Function at 0x40ac30
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x6c
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x6c], eax
mov eax, dword [0x43e080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x68], 0x2dc40737
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x74], eax
sub eax, 0x8822d862
je 0x40bbb6
jmp 0x40ac6c
mov eax, dword [ebp - 0x74]
sub eax, 0x89c41775
je 0x40b6ec
jmp 0x40ac7f
mov eax, dword [ebp - 0x74]
sub eax, 0x8b4a8a9b
je 0x40b790
jmp 0x40ac92
mov eax, dword [ebp - 0x74]
sub eax, 0x8da20306
je 0x40bc54
jmp 0x40aca5
mov eax, dword [ebp - 0x74]
sub eax, 0x927fde31
je 0x40b24d
jmp 0x40acb8
mov eax, dword [ebp - 0x74]
sub eax, 0x9531a8ca
je 0x40b513
jmp 0x40accb
mov eax, dword [ebp - 0x74]
sub eax, 0x95a68e5d
je 0x40b935
jmp 0x40acde
mov eax, dword [ebp - 0x74]
sub eax, 0x980b82fd
je 0x40b6b9
jmp 0x40acf1
mov eax, dword [ebp - 0x74]
sub eax, 0x9c1407d8
je 0x40b438
jmp 0x40ad04
mov eax, dword [ebp - 0x74]
sub eax, 0x9d2bd1d6
je 0x40b8a9
jmp 0x40ad17
mov eax, dword [ebp - 0x74]
sub eax, 0xa19295ed
je 0x40b36d
jmp 0x40ad2a
mov eax, dword [ebp - 0x74]
sub eax, 0xa41ae3e2
je 0x40ba51
jmp 0x40ad3d
mov eax, dword [ebp - 0x74]
sub eax, 0xaa23244b
je 0x40b217
jmp 0x40ad50
mov eax, dword [ebp - 0x74]
sub eax, 0xad3d49de
je 0x40b3e2
jmp 0x40ad63
mov eax, dword [ebp - 0x74]
sub eax, 0xaf628a8a
je 0x40bc48
jmp 0x40ad76
mov eax, dword [ebp - 0x74]
sub eax, 0xb0a7ffdf
je 0x40b52e
jmp 0x40ad89
mov eax, dword [ebp - 0x74]
sub eax, 0xb3d0e2cd
je 0x40b5dc
jmp 0x40ad9c
mov eax, dword [ebp - 0x74]
sub eax, 0xb46c5703
je 0x40badc
jmp 0x40adaf
mov eax, dword [ebp - 0x74]
sub eax, 0xc04d3b5d
je 0x40b882
jmp 0x40adc2
mov eax, dword [ebp - 0x74]
sub eax, 0xc1ef2817
je 0x40b16d
jmp 0x40add5
mov eax, dword [ebp - 0x74]
sub eax, 0xcebdfdb3
je 0x40b9b4
jmp 0x40ade8
mov eax, dword [ebp - 0x74]
sub eax, 0xdb9ad6de
je 0x40b161
jmp 0x40adfb
mov eax, dword [ebp - 0x74]
sub eax, 0xddaf2753
je 0x40b17f
jmp 0x40ae0e
mov eax, dword [ebp - 0x74]
sub eax, 0xdde8bb19
je 0x40b5d0
jmp 0x40ae21
mov eax, dword [ebp - 0x74]
sub eax, 0xe900fea0
je 0x40bbe6
jmp 0x40ae34
mov eax, dword [ebp - 0x74]
sub eax, 0xf17b2d74
je 0x40b79c
jmp 0x40ae47
mov eax, dword [ebp - 0x74]
sub eax, 0xf323e3f7
je 0x40b388
jmp 0x40ae5a
mov eax, dword [ebp - 0x74]
sub eax, 0x61b284a
je 0x40b6e0
jmp 0x40ae6d
mov eax, dword [ebp - 0x74]
sub eax, 0x10033a8c
je 0x40b57c
jmp 0x40ae80
mov eax, dword [ebp - 0x74]
sub eax, 0x10f3a16c
je 0x40b229
jmp 0x40ae93
mov eax, dword [ebp - 0x74]
sub eax, 0x1349ceb1
je 0x40b73a
jmp 0x40aea6
mov eax, dword [ebp - 0x74]
sub eax, 0x135d5705
je 0x40bb7b
jmp 0x40aeb9
mov eax, dword [ebp - 0x74]
sub eax, 0x19a4437d
je 0x40bb4f
jmp 0x40aecc
mov eax, dword [ebp - 0x74]
sub eax, 0x1cfa93ac
je 0x40b1f8
jmp 0x40aedf
mov eax, dword [ebp - 0x74]
sub eax, 0x2707cc53
je 0x40bc36
jmp 0x40aef2
mov eax, dword [ebp - 0x74]
sub eax, 0x28d1501b
je 0x40bb5b
jmp 0x40af05
mov eax, dword [ebp - 0x74]
sub eax, 0x2dc40737
je 0x40b0ac
jmp 0x40af18
mov eax, dword [ebp - 0x74]
sub eax, 0x30a2484c
je 0x40bbd4
jmp 0x40af2b
mov eax, dword [ebp - 0x74]
sub eax, 0x31e0bda8
je 0x40b394
jmp 0x40af3e
mov eax, dword [ebp - 0x74]
sub eax, 0x323b00f0
je 0x40bc24
jmp 0x40af51
mov eax, dword [ebp - 0x74]
sub eax, 0x340ba81a
je 0x40b8ef
jmp 0x40af64
mov eax, dword [ebp - 0x74]
sub eax, 0x37138b4b
