Function at 0x401010
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x6c
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x6c], eax
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x68], 0x59642fe8
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x74], eax
sub eax, 0x809e9eb3
je 0x4026a0
jmp 0x40104c
mov eax, dword [ebp - 0x74]
sub eax, 0x80b02845
je 0x401f65
jmp 0x40105f
mov eax, dword [ebp - 0x74]
sub eax, 0x83d45617
je 0x401bf5
jmp 0x401072
mov eax, dword [ebp - 0x74]
sub eax, 0x84ca1e48
je 0x4022d3
jmp 0x401085
mov eax, dword [ebp - 0x74]
sub eax, 0x8f01d5ad
je 0x40187d
jmp 0x401098
mov eax, dword [ebp - 0x74]
sub eax, 0x8fa20428
je 0x402373
jmp 0x4010ab
mov eax, dword [ebp - 0x74]
sub eax, 0x90928487
je 0x402650
jmp 0x4010be
mov eax, dword [ebp - 0x74]
sub eax, 0x96c31749
je 0x4018dd
jmp 0x4010d1
mov eax, dword [ebp - 0x74]
sub eax, 0x983ef25b
je 0x4027b7
jmp 0x4010e4
mov eax, dword [ebp - 0x74]
sub eax, 0x9b046bb2
je 0x402618
jmp 0x4010f7
mov eax, dword [ebp - 0x74]
sub eax, 0x9cebc780
je 0x401acd
jmp 0x40110a
mov eax, dword [ebp - 0x74]
sub eax, 0x9d0b5962
je 0x402537
jmp 0x40111d
mov eax, dword [ebp - 0x74]
sub eax, 0x9d160714
je 0x402440
jmp 0x401130
mov eax, dword [ebp - 0x74]
sub eax, 0x9df0c9f4
je 0x401bda
jmp 0x401143
mov eax, dword [ebp - 0x74]
sub eax, 0xa40c26c3
je 0x401ec3
jmp 0x401156
mov eax, dword [ebp - 0x74]
sub eax, 0xa69b7852
je 0x401a00
jmp 0x401169
mov eax, dword [ebp - 0x74]
sub eax, 0xa83d89df
je 0x40246c
jmp 0x40117c
mov eax, dword [ebp - 0x74]
sub eax, 0xab5efd5d
je 0x4027cd
jmp 0x40118f
mov eax, dword [ebp - 0x74]
sub eax, 0xae8bdcaf
je 0x401e27
jmp 0x4011a2
mov eax, dword [ebp - 0x74]
sub eax, 0xb33ffc8c
je 0x402711
jmp 0x4011b5
mov eax, dword [ebp - 0x74]
sub eax, 0xb52f28fb
je 0x4022b8
jmp 0x4011c8
mov eax, dword [ebp - 0x74]
sub eax, 0xb9dc69c2
je 0x401852
jmp 0x4011db
mov eax, dword [ebp - 0x74]
sub eax, 0xc0c4ba00
je 0x401cd3
jmp 0x4011ee
mov eax, dword [ebp - 0x74]
sub eax, 0xcb5d1c51
je 0x401c60
jmp 0x401201
mov eax, dword [ebp - 0x74]
sub eax, 0xd2e13e1c
je 0x402084
jmp 0x401214
mov eax, dword [ebp - 0x74]
sub eax, 0xd4e93581
je 0x4021c9
jmp 0x401227
mov eax, dword [ebp - 0x74]
sub eax, 0xd9b318a1
je 0x4019e2
jmp 0x40123a
mov eax, dword [ebp - 0x74]
sub eax, 0xdfa9f541
je 0x401ac1
jmp 0x40124d
mov eax, dword [ebp - 0x74]
sub eax, 0xe5e8622c
je 0x4024df
jmp 0x401260
mov eax, dword [ebp - 0x74]
sub eax, 0xe79d3505
je 0x40225a
jmp 0x401273
mov eax, dword [ebp - 0x74]
sub eax, 0xea57ef3d
je 0x40202a
jmp 0x401286
mov eax, dword [ebp - 0x74]
sub eax, 0xf1d99159
je 0x401ea8
jmp 0x401299
mov eax, dword [ebp - 0x74]
sub eax, 0xf517a344
je 0x402434
jmp 0x4012ac
mov eax, dword [ebp - 0x74]
sub eax, 0xf977ece0
je 0x40178b
jmp 0x4012bf
mov eax, dword [ebp - 0x74]
sub eax, 0xfacf5500
je 0x402367
jmp 0x4012d2
mov eax, dword [ebp - 0x74]
sub eax, 0xfb4b8ce3
je 0x402720
jmp 0x4012e5
mov eax, dword [ebp - 0x74]
sub eax, 0x8b86c8
je 0x4027ab
jmp 0x4012f8
mov eax, dword [ebp - 0x74]
sub eax, 0xe6907d
je 0x402557
jmp 0x40130b
mov eax, dword [ebp - 0x74]
sub eax, 0x36bc10b
je 0x40279f
jmp 0x40131e
mov eax, dword [ebp - 0x74]
sub eax, 0x6346931
je 0x40278d
jmp 0x401331
mov eax, dword [ebp - 0x74]
sub eax, 0x69d5e28
je 0x402321
jmp 0x401344
mov eax, dword [ebp - 0x74]
sub eax, 0x7c736a6
je 0x401b2d
jmp 0x401357
mov eax, dword [ebp - 0x74]
sub eax, 0xb8ee7f8
je 0x402753
jmp 0x40136a
mov eax, dword [ebp - 0x74]
sub eax, 0x1137a377
je 0x40173d
jmp 0x40137d
mov eax, dword [ebp - 0x74]
sub eax, 0x13177222
je 0x401f71
jmp 0x401390
mov eax, dword [ebp - 0x74]
sub eax, 0x13a66191
je 0x402142
jmp 0x4013a3
mov eax, dword [ebp - 0x74]
sub eax, 0x14f56134
je 0x4026f6
jmp 0x4013b6
