Function at 0x406940
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x105c
call fcn.00421b20
mov eax, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov eax, dword [0x438080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1030], eax
mov dword [ebp - 0x1044], 0x3f1626c1
mov eax, dword [ebp - 0x1044]
mov dword [ebp - 0x1048], eax
sub eax, 0x87185ee0
je 0x407098
jmp 0x4069cd
mov eax, dword [ebp - 0x1048]
sub eax, 0x8c140628
je 0x4072ef
jmp 0x4069e3
mov eax, dword [ebp - 0x1048]
sub eax, 0x91209836
je 0x40735d
jmp 0x4069f9
mov eax, dword [ebp - 0x1048]
sub eax, 0x93efffdd
je 0x40790d
jmp 0x406a0f
mov eax, dword [ebp - 0x1048]
sub eax, 0xa6b01d67
je 0x407178
jmp 0x406a25
mov eax, dword [ebp - 0x1048]
sub eax, 0xa8f9c9c0
je 0x406f62
jmp 0x406a3b
mov eax, dword [ebp - 0x1048]
sub eax, 0xa92a7b2f
je 0x40729e
jmp 0x406a51
mov eax, dword [ebp - 0x1048]
sub eax, 0xaba1f4ec
je 0x40700b
jmp 0x406a67
mov eax, dword [ebp - 0x1048]
sub eax, 0xad29df0d
je 0x4074d2
jmp 0x406a7d
mov eax, dword [ebp - 0x1048]
sub eax, 0xad70ca4d
je 0x407aad
jmp 0x406a93
mov eax, dword [ebp - 0x1048]
sub eax, 0xad9101d7
je 0x407b5e
jmp 0x406aa9
mov eax, dword [ebp - 0x1048]
sub eax, 0xadf8eede
je 0x407795
jmp 0x406abf
mov eax, dword [ebp - 0x1048]
sub eax, 0xb70fe339
je 0x406ffc
jmp 0x406ad5
mov eax, dword [ebp - 0x1048]
sub eax, 0xbc088588
je 0x4070b9
jmp 0x406aeb
mov eax, dword [ebp - 0x1048]
sub eax, 0xc97f0245
je 0x407120
jmp 0x406b01
mov eax, dword [ebp - 0x1048]
sub eax, 0xca961357
je 0x407ae1
jmp 0x406b17
mov eax, dword [ebp - 0x1048]
sub eax, 0xd0087f23
je 0x407637
jmp 0x406b2d
mov eax, dword [ebp - 0x1048]
sub eax, 0xd1243de7
je 0x407978
jmp 0x406b43
mov eax, dword [ebp - 0x1048]
sub eax, 0xd34cb141
je 0x40754f
jmp 0x406b59
mov eax, dword [ebp - 0x1048]
sub eax, 0xd5e7cd72
je 0x407187
jmp 0x406b6f
mov eax, dword [ebp - 0x1048]
sub eax, 0xdcce02a8
je 0x407b7c
jmp 0x406b85
mov eax, dword [ebp - 0x1048]
sub eax, 0xde50c9c1
je 0x40785c
jmp 0x406b9b
mov eax, dword [ebp - 0x1048]
sub eax, 0xdf3fa427
je 0x406fab
jmp 0x406bb1
mov eax, dword [ebp - 0x1048]
sub eax, 0xe295ecb9
je 0x4076fe
jmp 0x406bc7
mov eax, dword [ebp - 0x1048]
sub eax, 0xe547fbfa
je 0x407255
jmp 0x406bdd
mov eax, dword [ebp - 0x1048]
sub eax, 0xf6a876fa
je 0x407077
jmp 0x406bf3
mov eax, dword [ebp - 0x1048]
sub eax, 0xfbfc158c
je 0x4074e1
jmp 0x406c09
mov eax, dword [ebp - 0x1048]
sub eax, 0x5fa76d5
je 0x4076b5
jmp 0x406c1f
mov eax, dword [ebp - 0x1048]
sub eax, 0x104ab3e5
je 0x4075e6
jmp 0x406c35
mov eax, dword [ebp - 0x1048]
sub eax, 0x1257e42f
je 0x407b8b
jmp 0x406c4b
mov eax, dword [ebp - 0x1048]
sub eax, 0x13283d79
je 0x407b40
jmp 0x406c61
mov eax, dword [ebp - 0x1048]
sub eax, 0x1a391607
je 0x407ad2
jmp 0x406c77
mov eax, dword [ebp - 0x1048]
sub eax, 0x1b017535
je 0x407196
jmp 0x406c8d
mov eax, dword [ebp - 0x1048]
sub eax, 0x1bbb16cb
je 0x407b6d
jmp 0x406ca3
mov eax, dword [ebp - 0x1048]
sub eax, 0x1ccab67f
je 0x4073da
jmp 0x406cb9
mov eax, dword [ebp - 0x1048]
sub eax, 0x23e2ca97
je 0x406f2b
jmp 0x406ccf
mov eax, dword [ebp - 0x1048]
sub eax, 0x2666c083
je 0x407af7
jmp 0x406ce5
mov eax, dword [ebp - 0x1048]
sub eax, 0x27d84feb
je 0x4078bc
jmp 0x406cfb
mov eax, dword [ebp - 0x1048]
sub eax, 0x2a659b45
je 0x407441
jmp 0x406d11
mov eax, dword [ebp - 0x1048]
sub eax, 0x2a75620b
je 0x40768f
jmp 0x406d27
mov eax, dword [ebp - 0x1048]
sub eax, 0x36edbb32
je 0x4071e3
jmp 0x406d3d
mov eax, dword [ebp - 0x1048]
sub eax, 0x3762ec7d
je 0x40791c
jmp 0x406d53
mov eax, dword [ebp - 0x1048]
sub eax, 0x3af7cc60
je 0x4079ee
