Function at 0x406890
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x60
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x60], eax
mov eax, dword [0x432080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x5c], 0x69ca415
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x68], eax
sub eax, 0x854c966f
je 0x407161
jmp 0x4068cc
mov eax, dword [ebp - 0x68]
sub eax, 0x8b6d7dfc
je 0x407679
jmp 0x4068df
mov eax, dword [ebp - 0x68]
sub eax, 0x9c194ec6
je 0x406f5c
jmp 0x4068f2
mov eax, dword [ebp - 0x68]
sub eax, 0x9c25ef6f
je 0x406dfc
jmp 0x406905
mov eax, dword [ebp - 0x68]
sub eax, 0xa1cc3334
je 0x406e08
jmp 0x406918
mov eax, dword [ebp - 0x68]
sub eax, 0xa4607a6a
je 0x4070e8
jmp 0x40692b
mov eax, dword [ebp - 0x68]
sub eax, 0xa74563f3
je 0x40765a
jmp 0x40693e
mov eax, dword [ebp - 0x68]
sub eax, 0xa9a66d41
je 0x406f2f
jmp 0x406951
mov eax, dword [ebp - 0x68]
sub eax, 0xae6cca5d
je 0x40748b
jmp 0x406964
mov eax, dword [ebp - 0x68]
sub eax, 0xb1b42a49
je 0x407423
jmp 0x406977
mov eax, dword [ebp - 0x68]
sub eax, 0xb4e20f65
je 0x40703c
jmp 0x40698a
mov eax, dword [ebp - 0x68]
sub eax, 0xb90d6afd
je 0x407629
jmp 0x40699d
mov eax, dword [ebp - 0x68]
sub eax, 0xbbfcceee
je 0x407155
jmp 0x4069b0
mov eax, dword [ebp - 0x68]
sub eax, 0xbe8b3769
je 0x4074e8
jmp 0x4069c3
mov eax, dword [ebp - 0x68]
sub eax, 0xc03629dc
je 0x407030
jmp 0x4069d6
mov eax, dword [ebp - 0x68]
sub eax, 0xc576b330
je 0x4072a1
jmp 0x4069e9
mov eax, dword [ebp - 0x68]
sub eax, 0xc611069e
je 0x407518
jmp 0x4069fc
mov eax, dword [ebp - 0x68]
sub eax, 0xc802e223
je 0x407698
jmp 0x406a0f
mov eax, dword [ebp - 0x68]
sub eax, 0xd0714cba
je 0x406ecb
jmp 0x406a22
mov eax, dword [ebp - 0x68]
sub eax, 0xd5e77550
je 0x40763b
jmp 0x406a35
mov eax, dword [ebp - 0x68]
sub eax, 0xd76eefde
je 0x4075e5
jmp 0x406a48
mov eax, dword [ebp - 0x68]
sub eax, 0xd9dcce12
je 0x407619
jmp 0x406a5b
mov eax, dword [ebp - 0x68]
sub eax, 0xdf373772
je 0x406e58
jmp 0x406a6e
mov eax, dword [ebp - 0x68]
sub eax, 0xdf74e195
je 0x407566
jmp 0x406a81
mov eax, dword [ebp - 0x68]
sub eax, 0xe6873742
je 0x407236
jmp 0x406a94
mov eax, dword [ebp - 0x68]
sub eax, 0xeb8b5f32
je 0x407417
jmp 0x406aa7
mov eax, dword [ebp - 0x68]
sub eax, 0xedc09a54
je 0x407335
jmp 0x406aba
mov eax, dword [ebp - 0x68]
sub eax, 0xf4a629a5
je 0x40710c
jmp 0x406acd
mov eax, dword [ebp - 0x68]
sub eax, 0xf5b62950
je 0x407688
jmp 0x406ae0
mov eax, dword [ebp - 0x68]
sub eax, 0xf821930a
je 0x4074b5
jmp 0x406af3
mov eax, dword [ebp - 0x68]
sub eax, 0xf86b1507
je 0x4071d4
jmp 0x406b06
mov eax, dword [ebp - 0x68]
sub eax, 0xf8ce572e
je 0x406d79
jmp 0x406b19
mov eax, dword [ebp - 0x68]
sub eax, 0x69ca415
je 0x406c9a
jmp 0x406b2c
mov eax, dword [ebp - 0x68]
sub eax, 0xbe67bbe
je 0x406cac
jmp 0x406b3f
mov eax, dword [ebp - 0x68]
sub eax, 0x11c9dc4e
je 0x4070f4
jmp 0x406b52
mov eax, dword [ebp - 0x68]
sub eax, 0x12adb66d
je 0x406d2b
jmp 0x406b65
mov eax, dword [ebp - 0x68]
sub eax, 0x1bcd2a76
je 0x4075f9
jmp 0x406b78
mov eax, dword [ebp - 0x68]
sub eax, 0x24a2ddd3
je 0x40722a
jmp 0x406b8b
mov eax, dword [ebp - 0x68]
sub eax, 0x3a217dec
je 0x407497
jmp 0x406b9e
mov eax, dword [ebp - 0x68]
sub eax, 0x4864c4e6
je 0x406f4a
jmp 0x406bb1
mov eax, dword [ebp - 0x68]
sub eax, 0x493721e1
je 0x4070dc
jmp 0x406bc4
mov eax, dword [ebp - 0x68]
sub eax, 0x496b7299
je 0x40742f
jmp 0x406bd7
mov eax, dword [ebp - 0x68]
sub eax, 0x4d3698fa
je 0x4074dc
jmp 0x406bea
mov eax, dword [ebp - 0x68]
sub eax, 0x50aecfef
je 0x407443
jmp 0x406bfd
mov eax, dword [ebp - 0x68]
sub eax, 0x534120f8
je 0x406faa
jmp 0x406c10
mov eax, dword [ebp - 0x68]
sub eax, 0x568de25c
je 0x406df0
jmp 0x406c23
mov eax, dword [ebp - 0x68]
sub eax, 0x5a91b10f
je 0x40708a
jmp 0x406c36
mov eax, dword [ebp - 0x68]
sub eax, 0x6d86a020
je 0x40766a
jmp 0x406c49
mov eax, dword [ebp - 0x68]
sub eax, 0x6de4805e
je 0x4073a8
jmp 0x406c5c
mov eax, dword [ebp - 0x68]
sub eax, 0x715c9a9c