mov eax, dword [ebp - 0x74]
sub eax, 0x1727c13b
je 0x4021e4
jmp 0x4013c9
mov eax, dword [ebp - 0x74]
sub eax, 0x1c3c0cff
je 0x401db4
jmp 0x4013dc
mov eax, dword [ebp - 0x74]
sub eax, 0x1c84c787
je 0x40273e
jmp 0x4013ef
mov eax, dword [ebp - 0x74]
sub eax, 0x237b13a4
je 0x402702
jmp 0x401402
mov eax, dword [ebp - 0x74]
sub eax, 0x25093436
je 0x40220c
jmp 0x401415
mov eax, dword [ebp - 0x74]
sub eax, 0x2afae04d
je 0x4020e8
jmp 0x401428
mov eax, dword [ebp - 0x74]
sub eax, 0x2fe1684e
je 0x4020f4
jmp 0x40143b
mov eax, dword [ebp - 0x74]
sub eax, 0x35c569d1
je 0x4023e6
jmp 0x40144e
mov eax, dword [ebp - 0x74]
sub eax, 0x3934f96c
je 0x4026af
jmp 0x401461
mov eax, dword [ebp - 0x74]
sub eax, 0x3e299b7a
je 0x401a73
jmp 0x401474
mov eax, dword [ebp - 0x74]
sub eax, 0x424b5c21
je 0x401948
jmp 0x401487
mov eax, dword [ebp - 0x74]
sub eax, 0x48ac2a49
je 0x401d52
jmp 0x40149a
mov eax, dword [ebp - 0x74]
sub eax, 0x4995db76
je 0x401fbf
jmp 0x4014ad
mov eax, dword [ebp - 0x74]
sub eax, 0x499cdd80
je 0x402732
jmp 0x4014c0
mov eax, dword [ebp - 0x74]
sub eax, 0x4aa021cc
je 0x401da8
jmp 0x4014d3
mov eax, dword [ebp - 0x74]
sub eax, 0x4daf52cc
je 0x402036
jmp 0x4014e6
mov eax, dword [ebp - 0x74]
sub eax, 0x4ebc0acb
je 0x4025a5
jmp 0x4014f9
mov eax, dword [ebp - 0x74]
sub eax, 0x4fbc2e15
je 0x4019ee
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
add edx, 0xb3a90a45
sub edx, 1
sub edx, 0xb3a90a45
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x90928487
mov ecx, 0xf977ece0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov eax, dword [ebp - 0x60]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x64], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x64], eax
sete al
and al, 1
mov byte [ebp - 0x3e], al
mov ecx, dword [0x41c3a4]
mov eax, dword [0x41c3a0]
mov edx, ecx
add edx, 0x7351abc6
sub edx, 1
sub edx, 0x7351abc6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x90928487
mov ecx, 0xb9dc69c2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dl, byte [ebp - 0x3e]
mov eax, 0x7ee986d2
mov ecx, 0x5c246adf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dword [ebp - 0x68], 0x6b307256
jmp 0x4027d4
mov ecx, dword [0x41c3a4]
mov eax, dword [0x41c3a0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x809e9eb3
mov ecx, 0x424b5c21
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov eax, dword [ebp - 0x54]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x3d], al
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
add edx, 0x5791600a
sub edx, 1
sub edx, 0x5791600a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x809e9eb3
mov ecx, 0x5123b625
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dword [ebp - 0x68], 0x6b307256
jmp 0x4027d4
mov ecx, dword [0x41c3a4]
mov eax, dword [0x41c3a0]
mov edx, ecx
add edx, 0x7d12d0f8
sub edx, 1
sub edx, 0x7d12d0f8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3934f96c
mov ecx, 0x3e299b7a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
add edx, 0x4d409e80
sub edx, 1
sub edx, 0x4d409e80
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3934f96c
mov ecx, 0xdfa9f541
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dword [ebp - 0x68], 0x9cebc780
jmp 0x4027d4
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x68], 0x7664f785
jmp 0x4027d4
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x3c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x35], al
mov ecx, dword [0x41c3a4]
mov eax, dword [0x41c3a0]
mov edx, ecx
sub edx, 0xac513530
sub edx, 1
add edx, 0xac513530
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6a9707db
mov ecx, 0x9df0c9f4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dl, byte [ebp - 0x35]
mov eax, 0x83d45617