jmp 0x406d69
mov eax, dword [ebp - 0x1048]
sub eax, 0x3baa813f
je 0x406f4c
jmp 0x406d7f
mov eax, dword [ebp - 0x1048]
sub eax, 0x3f1626c1
je 0x406efa
jmp 0x406d95
mov eax, dword [ebp - 0x1048]
sub eax, 0x406f92e5
je 0x4077e6
jmp 0x406dab
mov eax, dword [ebp - 0x1048]
sub eax, 0x446cba78
je 0x4072ad
jmp 0x406dc1
mov eax, dword [ebp - 0x1048]
sub eax, 0x48c3c9f3
je 0x407a81
jmp 0x406dd7
mov eax, dword [ebp - 0x1048]
sub eax, 0x4a966896
je 0x407a72
jmp 0x406ded
mov eax, dword [ebp - 0x1048]
sub eax, 0x4cbebaab
je 0x4073e9
jmp 0x406e03
mov eax, dword [ebp - 0x1048]
sub eax, 0x4fe7d2ff
je 0x4075c5
jmp 0x406e19
mov eax, dword [ebp - 0x1048]
sub eax, 0x56079379
je 0x407204
jmp 0x406e2f
mov eax, dword [ebp - 0x1048]
sub eax, 0x57af3287
je 0x407b4f
jmp 0x406e45
mov eax, dword [ebp - 0x1048]
sub eax, 0x5924831c
je 0x407abc
jmp 0x406e5b
mov eax, dword [ebp - 0x1048]
sub eax, 0x5f425cf0
je 0x407680
jmp 0x406e71
mov eax, dword [ebp - 0x1048]
sub eax, 0x5f96611a
je 0x4072ce
jmp 0x406e87
mov eax, dword [ebp - 0x1048]
sub eax, 0x6215488e
je 0x40786b
jmp 0x406e9d
mov eax, dword [ebp - 0x1048]
sub eax, 0x6bb408ed
je 0x407937
jmp 0x406eb3
mov eax, dword [ebp - 0x1048]
sub eax, 0x6d476589
je 0x4073f8
jmp 0x406ec9
mov eax, dword [ebp - 0x1048]
sub eax, 0x7afa8ede
je 0x4070cf
jmp 0x406edf
mov eax, dword [ebp - 0x1048]
sub eax, 0x7ce911a7
je 0x407774
jmp 0x406ef5
jmp 0x407b95
mov eax, dword [ebp - 0x1030]
mov dword [ebp - 0x1038], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x1038], eax
sete al
and al, 1
mov byte [ebp - 0x102a], al
mov dword [ebp - 0x1044], 0x23e2ca97
jmp 0x407b95
mov dl, byte [ebp - 0x102a]
mov eax, 0xaba1f4ec
mov ecx, 0x3baa813f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov byte [ebp - 0x1031], 0
mov dword [ebp - 0x1044], 0xa8f9c9c0
jmp 0x407b95
mov eax, dword [0x43957c]
mov ecx, dword [0x439578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xad70ca4d
mov ecx, 0xdf3fa427
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov eax, dword [0x43957c]
mov ecx, dword [0x439578]
mov edx, eax
sub edx, 0x5fbd03c5
sub edx, 1
add edx, 0x5fbd03c5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xad70ca4d
mov ecx, 0xb70fe339
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov dword [ebp - 0x1044], 0xd1243de7
jmp 0x407b95
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x103c], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x103c], eax
sete al
and al, 1
mov byte [ebp - 0x1029], al
mov dword [ebp - 0x1044], 0xf6a876fa
jmp 0x407b95
mov dl, byte [ebp - 0x1029]
mov eax, 0x7afa8ede
mov ecx, 0x87185ee0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov eax, dword [ebp - 0x1038]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1044], 0xbc088588
jmp 0x407b95
mov byte [ebp - 0x1031], 0
mov dword [ebp - 0x1044], 0xd1243de7
jmp 0x407b95
mov eax, dword [0x43957c]
mov ecx, dword [0x439578]
mov edx, eax
add edx, 0xd0a203b0
sub edx, 1
sub edx, 0xd0a203b0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5924831c
mov ecx, 0xc97f0245
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov byte [ebp - 0x103d], 0
mov eax, dword [0x43957c]
mov ecx, dword [0x439578]
mov edx, eax
sub edx, 0x7fd02a9e
sub edx, 1
add edx, 0x7fd02a9e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5924831c
mov ecx, 0xa6b01d67
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov dword [ebp - 0x1044], 0xd5e7cd72
jmp 0x407b95
mov dword [ebp - 0x1044], 0x1b017535
jmp 0x407b95
lea ecx, [ebp - 0x1010]
mov edx, dword [ebp - 0x1038]
