Function at 0x411c20
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x60
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x60], eax
mov eax, dword [0x446080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
mov edx, ecx
add edx, 0xca650f49
sub edx, 1
sub edx, 0xca650f49
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x56], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x55], al
mov dword [ebp - 0x5c], 0x1aed964
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x68], eax
sub eax, 0x84b58e02
je 0x4131a9
jmp 0x411c95
mov eax, dword [ebp - 0x68]
sub eax, 0x86397385
je 0x412772
jmp 0x411ca8
mov eax, dword [ebp - 0x68]
sub eax, 0x874c2432
je 0x412b41
jmp 0x411cbb
mov eax, dword [ebp - 0x68]
sub eax, 0x875bc568
je 0x41262a
jmp 0x411cce
mov eax, dword [ebp - 0x68]
sub eax, 0x880ff322
je 0x412f53
jmp 0x411ce1
mov eax, dword [ebp - 0x68]
sub eax, 0x899f597c
je 0x413042
jmp 0x411cf4
mov eax, dword [ebp - 0x68]
sub eax, 0x8ab8bffd
je 0x4125a5
jmp 0x411d07
mov eax, dword [ebp - 0x68]
sub eax, 0x8ae90264
je 0x412f99
jmp 0x411d1a
mov eax, dword [ebp - 0x68]
sub eax, 0x90ed423a
je 0x41319d
jmp 0x411d2d
mov eax, dword [ebp - 0x68]
sub eax, 0x917d4daf
je 0x412967
jmp 0x411d40
mov eax, dword [ebp - 0x68]
sub eax, 0x9391e6f8
je 0x412e47
jmp 0x411d53
mov eax, dword [ebp - 0x68]
sub eax, 0x9917f174
je 0x412f3a
jmp 0x411d66
mov eax, dword [ebp - 0x68]
sub eax, 0x99f06227
je 0x413016
jmp 0x411d79
mov eax, dword [ebp - 0x68]
sub eax, 0x9f5312bc
je 0x412bc0
jmp 0x411d8c
mov eax, dword [ebp - 0x68]
sub eax, 0xa2095086
je 0x4127cc
jmp 0x411d9f
mov eax, dword [ebp - 0x68]
sub eax, 0xaf021b3f
je 0x41277e
jmp 0x411db2
mov eax, dword [ebp - 0x68]
sub eax, 0xb113cbde
je 0x41289a
jmp 0x411dc5
mov eax, dword [ebp - 0x68]
sub eax, 0xb38480c3
je 0x413115
jmp 0x411dd8
mov eax, dword [ebp - 0x68]
sub eax, 0xb7ab4fbe
je 0x412c0e
jmp 0x411deb
mov eax, dword [ebp - 0x68]
sub eax, 0xbd2a283a
je 0x4122c1
jmp 0x411dfe
mov eax, dword [ebp - 0x68]
sub eax, 0xbd7724fd
je 0x412c2e
jmp 0x411e11
mov eax, dword [ebp - 0x68]
sub eax, 0xcc9e9986
je 0x412d3a
jmp 0x411e24
mov eax, dword [ebp - 0x68]
sub eax, 0xd8055ff9
je 0x41304e
jmp 0x411e37
mov eax, dword [ebp - 0x68]
sub eax, 0xda7699d2
je 0x4129f4
jmp 0x411e4a
mov eax, dword [ebp - 0x68]
sub eax, 0xdf0e9ed1
je 0x41317f
jmp 0x411e5d
mov eax, dword [ebp - 0x68]
sub eax, 0xe0c4e0b2
je 0x4123e6
jmp 0x411e70
mov eax, dword [ebp - 0x68]
sub eax, 0xea1b7d77
je 0x41241f
jmp 0x411e83
mov eax, dword [ebp - 0x68]
sub eax, 0xecd86c7a
je 0x412f2e
jmp 0x411e96
mov eax, dword [ebp - 0x68]
sub eax, 0xf29bda39
je 0x412492
jmp 0x411ea9
mov eax, dword [ebp - 0x68]
sub eax, 0xf5ae0fe9
je 0x412a7a
jmp 0x411ebc
mov eax, dword [ebp - 0x68]
sub eax, 0xf6d8cee2
je 0x412d10
jmp 0x411ecf
mov eax, dword [ebp - 0x68]
sub eax, 0xf8dad40e
je 0x4121f2
jmp 0x411ee2
mov eax, dword [ebp - 0x68]
sub eax, 0xfa3b2d5c
je 0x412ec6
jmp 0x411ef5
mov eax, dword [ebp - 0x68]
sub eax, 0xfbc49fe7
je 0x4126cc
jmp 0x411f08
mov eax, dword [ebp - 0x68]
sub eax, 0x1aed964
je 0x4121cc
jmp 0x411f1b
mov eax, dword [ebp - 0x68]
sub eax, 0x2b78174
je 0x41229b
jmp 0x411f2e
mov eax, dword [ebp - 0x68]
sub eax, 0xa02e70f
je 0x412981
jmp 0x411f41
mov eax, dword [ebp - 0x68]
sub eax, 0xc170d77
je 0x412760
jmp 0x411f54
mov eax, dword [ebp - 0x68]
sub eax, 0xc68ba83
je 0x412334
jmp 0x411f67
mov eax, dword [ebp - 0x68]
sub eax, 0xded0246
je 0x412d1c
jmp 0x411f7a
mov eax, dword [ebp - 0x68]
sub eax, 0xf01703a
je 0x412754
jmp 0x411f8d
mov eax, dword [ebp - 0x68]
sub eax, 0x13970f86
je 0x412659
jmp 0x411fa0
mov eax, dword [ebp - 0x68]
sub eax, 0x183d9be2
je 0x412413
jmp 0x411fb3
mov eax, dword [ebp - 0x68]
sub eax, 0x1a7a1697
je 0x412cf5
jmp 0x411fc6
mov eax, dword [ebp - 0x68]
