]
mov dword [eax], ecx
mov dword [ebp - 0x4c], 0xd77dfeb2
jmp 0x407ca6
mov dword [ebp - 0x4c], 0xc597f48e
jmp 0x407ca6
mov dword [ebp - 0x4c], 0xa807b610
jmp 0x407ca6
mov eax, dword [ebp - 0x34]
mov byte [eax], 0
mov dword [ebp - 0x4c], 0x7139d16f
jmp 0x407ca6
mov dword [ebp - 0x4c], 0x4ff0ef9
jmp 0x407ca6
mov dword [ebp - 0x4c], 0x292009d4
jmp 0x407ca6
mov dword [ebp - 0x4c], 0x715fa95c
jmp 0x407ca6
mov dword [ebp - 0x4c], 0x71d545bc
jmp 0x406d77