Function at 0x407a60
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x5c
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x5c], eax
mov eax, dword [0x439080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x43a584]
mov eax, dword [0x43a580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x52], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x51], al
mov dword [ebp - 0x58], 0x5247c473
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x64], eax
sub eax, 0x81bef4b6
je 0x408a83
jmp 0x407acd
mov eax, dword [ebp - 0x64]
sub eax, 0x828e2874
je 0x408b6e
jmp 0x407ae0
mov eax, dword [ebp - 0x64]
sub eax, 0x87d38935
je 0x4087dd
jmp 0x407af3
mov eax, dword [ebp - 0x64]
sub eax, 0x954de531
je 0x408b7a
jmp 0x407b06
mov eax, dword [ebp - 0x64]
sub eax, 0x98187914
je 0x408b50
jmp 0x407b19
mov eax, dword [ebp - 0x64]
sub eax, 0x999d18dd
je 0x408625
jmp 0x407b2c
mov eax, dword [ebp - 0x64]
sub eax, 0x9d6dae50
je 0x408470
jmp 0x407b3f
mov eax, dword [ebp - 0x64]
sub eax, 0x9f7c43f4
je 0x408b0c
jmp 0x407b52
mov eax, dword [ebp - 0x64]
sub eax, 0x9fe41c11
je 0x408837
jmp 0x407b65
mov eax, dword [ebp - 0x64]
sub eax, 0xa0296e1b
je 0x4085ac
jmp 0x407b78
mov eax, dword [ebp - 0x64]
sub eax, 0xa3f5a38d
je 0x408159
jmp 0x407b8b
mov eax, dword [ebp - 0x64]
sub eax, 0xa66a01a4
je 0x408313
jmp 0x407b9e
mov eax, dword [ebp - 0x64]
sub eax, 0xaa2c438f
je 0x40867c
jmp 0x407bb1
mov eax, dword [ebp - 0x64]
sub eax, 0xae7ee481
je 0x408ba1
jmp 0x407bc4
mov eax, dword [ebp - 0x64]
sub eax, 0xb06e823f
je 0x408b89
jmp 0x407bd7
mov eax, dword [ebp - 0x64]
sub eax, 0xb146ee98
je 0x40822c
jmp 0x407bea
mov eax, dword [ebp - 0x64]
sub eax, 0xb65728a2
je 0x4088aa
jmp 0x407bfd
mov eax, dword [ebp - 0x64]
sub eax, 0xba9f7232
je 0x408804
jmp 0x407c10
mov eax, dword [ebp - 0x64]
sub eax, 0xc5cb9168
je 0x408b00
jmp 0x407c23
mov eax, dword [ebp - 0x64]
sub eax, 0xc75fc569
je 0x40816b
jmp 0x407c36
mov eax, dword [ebp - 0x64]
sub eax, 0xccab047d
je 0x408b38
jmp 0x407c49
mov eax, dword [ebp - 0x64]
sub eax, 0xd0b108dd
je 0x40813e
jmp 0x407c5c
mov eax, dword [ebp - 0x64]
sub eax, 0xd168940a
je 0x40891d
jmp 0x407c6f
mov eax, dword [ebp - 0x64]
sub eax, 0xd6701459
je 0x4087f8
jmp 0x407c82
mov eax, dword [ebp - 0x64]
sub eax, 0xdd90ff8f
je 0x408bba
jmp 0x407c95
mov eax, dword [ebp - 0x64]
sub eax, 0xe3c41d02
je 0x408742
jmp 0x407ca8
mov eax, dword [ebp - 0x64]
sub eax, 0xe6204ca8
je 0x408238
jmp 0x407cbb
mov eax, dword [ebp - 0x64]
sub eax, 0xeb2c0783
je 0x4080aa
jmp 0x407cce
mov eax, dword [ebp - 0x64]
sub eax, 0xecf463d2
je 0x408b44
jmp 0x407ce1
mov eax, dword [ebp - 0x64]
sub eax, 0xeeae1afd
je 0x408008
jmp 0x407cf4
mov eax, dword [ebp - 0x64]
sub eax, 0xefaa53b0
je 0x408818
jmp 0x407d07
mov eax, dword [ebp - 0x64]
sub eax, 0xf237199c
je 0x408929
jmp 0x407d1a
mov eax, dword [ebp - 0x64]
sub eax, 0xf39c28a4
je 0x408b95
jmp 0x407d2d
mov eax, dword [ebp - 0x64]
sub eax, 0xf4c1842b
je 0x40879c
jmp 0x407d40
mov eax, dword [ebp - 0x64]
sub eax, 0xf63e5e70
je 0x408a10
jmp 0x407d53
mov eax, dword [ebp - 0x64]
sub eax, 0xfc7d593a
je 0x408963
jmp 0x407d66
mov eax, dword [ebp - 0x64]
sub eax, 0xa200f9b
je 0x408014
jmp 0x407d79
mov eax, dword [ebp - 0x64]
sub eax, 0xd7afc4f
je 0x4080f0
jmp 0x407d8c
mov eax, dword [ebp - 0x64]
sub eax, 0xd98520e
je 0x4086a2
jmp 0x407d9f
mov eax, dword [ebp - 0x64]
sub eax, 0x182fd50f
je 0x407f7f
jmp 0x407db2
mov eax, dword [ebp - 0x64]
sub eax, 0x19fe8d64
je 0x408935
jmp 0x407dc5
mov eax, dword [ebp - 0x64]
sub eax, 0x24b1abeb
je 0x4082a0
jmp 0x407dd8
