Function at 0x413920
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x64
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x64], eax
mov eax, dword [0x449080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x44a594]
mov eax, dword [0x44a590]
mov edx, ecx
add edx, 0x2c9522a2
sub edx, 1
sub edx, 0x2c9522a2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x5a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x59], al
mov dword [ebp - 0x60], 0xc8fade86
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x6c], eax
sub eax, 0x82555b51
je 0x414e60
jmp 0x413995
mov eax, dword [ebp - 0x6c]
sub eax, 0x82f3196e
je 0x414e6c
jmp 0x4139a8
mov eax, dword [ebp - 0x6c]
sub eax, 0x83ae7be9
je 0x414c34
jmp 0x4139bb
mov eax, dword [ebp - 0x6c]
sub eax, 0x84e0aea0
je 0x41456f
jmp 0x4139ce
mov eax, dword [ebp - 0x6c]
sub eax, 0x889fae07
je 0x414515
jmp 0x4139e1
mov eax, dword [ebp - 0x6c]
sub eax, 0x89f41daf
je 0x414521
jmp 0x4139f4
mov eax, dword [ebp - 0x6c]
sub eax, 0x963aac9f
je 0x413f17
jmp 0x413a07
mov eax, dword [ebp - 0x6c]
sub eax, 0x9c708db1
je 0x4141df
jmp 0x413a1a
mov eax, dword [ebp - 0x6c]
sub eax, 0x9cfca370
je 0x414cd6
jmp 0x413a2d
mov eax, dword [ebp - 0x6c]
sub eax, 0xa13e0bb7
je 0x4149a0
jmp 0x413a40
mov eax, dword [ebp - 0x6c]
sub eax, 0xa2fd58aa
je 0x414d02
jmp 0x413a53
mov eax, dword [ebp - 0x6c]
sub eax, 0xa4e6667c
je 0x414c0a
jmp 0x413a66
mov eax, dword [ebp - 0x6c]
sub eax, 0xa74782d2
je 0x4140a7
jmp 0x413a79
mov eax, dword [ebp - 0x6c]
sub eax, 0xab3bd7ff
je 0x4142fe
jmp 0x413a8c
mov eax, dword [ebp - 0x6c]
sub eax, 0xacc79a90
je 0x414c7a
jmp 0x413a9f
mov eax, dword [ebp - 0x6c]
sub eax, 0xacdc5c45
je 0x414b96
jmp 0x413ab2
mov eax, dword [ebp - 0x6c]
sub eax, 0xb09e6c8b
je 0x4148d3
jmp 0x413ac5
mov eax, dword [ebp - 0x6c]
sub eax, 0xb481a7e6
je 0x414afa
jmp 0x413ad8
mov eax, dword [ebp - 0x6c]
sub eax, 0xb87c0c7e
je 0x414503
jmp 0x413aeb
mov eax, dword [ebp - 0x6c]
sub eax, 0xc31c5de7
je 0x4142b0
jmp 0x413afe
mov eax, dword [ebp - 0x6c]
sub eax, 0xc4f03ddf
je 0x414df7
jmp 0x413b11
mov eax, dword [ebp - 0x6c]
sub eax, 0xc74a62c9
je 0x414118
jmp 0x413b24
mov eax, dword [ebp - 0x6c]
sub eax, 0xc8fade86
je 0x413ecc
jmp 0x413b37
mov eax, dword [ebp - 0x6c]
sub eax, 0xca9823ff
je 0x414e24
jmp 0x413b4a
mov eax, dword [ebp - 0x6c]
sub eax, 0xcbd85c30
je 0x4146d2
jmp 0x413b5d
mov eax, dword [ebp - 0x6c]
sub eax, 0xd023536f
je 0x414cca
jmp 0x413b70
mov eax, dword [ebp - 0x6c]
sub eax, 0xd26168ff
je 0x414bd5
jmp 0x413b83
mov eax, dword [ebp - 0x6c]
sub eax, 0xd26408cb
je 0x414a31
jmp 0x413b96
mov eax, dword [ebp - 0x6c]
sub eax, 0xd3fd7e98
je 0x4144e5
jmp 0x413ba9
mov eax, dword [ebp - 0x6c]
sub eax, 0xd67677fb
je 0x414e18
jmp 0x413bbc
mov eax, dword [ebp - 0x6c]
sub eax, 0xe35697c2
je 0x4147f1
jmp 0x413bcf
mov eax, dword [ebp - 0x6c]
sub eax, 0xf02eb8cd
je 0x4145fc
jmp 0x413be2
mov eax, dword [ebp - 0x6c]
sub eax, 0xf09727eb
je 0x414231
jmp 0x413bf5
mov eax, dword [ebp - 0x6c]
sub eax, 0xf18ffd6e
je 0x414461
jmp 0x413c08
mov eax, dword [ebp - 0x6c]
sub eax, 0xf2c06f14
je 0x414e06
jmp 0x413c1b
mov eax, dword [ebp - 0x6c]
sub eax, 0xf2ebfff7
je 0x414d34
jmp 0x413c2e
mov eax, dword [ebp - 0x6c]
sub eax, 0xf30aec44
je 0x4142a4
jmp 0x413c41
mov eax, dword [ebp - 0x6c]
sub eax, 0xf3587baf
je 0x4149ac
jmp 0x413c54
mov eax, dword [ebp - 0x6c]
sub eax, 0xf454b745
je 0x414daa
jmp 0x413c67
mov eax, dword [ebp - 0x6c]
sub eax, 0xf4d05b96
je 0x414d28
jmp 0x413c7a
mov eax, dword [ebp - 0x6c]
sub eax, 0xfc0b7f4e
je 0x414dbc
jmp 0x413c8d
mov eax, dword [ebp - 0x6c]
sub eax, 0xfd54d1e2
je 0x4149c6
jmp 0x413ca0
mov eax, dword [ebp - 0x6c]
sub eax, 0x6637219
je 0x414d8d
jmp 0x413cb3
mov eax, dword [ebp - 0x6c]
sub eax, 0xb0f3f5f
je 0x414d16
jmp 0x413cc6
mov eax, dword [ebp - 0x6c]
