Function at 0x406f20
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x68
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x68], eax
mov eax, dword [0x432080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x64], 0xc3796015
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x70], eax
sub eax, 0x80b3f8a8
je 0x407d16
jmp 0x406f5c
mov eax, dword [ebp - 0x70]
sub eax, 0x95a6cd43
je 0x407777
jmp 0x406f6f
mov eax, dword [ebp - 0x70]
sub eax, 0x973602ac
je 0x407b33
jmp 0x406f82
mov eax, dword [ebp - 0x70]
sub eax, 0x9ade47a0
je 0x40750b
jmp 0x406f95
mov eax, dword [ebp - 0x70]
sub eax, 0x9c0c6793
je 0x407aba
jmp 0x406fa8
mov eax, dword [ebp - 0x70]
sub eax, 0xab52cefd
je 0x407591
jmp 0x406fbb
mov eax, dword [ebp - 0x70]
sub eax, 0xac164cf6
je 0x4076b8
jmp 0x406fce
mov eax, dword [ebp - 0x70]
sub eax, 0xaf5cfaf8
je 0x407833
jmp 0x406fe1
mov eax, dword [ebp - 0x70]
sub eax, 0xb49d2a02
je 0x407d25
jmp 0x406ff4
mov eax, dword [ebp - 0x70]
sub eax, 0xbb5061b3
je 0x407cbd
jmp 0x407007
mov eax, dword [ebp - 0x70]
sub eax, 0xbe61e16f
je 0x4075db
jmp 0x40701a
mov eax, dword [ebp - 0x70]
sub eax, 0xc3796015
je 0x40732a
jmp 0x40702d
mov eax, dword [ebp - 0x70]
sub eax, 0xcb298123
je 0x4076c4
jmp 0x407040
mov eax, dword [ebp - 0x70]
sub eax, 0xd07316d0
je 0x4073d7
jmp 0x407053
mov eax, dword [ebp - 0x70]
sub eax, 0xd0e802ea
je 0x407729
jmp 0x407066
mov eax, dword [ebp - 0x70]
sub eax, 0xd1706cfd
je 0x40771d
jmp 0x407079
mov eax, dword [ebp - 0x70]
sub eax, 0xdd1562f7
je 0x407a47
jmp 0x40708c
mov eax, dword [ebp - 0x70]
sub eax, 0xde22a782
je 0x407c59
jmp 0x40709f
mov eax, dword [ebp - 0x70]
sub eax, 0xde49d78f
je 0x4074f0
jmp 0x4070b2
mov eax, dword [ebp - 0x70]
sub eax, 0xe0c386dd
je 0x407c6d
jmp 0x4070c5
mov eax, dword [ebp - 0x70]
sub eax, 0xeb7afa43
je 0x407b18
jmp 0x4070d8
mov eax, dword [ebp - 0x70]
sub eax, 0xef4d71bf
je 0x407945
jmp 0x4070eb
mov eax, dword [ebp - 0x70]
sub eax, 0xefdb605d
je 0x407635
jmp 0x4070fe
mov eax, dword [ebp - 0x70]
sub eax, 0xf57a81af
je 0x4076ac
jmp 0x407111
mov eax, dword [ebp - 0x70]
sub eax, 0xf6cfe2dc
je 0x407827
jmp 0x407124
mov eax, dword [ebp - 0x70]
sub eax, 0xfb192e9a
je 0x407cad
jmp 0x407137
mov eax, dword [ebp - 0x70]
sub eax, 0xfc8585d9
je 0x4077fc
jmp 0x40714a
mov eax, dword [ebp - 0x70]
sub eax, 0x27afb4b
je 0x4073cb
jmp 0x40715d
mov eax, dword [ebp - 0x70]
sub eax, 0x2cdfa39
je 0x407ca1
jmp 0x407170
mov eax, dword [ebp - 0x70]
sub eax, 0x56558fd
je 0x407ccd
jmp 0x407183
mov eax, dword [ebp - 0x70]
sub eax, 0x61f0d8a
je 0x4079df
jmp 0x407196
mov eax, dword [ebp - 0x70]
sub eax, 0x7c884ca
je 0x407702
jmp 0x4071a9
mov eax, dword [ebp - 0x70]
sub eax, 0xa93995a
je 0x407c4d
jmp 0x4071bc
mov eax, dword [ebp - 0x70]
sub eax, 0x121009d4
je 0x4075e7
jmp 0x4071cf
mov eax, dword [ebp - 0x70]
sub eax, 0x13873b14
je 0x407d37
jmp 0x4071e2
mov eax, dword [ebp - 0x70]
sub eax, 0x29785be0
je 0x407cdc
jmp 0x4071f5
mov eax, dword [ebp - 0x70]
sub eax, 0x33390268
je 0x4077f0
jmp 0x407208
mov eax, dword [ebp - 0x70]
sub eax, 0x354341f4
je 0x407a3b
jmp 0x40721b
mov eax, dword [ebp - 0x70]
sub eax, 0x38b4cf5a
je 0x4073bb
jmp 0x40722e
mov eax, dword [ebp - 0x70]
sub eax, 0x4cf64868
je 0x40796c
jmp 0x407241
mov eax, dword [ebp - 0x70]
sub eax, 0x51676dad
je 0x40746d
jmp 0x407254
mov eax, dword [ebp - 0x70]
sub eax, 0x55a09023
je 0x407b4b
jmp 0x407267
mov eax, dword [ebp - 0x70]
sub eax, 0x57a2db5c
je 0x407b3f
jmp 0x40727a
mov eax, dword [ebp - 0x70]
sub eax, 0x591eebd2
je 0x407853
jmp 0x40728d
mov eax, dword [ebp - 0x70]
sub eax, 0x5a4f2848
je 0x40735a
jmp 0x4072a0
mov eax, dword [ebp - 0x70]
sub eax, 0x5ae6c780
je 0x407427
jmp 0x4072b3
mov eax, dword [ebp - 0x70]
sub eax, 0x5b765647
je 0x407c81
jmp 0x4072c6
mov eax, dword [ebp - 0x70]
sub eax, 0x64a01162