je 0x40ba5d
jmp 0x40af77
mov eax, dword [ebp - 0x74]
sub eax, 0x3832db4e
je 0x40b151
jmp 0x40af8a
mov eax, dword [ebp - 0x74]
sub eax, 0x38f246a6
je 0x40b807
jmp 0x40af9d
mov eax, dword [ebp - 0x74]
sub eax, 0x3bb7d06d
je 0x40b6c5
jmp 0x40afb0
mov eax, dword [ebp - 0x74]
sub eax, 0x3e62205e
je 0x40b941
jmp 0x40afc3
mov eax, dword [ebp - 0x74]
sub eax, 0x4339658b
je 0x40b444
jmp 0x40afd6
mov eax, dword [ebp - 0x74]
sub eax, 0x43890376
je 0x40b1e6
jmp 0x40afe9
mov eax, dword [ebp - 0x74]
sub eax, 0x487bc358
je 0x40b132
jmp 0x40affc
mov eax, dword [ebp - 0x74]
sub eax, 0x529e9ea8
je 0x40bc8a
jmp 0x40b00f
mov eax, dword [ebp - 0x74]
sub eax, 0x5ace206c
je 0x40b636
jmp 0x40b022
mov eax, dword [ebp - 0x74]
sub eax, 0x5de9bd74
je 0x40b2c0
jmp 0x40b035
mov eax, dword [ebp - 0x74]
sub eax, 0x5e82cc9b
je 0x40ba69
jmp 0x40b048
mov eax, dword [ebp - 0x74]
sub eax, 0x61c00249
je 0x40b89d
jmp 0x40b05b
mov eax, dword [ebp - 0x74]
sub eax, 0x71920989
je 0x40b4b7
jmp 0x40b06e
mov eax, dword [ebp - 0x74]
sub eax, 0x74692ede
je 0x40b235
jmp 0x40b081
mov eax, dword [ebp - 0x74]
sub eax, 0x76971a98
je 0x40b5e8
jmp 0x40b094
mov eax, dword [ebp - 0x74]
sub eax, 0x7a87ed87
je 0x40bbc5
jmp 0x40b0a7
jmp 0x40bc91
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x70]
push eax
mov edx, esp
mov dword [ebp - 0x54], edx
push eax
mov edx, esp
mov dword [ebp - 0x50], edx
push eax
mov edx, esp
mov dword [ebp - 0x4c], edx
push eax
sub esp, 0xffc
mov edx, esp
mov dword [ebp - 0x48], edx
push eax
mov edx, esp
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x68], 0x487bc358
jmp 0x40bc91
mov edx, dword [ebp - 0x40]
mov esi, 0xffffffff
mov eax, 0xc1ef2817
mov ecx, 0x3832db4e
cmp edx, esi
cmove eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov byte [ebp - 0x55], 0
mov dword [ebp - 0x68], 0xdb9ad6de
jmp 0x40bc91
mov dword [ebp - 0x68], 0x5e82cc9b
jmp 0x40bc91
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x68], 0xddaf2753
jmp 0x40bc91
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x54]
mov dword [eax], ecx
mov edx, dword [ebp - 0x54]
mov esi, 0xffffffff
mov eax, 0xaa23244b
mov ecx, 0x43890376
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x68], 0x1cfa93ac
jmp 0x40bc91
mov eax, dword [ebp - 0x38]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x55], 0
mov dword [ebp - 0x68], 0x5e82cc9b
jmp 0x40bc91
mov eax, dword [ebp - 0x50]
mov byte [eax], 0
mov dword [ebp - 0x68], 0x10f3a16c
jmp 0x40bc91
mov dword [ebp - 0x68], 0x74692ede
jmp 0x40bc91
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x68], 0x927fde31
jmp 0x40bc91
mov ecx, dword [0x43f57c]
mov eax, dword [0x43f578]
mov edx, ecx
sub edx, 0x98e38c27
sub edx, 1
add edx, 0x98e38c27
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x135d5705
mov ecx, 0x5de9bd74
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x29], al
mov ecx, dword [0x43f57c]
mov eax, dword [0x43f578]
mov edx, ecx
sub edx, 0xb8db9687
sub edx, 1
add edx, 0xb8db9687
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x135d5705
mov ecx, 0xa19295ed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov dl, byte [ebp - 0x29]
mov eax, 0xf323e3f7
mov ecx, 0x31e0bda8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov dword [ebp - 0x68], 0x3e62205e
jmp 0x40bc91
mov eax, dword [0x43f57c]
mov ecx, dword [0x43f578]
mov edx, eax
