Function at 0x4069a0
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x60
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x60], eax
mov eax, dword [0x433080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x5c], 0xd0025286
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x68], eax
sub eax, 0x824f8626
je 0x40798a
jmp 0x4069dc
mov eax, dword [ebp - 0x68]
sub eax, 0x83897acd
je 0x406f1d
jmp 0x4069ef
mov eax, dword [ebp - 0x68]
sub eax, 0x84ac4eed
je 0x4073f1
jmp 0x406a02
mov eax, dword [ebp - 0x68]
sub eax, 0x8f05a166
je 0x407918
jmp 0x406a15
mov eax, dword [ebp - 0x68]
sub eax, 0x8fccc00b
je 0x406fa0
jmp 0x406a28
mov eax, dword [ebp - 0x68]
sub eax, 0x93daceed
je 0x4076dd
jmp 0x406a3b
mov eax, dword [ebp - 0x68]
sub eax, 0x94c61f90
je 0x407280
jmp 0x406a4e
mov eax, dword [ebp - 0x68]
sub eax, 0x956777d2
je 0x407307
jmp 0x406a61
mov eax, dword [ebp - 0x68]
sub eax, 0x96676cfe
je 0x4070d1
jmp 0x406a74
mov eax, dword [ebp - 0x68]
sub eax, 0x980b5457
je 0x407875
jmp 0x406a87
mov eax, dword [ebp - 0x68]
sub eax, 0xa55a1b5f
je 0x407908
jmp 0x406a9a
mov eax, dword [ebp - 0x68]
sub eax, 0xa5867b7a
je 0x407615
jmp 0x406aad
mov eax, dword [ebp - 0x68]
sub eax, 0xab6d9ab8
je 0x40722e
jmp 0x406ac0
mov eax, dword [ebp - 0x68]
sub eax, 0xac3cadc7
je 0x407807
jmp 0x406ad3
mov eax, dword [ebp - 0x68]
sub eax, 0xace8855e
je 0x407609
jmp 0x406ae6
mov eax, dword [ebp - 0x68]
sub eax, 0xad825c01
je 0x407827
jmp 0x406af9
mov eax, dword [ebp - 0x68]
sub eax, 0xb1fa7d6a
je 0x4073e5
jmp 0x406b0c
mov eax, dword [ebp - 0x68]
sub eax, 0xb3ca363c
je 0x407151
jmp 0x406b1f
mov eax, dword [ebp - 0x68]
sub eax, 0xb4b19f62
je 0x407523
jmp 0x406b32
mov eax, dword [ebp - 0x68]
sub eax, 0xbcfe9e88
je 0x40767f
jmp 0x406b45
mov eax, dword [ebp - 0x68]
sub eax, 0xbe0f919b
je 0x40738d
jmp 0x406b58
mov eax, dword [ebp - 0x68]
sub eax, 0xbff85388
je 0x4074fc
jmp 0x406b6b
mov eax, dword [ebp - 0x68]
sub eax, 0xcc4b7ca8
je 0x4076f8
jmp 0x406b7e
mov eax, dword [ebp - 0x68]
sub eax, 0xcfa4f029
je 0x4079f8
jmp 0x406b91
mov eax, dword [ebp - 0x68]
sub eax, 0xd0025286
je 0x406e1c
jmp 0x406ba4
mov eax, dword [ebp - 0x68]
sub eax, 0xd136f5a0
je 0x407813
jmp 0x406bb7
mov eax, dword [ebp - 0x68]
sub eax, 0xd157fa4a
je 0x4079da
jmp 0x406bca
mov eax, dword [ebp - 0x68]
sub eax, 0xd1bfbeb8
je 0x4079e6
jmp 0x406bdd
mov eax, dword [ebp - 0x68]
sub eax, 0xde210ffc
je 0x4072fb
jmp 0x406bf0
mov eax, dword [ebp - 0x68]
sub eax, 0xdf25054b
je 0x407a0c
jmp 0x406c03
mov eax, dword [ebp - 0x68]
sub eax, 0xe5a3b346
je 0x407746
jmp 0x406c16
mov eax, dword [ebp - 0x68]
sub eax, 0xe857b321
je 0x407137
jmp 0x406c29
mov eax, dword [ebp - 0x68]
sub eax, 0xea85b959
je 0x40712b
jmp 0x406c3c
mov eax, dword [ebp - 0x68]
sub eax, 0xed5f48d1
je 0x406e58
jmp 0x406c4f
mov eax, dword [ebp - 0x68]
sub eax, 0xed760702
je 0x406ecf
jmp 0x406c62
mov eax, dword [ebp - 0x68]
sub eax, 0xf514f976
je 0x407029
jmp 0x406c75
mov eax, dword [ebp - 0x68]
sub eax, 0xfc099bfb
je 0x40723a
jmp 0x406c88
mov eax, dword [ebp - 0x68]
sub eax, 0xc3ab66d
je 0x4078e8
jmp 0x406c9b
mov eax, dword [ebp - 0x68]
sub eax, 0x14dbb22c
je 0x407322
jmp 0x406cae
mov eax, dword [ebp - 0x68]
sub eax, 0x1a5da203