je 0x4075d9
jmp 0x406c6f
mov eax, dword [ebp - 0x68]
sub eax, 0x78946be0
je 0x4074d0
jmp 0x406c82
mov eax, dword [ebp - 0x68]
sub eax, 0x7a4b7d47
je 0x40731a
jmp 0x406c95
jmp 0x4076a7
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x5c], 0xbe67bbe
jmp 0x4076a7
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x64]
push eax
sub esp, 0xffc
mov edx, esp
mov dword [ebp - 0x3c], edx
push eax
mov edx, esp
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x50], eax
mov edx, 0xffffffff
mov eax, 0xa1cc3334
mov ecx, 0x12adb66d
cmp dword [ebp - 0x50], edx
cmove eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov eax, dword [0x43357c]
mov ecx, dword [0x433578]
mov edx, eax
sub edx, 0x3cdd6e5a
sub edx, 1
add edx, 0x3cdd6e5a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd9dcce12
mov ecx, 0xf8ce572e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov byte [ebp - 0x41], 0
mov ecx, dword [0x43357c]
mov eax, dword [0x433578]
mov edx, ecx
sub edx, 0xcae50ecb
sub edx, 1
add edx, 0xcae50ecb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd9dcce12
mov ecx, 0x568de25c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov dword [ebp - 0x5c], 0x9c25ef6f
jmp 0x4076a7
mov dword [ebp - 0x5c], 0xd76eefde
jmp 0x4076a7
mov eax, dword [ebp - 0x48]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x5c], 0xdf373772
jmp 0x4076a7
mov ecx, dword [0x43357c]
mov eax, dword [0x433578]
mov edx, ecx
sub edx, 0xbefafb0a
sub edx, 1
add edx, 0xbefafb0a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb90d6afd
mov ecx, 0xd0714cba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x54], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x54], eax
sete al
and al, 1
mov byte [ebp - 0x2d], al
mov eax, dword [0x43357c]
mov ecx, dword [0x433578]
mov edx, eax
add edx, 0x4ea230db
sub edx, 1
sub edx, 0x4ea230db
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb90d6afd
mov ecx, 0xa9a66d41
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov dl, byte [ebp - 0x2d]
mov eax, 0xb4e20f65
mov ecx, 0x4864c4e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x5c], 0x9c194ec6
jmp 0x4076a7
mov eax, dword [0x43357c]
mov ecx, dword [0x433578]
mov edx, eax
sub edx, 0x58faae4e
sub edx, 1
add edx, 0x58faae4e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd5e77550
mov ecx, 0x534120f8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov eax, dword [ebp - 0x2c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x41], 0
mov ecx, dword [0x43357c]
mov eax, dword [0x433578]
mov edx, ecx
add edx, 0xe76f8480
sub edx, 1
sub edx, 0xe76f8480
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd5e77550
mov ecx, 0xc03629dc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov dword [ebp - 0x5c], 0xd76eefde
jmp 0x4076a7
mov eax, dword [0x43357c]
mov ecx, dword [0x433578]
mov edx, eax
add edx, 0x13811c3d
sub edx, 1
sub edx, 0x13811c3d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa74563f3
mov ecx, 0x5a91b10f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov byte [ebp - 0x55], 0
mov eax, dword [0x43357c]
mov ecx, dword [0x433578]
mov edx, eax
add edx, 0x218b94ad
sub edx, 1
sub edx, 0x218b94ad
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa74563f3
mov ecx, 0x493721e1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov dword [ebp - 0x5c], 0xa4607a6a
jmp 0x4076a7
mov dword [ebp - 0x5c], 0x11c9dc4e
jmp 0x4076a7
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x5c], 0xf4a629a5
jmp 0x4076a7
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, eax
mov eax, 0xbbfcceee
mov ecx, 0x854c966f
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov dword [ebp - 0x5c], 0xbe8b3769
jmp 0x4076a7
mov ecx, dword [0x43357c]
mov eax, dword [0x433578]
mov edx, ecx
sub edx, 0x28afa17b
sub edx, 1
add edx, 0x28afa17b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6d86a020
mov ecx, 0xf86b1507
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [0x43357c]