add edx, 0x2f9877c1
sub edx, 1
sub edx, 0x2f9877c1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8822d862
mov ecx, 0xad3d49de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [0x43f57c]
mov ecx, dword [0x43f578]
mov edx, eax
add edx, 0x794b45e0
sub edx, 1
sub edx, 0x794b45e0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8822d862
mov ecx, 0x9c1407d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov dword [ebp - 0x68], 0x4339658b
jmp 0x40bc91
mov ecx, dword [0x43f57c]
mov eax, dword [0x43f578]
mov edx, ecx
sub edx, 0xbe6e8146
sub edx, 1
add edx, 0xbe6e8146
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7a87ed87
mov ecx, 0x71920989
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov eax, dword [ebp - 0x28]
cmp eax, 0
sete al
and al, 1
mov byte [ebp - 0x21], al
mov eax, dword [0x43f57c]
mov ecx, dword [0x43f578]
mov edx, eax
sub edx, 0x2bc98e93
sub edx, 1
add edx, 0x2bc98e93
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7a87ed87
mov ecx, 0x9531a8ca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov dl, byte [ebp - 0x21]
mov eax, 0x76971a98
mov ecx, 0xb0a7ffdf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov eax, dword [0x43f57c]
mov ecx, dword [0x43f578]
mov edx, eax
add edx, 0xeef30fc2
sub edx, 1
sub edx, 0xeef30fc2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x30a2484c
mov ecx, 0x10033a8c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov eax, dword [ebp - 0x50]
mov byte [eax], 1
mov eax, dword [0x43f57c]
mov ecx, dword [0x43f578]
mov edx, eax
add edx, 0xff03b04a
sub edx, 1
sub edx, 0xff03b04a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x30a2484c
mov ecx, 0xdde8bb19
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov dword [ebp - 0x68], 0xb3d0e2cd
jmp 0x40bc91
mov dword [ebp - 0x68], 0x3e62205e
jmp 0x40bc91
mov eax, dword [0x43f57c]
mov ecx, dword [0x43f578]
mov edx, eax
sub edx, 0xcf73014f
sub edx, 1
add edx, 0xcf73014f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe900fea0
mov ecx, 0x5ace206c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov eax, dword [ebp - 0x44]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x54]
mov esi, dword [eax]
mov eax, dword [ebp - 0x4c]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x20], eax
mov eax, dword [0x43f57c]
mov ecx, dword [0x43f578]
mov edx, eax
add edx, 0x30262c79
sub edx, 1
sub edx, 0x30262c79
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe900fea0
mov ecx, 0x980b82fd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov dword [ebp - 0x68], 0x3bb7d06d
jmp 0x40bc91
mov edx, dword [ebp - 0x20]
mov eax, 0x61b284a
mov ecx, 0x89c41775
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov dword [ebp - 0x68], 0x3e62205e
jmp 0x40bc91
mov eax, dword [0x43f57c]
mov ecx, dword [0x43f578]
mov edx, eax
sub edx, 0xc6833527
sub edx, 1
add edx, 0xc6833527
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x323b00f0
mov ecx, 0x1349ceb1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [0x43f57c]
mov ecx, dword [0x43f578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x323b00f0
mov ecx, 0x8b4a8a9b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov dword [ebp - 0x68], 0xf17b2d74
jmp 0x40bc91
mov ecx, dword [0x43f57c]
mov eax, dword [0x43f578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2707cc53
