Function at 0x409430
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x68
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x68], eax
mov eax, dword [0x43b080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x64], 0x1167baec
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x70], eax
sub eax, 0x847388a5
je 0x40a17f
jmp 0x40946c
mov eax, dword [ebp - 0x70]
sub eax, 0x93961040
je 0x409e33
jmp 0x40947f
mov eax, dword [ebp - 0x70]
sub eax, 0x9b4a860c
je 0x409ef5
jmp 0x409492
mov eax, dword [ebp - 0x70]
sub eax, 0x9e1e8834
je 0x409c99
jmp 0x4094a5
mov eax, dword [ebp - 0x70]
sub eax, 0x9eaea4e4
je 0x40a09d
jmp 0x4094b8
mov eax, dword [ebp - 0x70]
sub eax, 0xa386e502
je 0x40a1c1
jmp 0x4094cb
mov eax, dword [ebp - 0x70]
sub eax, 0xa946cc94
je 0x4098de
jmp 0x4094de
mov eax, dword [ebp - 0x70]
sub eax, 0xa9a2e813
je 0x409ce7
jmp 0x4094f1
mov eax, dword [ebp - 0x70]
sub eax, 0xab9928a3
je 0x40a074
jmp 0x409504
mov eax, dword [ebp - 0x70]
sub eax, 0xabbda6c3
je 0x409bdb
jmp 0x409517
mov eax, dword [ebp - 0x70]
sub eax, 0xac3e4367
je 0x409c63
jmp 0x40952a
mov eax, dword [ebp - 0x70]
sub eax, 0xacf3ceb5
je 0x409b4d
jmp 0x40953d
mov eax, dword [ebp - 0x70]
sub eax, 0xb4338ba3
je 0x409f97
jmp 0x409550
mov eax, dword [ebp - 0x70]
sub eax, 0xc2e048ef
je 0x409b68
jmp 0x409563
mov eax, dword [ebp - 0x70]
sub eax, 0xc46fbe47
je 0x409c7b
jmp 0x409576
mov eax, dword [ebp - 0x70]
sub eax, 0xc69a4ea2
je 0x409a0c
jmp 0x409589
mov eax, dword [ebp - 0x70]
sub eax, 0xc6f6425f
je 0x409d9e
jmp 0x40959c
mov eax, dword [ebp - 0x70]
sub eax, 0xce1bf3fc
je 0x409d47
jmp 0x4095af
mov eax, dword [ebp - 0x70]
sub eax, 0xdb2ebad9
je 0x40a2fb
jmp 0x4095c2
mov eax, dword [ebp - 0x70]
sub eax, 0xe3d37408
je 0x40a34e
jmp 0x4095d5
mov eax, dword [ebp - 0x70]
sub eax, 0xe59fab59
je 0x40a2ef
jmp 0x4095e8
mov eax, dword [ebp - 0x70]
sub eax, 0xe5ed1cc3
je 0x40a248
jmp 0x4095fb
mov eax, dword [ebp - 0x70]
sub eax, 0xe74f45f4
je 0x40a016
jmp 0x40960e
mov eax, dword [ebp - 0x70]
sub eax, 0xe900c07e
je 0x40a3a6
jmp 0x409621
mov eax, dword [ebp - 0x70]
sub eax, 0xebd19b0d
je 0x40a312
jmp 0x409634
mov eax, dword [ebp - 0x70]
sub eax, 0xf17ab49f
je 0x409a7a
jmp 0x409647
mov eax, dword [ebp - 0x70]
sub eax, 0xf656b8e4
je 0x409db8
jmp 0x40965a
mov eax, dword [ebp - 0x70]
sub eax, 0xf9260d0d
je 0x40a2c3
jmp 0x40966d
mov eax, dword [ebp - 0x70]
sub eax, 0xfae9a9ce
je 0x409a1c
jmp 0x409680
mov eax, dword [ebp - 0x70]
sub eax, 0x2ede086
je 0x40996f
jmp 0x409693
mov eax, dword [ebp - 0x70]
sub eax, 0x3961f42
je 0x40a080
jmp 0x4096a6
mov eax, dword [ebp - 0x70]
sub eax, 0x67108ed
je 0x409a28
jmp 0x4096b9
mov eax, dword [ebp - 0x70]
sub eax, 0x1167baec
je 0x409873
jmp 0x4096cc
mov eax, dword [ebp - 0x70]
sub eax, 0x1476ec34
je 0x40a39a
jmp 0x4096df
mov eax, dword [ebp - 0x70]
sub eax, 0x17be7f80
je 0x409d3b
jmp 0x4096f2
mov eax, dword [ebp - 0x70]
sub eax, 0x229b88ae
je 0x40a2cf
jmp 0x409705
mov eax, dword [ebp - 0x70]
sub eax, 0x232a4dfa
je 0x409c6f
jmp 0x409718
mov eax, dword [ebp - 0x70]
sub eax, 0x25600ec3
je 0x409e85
jmp 0x40972b
mov eax, dword [ebp - 0x70]
sub eax, 0x2fe0121d
je 0x409e79
jmp 0x40973e
mov eax, dword [ebp - 0x70]
sub eax, 0x32dd1f9f
je 0x40a1d5
jmp 0x409751
mov eax, dword [ebp - 0x70]
sub eax, 0x33b79364
je 0x409de5
jmp 0x409764
mov eax, dword [ebp - 0x70]
sub eax, 0x3bba1d9a
je 0x409fa3
jmp 0x409777
mov eax, dword [ebp - 0x70]
sub eax, 0x4ccf13c3
je 0x409c8d
jmp 0x40978a
mov eax, dword [ebp - 0x70]
sub eax, 0x5b005f7c
je 0x40a0a9
jmp 0x40979d
mov eax, dword [ebp - 0x70]
sub eax, 0x5dd277c2
je 0x40a342
jmp 0x4097b0
mov eax, dword [ebp - 0x70]
sub eax, 0x6191fda9
je 0x40a18b
jmp 0x4097c3
mov eax, dword [ebp - 0x70]
sub eax, 0x63fd5af4
je 0x40a388
jmp 0x4097d6
mov eax, dword [ebp - 0x70]
sub eax, 0x6739fb66
je 0x40997b
jmp 0x4097e9
mov eax, dword [ebp - 0x70]
sub eax, 0x687f011e
je 0x40a114
jmp 0x4097fc
mov eax, dword [ebp - 0x70]
sub eax, 0x6cf46dc4
je 0x409ac0
jmp 0x40980f
mov eax, dword [ebp - 0x70]
sub eax, 0x6eee1089
je 0x409d92
jmp 0x409822
mov eax, dword [ebp - 0x70]
sub eax, 0x721830e9
je 0x409ea7
jmp 0x409835
mov eax, dword [ebp - 0x70]
sub eax, 0x73d9badf
