Function at 0x407280
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x64
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x64], eax
mov eax, dword [0x43a080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x43b58c]
mov eax, dword [0x43b588]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x5a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x59], al
mov dword [ebp - 0x60], 0x498905df
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x6c], eax
sub eax, 0x80e901d2
je 0x407e1f
jmp 0x4072ed
mov eax, dword [ebp - 0x6c]
sub eax, 0x8245dbeb
je 0x407746
jmp 0x407300
mov eax, dword [ebp - 0x6c]
sub eax, 0x82e069bd
je 0x407e6c
jmp 0x407313
mov eax, dword [ebp - 0x6c]
sub eax, 0x8527bdd3
je 0x407c23
jmp 0x407326
mov eax, dword [ebp - 0x6c]
sub eax, 0x9328b816
je 0x407896
jmp 0x407339
mov eax, dword [ebp - 0x6c]
sub eax, 0x99cddf00
je 0x407f1e
jmp 0x40734c
mov eax, dword [ebp - 0x6c]
sub eax, 0x9eb133bf
je 0x407fb6
jmp 0x40735f
mov eax, dword [ebp - 0x6c]
sub eax, 0xa5e489fc
je 0x4076bb
jmp 0x407372
mov eax, dword [ebp - 0x6c]
sub eax, 0xa82bb74a
je 0x407f6b
jmp 0x407385
mov eax, dword [ebp - 0x6c]
sub eax, 0xab0ee3be
je 0x407b1d
jmp 0x407398
mov eax, dword [ebp - 0x6c]
sub eax, 0xadbb1478
je 0x407e44
jmp 0x4073ab
mov eax, dword [ebp - 0x6c]
sub eax, 0xb028c214
je 0x4078f0
jmp 0x4073be
mov eax, dword [ebp - 0x6c]
sub eax, 0xb10da667
je 0x407fc8
jmp 0x4073d1
mov eax, dword [ebp - 0x6c]
sub eax, 0xb1d951e0
je 0x407f4a
jmp 0x4073e4
mov eax, dword [ebp - 0x6c]
sub eax, 0xb5347e54
je 0x4077fb
jmp 0x4073f7
mov eax, dword [ebp - 0x6c]
sub eax, 0xc66b7811
je 0x407971
jmp 0x40740a
mov eax, dword [ebp - 0x6c]
sub eax, 0xcc547f19
je 0x407dec
jmp 0x40741d
mov eax, dword [ebp - 0x6c]
sub eax, 0xce5ffeeb
je 0x407c2f
jmp 0x407430
mov eax, dword [ebp - 0x6c]
sub eax, 0xd7f0628e
je 0x407d79
jmp 0x407443
mov eax, dword [ebp - 0x6c]
sub eax, 0xd8b747ef
je 0x407ad0
jmp 0x407456
mov eax, dword [ebp - 0x6c]
sub eax, 0xdd59576d
je 0x407e07
jmp 0x407469
mov eax, dword [ebp - 0x6c]
sub eax, 0xe1dd6c86
je 0x407b7f
jmp 0x40747c
mov eax, dword [ebp - 0x6c]
sub eax, 0xe4d2fded
je 0x407b11
jmp 0x40748f
mov eax, dword [ebp - 0x6c]
sub eax, 0xe8512083
je 0x407953
jmp 0x4074a2
mov eax, dword [ebp - 0x6c]
sub eax, 0xeb473062
je 0x407a30
jmp 0x4074b5
mov eax, dword [ebp - 0x6c]
sub eax, 0xf347abd3
je 0x407cfa
jmp 0x4074c8
mov eax, dword [ebp - 0x6c]
sub eax, 0x7e4f2bb
je 0x407819
jmp 0x4074db
mov eax, dword [ebp - 0x6c]
sub eax, 0xa4672ea
je 0x407aa9
jmp 0x4074ee
mov eax, dword [ebp - 0x6c]
sub eax, 0x12b95836
je 0x407877
jmp 0x407501
mov eax, dword [ebp - 0x6c]
sub eax, 0x1962e922
je 0x407c75
jmp 0x407514
mov eax, dword [ebp - 0x6c]
sub eax, 0x1ae1a578
je 0x407f3e
jmp 0x407527
mov eax, dword [ebp - 0x6c]
sub eax, 0x2c7c1ad6
je 0x40773a
jmp 0x40753a
mov eax, dword [ebp - 0x6c]
sub eax, 0x2e004459
je 0x40795f
jmp 0x40754d
mov eax, dword [ebp - 0x6c]
sub eax, 0x3b2fa29f
je 0x407d06
jmp 0x407560
mov eax, dword [ebp - 0x6c]
sub eax, 0x3b9ea71d
je 0x407c08
jmp 0x407573
mov eax, dword [ebp - 0x6c]
sub eax, 0x3c9ef23a
je 0x407ae4
jmp 0x407586
mov eax, dword [ebp - 0x6c]
sub eax, 0x4317c820
je 0x4078aa
jmp 0x407599
mov eax, dword [ebp - 0x6c]
sub eax, 0x498905df
je 0x407695
jmp 0x4075ac
mov eax, dword [ebp - 0x6c]
sub eax, 0x4c771080
je 0x40778a
jmp 0x4075bf
mov eax, dword [ebp - 0x6c]
sub eax, 0x4d17d81f
je 0x407aff
jmp 0x4075d2
mov eax, dword [ebp - 0x6c]
sub eax, 0x543f07f2
je 0x407f12
jmp 0x4075e5
mov eax, dword [ebp - 0x6c]
sub eax, 0x58348524
je 0x40780d
jmp 0x4075f8
mov eax, dword [ebp - 0x6c]
sub eax, 0x59e5a7d7
je 0x407eba
jmp 0x40760b
mov eax, dword [ebp - 0x6c]
sub eax, 0x5bc0c124
je 0x407fd4
jmp 0x40761e
mov eax, dword [ebp - 0x6c]
sub eax, 0x5ccbe3d0
je 0x407b31
jmp 0x407631