sub eax, 0xcb5f010
je 0x4146f9
jmp 0x413cd9
mov eax, dword [ebp - 0x6c]
sub eax, 0x11e50818
je 0x41464a
jmp 0x413cec
mov eax, dword [ebp - 0x6c]
sub eax, 0x123388ba
je 0x413fb4
jmp 0x413cff
mov eax, dword [ebp - 0x6c]
sub eax, 0x1528820b
je 0x414027
jmp 0x413d12
mov eax, dword [ebp - 0x6c]
sub eax, 0x1957ddde
je 0x414ba2
jmp 0x413d25
mov eax, dword [ebp - 0x6c]
sub eax, 0x1c94c40d
je 0x414166
jmp 0x413d38
mov eax, dword [ebp - 0x6c]
sub eax, 0x234faf00
je 0x4141eb
jmp 0x413d4b
mov eax, dword [ebp - 0x6c]
sub eax, 0x2d83b916
je 0x4148df
jmp 0x413d5e
mov eax, dword [ebp - 0x6c]
sub eax, 0x3127431d
je 0x4145f0
jmp 0x413d71
mov eax, dword [ebp - 0x6c]
sub eax, 0x340fb06c
je 0x4143cf
jmp 0x413d84
mov eax, dword [ebp - 0x6c]
sub eax, 0x35c2fa97
je 0x4147e5
jmp 0x413d97
mov eax, dword [ebp - 0x6c]
sub eax, 0x44ce0252
je 0x414b48
jmp 0x413daa
mov eax, dword [ebp - 0x6c]
sub eax, 0x492f1b99
je 0x41409b
jmp 0x413dbd
mov eax, dword [ebp - 0x6c]
sub eax, 0x49bf0950
je 0x414bb6
jmp 0x413dd0
mov eax, dword [ebp - 0x6c]
sub eax, 0x51284530
je 0x41487f
jmp 0x413de3
mov eax, dword [ebp - 0x6c]
sub eax, 0x527e1df2
je 0x414764
jmp 0x413df6
mov eax, dword [ebp - 0x6c]
sub eax, 0x55bd3e95
je 0x4143ee
jmp 0x413e09
mov eax, dword [ebp - 0x6c]
sub eax, 0x5d4c8f3f
je 0x4143c3
jmp 0x413e1c
mov eax, dword [ebp - 0x6c]
sub eax, 0x67e0112b
je 0x4144f1
jmp 0x413e2f
mov eax, dword [ebp - 0x6c]
sub eax, 0x6845cfbe
je 0x413fa8
jmp 0x413e42
mov eax, dword [ebp - 0x6c]
sub eax, 0x6a77d68b
je 0x414cf6
mov bl, byte [ebp - 0x5a]
mov dh, byte [ebp - 0x59]
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6a77d68b
mov ecx, 0x963aac9f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
mov ecx, dword [0x44a594]
mov eax, dword [0x44a590]
mov edx, ecx
sub edx, 0xd25bd4c8
sub edx, 1
add edx, 0xd25bd4c8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6a77d68b
mov ecx, 0x6845cfbe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov dword [ebp - 0x60], 0x123388ba
jmp 0x414e76
mov ecx, dword [0x44a594]
mov eax, dword [0x44a590]
mov edx, ecx
add edx, 0x31164146
sub edx, 1
sub edx, 0x31164146
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa2fd58aa
mov ecx, 0x1528820b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov ecx, dword [ebp - 0x68]
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
sub esp, 0xffc
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [0x44a594]
mov ecx, dword [0x44a590]
mov edx, eax
add edx, 0x4bcde48a
sub edx, 1
sub edx, 0x4bcde48a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa2fd58aa
mov ecx, 0x492f1b99
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov dword [ebp - 0x60], 0xa74782d2
jmp 0x414e76
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x4c]
mov esi, 0xffffffff
mov eax, 0xc31c5de7
mov ecx, 0xc74a62c9
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov eax, dword [0x44a594]
mov ecx, dword [0x44a590]
mov edx, eax
add edx, 0xde44d1f2
sub edx, 1
sub edx, 0xde44d1f2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb0f3f5f
mov ecx, 0x1c94c40d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov eax, dword [ebp - 0x58]
mov byte [eax], 0
mov ecx, dword [0x44a594]
mov eax, dword [0x44a590]
mov edx, ecx
add edx, 0xf70ac91
sub edx, 1
sub edx, 0xf70ac91
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb0f3f5f
mov ecx, 0x9c708db1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov dword [ebp - 0x60], 0x234faf00
jmp 0x414e76
mov eax, dword [0x44a594]
mov ecx, dword [0x44a590]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf4d05b96
mov ecx, 0xf09727eb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov ecx, dword [0x44a594]
mov eax, dword [0x44a590]
mov edx, ecx
add edx, 0x7ca2479c
sub edx, 1