mov ecx, 0x6ac3472d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov ecx, dword [0x41c3a4]
mov eax, dword [0x41c3a0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x14f56134
mov ecx, 0xcb5d1c51
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov ecx, dword [0x41c3a4]
mov eax, dword [0x41c3a0]
mov edx, ecx
sub edx, 0xca39c883
sub edx, 1
add edx, 0xca39c883
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x14f56134
mov ecx, 0xc0c4ba00
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dword [ebp - 0x68], 0x9d160714
jmp 0x4027d4
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
sub edx, 0xddaf3993
sub edx, 1
add edx, 0xddaf3993
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x237b13a4
mov ecx, 0x4aa021cc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dword [ebp - 0x68], 0x1c3c0cff
jmp 0x4027d4
mov ecx, dword [0x41c3a4]
mov eax, dword [0x41c3a0]
mov edx, ecx
sub edx, 0x425bc1da
sub edx, 1
add edx, 0x425bc1da
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb33ffc8c
mov ecx, 0xae8bdcaf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov eax, dword [ebp - 0x34]
cmp eax, 0
sete al
and al, 1
mov byte [ebp - 0x2d], al
mov ecx, dword [0x41c3a4]
mov eax, dword [0x41c3a0]
mov edx, ecx
add edx, 0x48555275
sub edx, 1
sub edx, 0x48555275
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb33ffc8c
mov ecx, 0xf1d99159
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dl, byte [ebp - 0x2d]
mov eax, 0x4daf52cc
mov ecx, 0xa40c26c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
add edx, 0x778cde3a
sub edx, 1
sub edx, 0x778cde3a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfb4b8ce3
mov ecx, 0x5d171ed4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dword [ebp - 0x68], 0x13177222
jmp 0x4027d4
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
add edx, 0xbb448168
sub edx, 1
sub edx, 0xbb448168
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x499cdd80
mov ecx, 0x4995db76
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov ecx, dword [0x41c3a4]
mov eax, dword [0x41c3a0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x499cdd80
mov ecx, 0xea57ef3d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dword [ebp - 0x68], 0x9d160714
jmp 0x4027d4
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
add edx, 0x75d7a60e
sub edx, 1
sub edx, 0x75d7a60e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1c84c787
mov ecx, 0xd2e13e1c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
add edx, 0x9af0465e
sub edx, 1
sub edx, 0x9af0465e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1c84c787
mov ecx, 0x2afae04d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dword [ebp - 0x68], 0x2fe1684e
jmp 0x4027d4
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
sub edx, 0x19ce5625
sub edx, 1
add edx, 0x19ce5625
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb8ee7f8
mov ecx, 0x13a66191
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x24]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1d], al
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
sub edx, 0x5e2b730d
sub edx, 1
add edx, 0x5e2b730d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb8ee7f8
mov ecx, 0xd4e93581
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dl, byte [ebp - 0x1d]
mov eax, 0x1727c13b
mov ecx, 0x6ce77e46
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dword [ebp - 0x68], 0x9d160714
jmp 0x4027d4
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
add edx, 0xa9f7b582
sub edx, 1
sub edx, 0xa9f7b582
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6346931
mov ecx, 0xe79d3505
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
cmp eax, ecx
setne al
and al, 1
mov byte [ebp - 0x12], al