lea eax, [ebp - 0x1018]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
mov dword [ebp - 0x1028], eax
mov dword [ebp - 0x1044], 0x36edbb32
jmp 0x407b95
mov edx, dword [ebp - 0x1028]
mov eax, 0x56079379
mov ecx, 0x446cba78
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov eax, dword [0x43957c]
mov ecx, dword [0x439578]
mov edx, eax
sub edx, 0x38e0e3ba
sub edx, 1
add edx, 0x38e0e3ba
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1a391607
mov ecx, 0xe547fbfa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov eax, dword [0x43957c]
mov ecx, dword [0x439578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1a391607
mov ecx, 0xa92a7b2f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov dword [ebp - 0x1044], 0x3762ec7d
jmp 0x407b95
cmp dword [ebp - 0x1018], 0
sete al
and al, 1
mov byte [ebp - 0x1023], al
mov dword [ebp - 0x1044], 0x5f96611a
jmp 0x407b95
mov dl, byte [ebp - 0x1023]
mov eax, 0x6d476589
mov ecx, 0x8c140628
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov ecx, dword [0x43957c]
mov eax, dword [0x439578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xca961357
mov ecx, 0x91209836
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov byte [ebp - 0x103d], 1
mov ecx, dword [0x43957c]
mov eax, dword [0x439578]
mov edx, ecx
add edx, 0xe2c36f1b
sub edx, 1
sub edx, 0xe2c36f1b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xca961357
mov ecx, 0x1ccab67f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov dword [ebp - 0x1044], 0x4cbebaab
jmp 0x407b95
mov dword [ebp - 0x1044], 0x3762ec7d
jmp 0x407b95
mov eax, dword [0x43957c]
mov ecx, dword [0x439578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2666c083
mov ecx, 0x2a659b45
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov ecx, dword [ebp - 0x1018]
lea edx, [ebp - 0x1010]
mov esi, dword [ebp - 0x103c]
lea eax, [ebp - 0x1014]
xor edi, edi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub esp, 0x14
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1022], al
mov eax, dword [0x43957c]
mov ecx, dword [0x439578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2666c083
mov ecx, 0xad29df0d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov dword [ebp - 0x1044], 0xfbfc158c
jmp 0x407b95
mov ecx, dword [0x43957c]
mov eax, dword [0x439578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x13283d79
mov ecx, 0xd34cb141
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov ecx, dword [0x43957c]
mov eax, dword [0x439578]
mov edx, ecx
sub edx, 0xf6facfed
sub edx, 1
add edx, 0xf6facfed
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x13283d79
mov ecx, 0x4fe7d2ff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov dl, byte [ebp - 0x1022]
mov eax, 0x104ab3e5
mov ecx, 0x2a75620b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov eax, dword [0x43957c]
mov ecx, dword [0x439578]
mov edx, eax
sub edx, 0x2cb2e6f3
sub edx, 1
add edx, 0x2cb2e6f3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x57af3287
mov ecx, 0xd0087f23
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov eax, dword [0x43957c]
mov ecx, dword [0x439578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x57af3287
mov ecx, 0x5f425cf0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov dword [ebp - 0x1044], 0x3762ec7d
jmp 0x407b95
mov eax, dword [ebp - 0x1014]
cmp eax, dword [ebp - 0x1018]
setne al
and al, 1
mov byte [ebp - 0x1021], al
mov dword [ebp - 0x1044], 0x5fa76d5
jmp 0x407b95
mov eax, dword [0x43957c]
mov ecx, dword [0x439578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xad9101d7