je 0x4071e8
jmp 0x406cc1
mov eax, dword [ebp - 0x68]
sub eax, 0x2071e941
je 0x407596
jmp 0x406cd4
mov eax, dword [ebp - 0x68]
sub eax, 0x21296762
je 0x40745c
jmp 0x406ce7
mov eax, dword [ebp - 0x68]
sub eax, 0x2b7b1eb5
je 0x407119
jmp 0x406cfa
mov eax, dword [ebp - 0x68]
sub eax, 0x376c905f
je 0x406fac
jmp 0x406d0d
mov eax, dword [ebp - 0x68]
sub eax, 0x37d0a42d
je 0x40799c
jmp 0x406d20
mov eax, dword [ebp - 0x68]
sub eax, 0x382f38d4
je 0x4077b1
jmp 0x406d33
mov eax, dword [ebp - 0x68]
sub eax, 0x41813e68
je 0x407704
jmp 0x406d46
mov eax, dword [ebp - 0x68]
sub eax, 0x4af3b16e
je 0x4070ec
jmp 0x406d59
mov eax, dword [ebp - 0x68]
sub eax, 0x4b9c9497
je 0x407710
jmp 0x406d6c
mov eax, dword [ebp - 0x68]
sub eax, 0x4cb903ef
je 0x40719a
jmp 0x406d7f
mov eax, dword [ebp - 0x68]
sub eax, 0x52341937
je 0x407109
jmp 0x406d92
mov eax, dword [ebp - 0x68]
sub eax, 0x57960611
je 0x407508
jmp 0x406da5
mov eax, dword [ebp - 0x68]
sub eax, 0x57e2a266
je 0x40796f
jmp 0x406db8
mov eax, dword [ebp - 0x68]
sub eax, 0x617330f1
je 0x406fbe
jmp 0x406dcb
mov eax, dword [ebp - 0x68]
sub eax, 0x62aab45d
je 0x4073d9
jmp 0x406dde
mov eax, dword [ebp - 0x68]
sub eax, 0x6fd2d147
je 0x407631
jmp 0x406df1
mov eax, dword [ebp - 0x68]
sub eax, 0x734e2835
je 0x40797b
jmp 0x406e04
mov eax, dword [ebp - 0x68]
sub eax, 0x7c0a1102
je 0x406f94
jmp 0x406e17
jmp 0x407a13
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
sub esp, 0xffc
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x5c], 0xed5f48d1
jmp 0x407a13
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x4c]
mov esi, 0xffffffff
mov eax, 0x376c905f
mov ecx, 0xed760702
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov eax, dword [0x434564]
mov ecx, dword [0x434560]
mov edx, eax
sub edx, 0x7b9ee6f
sub edx, 1
add edx, 0x7b9ee6f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa55a1b5f
mov ecx, 0x83897acd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov byte [ebp - 0x51], 0
mov ecx, dword [0x434564]
mov eax, dword [0x434560]
mov edx, ecx
add edx, 0x1e1ef530
sub edx, 1
sub edx, 0x1e1ef530
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa55a1b5f
mov ecx, 0x7c0a1102
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov dword [ebp - 0x5c], 0x8fccc00b
jmp 0x407a13
mov dword [ebp - 0x5c], 0xd136f5a0
jmp 0x407a13
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x5c], 0x617330f1
jmp 0x407a13
mov ecx, dword [0x434564]
mov eax, dword [0x434560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8f05a166
mov ecx, 0xf514f976
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov eax, dword [ebp - 0x34]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x2d], al
mov eax, dword [0x434564]
mov ecx, dword [0x434560]
mov edx, eax
add edx, 0x4297c32b
sub edx, 1
sub edx, 0x4297c32b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8f05a166
mov ecx, 0x96676cfe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov dl, byte [ebp - 0x2d]
mov eax, 0x2b7b1eb5
mov ecx, 0x4af3b16e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x5c], 0x52341937
jmp 0x407a13
mov byte [ebp - 0x51], 0
mov dword [ebp - 0x5c], 0xd136f5a0
jmp 0x407a13
mov eax, dword [ebp - 0x44]