sub edx, 0x7ca2479c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf4d05b96
mov ecx, 0xf30aec44
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov dword [ebp - 0x60], 0x83ae7be9
jmp 0x414e76
mov eax, dword [0x44a594]
mov ecx, dword [0x44a590]
mov edx, eax
add edx, 0x5be78b39
sub edx, 1
sub edx, 0x5be78b39
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf2ebfff7
mov ecx, 0xab3bd7ff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov ecx, dword [0x44a594]
mov eax, dword [0x44a590]
mov edx, ecx
add edx, 0xb23af2a2
sub edx, 1
sub edx, 0xb23af2a2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf2ebfff7
mov ecx, 0x5d4c8f3f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov dword [ebp - 0x60], 0x340fb06c
jmp 0x414e76
mov edx, dword [ebp - 0x34]
mov esi, 0xffffffff
mov eax, 0xb87c0c7e
mov ecx, 0x55bd3e95
cmp edx, esi
cmove eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov ecx, dword [0x44a594]
mov eax, dword [0x44a590]
mov edx, ecx
add edx, 0xcfc6eeae
sub edx, 1
sub edx, 0xcfc6eeae
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6637219
mov ecx, 0xf18ffd6e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x44a594]
mov eax, dword [0x44a590]
mov edx, ecx
sub edx, 0xe3a76bfc
sub edx, 1
add edx, 0xe3a76bfc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6637219
mov ecx, 0xd3fd7e98
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov dword [ebp - 0x60], 0x67e0112b
jmp 0x414e76
mov eax, dword [ebp - 0x58]
mov byte [eax], 0
mov dword [ebp - 0x60], 0x83ae7be9
jmp 0x414e76
mov eax, dword [ebp - 0x44]
mov byte [eax], 0
mov dword [ebp - 0x60], 0x889fae07
jmp 0x414e76
mov dword [ebp - 0x60], 0x89f41daf
jmp 0x414e76
mov eax, dword [0x44a594]
mov ecx, dword [0x44a590]
mov edx, eax
add edx, 0x6b9e412b
sub edx, 1
sub edx, 0x6b9e412b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf454b745
mov ecx, 0x84e0aea0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov ecx, dword [0x44a594]
mov eax, dword [0x44a590]
mov edx, ecx
add edx, 0xec86ea35
sub edx, 1
sub edx, 0xec86ea35
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf454b745
mov ecx, 0x3127431d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov dword [ebp - 0x60], 0xf02eb8cd
jmp 0x414e76
mov eax, dword [0x44a594]
mov ecx, dword [0x44a590]
mov edx, eax
sub edx, 0x4b00f1d8
sub edx, 1
add edx, 0x4b00f1d8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfc0b7f4e
mov ecx, 0x11e50818
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x26], al
mov eax, dword [0x44a594]
mov ecx, dword [0x44a590]
mov edx, eax
add edx, 0x7c6e94b2
sub edx, 1
sub edx, 0x7c6e94b2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfc0b7f4e
mov ecx, 0xcbd85c30
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov dl, byte [ebp - 0x26]
mov eax, 0x6ac49d9c
mov ecx, 0xcb5f010
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov ecx, dword [0x44a594]
mov eax, dword [0x44a590]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc4f03ddf
mov ecx, 0x527e1df2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov eax, dword [ebp - 0x38]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x25], al
mov ecx, dword [0x44a594]
mov eax, dword [0x44a590]
mov edx, ecx
sub edx, 0x3a4de1d8
sub edx, 1
add edx, 0x3a4de1d8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc4f03ddf
mov ecx, 0x35c2fa97
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov dword [ebp - 0x60], 0xe35697c2
jmp 0x414e76
mov dl, byte [ebp - 0x25]
mov eax, 0xf3587baf
mov ecx, 0x7cd185e2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov eax, dword [ebp - 0x44]
mov byte [eax], 1
mov eax, dword [0x44a594]
mov ecx, dword [0x44a590]
mov edx, eax
add edx, 0x31e6bba9
sub edx, 1
sub edx, 0x31e6bba9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf2c06f14
