Function at 0x406190
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x60
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x60], eax
mov eax, dword [0x439080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x43a56c]
mov eax, dword [0x43a568]
mov edx, ecx
sub edx, 0x51146613
sub edx, 1
add edx, 0x51146613
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x56], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x55], al
mov dword [ebp - 0x5c], 0x5e42747a
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x68], eax
sub eax, 0x89e930a4
je 0x406707
jmp 0x406205
mov eax, dword [ebp - 0x68]
sub eax, 0x8a000d1f
je 0x406fad
jmp 0x406218
mov eax, dword [ebp - 0x68]
sub eax, 0x8de11e68
je 0x406664
jmp 0x40622b
mov eax, dword [ebp - 0x68]
sub eax, 0x9a8172bf
je 0x406fbc
jmp 0x40623e
mov eax, dword [ebp - 0x68]
sub eax, 0x9bea6b99
je 0x406cec
jmp 0x406251
mov eax, dword [ebp - 0x68]
sub eax, 0xa5a88d87
je 0x406c4f
jmp 0x406264
mov eax, dword [ebp - 0x68]
sub eax, 0xabe68ca7
je 0x406807
jmp 0x406277
mov eax, dword [ebp - 0x68]
sub eax, 0xaec660c4
je 0x406b72
jmp 0x40628a
mov eax, dword [ebp - 0x68]
sub eax, 0xb75f0239
je 0x406e59
jmp 0x40629d
mov eax, dword [ebp - 0x68]
sub eax, 0xb8a74c5e
je 0x406ecb
jmp 0x4062b0
mov eax, dword [ebp - 0x68]
sub eax, 0xbecc8cad
je 0x4065f8
jmp 0x4062c3
mov eax, dword [ebp - 0x68]
sub eax, 0xcac4173a
je 0x40689a
jmp 0x4062d6
mov eax, dword [ebp - 0x68]
sub eax, 0xd339a264
je 0x406bad
jmp 0x4062e9
mov eax, dword [ebp - 0x68]
sub eax, 0xd3d88fcf
je 0x406f7c
jmp 0x4062fc
mov eax, dword [ebp - 0x68]
sub eax, 0xd4418399
je 0x4068ff
jmp 0x40630f
mov eax, dword [ebp - 0x68]
sub eax, 0xd8e10087
je 0x4068ae
jmp 0x406322
mov eax, dword [ebp - 0x68]
sub eax, 0xdadfef8f
je 0x406b8d
jmp 0x406335
mov eax, dword [ebp - 0x68]
sub eax, 0xdde0641c
je 0x406970
jmp 0x406348
mov eax, dword [ebp - 0x68]
sub eax, 0xe31bad99
je 0x4068e1
jmp 0x40635b
mov eax, dword [ebp - 0x68]
sub eax, 0xe40b82a7
je 0x406819
jmp 0x40636e
mov eax, dword [ebp - 0x68]
sub eax, 0xe4c854ad
je 0x406aa3
jmp 0x406381
mov eax, dword [ebp - 0x68]
sub eax, 0xee6fe74d
je 0x406cf8
jmp 0x406394
mov eax, dword [ebp - 0x68]
sub eax, 0xef7d71d0
je 0x406a83
jmp 0x4063a7
mov eax, dword [ebp - 0x68]
sub eax, 0xf1b32349
je 0x406658
jmp 0x4063ba
mov eax, dword [ebp - 0x68]
sub eax, 0x87b722
je 0x406ebf
jmp 0x4063cd
mov eax, dword [ebp - 0x68]
sub eax, 0xd0b6a5
je 0x406bd8
jmp 0x4063e0
mov eax, dword [ebp - 0x68]
sub eax, 0x1500e688
je 0x406956
jmp 0x4063f3
mov eax, dword [ebp - 0x68]
sub eax, 0x1637fd2a
je 0x406f40
jmp 0x406406
mov eax, dword [ebp - 0x68]
sub eax, 0x234302da
je 0x4068cf
jmp 0x406419
mov eax, dword [ebp - 0x68]
sub eax, 0x26c788e6
je 0x406bcc
jmp 0x40642c
mov eax, dword [ebp - 0x68]
sub eax, 0x282b5818
je 0x406dda
jmp 0x40643f
mov eax, dword [ebp - 0x68]
sub eax, 0x2a805eea
je 0x406d82
jmp 0x406452
mov eax, dword [ebp - 0x68]
sub eax, 0x307df939
je 0x406f34
jmp 0x406465
mov eax, dword [ebp - 0x68]
sub eax, 0x30df1835
je 0x4068ed
jmp 0x406478
mov eax, dword [ebp - 0x68]
sub eax, 0x33a22978
je 0x406de6
jmp 0x40648b
mov eax, dword [ebp - 0x68]
sub eax, 0x350383c7
je 0x4069e3
jmp 0x40649e
mov eax, dword [ebp - 0x68]
sub eax, 0x3c20b8fb
je 0x406825
jmp 0x4064b1
mov eax, dword [ebp - 0x68]
sub eax, 0x43377bd0
je 0x406b99
jmp 0x4064c4
mov eax, dword [ebp - 0x68]
sub eax, 0x4e8bf290
je 0x406694
jmp 0x4064d7
mov eax, dword [ebp - 0x68]
sub eax, 0x4f37e463
je 0x4067ec
jmp 0x4064ea
mov eax, dword [ebp - 0x68]
sub eax, 0x545a9c65
je 0x406ae9
jmp 0x4064fd
mov eax, dword [ebp - 0x68]
sub eax, 0x55268bd0
je 0x406a71
jmp 0x406510
mov eax, dword [ebp - 0x68]
sub eax, 0x58e1004e
je 0x406a8f
jmp 0x406523
mov eax, dword [ebp - 0x68]
sub eax, 0x5b79ea8e
je 0x406a56
jmp 0x406536
mov eax, dword [ebp - 0x68]