sub eax, 0x23e9f558
je 0x4130fe
jmp 0x411fd9
mov eax, dword [ebp - 0x68]
sub eax, 0x24678e36
je 0x4131e5
jmp 0x411fec
mov eax, dword [ebp - 0x68]
sub eax, 0x2502e4bb
je 0x412e20
jmp 0x411fff
mov eax, dword [ebp - 0x68]
sub eax, 0x27d1e405
je 0x413173
jmp 0x412012
mov eax, dword [ebp - 0x68]
sub eax, 0x2a1e6312
je 0x412e53
jmp 0x412025
mov eax, dword [ebp - 0x68]
sub eax, 0x2e3ea0af
je 0x4131f1
jmp 0x412038
mov eax, dword [ebp - 0x68]
sub eax, 0x2f4a219b
je 0x412532
jmp 0x41204b
mov eax, dword [ebp - 0x68]
sub eax, 0x32dc3c1a
je 0x412dad
jmp 0x41205e
mov eax, dword [ebp - 0x68]
sub eax, 0x34ba9efe
je 0x41295b
jmp 0x412071
mov eax, dword [ebp - 0x68]
sub eax, 0x3aeffa3c
je 0x412aed
jmp 0x412084
mov eax, dword [ebp - 0x68]
sub eax, 0x4bbe8612
je 0x41321f
jmp 0x412097
mov eax, dword [ebp - 0x68]
sub eax, 0x51c15904
je 0x412a5f
jmp 0x4120aa
mov eax, dword [ebp - 0x68]
sub eax, 0x544f50bf
je 0x4130af
jmp 0x4120bd
mov eax, dword [ebp - 0x68]
sub eax, 0x56f4f05f
je 0x413022
jmp 0x4120d0
mov eax, dword [ebp - 0x68]
sub eax, 0x5da97505
je 0x412b4d
jmp 0x4120e3
mov eax, dword [ebp - 0x68]
sub eax, 0x60b248cf
je 0x412645
jmp 0x4120f6
mov eax, dword [ebp - 0x68]
sub eax, 0x6953d32f
je 0x41287f
jmp 0x412109
mov eax, dword [ebp - 0x68]
sub eax, 0x6c2e2748
je 0x41228f
jmp 0x41211c
mov eax, dword [ebp - 0x68]
sub eax, 0x7216f153
je 0x412c1a
jmp 0x41212f
mov eax, dword [ebp - 0x68]
sub eax, 0x75332941
je 0x413136
jmp 0x412142
mov eax, dword [ebp - 0x68]
sub eax, 0x7593fe72
je 0x412526
mov al, byte [ebp - 0x56]
mov cl, byte [ebp - 0x55]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x899f597c
mov ecx, 0xf8dad40e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
mov edx, ecx
sub edx, 0x937da1fc
sub edx, 1
add edx, 0x937da1fc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x899f597c
mov ecx, 0x6c2e2748
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov dword [ebp - 0x5c], 0x2b78174
jmp 0x413229
mov ecx, dword [ebp - 0x64]
push eax
sub esp, 0xffc
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x50]
mov dword [eax], ecx
mov dword [ebp - 0x5c], 0xbd2a283a
jmp 0x413229
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
mov edx, ecx
sub edx, 0xc9f719bd
sub edx, 1
add edx, 0xc9f719bd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd8055ff9
mov ecx, 0xc68ba83
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x2d], al
mov eax, dword [0x44758c]
mov ecx, dword [0x447588]
mov edx, eax
add edx, 0x4f958e4a
sub edx, 1
sub edx, 0x4f958e4a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd8055ff9
mov ecx, 0xe0c4e0b2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov dl, byte [ebp - 0x2d]
mov eax, 0xea1b7d77
mov ecx, 0x77909821
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov dword [ebp - 0x5c], 0x880ff322
jmp 0x413229
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
mov edx, ecx
add edx, 0xd48522ac
sub edx, 1
sub edx, 0xd48522ac
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x544f50bf
mov ecx, 0xf29bda39
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x2c], eax
mov eax, dword [0x44758c]
mov ecx, dword [0x447588]
mov edx, eax
add edx, 0xe93ee79a
sub edx, 1
sub edx, 0xe93ee79a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x544f50bf
mov ecx, 0x7593fe72
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
mov edx, ecx
sub edx, 0x6aacbbf6
sub edx, 1
add edx, 0x6aacbbf6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x23e9f558
mov ecx, 0x8ab8bffd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x2c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x25], al
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x23e9f558
mov ecx, 0x875bc568
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov dl, byte [ebp - 0x25]