je 0x407526
jmp 0x4072d9
mov eax, dword [ebp - 0x70]
sub eax, 0x6b455a6e
je 0x407bb6
jmp 0x4072ec
mov eax, dword [ebp - 0x70]
sub eax, 0x78fc9994
je 0x4078be
jmp 0x4072ff
mov eax, dword [ebp - 0x70]
sub eax, 0x7eff062a
je 0x407960
jmp 0x407312
mov eax, dword [ebp - 0x70]
sub eax, 0x7ff476f1
je 0x407817
jmp 0x407325
jmp 0x407d5c
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x6c]
push eax
sub esp, 0xffc
mov edx, esp
mov dword [ebp - 0x48], edx
push eax
mov edx, esp
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x64], 0x5a4f2848
jmp 0x407d5c
mov eax, dword [ebp - 0x40]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x58], eax
mov edx, 0xffffffff
mov eax, 0xd07316d0
mov ecx, 0x38b4cf5a
cmp dword [ebp - 0x58], edx
cmove eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov byte [ebp - 0x49], 0
mov dword [ebp - 0x64], 0x27afb4b
jmp 0x407d5c
mov dword [ebp - 0x64], 0xe0c386dd
jmp 0x407d5c
mov eax, dword [ebp - 0x50]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x64], 0x5ae6c780
jmp 0x407d5c
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2cdfa39
mov ecx, 0x51676dad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov eax, 0xffffffff
cmp dword [ebp - 0x5c], eax
sete al
and al, 1
mov byte [ebp - 0x39], al
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
sub edx, 0xf3259b5d
sub edx, 1
add edx, 0xf3259b5d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2cdfa39
mov ecx, 0xde49d78f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov dl, byte [ebp - 0x39]
mov eax, 0x121009d4
mov ecx, 0x9ade47a0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov eax, dword [ebp - 0x58]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x64], 0x64a01162
jmp 0x407d5c
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfb192e9a
mov ecx, 0xab52cefd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov byte [ebp - 0x49], 0
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfb192e9a
mov ecx, 0xbe61e16f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov dword [ebp - 0x64], 0xe0c386dd
jmp 0x407d5c
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
mov edx, eax
add edx, 0xb69c2bc3
sub edx, 1
sub edx, 0xb69c2bc3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbb5061b3
mov ecx, 0xefdb605d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov byte [ebp - 0x5d], 0
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
sub edx, 0x8c51aad1
sub edx, 1
add edx, 0x8c51aad1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbb5061b3
mov ecx, 0xf57a81af
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov dword [ebp - 0x64], 0xac164cf6
jmp 0x407d5c
mov dword [ebp - 0x64], 0xcb298123
jmp 0x407d5c
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x44]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x64], 0x7c884ca
jmp 0x407d5c
mov edx, dword [ebp - 0x38]
mov eax, 0xd1706cfd
mov ecx, 0xd0e802ea
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov dword [ebp - 0x64], 0x55a09023
jmp 0x407d5c
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
mov edx, eax
add edx, 0x6f79ddd8
sub edx, 1
sub edx, 0x6f79ddd8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x56558fd
mov ecx, 0x95a6cd43
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov eax, dword [ebp - 0x44]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x31], al
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x56558fd
mov ecx, 0x33390268
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov dword [ebp - 0x64], 0xfc8585d9
jmp 0x407d5c
mov dl, byte [ebp - 0x31]
mov eax, 0xaf5cfaf8
mov ecx, 0x7ff476f1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov byte [ebp - 0x5d], 1
mov dword [ebp - 0x64], 0xf6cfe2dc
jmp 0x407d5c
mov dword [ebp - 0x64], 0x55a09023
jmp 0x407d5c