mov byte [eax], 0
mov dword [ebp - 0x5c], 0xea85b959
jmp 0x407a13
mov dword [ebp - 0x5c], 0xe857b321
jmp 0x407a13
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x5c], 0xb3ca363c
jmp 0x407a13
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, eax
mov eax, 0x4cb903ef
mov ecx, 0xfc099bfb
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov eax, dword [0x434564]
mov ecx, dword [0x434560]
mov edx, eax
sub edx, 0xbd2512fa
sub edx, 1
add edx, 0xbd2512fa
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x57e2a266
mov ecx, 0x1a5da203
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov eax, dword [0x434564]
mov ecx, dword [0x434560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x57e2a266
mov ecx, 0xab6d9ab8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov dword [ebp - 0x5c], 0x4b9c9497
jmp 0x407a13
mov eax, dword [0x434564]
mov ecx, dword [0x434560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x734e2835
mov ecx, 0x94c61f90
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov ecx, dword [0x434564]
mov eax, dword [0x434560]
mov edx, ecx
add edx, 0x3e0312e
sub edx, 1
sub edx, 0x3e0312e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x734e2835
mov ecx, 0xde210ffc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov dword [ebp - 0x5c], 0x956777d2
jmp 0x407a13
mov edx, dword [ebp - 0x24]
mov eax, 0x84ac4eed
mov ecx, 0x14dbb22c
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov ecx, dword [0x434564]
mov eax, dword [0x434560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x824f8626
mov ecx, 0xbe0f919b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov eax, dword [ebp - 0x44]
mov byte [eax], 1
mov eax, dword [0x434564]
mov ecx, dword [0x434560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x824f8626
mov ecx, 0x62aab45d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov dword [ebp - 0x5c], 0xb1fa7d6a
jmp 0x407a13
mov dword [ebp - 0x5c], 0x4b9c9497
jmp 0x407a13
mov ecx, dword [0x434564]
mov eax, dword [0x434560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x37d0a42d
mov ecx, 0x21296762
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
mov esi, dword [eax]
mov eax, dword [ebp - 0x40]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x20], eax
mov ecx, dword [0x434564]
mov eax, dword [0x434560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x37d0a42d
mov ecx, 0xbff85388
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov dword [ebp - 0x5c], 0x57960611
jmp 0x407a13
mov edx, dword [ebp - 0x20]
mov eax, 0xb4b19f62
mov ecx, 0xa5867b7a
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov ecx, dword [0x434564]
mov eax, dword [0x434560]
mov edx, ecx
add edx, 0xb9f6deb7
sub edx, 1
sub edx, 0xb9f6deb7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd157fa4a
mov ecx, 0x2071e941
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov ecx, dword [0x434564]
mov eax, dword [0x434560]
mov edx, ecx
add edx, 0x93ef97a3
sub edx, 1
sub edx, 0x93ef97a3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd157fa4a
mov ecx, 0xace8855e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov dword [ebp - 0x5c], 0x4b9c9497
jmp 0x407a13