mov ecx, 0xe295ecb9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov ecx, dword [0x43957c]
mov eax, dword [0x439578]
mov edx, ecx
sub edx, 0xc7eb07fd
sub edx, 1
add edx, 0xc7eb07fd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xad9101d7
mov ecx, 0x7ce911a7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov dl, byte [ebp - 0x1021]
mov eax, 0x6215488e
mov ecx, 0xadf8eede
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov eax, dword [0x43957c]
mov ecx, dword [0x439578]
mov edx, eax
add edx, 0xacafea96
sub edx, 1
sub edx, 0xacafea96
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1bbb16cb
mov ecx, 0x406f92e5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov ecx, dword [0x43957c]
mov eax, dword [0x439578]
mov edx, ecx
sub edx, 0x6c059f49
sub edx, 1
add edx, 0x6c059f49
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1bbb16cb
mov ecx, 0xde50c9c1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov dword [ebp - 0x1044], 0x3762ec7d
jmp 0x407b95
mov eax, dword [0x43957c]
mov ecx, dword [0x439578]
mov edx, eax
sub edx, 0x1f797c99
sub edx, 1
add edx, 0x1f797c99
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdcce02a8
mov ecx, 0x27d84feb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov eax, dword [0x43957c]
mov ecx, dword [0x439578]
mov edx, eax
sub edx, 0x9d7297bc
sub edx, 1
add edx, 0x9d7297bc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdcce02a8
mov ecx, 0x93efffdd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov dword [ebp - 0x1044], 0x1b017535
jmp 0x407b95
mov eax, dword [ebp - 0x1038]
mov dword [ebp - 0x1020], eax
mov dword [ebp - 0x1044], 0x6bb408ed
jmp 0x407b95
mov eax, dword [ebp - 0x1020]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x103c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov al, byte [ebp - 0x103d]
and al, 1
mov byte [ebp - 0x1031], al
mov dword [ebp - 0x1044], 0xd1243de7
jmp 0x407b95
mov ecx, dword [0x43957c]
mov eax, dword [0x439578]
mov edx, ecx
add edx, 0xd1de8e07
sub edx, 1
sub edx, 0xd1de8e07
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1257e42f
mov ecx, 0x3af7cc60
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov al, byte [ebp - 0x1031]
and al, 1
mov byte [ebp - 0x1019], al
mov ecx, dword [0x43957c]
mov eax, dword [0x439578]
mov edx, ecx
sub edx, 0xdc4781cb
sub edx, 1
add edx, 0xdc4781cb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1257e42f
mov ecx, 0x4a966896
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407b95
mov dword [ebp - 0x1044], 0x48c3c9f3
jmp 0x407b95
mov al, byte [ebp - 0x1019]
and al, 1
movzx eax, al
mov dword [ebp - 0x104c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00421b10
mov eax, dword [ebp - 0x104c]
add esp, 0x105c
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1044], 0xdf3fa427
jmp 0x407b95
mov byte [ebp - 0x103d], 0
mov dword [ebp - 0x1044], 0xc97f0245
jmp 0x407b95
mov dword [ebp - 0x1044], 0xe547fbfa
jmp 0x407b95
mov byte [ebp - 0x103d], 1
mov dword [ebp - 0x1044], 0x91209836
jmp 0x407b95
mov ecx, dword [ebp - 0x1018]
lea edx, [ebp - 0x1010]
mov esi, dword [ebp - 0x103c]
lea eax, [ebp - 0x1014]
xor edi, edi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub esp, 0x14
mov dword [ebp - 0x1044], 0x2a659b45
jmp 0x407b95
mov dword [ebp - 0x1044], 0xd34cb141
jmp 0x407b95
mov dword [ebp - 0x1044], 0xd0087f23
jmp 0x407b95
mov dword [ebp - 0x1044], 0xe295ecb9
jmp 0x407b95
mov dword [ebp - 0x1044], 0x406f92e5
jmp 0x407b95
mov dword [ebp - 0x1044], 0x27d84feb
jmp 0x407b95
mov dword [ebp - 0x1044], 0x3af7cc60
jmp 0x4069b1