je 0x40a333
jmp 0x409848
mov eax, dword [ebp - 0x70]
sub eax, 0x797caca0
je 0x409dd3
jmp 0x40985b
mov eax, dword [ebp - 0x70]
sub eax, 0x7e1c438d
je 0x409f7c
jmp 0x40986e
jmp 0x40a3ad
mov ecx, dword [0x43c55c]
mov eax, dword [0x43c558]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe59fab59
mov ecx, 0xa946cc94
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
push eax
mov eax, esp
mov dword [ebp - 0x5c], eax
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
mov ecx, dword [0x43c55c]
mov eax, dword [0x43c558]
mov edx, ecx
add edx, 0x340fc352
sub edx, 1
sub edx, 0x340fc352
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe59fab59
mov ecx, 0x2ede086
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov dword [ebp - 0x64], 0x6739fb66
jmp 0x40a3ad
mov ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x6c]
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
sub esp, 0xffc
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x5c]
mov dword [eax], edx
mov eax, dword [ebp - 0x58]
mov dword [eax], ecx
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x54]
mov dword [eax], ecx
mov edx, dword [ebp - 0x54]
mov esi, 0xffffffff
mov eax, 0x67108ed
mov ecx, 0xc69a4ea2
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov byte [ebp - 0x5d], 0
mov dword [ebp - 0x64], 0xfae9a9ce
jmp 0x40a3ad
mov dword [ebp - 0x64], 0x32dd1f9f
jmp 0x40a3ad
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x64], 0xf17ab49f
jmp 0x40a3ad
mov eax, dword [0x43c55c]
mov ecx, dword [0x43c558]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdb2ebad9
mov ecx, 0x6cf46dc4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x3c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x35], al
mov ecx, dword [0x43c55c]
mov eax, dword [0x43c558]
mov edx, ecx
add edx, 0x5aa05636
sub edx, 1
sub edx, 0x5aa05636
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdb2ebad9
mov ecx, 0xacf3ceb5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov dl, byte [ebp - 0x35]
mov eax, 0xc46fbe47
mov ecx, 0xc2e048ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov ecx, dword [0x43c55c]
mov eax, dword [0x43c558]
mov edx, ecx
sub edx, 0xa6816c1f
sub edx, 1
add edx, 0xa6816c1f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xebd19b0d
mov ecx, 0xabbda6c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x5d], 0
mov ecx, dword [0x43c55c]
mov eax, dword [0x43c558]
mov edx, ecx
sub edx, 0xc64b6be
sub edx, 1
add edx, 0xc64b6be
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xebd19b0d
mov ecx, 0xac3e4367
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov dword [ebp - 0x64], 0x232a4dfa
jmp 0x40a3ad
mov dword [ebp - 0x64], 0x32dd1f9f
jmp 0x40a3ad
mov eax, dword [ebp - 0x4c]
mov byte [eax], 0
mov dword [ebp - 0x64], 0x4ccf13c3
jmp 0x40a3ad
mov dword [ebp - 0x64], 0x9e1e8834
jmp 0x40a3ad
mov eax, dword [0x43c55c]
mov ecx, dword [0x43c558]
mov edx, eax
add edx, 0x7310c57b
sub edx, 1
sub edx, 0x7310c57b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x73d9badf
mov ecx, 0xa9a2e813
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x34], eax
mov eax, dword [0x43c55c]
mov ecx, dword [0x43c558]
mov edx, eax
add edx, 0xec08e991
sub edx, 1
sub edx, 0xec08e991
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x73d9badf
mov ecx, 0x17be7f80
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov dword [ebp - 0x64], 0xce1bf3fc
jmp 0x40a3ad
mov eax, dword [ebp - 0x54]
mov edx, dword [eax]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x34]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, eax
mov eax, 0x6eee1089
mov ecx, 0xc6f6425f
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov dword [ebp - 0x64], 0x6191fda9
jmp 0x40a3ad
mov eax, dword [ebp - 0x40]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x2d], al
mov dword [ebp - 0x64], 0xf656b8e4
jmp 0x40a3ad
mov dl, byte [ebp - 0x2d]
mov eax, 0x25600ec3
mov ecx, 0x797caca0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov eax, dword [ebp - 0x4c]
mov byte [eax], 1
mov dword [ebp - 0x64], 0x33b79364
jmp 0x40a3ad
mov eax, dword [0x43c55c]
mov ecx, dword [0x43c558]
mov edx, eax
add edx, 0x1c1fbb46