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x5c], 0x6fd2d147
jmp 0x407a13
mov eax, dword [0x434564]
mov ecx, dword [0x434560]
mov edx, eax
add edx, 0xfafc20a4
sub edx, 1
sub edx, 0xfafc20a4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd1bfbeb8
mov ecx, 0xbcfe9e88
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
cmp eax, ecx
setne al
and al, 1
mov byte [ebp - 0x13], al
mov eax, dword [0x434564]
mov ecx, dword [0x434560]
mov edx, eax
add edx, 0xff511c39
sub edx, 1
sub edx, 0xff511c39
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd1bfbeb8
mov ecx, 0x93daceed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov dl, byte [ebp - 0x13]
mov eax, 0x41813e68
mov ecx, 0xcc4b7ca8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov dword [ebp - 0x5c], 0x4b9c9497
jmp 0x407a13
mov dword [ebp - 0x5c], 0xe857b321
jmp 0x407a13
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x44]
mov al, byte [eax]
mov byte [ebp - 0x12], al
mov dword [ebp - 0x5c], 0xe5a3b346
jmp 0x407a13
mov ecx, dword [0x434564]
mov eax, dword [0x434560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcfa4f029
mov ecx, 0x382f38d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov al, byte [ebp - 0x12]
and al, 1
mov byte [ebp - 0x51], al
mov eax, dword [0x434564]
mov ecx, dword [0x434560]
mov edx, eax
sub edx, 0x27e79d7c
sub edx, 1
add edx, 0x27e79d7c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcfa4f029
mov ecx, 0xac3cadc7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov dword [ebp - 0x5c], 0xd136f5a0
jmp 0x407a13
mov al, byte [ebp - 0x51]
and al, 1
mov byte [ebp - 0x11], al
mov dword [ebp - 0x5c], 0xad825c01
jmp 0x407a13
mov eax, dword [0x434564]
mov ecx, dword [0x434560]
mov edx, eax
sub edx, 0xeb5d5aa7
sub edx, 1
add edx, 0xeb5d5aa7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdf25054b
mov ecx, 0x980b5457
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov ecx, dword [0x434564]
mov eax, dword [0x434560]
mov edx, ecx
add edx, 0xb179dbe9
sub edx, 1
sub edx, 0xb179dbe9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdf25054b
mov ecx, 0xc3ab66d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407a13
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041cad0
mov eax, dword [ebp - 0x6c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov byte [ebp - 0x51], 0
mov dword [ebp - 0x5c], 0x83897acd
jmp 0x407a13
mov eax, dword [ebp - 0x34]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x5c], 0xf514f976
jmp 0x407a13
mov dword [ebp - 0x5c], 0x1a5da203
jmp 0x407a13
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x5c], 0x94c61f90
jmp 0x407a13
mov eax, dword [ebp - 0x44]
mov byte [eax], 1
mov dword [ebp - 0x5c], 0xbe0f919b
jmp 0x407a13
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
mov esi, dword [eax]
mov eax, dword [ebp - 0x40]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x5c], 0x21296762
jmp 0x407a13
mov dword [ebp - 0x5c], 0x2071e941
jmp 0x407a13
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c], 0xbcfe9e88
jmp 0x407a13
mov al, byte [ebp - 0x12]
and al, 1
mov byte [ebp - 0x51], al
mov dword [ebp - 0x5c], 0x382f38d4
jmp 0x407a13
mov dword [ebp - 0x5c], 0x980b5457
jmp 0x4069c6