mov ecx, dword [0x433578]
mov edx, eax
sub edx, 0xc8f0f690
sub edx, 1
add edx, 0xc8f0f690
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6d86a020
mov ecx, 0x24a2ddd3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov dword [ebp - 0x5c], 0xe6873742
jmp 0x4076a7
mov ecx, dword [0x43357c]
mov eax, dword [0x433578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8b6d7dfc
mov ecx, 0xc576b330
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov eax, dword [ebp - 0x20]
cmp eax, 0
sete al
and al, 1
mov byte [ebp - 0x19], al
mov ecx, dword [0x43357c]
mov eax, dword [0x433578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8b6d7dfc
mov ecx, 0x7a4b7d47
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov dl, byte [ebp - 0x19]
mov eax, 0x496b7299
mov ecx, 0xedc09a54
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov ecx, dword [0x43357c]
mov eax, dword [0x433578]
mov edx, ecx
add edx, 0xee4b7688
sub edx, 1
sub edx, 0xee4b7688
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf5b62950
mov ecx, 0x6de4805e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov byte [ebp - 0x55], 1
mov ecx, dword [0x43357c]
mov eax, dword [0x433578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf5b62950
mov ecx, 0xeb8b5f32
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov dword [ebp - 0x5c], 0xb1b42a49
jmp 0x4076a7
mov dword [ebp - 0x5c], 0xbe8b3769
jmp 0x4076a7
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x5c], 0x50aecfef
jmp 0x4076a7
mov edx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x54]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x18]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, eax
mov eax, 0xae6cca5d
mov ecx, 0x3a217dec
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov dword [ebp - 0x5c], 0xbe8b3769
jmp 0x4076a7
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ecx]
setne al
and al, 1
mov byte [ebp - 0x13], al
mov dword [ebp - 0x5c], 0xf821930a
jmp 0x4076a7
mov dl, byte [ebp - 0x13]
mov eax, 0x4d3698fa
mov ecx, 0x78946be0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov dword [ebp - 0x5c], 0xbe8b3769
jmp 0x4076a7
mov dword [ebp - 0x5c], 0x11c9dc4e
jmp 0x4076a7
mov eax, dword [ebp - 0x50]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x54]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [ebp - 0x55]
mov byte [ebp - 0x12], al
mov dword [ebp - 0x5c], 0xc611069e
jmp 0x4076a7
mov eax, dword [0x43357c]
mov ecx, dword [0x433578]
mov edx, eax
sub edx, 0x14b2c395
sub edx, 1
add edx, 0x14b2c395
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc802e223
mov ecx, 0xdf74e195
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov al, byte [ebp - 0x12]
and al, 1
mov byte [ebp - 0x41], al
mov ecx, dword [0x43357c]
mov eax, dword [0x433578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc802e223
mov ecx, 0x715c9a9c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x4076a7
mov dword [ebp - 0x5c], 0xd76eefde
jmp 0x4076a7
mov al, byte [ebp - 0x41]
and al, 1
mov byte [ebp - 0x11], al
mov dword [ebp - 0x5c], 0x1bcd2a76
jmp 0x4076a7
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041b800
mov eax, dword [ebp - 0x6c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov byte [ebp - 0x41], 0
mov dword [ebp - 0x5c], 0xf8ce572e
jmp 0x4076a7
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x5c], 0xd0714cba
jmp 0x4076a7
mov eax, dword [ebp - 0x2c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x41], 0
mov dword [ebp - 0x5c], 0x534120f8
jmp 0x4076a7
mov byte [ebp - 0x55], 0
mov dword [ebp - 0x5c], 0x5a91b10f
jmp 0x4076a7
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x5c], 0xf86b1507
jmp 0x4076a7
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], 0xc576b330
jmp 0x4076a7
mov byte [ebp - 0x55], 1
mov dword [ebp - 0x5c], 0x6de4805e
jmp 0x4076a7
mov al, byte [ebp - 0x12]
and al, 1
mov byte [ebp - 0x41], al
mov dword [ebp - 0x5c], 0xdf74e195
jmp 0x4068b6