mov eax, 0xc170d77
mov ecx, 0x60b248cf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x5c], 0x13970f86
jmp 0x413229
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
mov edx, ecx
sub edx, 0x93fa021f
sub edx, 1
add edx, 0x93fa021f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb38480c3
mov ecx, 0xfbc49fe7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov eax, dword [ebp - 0x24]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x54]
mov byte [eax], 0
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
mov edx, ecx
add edx, 0x4a9da02e
sub edx, 1
sub edx, 0x4a9da02e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb38480c3
mov ecx, 0xf01703a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov dword [ebp - 0x5c], 0x880ff322
jmp 0x413229
mov eax, dword [ebp - 0x40]
mov byte [eax], 0
mov dword [ebp - 0x5c], 0x86397385
jmp 0x413229
mov dword [ebp - 0x5c], 0xaf021b3f
jmp 0x413229
mov eax, dword [0x44758c]
mov ecx, dword [0x447588]
mov edx, eax
add edx, 0x7cb49426
sub edx, 1
sub edx, 0x7cb49426
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x75332941
mov ecx, 0xa2095086
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov eax, dword [ebp - 0x34]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x20], eax
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
mov edx, ecx
sub edx, 0xfc32e679
sub edx, 1
add edx, 0xfc32e679
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x75332941
mov ecx, 0x788d9f87
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov edx, dword [ebp - 0x20]
mov eax, 0xb113cbde
mov ecx, 0x917d4daf
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov eax, dword [0x44758c]
mov ecx, dword [0x447588]
mov edx, eax
sub edx, 0x2b014ec9
sub edx, 1
add edx, 0x2b014ec9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x27d1e405
mov ecx, 0x7b695eb2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov dword [ebp - 0x5c], 0x2a1e6312
jmp 0x413229
mov eax, dword [ebp - 0x34]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x19], al
mov dword [ebp - 0x5c], 0xa02e70f
jmp 0x413229
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
mov edx, ecx
add edx, 0x8dd3bdc6
sub edx, 1
sub edx, 0x8dd3bdc6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdf0e9ed1
mov ecx, 0xda7699d2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdf0e9ed1
mov ecx, 0x51c15904
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov dl, byte [ebp - 0x19]
mov eax, 0x7216f153
mov ecx, 0xf5ae0fe9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
mov edx, ecx
add edx, 0xe83c675f
sub edx, 1
sub edx, 0xe83c675f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7a23a621
mov ecx, 0x3aeffa3c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov eax, dword [ebp - 0x40]
mov byte [eax], 1
mov eax, dword [0x44758c]
mov ecx, dword [0x447588]
mov edx, eax
sub edx, 0x2096093
sub edx, 1
add edx, 0x2096093
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7a23a621
mov ecx, 0x874c2432
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov dword [ebp - 0x5c], 0x5da97505
jmp 0x413229
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
mov edx, ecx
add edx, 0xf024b6f4
sub edx, 1
sub edx, 0xf024b6f4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x90ed423a
mov ecx, 0x9f5312bc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov eax, dword [0x44758c]
mov ecx, dword [0x447588]
mov edx, eax
sub edx, 0x326b75e5
sub edx, 1
add edx, 0x326b75e5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x90ed423a
mov ecx, 0xb7ab4fbe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov dword [ebp - 0x5c], 0x2a1e6312
jmp 0x413229
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x5c], 0xbd7724fd
jmp 0x413229