mov eax, dword [ebp - 0x64]
sub eax, 0x2a018f5d
je 0x408688
jmp 0x407deb
mov eax, dword [ebp - 0x64]
sub eax, 0x2d31a6e2
je 0x40841c
jmp 0x407dfe
mov eax, dword [ebp - 0x64]
sub eax, 0x2e959d19
je 0x408b2c
jmp 0x407e11
mov eax, dword [ebp - 0x64]
sub eax, 0x3023b4a0
je 0x4083b5
jmp 0x407e24
mov eax, dword [ebp - 0x64]
sub eax, 0x322a051e
je 0x408a04
jmp 0x407e37
mov eax, dword [ebp - 0x64]
sub eax, 0x333cb89f
je 0x408535
jmp 0x407e4a
mov eax, dword [ebp - 0x64]
sub eax, 0x3698c05b
je 0x4081b9
jmp 0x407e5d
mov eax, dword [ebp - 0x64]
sub eax, 0x37a27a32
je 0x4084e7
jmp 0x407e70
mov eax, dword [ebp - 0x64]
sub eax, 0x382be347
je 0x408b5c
jmp 0x407e83
mov eax, dword [ebp - 0x64]
sub eax, 0x3e42a15c
je 0x4089b1
jmp 0x407e96
mov eax, dword [ebp - 0x64]
sub eax, 0x4d4d5f53
je 0x4086bd
jmp 0x407ea9
mov eax, dword [ebp - 0x64]
sub eax, 0x4e33a7b5
je 0x408631
jmp 0x407ebc
mov eax, dword [ebp - 0x64]
sub eax, 0x501fdd0b
je 0x4086cf
jmp 0x407ecf
mov eax, dword [ebp - 0x64]
sub eax, 0x5247c473
je 0x407f59
jmp 0x407ee2
mov eax, dword [ebp - 0x64]
sub eax, 0x543fdd76
je 0x4083d6
jmp 0x407ef5
mov eax, dword [ebp - 0x64]
sub eax, 0x5a3fcefa
je 0x40847c
jmp 0x407f08
mov eax, dword [ebp - 0x64]
sub eax, 0x61a77fa2
je 0x4083a1
jmp 0x407f1b
mov eax, dword [ebp - 0x64]
sub eax, 0x63a7c644
je 0x408541
jmp 0x407f2e
mov eax, dword [ebp - 0x64]
sub eax, 0x63f6d973
je 0x408386
jmp 0x407f41
mov eax, dword [ebp - 0x64]
sub eax, 0x7102013d
je 0x408790
jmp 0x407f54
jmp 0x408bc4
mov al, byte [ebp - 0x52]
mov cl, byte [ebp - 0x51]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2e959d19
mov ecx, 0x182fd50f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
mov ecx, dword [0x43a584]
mov eax, dword [0x43a580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2e959d19
mov ecx, 0xeeae1afd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov dword [ebp - 0x58], 0xa200f9b
jmp 0x408bc4
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x60]
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
sub esp, 0xffc
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], edx
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x44]
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x2a], al
mov dword [ebp - 0x58], 0xeb2c0783
jmp 0x408bc4
mov eax, dword [0x43a584]
mov ecx, dword [0x43a580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xccab047d
mov ecx, 0xd7afc4f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov eax, dword [0x43a584]
mov ecx, dword [0x43a580]
mov edx, eax
sub edx, 0x15113e51
sub edx, 1
add edx, 0x15113e51
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xccab047d
mov ecx, 0xd0b108dd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov dl, byte [ebp - 0x2a]
mov eax, 0xe6204ca8
mov ecx, 0xa3f5a38d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov eax, dword [ebp - 0x50]
mov byte [eax], 0
mov dword [ebp - 0x58], 0xc75fc569
jmp 0x408bc4
mov eax, dword [0x43a584]
mov ecx, dword [0x43a580]
mov edx, eax
sub edx, 0x57598b08
sub edx, 1
add edx, 0x57598b08
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xecf463d2
mov ecx, 0x3698c05b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov ecx, dword [0x43a584]
mov eax, dword [0x43a580]
mov edx, ecx
add edx, 0x853ec570
sub edx, 1
sub edx, 0x853ec570
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xecf463d2
mov ecx, 0xb146ee98
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov dword [ebp - 0x58], 0xf63e5e70
jmp 0x408bc4
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x40]