mov eax, dword [ebp - 0x6c]
sub eax, 0x5ce70caf
je 0x4079bd
jmp 0x407644
mov eax, dword [ebp - 0x6c]
sub eax, 0x622d0507
je 0x407ac4
jmp 0x407657
mov eax, dword [ebp - 0x6c]
sub eax, 0x6dcaa40c
je 0x407f7a
jmp 0x40766a
mov eax, dword [ebp - 0x6c]
sub eax, 0x78bc6eb5
je 0x407e13
jmp 0x40767d
mov eax, dword [ebp - 0x6c]
sub eax, 0x79ca8452
je 0x40797d
jmp 0x407690
jmp 0x407fde
mov al, byte [ebp - 0x5a]
mov cl, byte [ebp - 0x59]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1ae1a578
mov ecx, 0xa5e489fc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
mov ecx, dword [0x43b58c]
mov eax, dword [0x43b588]
mov edx, ecx
add edx, 0xf61e921b
sub edx, 1
sub edx, 0xf61e921b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1ae1a578
mov ecx, 0x2c7c1ad6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov dword [ebp - 0x60], 0x8245dbeb
jmp 0x407fde
mov ecx, dword [ebp - 0x68]
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
sub esp, 0xffc
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x54]
mov dword [eax], ecx
mov dword [ebp - 0x60], 0x4c771080
jmp 0x407fde
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x4c]
mov esi, 0xffffffff
mov eax, 0x7e4f2bb
mov ecx, 0xb5347e54
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov eax, dword [ebp - 0x58]
mov byte [eax], 0
mov dword [ebp - 0x60], 0x58348524
jmp 0x407fde
mov dword [ebp - 0x60], 0x82e069bd
jmp 0x407fde
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x60], 0x12b95836
jmp 0x407fde
mov edx, dword [ebp - 0x34]
mov esi, 0xffffffff
mov eax, 0x2e004459
mov ecx, 0x9328b816
cmp edx, esi
cmove eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x60], 0x4317c820
jmp 0x407fde
mov eax, dword [0x43b58c]
mov ecx, dword [0x43b588]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb1d951e0
mov ecx, 0xb028c214
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov eax, dword [ebp - 0x30]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x58]
mov byte [eax], 0
mov eax, dword [0x43b58c]
mov ecx, dword [0x43b588]
mov edx, eax
add edx, 0x8f27405a
sub edx, 1
sub edx, 0x8f27405a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb1d951e0
mov ecx, 0xe8512083
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov dword [ebp - 0x60], 0x82e069bd
jmp 0x407fde
mov eax, dword [ebp - 0x44]
mov byte [eax], 0
mov dword [ebp - 0x60], 0xc66b7811
jmp 0x407fde
mov dword [ebp - 0x60], 0x79ca8452
jmp 0x407fde
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x38]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x60], 0x5ce70caf
jmp 0x407fde
mov ecx, dword [0x43b58c]
mov eax, dword [0x43b588]
mov edx, ecx
sub edx, 0x6526388b
sub edx, 1
add edx, 0x6526388b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa82bb74a
mov ecx, 0xeb473062
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov eax, dword [ebp - 0x2c]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x25], al
mov ecx, dword [0x43b58c]
mov eax, dword [0x43b588]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa82bb74a
mov ecx, 0xa4672ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov dl, byte [ebp - 0x25]
mov eax, 0x622d0507
mov ecx, 0xd8b747ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov dword [ebp - 0x60], 0x80e901d2
jmp 0x407fde
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x60], 0x3c9ef23a
jmp 0x407fde
mov edx, dword [ebp - 0x24]
mov eax, 0xab0ee3be
mov ecx, 0x4d17d81f
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov eax, dword [ebp - 0x44]
mov byte [eax], 1
mov dword [ebp - 0x60], 0xe4d2fded
jmp 0x407fde
mov dword [ebp - 0x60], 0x80e901d2
jmp 0x407fde
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x60], 0x5ccbe3d0
jmp 0x407fde
mov eax, dword [0x43b58c]
mov ecx, dword [0x43b588]
mov edx, eax
add edx, 0xedc7ce17