mov eax, dword [0x44758c]
mov ecx, dword [0x447588]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x84b58e02
mov ecx, 0x76e00804
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov dl, byte [ebp - 0x13]
mov eax, 0xf6d8cee2
mov ecx, 0xded0246
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov dword [ebp - 0x5c], 0x2a1e6312
jmp 0x413229
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
cmp eax, dword [ecx]
setne al
and al, 1
mov byte [ebp - 0x12], al
mov dword [ebp - 0x5c], 0xcc9e9986
jmp 0x413229
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
mov edx, ecx
sub edx, 0xed87be31
sub edx, 1
add edx, 0xed87be31
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x24678e36
mov ecx, 0x32dc3c1a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
mov edx, ecx
sub edx, 0x8fb1b614
sub edx, 1
add edx, 0x8fb1b614
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x24678e36
mov ecx, 0x2502e4bb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov dl, byte [ebp - 0x12]
mov eax, 0x9391e6f8
mov ecx, 0x7bbfc8e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov dword [ebp - 0x5c], 0xaf021b3f
jmp 0x413229
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
mov edx, ecx
add edx, 0xeb91da7a
sub edx, 1
sub edx, 0xeb91da7a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2e3ea0af
mov ecx, 0xfa3b2d5c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x44758c]
mov ecx, dword [0x447588]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2e3ea0af
mov ecx, 0xecd86c7a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov dword [ebp - 0x5c], 0x9917f174
jmp 0x413229
mov eax, dword [ebp - 0x40]
mov cl, byte [eax]
mov eax, dword [ebp - 0x54]
and cl, 1
mov byte [eax], cl
mov dword [ebp - 0x5c], 0x880ff322
jmp 0x413229
mov eax, dword [0x44758c]
mov ecx, dword [0x447588]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4bbe8612
mov ecx, 0x8ae90264
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov eax, dword [ebp - 0x54]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x11], al
mov ecx, dword [0x44758c]
mov eax, dword [0x447588]
mov edx, ecx
add edx, 0x3e1ab355
sub edx, 1
sub edx, 0x3e1ab355
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4bbe8612
mov ecx, 0x99f06227
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x413229
mov dword [ebp - 0x5c], 0x56f4f05f
jmp 0x413229
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042ebf0
mov eax, dword [ebp - 0x6c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x5c], 0xf8dad40e
jmp 0x413229
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x5c], 0xc68ba83
jmp 0x413229
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x5c], 0xf29bda39
jmp 0x413229
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x2c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x5c], 0x8ab8bffd
jmp 0x413229
mov eax, dword [ebp - 0x24]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x54]
mov byte [eax], 0
mov dword [ebp - 0x5c], 0xfbc49fe7
jmp 0x413229
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
mov eax, dword [ebp - 0x34]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x5c], 0xa2095086
jmp 0x413229
mov dword [ebp - 0x5c], 0x7b695eb2
jmp 0x413229
mov dword [ebp - 0x5c], 0xda7699d2
jmp 0x413229
mov dword [ebp - 0x5c], 0x9f5312bc
jmp 0x413229
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x44]
mov esi, dword [eax]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x18]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x5c], 0x76e00804
jmp 0x413229
mov dword [ebp - 0x5c], 0x32dc3c1a
jmp 0x413229
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x5c], 0xfa3b2d5c
jmp 0x413229
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x5c], 0x8ae90264
jmp 0x411c7f