mov dword [eax], ecx
mov eax, dword [ebp - 0x40]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x29], al
mov dword [ebp - 0x58], 0x24b1abeb
jmp 0x408bc4
mov ecx, dword [0x43a584]
mov eax, dword [0x43a580]
mov edx, ecx
add edx, 0xb75cfee5
sub edx, 1
sub edx, 0xb75cfee5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x98187914
mov ecx, 0xa66a01a4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov ecx, dword [0x43a584]
mov eax, dword [0x43a580]
mov edx, ecx
sub edx, 0x45ef2fc5
sub edx, 1
add edx, 0x45ef2fc5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x98187914
mov ecx, 0x63f6d973
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov dl, byte [ebp - 0x29]
mov eax, 0x543fdd76
mov ecx, 0x61a77fa2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x58], 0x3023b4a0
jmp 0x408bc4
mov eax, dword [ebp - 0x28]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x50]
mov byte [eax], 0
mov dword [ebp - 0x58], 0xf63e5e70
jmp 0x408bc4
mov eax, dword [0x43a584]
mov ecx, dword [0x43a580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x382be347
mov ecx, 0x2d31a6e2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov eax, dword [ebp - 0x3c]
mov byte [eax], 0
mov eax, dword [0x43a584]
mov ecx, dword [0x43a580]
mov edx, eax
add edx, 0xc6848991
sub edx, 1
sub edx, 0xc6848991
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x382be347
mov ecx, 0x9d6dae50
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov dword [ebp - 0x58], 0x5a3fcefa
jmp 0x408bc4
mov ecx, dword [0x43a584]
mov eax, dword [0x43a580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x828e2874
mov ecx, 0x37a27a32
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov eax, dword [0x43a584]
mov ecx, dword [0x43a580]
mov edx, eax
sub edx, 0xe1a72206
sub edx, 1
add edx, 0xe1a72206
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x828e2874
mov ecx, 0x333cb89f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov dword [ebp - 0x58], 0x63a7c644
jmp 0x408bc4
mov ecx, dword [0x43a584]
mov eax, dword [0x43a580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x954de531
mov ecx, 0xa0296e1b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov ecx, dword [0x43a584]
mov eax, dword [0x43a580]
mov edx, ecx
sub edx, 0xdc3eb6fc
sub edx, 1
add edx, 0xdc3eb6fc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x954de531
mov ecx, 0x999d18dd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov dword [ebp - 0x58], 0x4e33a7b5
jmp 0x408bc4
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x24]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, eax
mov eax, 0xaa2c438f
mov ecx, 0x2a018f5d
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov dword [ebp - 0x58], 0x19fe8d64
jmp 0x408bc4
mov eax, dword [ebp - 0x30]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x1d], al
mov dword [ebp - 0x58], 0xd98520e
jmp 0x408bc4
mov dl, byte [ebp - 0x1d]
mov eax, 0xf4c1842b
mov ecx, 0x4d4d5f53
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov eax, dword [ebp - 0x3c]
mov byte [eax], 1
mov dword [ebp - 0x58], 0x501fdd0b
jmp 0x408bc4
mov ecx, dword [0x43a584]
mov eax, dword [0x43a580]
mov edx, ecx
add edx, 0xe8c5e185
sub edx, 1
sub edx, 0xe8c5e185
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb06e823f
mov ecx, 0xe3c41d02
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov eax, dword [0x43a584]
mov ecx, dword [0x43a580]
mov edx, eax
sub edx, 0x2e518941
sub edx, 1
add edx, 0x2e518941
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb06e823f