sub edx, 1
sub edx, 0xedc7ce17
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6dcaa40c
mov ecx, 0xe1dd6c86
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
mov esi, dword [eax]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x20]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1a], al
mov eax, dword [0x43b58c]
mov ecx, dword [0x43b588]
mov edx, eax
sub edx, 0x2dc1294b
sub edx, 1
add edx, 0x2dc1294b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6dcaa40c
mov ecx, 0x3b9ea71d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov dl, byte [ebp - 0x1a]
mov eax, 0x8527bdd3
mov ecx, 0xce5ffeeb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov dword [ebp - 0x60], 0x80e901d2
jmp 0x407fde
mov eax, dword [0x43b58c]
mov ecx, dword [0x43b588]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9eb133bf
mov ecx, 0x1962e922
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ecx]
setne al
and al, 1
mov byte [ebp - 0x19], al
mov ecx, dword [0x43b58c]
mov eax, dword [0x43b588]
mov edx, ecx
add edx, 0x55e9a731
sub edx, 1
sub edx, 0x55e9a731
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9eb133bf
mov ecx, 0xf347abd3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov dword [ebp - 0x60], 0x3b2fa29f
jmp 0x407fde
mov ecx, dword [0x43b58c]
mov eax, dword [0x43b588]
mov edx, ecx
add edx, 0x5a767069
sub edx, 1
sub edx, 0x5a767069
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb10da667
mov ecx, 0xd7f0628e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov ecx, dword [0x43b58c]
mov eax, dword [0x43b588]
mov edx, ecx
add edx, 0xda6153af
sub edx, 1
sub edx, 0xda6153af
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb10da667
mov ecx, 0xcc547f19
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov dl, byte [ebp - 0x19]
mov eax, 0x78bc6eb5
mov ecx, 0xdd59576d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov dword [ebp - 0x60], 0x80e901d2
jmp 0x407fde
mov dword [ebp - 0x60], 0x79ca8452
jmp 0x407fde
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x60], 0xadbb1478
jmp 0x407fde
mov eax, dword [ebp - 0x18]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x44]
mov cl, byte [eax]
mov eax, dword [ebp - 0x58]
and cl, 1
mov byte [eax], cl
mov dword [ebp - 0x60], 0x82e069bd
jmp 0x407fde
mov eax, dword [0x43b58c]
mov ecx, dword [0x43b588]
mov edx, eax
sub edx, 0xf25a242f
sub edx, 1
add edx, 0xf25a242f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5bc0c124
mov ecx, 0x59e5a7d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov eax, dword [ebp - 0x58]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x11], al
mov eax, dword [0x43b58c]
mov ecx, dword [0x43b588]
mov edx, eax
sub edx, 0x53fa3b55
sub edx, 1
add edx, 0x53fa3b55
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5bc0c124
mov ecx, 0x543f07f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x407fde
mov dword [ebp - 0x60], 0x99cddf00
jmp 0x407fde
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00423960
mov eax, dword [ebp - 0x70]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x60], 0xa5e489fc
jmp 0x407fde
mov eax, dword [ebp - 0x30]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x58]
mov byte [eax], 0
mov dword [ebp - 0x60], 0xb028c214
jmp 0x407fde
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x60], 0xeb473062
jmp 0x407fde
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
mov esi, dword [eax]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x20]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x60], 0xe1dd6c86
jmp 0x407fde
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x60], 0x1962e922
jmp 0x407fde
mov dword [ebp - 0x60], 0xd7f0628e
jmp 0x407fde
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x60], 0x59e5a7d7
jmp 0x4072d7