mov ecx, 0xb09e6c8b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov dword [ebp - 0x60], 0x2d83b916
jmp 0x414e76
mov eax, dword [0x44a594]
mov ecx, dword [0x44a590]
mov edx, eax
add edx, 0xdd1f5dfb
sub edx, 1
sub edx, 0xdd1f5dfb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd67677fb
mov ecx, 0x77d06a1f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov dword [ebp - 0x60], 0x6bab749c
jmp 0x414e76
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x60], 0xfd54d1e2
jmp 0x414e76
mov ecx, dword [0x44a594]
mov eax, dword [0x44a590]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xca9823ff
mov ecx, 0xd26408cb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov eax, dword [ebp - 0x48]
mov esi, dword [eax]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x19], al
mov ecx, dword [0x44a594]
mov eax, dword [0x44a590]
mov edx, ecx
add edx, 0x88cc4a46
sub edx, 1
sub edx, 0x88cc4a46
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xca9823ff
mov ecx, 0x6fcdbcbe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov eax, dword [0x44a594]
mov ecx, dword [0x44a590]
mov edx, eax
sub edx, 0x1e4f91b5
sub edx, 1
add edx, 0x1e4f91b5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x82555b51
mov ecx, 0x44ce0252
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov eax, dword [0x44a594]
mov ecx, dword [0x44a590]
mov edx, eax
sub edx, 0x93a07f5
sub edx, 1
add edx, 0x93a07f5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x82555b51
mov ecx, 0xacdc5c45
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov dword [ebp - 0x60], 0x6bab749c
jmp 0x414e76
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x60], 0x49bf0950
jmp 0x414e76
mov eax, dword [ebp - 0x38]
mov esi, dword [eax]
mov edx, dword [ebp - 0x18]
mov eax, 0x79aca8a8
mov ecx, 0xd26168ff
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov dword [ebp - 0x60], 0x6bab749c
jmp 0x414e76
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x44]
mov cl, byte [eax]
mov eax, dword [ebp - 0x58]
and cl, 1
mov byte [eax], cl
mov dword [ebp - 0x60], 0x83ae7be9
jmp 0x414e76
mov eax, dword [0x44a594]
mov ecx, dword [0x44a590]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x82f3196e
mov ecx, 0xacc79a90
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov eax, dword [ebp - 0x58]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x11], al
mov eax, dword [0x44a594]
mov ecx, dword [0x44a590]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x82f3196e
mov ecx, 0xd023536f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x414e76
mov dword [ebp - 0x60], 0x9cfca370
jmp 0x414e76
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00431640
mov eax, dword [ebp - 0x70]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x54]
mov dword [eax], ecx
mov dword [ebp - 0x60], 0x1528820b
jmp 0x414e76
mov eax, dword [ebp - 0x58]
mov byte [eax], 0
mov dword [ebp - 0x60], 0x1c94c40d
jmp 0x414e76
mov dword [ebp - 0x60], 0xf09727eb
jmp 0x414e76
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x60], 0xab3bd7ff
jmp 0x414e76
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x60], 0xf18ffd6e
jmp 0x414e76
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x60], 0x84e0aea0
jmp 0x414e76
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x60], 0x11e50818
jmp 0x414e76
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x60], 0x527e1df2
jmp 0x414e76
mov eax, dword [ebp - 0x44]
mov byte [eax], 1
mov dword [ebp - 0x60], 0x51284530
jmp 0x414e76
mov dword [ebp - 0x60], 0x77d06a1f
jmp 0x414e76
mov eax, dword [ebp - 0x48]
mov esi, dword [eax]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x60], 0xd26408cb
jmp 0x414e76
mov dword [ebp - 0x60], 0x44ce0252
jmp 0x414e76
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x60], 0xacc79a90
jmp 0x41397f