mov ecx, 0x7102013d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov dword [ebp - 0x58], 0x19fe8d64
jmp 0x408bc4
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
mov esi, dword [eax]
mov eax, dword [ebp - 0x38]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x58], 0x87d38935
jmp 0x408bc4
mov edx, dword [ebp - 0x1c]
mov eax, 0xd6701459
mov ecx, 0xba9f7232
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov dword [ebp - 0x58], 0x19fe8d64
jmp 0x408bc4
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x58], 0xefaa53b0
jmp 0x408bc4
mov eax, dword [ebp - 0x30]
mov esi, dword [eax]
mov edx, dword [ebp - 0x18]
mov eax, 0xf237199c
mov ecx, 0x9fe41c11
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov ecx, dword [0x43a584]
mov eax, dword [0x43a580]
mov edx, ecx
add edx, 0xb5b48d94
sub edx, 1
sub edx, 0xb5b48d94
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf39c28a4
mov ecx, 0xb65728a2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov ecx, dword [0x43a584]
mov eax, dword [0x43a580]
mov edx, ecx
sub edx, 0x5d56b8fd
sub edx, 1
add edx, 0x5d56b8fd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf39c28a4
mov ecx, 0xd168940a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov dword [ebp - 0x58], 0x19fe8d64
jmp 0x408bc4
mov dword [ebp - 0x58], 0x63a7c644
jmp 0x408bc4
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x58], 0xfc7d593a
jmp 0x408bc4
mov eax, dword [0x43a584]
mov ecx, dword [0x43a580]
mov edx, eax
sub edx, 0x7d16ad9d
sub edx, 1
add edx, 0x7d16ad9d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xae7ee481
mov ecx, 0x3e42a15c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov eax, dword [ebp - 0x3c]
mov cl, byte [eax]
mov eax, dword [ebp - 0x50]
and cl, 1
mov byte [eax], cl
mov eax, dword [0x43a584]
mov ecx, dword [0x43a580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xae7ee481
mov ecx, 0x322a051e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov dword [ebp - 0x58], 0xf63e5e70
jmp 0x408bc4
mov ecx, dword [0x43a584]
mov eax, dword [0x43a580]
mov edx, ecx
add edx, 0x17d61787
sub edx, 1
sub edx, 0x17d61787
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdd90ff8f
mov ecx, 0x81bef4b6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov eax, dword [ebp - 0x50]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x11], al
mov ecx, dword [0x43a584]
mov eax, dword [0x43a580]
mov edx, ecx
add edx, 0xdea6d5da
sub edx, 1
sub edx, 0xdea6d5da
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdd90ff8f
mov ecx, 0xc5cb9168
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x58], eax
jmp 0x408bc4
mov dword [ebp - 0x58], 0x9f7c43f4
jmp 0x408bc4
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00423340
mov eax, dword [ebp - 0x68]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x58], 0x182fd50f
jmp 0x408bc4
mov dword [ebp - 0x58], 0xd7afc4f
jmp 0x408bc4
mov dword [ebp - 0x58], 0x3698c05b
jmp 0x408bc4
mov dword [ebp - 0x58], 0xa66a01a4
jmp 0x408bc4
mov eax, dword [ebp - 0x3c]
mov byte [eax], 0
mov dword [ebp - 0x58], 0x2d31a6e2
jmp 0x408bc4
mov dword [ebp - 0x58], 0x37a27a32
jmp 0x408bc4
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x58], 0xa0296e1b
jmp 0x408bc4
mov dword [ebp - 0x58], 0xe3c41d02
jmp 0x408bc4
mov dword [ebp - 0x58], 0xb65728a2
jmp 0x408bc4
mov eax, dword [ebp - 0x3c]
mov cl, byte [eax]
mov eax, dword [ebp - 0x50]
and cl, 1
mov byte [eax], cl
mov dword [ebp - 0x58], 0x3e42a15c
jmp 0x408bc4
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x58], 0x81bef4b6
jmp 0x407ab7