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
sub edx, 0x50c6b0fc
sub edx, 1
add edx, 0x50c6b0fc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6346931
mov ecx, 0xb52f28fb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dl, byte [ebp - 0x12]
mov eax, 0x8fa20428
mov ecx, 0x84ca1e48
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
sub edx, 0x8260c408
sub edx, 1
add edx, 0x8260c408
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x36bc10b
mov ecx, 0x69d5e28
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x36bc10b
mov ecx, 0xfacf5500
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dword [ebp - 0x68], 0x9d160714
jmp 0x4027d4
mov ecx, dword [0x41c3a4]
mov eax, dword [0x41c3a0]
mov edx, ecx
sub edx, 0xddfcebf4
sub edx, 1
add edx, 0xddfcebf4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8b86c8
mov ecx, 0x35c569d1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
sub edx, 0x858e0d42
sub edx, 1
add edx, 0x858e0d42
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8b86c8
mov ecx, 0xf517a344
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dword [ebp - 0x68], 0x9cebc780
jmp 0x4027d4
mov eax, dword [ebp - 0x64]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x68], 0xa83d89df
jmp 0x4027d4
mov ecx, dword [0x41c3a4]
mov eax, dword [0x41c3a0]
mov edx, ecx
sub edx, 0xcfb17c7f
sub edx, 1
add edx, 0xcfb17c7f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x983ef25b
mov ecx, 0xe5e8622c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov eax, dword [ebp - 0x50]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x55], al
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
add edx, 0x5554217e
sub edx, 1
sub edx, 0x5554217e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x983ef25b
mov ecx, 0x9d0b5962
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov dword [ebp - 0x68], 0x6b307256
jmp 0x4027d4
mov eax, dword [0x41c3a4]
mov ecx, dword [0x41c3a0]
mov edx, eax
add edx, 0xbc5c3c0b
sub edx, 1
sub edx, 0xbc5c3c0b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xab5efd5d
mov ecx, 0x4ebc0acb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov ecx, dword [0x41c3a4]
mov eax, dword [0x41c3a0]
mov edx, ecx
sub edx, 0x5da132fd
sub edx, 1
add edx, 0x5da132fd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xab5efd5d
mov ecx, 0x9b046bb2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x4027d4
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00406370
mov eax, dword [ebp - 0x78]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x60]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x68], 0xf977ece0
jmp 0x4027d4
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x68], 0x424b5c21
jmp 0x4027d4
mov dword [ebp - 0x68], 0x3e299b7a
jmp 0x4027d4
mov dword [ebp - 0x68], 0xcb5d1c51
jmp 0x4027d4
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x68], 0x48ac2a49
jmp 0x4027d4
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x68], 0xae8bdcaf
jmp 0x4027d4
mov eax, dword [ebp - 0x50]
mov byte [eax], 1
mov dword [ebp - 0x68], 0x5d171ed4
jmp 0x4027d4
mov dword [ebp - 0x68], 0x4995db76
jmp 0x4027d4
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x68], 0xd2e13e1c
jmp 0x4027d4
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x24]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x68], 0x13a66191
jmp 0x4027d4
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x68], 0xe79d3505
jmp 0x4027d4
mov dword [ebp - 0x68], 0x69d5e28
jmp 0x4027d4
mov dword [ebp - 0x68], 0x35c569d1
jmp 0x4027d4
mov eax, dword [ebp - 0x50]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x55], al
mov dword [ebp - 0x68], 0xe5e8622c
jmp 0x4027d4
mov dword [ebp - 0x68], 0x4ebc0acb
jmp 0x401036