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x64], 0x591eebd2
jmp 0x407d5c
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x29785be0
mov ecx, 0x78fc9994
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
lea eax, [ebp - 0x14]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x21], al
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
mov edx, eax
sub edx, 0x496432d0
sub edx, 1
add edx, 0x496432d0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x29785be0
mov ecx, 0xef4d71bf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov dl, byte [ebp - 0x21]
mov eax, 0x7eff062a
mov ecx, 0x4cf64868
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov dword [ebp - 0x64], 0x55a09023
jmp 0x407d5c
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
sub edx, 0x23620be
sub edx, 1
add edx, 0x23620be
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x80b3f8a8
mov ecx, 0x61f0d8a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
mov edx, eax
add edx, 0x9a4d0153
sub edx, 1
sub edx, 0x9a4d0153
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x80b3f8a8
mov ecx, 0x354341f4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov dword [ebp - 0x64], 0xdd1562f7
jmp 0x407d5c
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
add edx, 0xe2766c7c
sub edx, 1
sub edx, 0xe2766c7c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb49d2a02
mov ecx, 0x9c0c6793
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
cmp eax, ecx
setne al
and al, 1
mov byte [ebp - 0x17], al
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
mov edx, eax
add edx, 0xdc995c3d
sub edx, 1
sub edx, 0xdc995c3d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb49d2a02
mov ecx, 0xeb7afa43
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov dl, byte [ebp - 0x17]
mov eax, 0x57a2db5c
mov ecx, 0x973602ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov dword [ebp - 0x64], 0x55a09023
jmp 0x407d5c
mov dword [ebp - 0x64], 0xcb298123
jmp 0x407d5c
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x13873b14
mov ecx, 0x6b455a6e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov eax, dword [ebp - 0x58]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x5c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [ebp - 0x5d]
mov byte [ebp - 0x16], al
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
add edx, 0x1ff7a31e
sub edx, 1
sub edx, 0x1ff7a31e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x13873b14
mov ecx, 0xa93995a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x64], eax
jmp 0x407d5c
mov dword [ebp - 0x64], 0xde22a782
jmp 0x407d5c
mov al, byte [ebp - 0x16]
and al, 1
mov byte [ebp - 0x49], al
mov dword [ebp - 0x64], 0xe0c386dd
jmp 0x407d5c
mov al, byte [ebp - 0x49]
and al, 1
mov byte [ebp - 0x15], al
mov dword [ebp - 0x64], 0x5b765647
jmp 0x407d5c
mov al, byte [ebp - 0x15]
and al, 1
movzx eax, al
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041c160
mov eax, dword [ebp - 0x74]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x64], 0x51676dad
jmp 0x407d5c
mov byte [ebp - 0x49], 0
mov dword [ebp - 0x64], 0xab52cefd
jmp 0x407d5c
mov byte [ebp - 0x5d], 0
mov dword [ebp - 0x64], 0xefdb605d
jmp 0x407d5c
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x64], 0x95a6cd43
jmp 0x407d5c
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
lea eax, [ebp - 0x14]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x64], 0x78fc9994
jmp 0x407d5c
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x64], 0x61f0d8a
jmp 0x407d5c
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x64], 0x9c0c6793
jmp 0x407d5c
mov eax, dword [ebp - 0x58]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x5c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x64], 0x6b455a6e
jmp 0x406f46