sub edx, 1
sub edx, 0x1c1fbb46
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5dd277c2
mov ecx, 0x93961040
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov eax, dword [0x43c55c]
mov ecx, dword [0x43c558]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5dd277c2
mov ecx, 0x2fe0121d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov dword [ebp - 0x64], 0x6191fda9
jmp 0x40a3ad
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x64], 0x721830e9
jmp 0x40a3ad
mov eax, dword [0x43c55c]
mov ecx, dword [0x43c558]
mov edx, eax
add edx, 0xa38ed844
sub edx, 1
sub edx, 0xa38ed844
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe3d37408
mov ecx, 0x9b4a860c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x24]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1d], al
mov eax, dword [0x43c55c]
mov ecx, dword [0x43c558]
mov edx, eax
add edx, 0x2b946f4c
sub edx, 1
sub edx, 0x2b946f4c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe3d37408
mov ecx, 0x7e1c438d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov dl, byte [ebp - 0x1d]
mov eax, 0xb4338ba3
mov ecx, 0x3bba1d9a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov dword [ebp - 0x64], 0x6191fda9
jmp 0x40a3ad
mov ecx, dword [0x43c55c]
mov eax, dword [0x43c558]
mov edx, ecx
sub edx, 0x38f16ac8
sub edx, 1
add edx, 0x38f16ac8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x63fd5af4
mov ecx, 0xe74f45f4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [0x43c55c]
mov ecx, dword [0x43c558]
mov edx, eax
add edx, 0xf7f123a4
sub edx, 1
sub edx, 0xf7f123a4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x63fd5af4
mov ecx, 0xab9928a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov dword [ebp - 0x64], 0x3961f42
jmp 0x40a3ad
mov edx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x18]
mov eax, 0x5b005f7c
mov ecx, 0x9eaea4e4
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov dword [ebp - 0x64], 0x6191fda9
jmp 0x40a3ad
mov ecx, dword [0x43c55c]
mov eax, dword [0x43c558]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1476ec34
mov ecx, 0x687f011e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov ecx, dword [0x43c55c]
mov eax, dword [0x43c558]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1476ec34
mov ecx, 0x847388a5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov dword [ebp - 0x64], 0x9e1e8834
jmp 0x40a3ad
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x4c]
mov al, byte [eax]
mov byte [ebp - 0x12], al
mov dword [ebp - 0x64], 0xa386e502
jmp 0x40a3ad
mov al, byte [ebp - 0x12]
and al, 1
mov byte [ebp - 0x5d], al
mov dword [ebp - 0x64], 0x32dd1f9f
jmp 0x40a3ad
mov ecx, dword [0x43c55c]
mov eax, dword [0x43c558]
mov edx, ecx
sub edx, 0xcdcbca0f
sub edx, 1
add edx, 0xcdcbca0f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe900c07e
mov ecx, 0xe5ed1cc3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov al, byte [ebp - 0x5d]
and al, 1
mov byte [ebp - 0x11], al
mov ecx, dword [0x43c55c]
mov eax, dword [0x43c558]
mov edx, ecx
add edx, 0x4fc1e1d
sub edx, 1
sub edx, 0x4fc1e1d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe900c07e
mov ecx, 0xf9260d0d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x40a3ad
mov dword [ebp - 0x64], 0x229b88ae
jmp 0x40a3ad
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00424c50
mov eax, dword [ebp - 0x74]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x64], 0xa946cc94
jmp 0x40a3ad
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x3c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x64], 0x6cf46dc4
jmp 0x40a3ad
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x5d], 0
mov dword [ebp - 0x64], 0xabbda6c3
jmp 0x40a3ad
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x64], 0xa9a2e813
jmp 0x40a3ad
mov dword [ebp - 0x64], 0x93961040
jmp 0x40a3ad
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x24]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x64], 0x9b4a860c
jmp 0x40a3ad
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x64], 0xe74f45f4
jmp 0x40a3ad
mov dword [ebp - 0x64], 0x687f011e
jmp 0x40a3ad
mov dword [ebp - 0x64], 0xe5ed1cc3
jmp 0x409456