sub eax, 0x5e42747a
je 0x4065ad
jmp 0x406549
mov eax, dword [ebp - 0x68]
sub eax, 0x62a7b8a4
je 0x406be4
jmp 0x40655c
mov eax, dword [ebp - 0x68]
sub eax, 0x65c5f9ae
je 0x40694a
jmp 0x40656f
mov eax, dword [ebp - 0x68]
sub eax, 0x6626ebf8
je 0x406e9f
jmp 0x406582
mov eax, dword [ebp - 0x68]
sub eax, 0x69040c93
je 0x40687b
jmp 0x406595
mov eax, dword [ebp - 0x68]
sub eax, 0x7dae3dee
je 0x406d0f
jmp 0x4065a8
jmp 0x406fc3
mov bl, byte [ebp - 0x56]
mov dh, byte [ebp - 0x55]
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x87b722
mov ecx, 0xbecc8cad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
mov eax, dword [0x43a56c]
mov ecx, dword [0x43a568]
mov edx, eax
add edx, 0x28c14101
sub edx, 1
sub edx, 0x28c14101
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x87b722
mov ecx, 0xf1b32349
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov dword [ebp - 0x5c], 0x8de11e68
jmp 0x406fc3
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
sub esp, 0xffc
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x5c], 0x4e8bf290
jmp 0x406fc3
mov ecx, dword [0x43a56c]
mov eax, dword [0x43a568]
mov edx, ecx
add edx, 0xb35f1d77
sub edx, 1
sub edx, 0xb35f1d77
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb8a74c5e
mov ecx, 0x89e930a4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x64]
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x50]
mov dword [eax], edx
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x2d], al
mov ecx, dword [0x43a56c]
mov eax, dword [0x43a568]
mov edx, ecx
sub edx, 0xdf0fb12a
sub edx, 1
add edx, 0xdf0fb12a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb8a74c5e
mov ecx, 0x4f37e463
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov dl, byte [ebp - 0x2d]
mov eax, 0x3c20b8fb
mov ecx, 0xabe68ca7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov eax, dword [ebp - 0x54]
mov byte [eax], 0
mov dword [ebp - 0x5c], 0xe40b82a7
jmp 0x406fc3
mov dword [ebp - 0x5c], 0x7dae3dee
jmp 0x406fc3
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x44]
mov dword [eax], ecx
mov dword [ebp - 0x5c], 0x69040c93
jmp 0x406fc3
mov edx, dword [ebp - 0x44]
mov esi, 0xffffffff
mov eax, 0x234302da
mov ecx, 0xcac4173a
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x5c], 0xd8e10087
jmp 0x406fc3
mov eax, dword [ebp - 0x2c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x54]
mov byte [eax], 0
mov dword [ebp - 0x5c], 0x7dae3dee
jmp 0x406fc3
mov eax, dword [ebp - 0x40]
mov byte [eax], 0
mov dword [ebp - 0x5c], 0xe31bad99
jmp 0x406fc3
mov dword [ebp - 0x5c], 0x30df1835
jmp 0x406fc3
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x5c], 0xd4418399
jmp 0x406fc3
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x28]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, eax
mov eax, 0x65c5f9ae
mov ecx, 0x1500e688
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov dword [ebp - 0x5c], 0x62a7b8a4
jmp 0x406fc3
mov eax, dword [ebp - 0x34]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x21], al
mov dword [ebp - 0x5c], 0xdde0641c
jmp 0x406fc3
mov ecx, dword [0x43a56c]
mov eax, dword [0x43a568]
mov edx, ecx
sub edx, 0xde136c82
sub edx, 1
add edx, 0xde136c82
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x307df939
mov ecx, 0x350383c7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov ecx, dword [0x43a56c]
mov eax, dword [0x43a568]
mov edx, ecx
sub edx, 0xd2c61b98
sub edx, 1
add edx, 0xd2c61b98
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x307df939
mov ecx, 0x5b79ea8e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov dl, byte [ebp - 0x21]
mov eax, 0x58e1004e
mov ecx, 0x55268bd0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov eax, dword [ebp - 0x40]
mov byte [eax], 1
mov dword [ebp - 0x5c], 0xef7d71d0
jmp 0x406fc3
mov dword [ebp - 0x5c], 0x62a7b8a4