mov ecx, 0x38f246a6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
cmp eax, ecx
setne al
and al, 1
mov byte [ebp - 0x12], al
mov ecx, dword [0x43f57c]
mov eax, dword [0x43f578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2707cc53
mov ecx, 0xc04d3b5d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov dl, byte [ebp - 0x12]
mov eax, 0x9d2bd1d6
mov ecx, 0x61c00249
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov dword [ebp - 0x68], 0x3e62205e
jmp 0x40bc91
mov eax, dword [0x43f57c]
mov ecx, dword [0x43f578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaf628a8a
mov ecx, 0x340ba81a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov eax, dword [0x43f57c]
mov ecx, dword [0x43f578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaf628a8a
mov ecx, 0x95a68e5d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov dword [ebp - 0x68], 0x74692ede
jmp 0x40bc91
mov ecx, dword [0x43f57c]
mov eax, dword [0x43f578]
mov edx, ecx
add edx, 0x7202ec28
sub edx, 1
sub edx, 0x7202ec28
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8da20306
mov ecx, 0xcebdfdb3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov eax, dword [ebp - 0x64]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x50]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x55], al
mov ecx, dword [0x43f57c]
mov eax, dword [0x43f578]
mov edx, ecx
sub edx, 0xea3eff50
sub edx, 1
add edx, 0xea3eff50
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8da20306
mov ecx, 0xa41ae3e2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov dword [ebp - 0x68], 0x37138b4b
jmp 0x40bc91
mov dword [ebp - 0x68], 0x5e82cc9b
jmp 0x40bc91
mov ecx, dword [0x43f57c]
mov eax, dword [0x43f578]
mov edx, ecx
add edx, 0x9637c301
sub edx, 1
sub edx, 0x9637c301
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x529e9ea8
mov ecx, 0xb46c5703
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov al, byte [ebp - 0x55]
and al, 1
mov byte [ebp - 0x11], al
mov ecx, dword [0x43f57c]
mov eax, dword [0x43f578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x529e9ea8
mov ecx, 0x19a4437d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x68], eax
jmp 0x40bc91
mov dword [ebp - 0x68], 0x28d1501b
jmp 0x40bc91
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00426b40
mov eax, dword [ebp - 0x78]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x68], 0x5de9bd74
jmp 0x40bc91
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x68], 0xad3d49de
jmp 0x40bc91
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x68], 0x71920989
jmp 0x40bc91
mov eax, dword [ebp - 0x50]
mov byte [eax], 1
mov dword [ebp - 0x68], 0x10033a8c
jmp 0x40bc91
mov eax, dword [ebp - 0x44]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x54]
mov esi, dword [eax]
mov eax, dword [ebp - 0x4c]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x68], 0x5ace206c
jmp 0x40bc91
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x68], 0x1349ceb1
jmp 0x40bc91
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x68], 0x38f246a6
jmp 0x40bc91
mov dword [ebp - 0x68], 0x340ba81a
jmp 0x40bc91
mov eax, dword [ebp - 0x64]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x50]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x55], al
mov dword [ebp - 0x68], 0xcebdfdb3
jmp 0x40bc91
mov dword [ebp - 0x68], 0xb46c5703
jmp 0x40ac56