jmp 0x406fc3
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x5c], 0xe4c854ad
jmp 0x406fc3
mov eax, dword [0x43a56c]
mov ecx, dword [0x43a568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1637fd2a
mov ecx, 0x545a9c65
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x44]
mov esi, dword [eax]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x20]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x19], al
mov eax, dword [0x43a56c]
mov ecx, dword [0x43a568]
mov edx, eax
sub edx, 0x1ce5106f
sub edx, 1
add edx, 0x1ce5106f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1637fd2a
mov ecx, 0xaec660c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov dl, byte [ebp - 0x19]
mov eax, 0xdadfef8f
mov ecx, 0x43377bd0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov dword [ebp - 0x5c], 0x62a7b8a4
jmp 0x406fc3
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x5c], 0xd339a264
jmp 0x406fc3
mov eax, dword [ebp - 0x34]
mov esi, dword [eax]
mov edx, dword [ebp - 0x18]
mov eax, 0xd0b6a5
mov ecx, 0x26c788e6
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov dword [ebp - 0x5c], 0x62a7b8a4
jmp 0x406fc3
mov dword [ebp - 0x5c], 0x30df1835
jmp 0x406fc3
mov ecx, dword [0x43a56c]
mov eax, dword [0x43a568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd3d88fcf
mov ecx, 0xa5a88d87
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x40]
mov al, byte [eax]
mov byte [ebp - 0x12], al
mov ecx, dword [0x43a56c]
mov eax, dword [0x43a568]
mov edx, ecx
add edx, 0xcc88cf85
sub edx, 1
sub edx, 0xcc88cf85
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd3d88fcf
mov ecx, 0x9bea6b99
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov dword [ebp - 0x5c], 0xee6fe74d
jmp 0x406fc3
mov cl, byte [ebp - 0x12]
mov eax, dword [ebp - 0x54]
and cl, 1
mov byte [eax], cl
mov dword [ebp - 0x5c], 0x7dae3dee
jmp 0x406fc3
mov ecx, dword [0x43a56c]
mov eax, dword [0x43a568]
mov edx, ecx
sub edx, 0x4d349381
sub edx, 1
add edx, 0x4d349381
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8a000d1f
mov ecx, 0x2a805eea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov eax, dword [ebp - 0x54]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x11], al
mov eax, dword [0x43a56c]
mov ecx, dword [0x43a568]
mov edx, eax
sub edx, 0x66416808
sub edx, 1
add edx, 0x66416808
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8a000d1f
mov ecx, 0x282b5818
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov dword [ebp - 0x5c], 0x33a22978
jmp 0x406fc3
mov ecx, dword [0x43a56c]
mov eax, dword [0x43a568]
mov edx, ecx
sub edx, 0x4586a402
sub edx, 1
add edx, 0x4586a402
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9a8172bf
mov ecx, 0xb75f0239
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov eax, dword [0x43a56c]
mov ecx, dword [0x43a568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9a8172bf
mov ecx, 0x6626ebf8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x406fc3
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00422090
mov eax, dword [ebp - 0x6c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x5c], 0xbecc8cad
jmp 0x406fc3
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x50]
mov dword [eax], edx
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x5c], 0x89e930a4
jmp 0x406fc3
mov dword [ebp - 0x5c], 0x350383c7
jmp 0x406fc3
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x44]
mov esi, dword [eax]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x20]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x5c], 0x545a9c65
jmp 0x406fc3
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x5c], 0xa5a88d87
jmp 0x406fc3
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x5c], 0x2a805eea
jmp 0x406fc3
mov dword [ebp - 0x5c], 0xb75f0239
jmp 0x4061ef