Function at 0x406880
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x105c
call fcn.00421900
mov eax, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov eax, dword [0x438080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1044], 0x71d246a3
mov eax, dword [ebp - 0x1044]
mov dword [ebp - 0x1048], eax
sub eax, 0x836ddbc4
je 0x4077b5
jmp 0x4068c6
mov eax, dword [ebp - 0x1048]
sub eax, 0x880fe4e2
je 0x4074ad
jmp 0x4068dc
mov eax, dword [ebp - 0x1048]
sub eax, 0x8a227ffd
je 0x407207
jmp 0x4068f2
mov eax, dword [ebp - 0x1048]
sub eax, 0x926446d2
je 0x407462
jmp 0x406908
mov eax, dword [ebp - 0x1048]
sub eax, 0x92a1cacd
je 0x406f94
jmp 0x40691e
mov eax, dword [ebp - 0x1048]
sub eax, 0x92c8033f
je 0x407148
jmp 0x406934
mov eax, dword [ebp - 0x1048]
sub eax, 0x93609c2c
je 0x4075ce
jmp 0x40694a
mov eax, dword [ebp - 0x1048]
sub eax, 0x9710daa0
je 0x406f1b
jmp 0x406960
mov eax, dword [ebp - 0x1048]
sub eax, 0x9d40619b
je 0x406e0e
jmp 0x406976
mov eax, dword [ebp - 0x1048]
sub eax, 0xa11fbbc0
je 0x406e6e
jmp 0x40698c
mov eax, dword [ebp - 0x1048]
sub eax, 0xb9b17f07
je 0x406fb5
jmp 0x4069a2
mov eax, dword [ebp - 0x1048]
sub eax, 0xbe2d14cb
je 0x4073ec
jmp 0x4069b8
mov eax, dword [ebp - 0x1048]
sub eax, 0xbfd5a446
je 0x406f0c
jmp 0x4069ce
mov eax, dword [ebp - 0x1048]
sub eax, 0xc213771b
je 0x40769c
jmp 0x4069e4
mov eax, dword [ebp - 0x1048]
sub eax, 0xc6cea4db
je 0x4075bf
jmp 0x4069fa
mov eax, dword [ebp - 0x1048]
sub eax, 0xc7327cfa
je 0x407066
jmp 0x406a10
mov eax, dword [ebp - 0x1048]
sub eax, 0xc827e2c5
je 0x4071d7
jmp 0x406a26
mov eax, dword [ebp - 0x1048]
sub eax, 0xd38ccdb5
je 0x407259
jmp 0x406a3c
mov eax, dword [ebp - 0x1048]
sub eax, 0xdd35b57f
je 0x407797
jmp 0x406a52
mov eax, dword [ebp - 0x1048]
sub eax, 0xe2685e1e
je 0x407483
jmp 0x406a68
mov eax, dword [ebp - 0x1048]
sub eax, 0xe829fcfc
je 0x407829
jmp 0x406a7e
mov eax, dword [ebp - 0x1048]
sub eax, 0xec8b9b3e
je 0x4077fc
jmp 0x406a94
mov eax, dword [ebp - 0x1048]
sub eax, 0xed2bb36f
je 0x407741
jmp 0x406aaa
mov eax, dword [ebp - 0x1048]
sub eax, 0xef91eaa0
je 0x4074d3
jmp 0x406ac0
mov eax, dword [ebp - 0x1048]
sub eax, 0xf69ecfa7
je 0x406fe1
jmp 0x406ad6
mov eax, dword [ebp - 0x1048]
sub eax, 0x323fc4a
je 0x407222
jmp 0x406aec
mov eax, dword [ebp - 0x1048]
sub eax, 0x86dfed1
je 0x407549
jmp 0x406b02
mov eax, dword [ebp - 0x1048]
sub eax, 0x8c7ba52
je 0x40768d
jmp 0x406b18
mov eax, dword [ebp - 0x1048]
sub eax, 0x1898b233
je 0x4072aa
jmp 0x406b2e
mov eax, dword [ebp - 0x1048]
sub eax, 0x264f8ce2
je 0x406e1d
jmp 0x406b44
mov eax, dword [ebp - 0x1048]
sub eax, 0x2ae1eb99
je 0x4076f8
jmp 0x406b5a
mov eax, dword [ebp - 0x1048]
sub eax, 0x2f52c16a
je 0x4070d2
jmp 0x406b70
mov eax, dword [ebp - 0x1048]
sub eax, 0x3073fb2c
je 0x407492
jmp 0x406b86
mov eax, dword [ebp - 0x1048]
sub eax, 0x32ecf77d
je 0x407243
jmp 0x406b9c
mov eax, dword [ebp - 0x1048]
sub eax, 0x334f7c11
je 0x40761f
jmp 0x406bb2
mov eax, dword [ebp - 0x1048]
sub eax, 0x3547c053
je 0x407318
jmp 0x406bc8
mov eax, dword [ebp - 0x1048]
sub eax, 0x374e9830
je 0x406ef6
jmp 0x406bde
mov eax, dword [ebp - 0x1048]
sub eax, 0x3c4b1927
je 0x40737e
jmp 0x406bf4
mov eax, dword [ebp - 0x1048]
sub eax, 0x4b122620
je 0x406fcb
jmp 0x406c0a
mov eax, dword [ebp - 0x1048]
sub eax, 0x52376e58
je 0x406d7e
jmp 0x406c20
mov eax, dword [ebp - 0x1048]
sub eax, 0x602ea2f4
je 0x4076db
jmp 0x406c36
mov eax, dword [ebp - 0x1048]
sub eax, 0x605145de
je 0x406ed5
jmp 0x406c4c
mov eax, dword [ebp - 0x1048]
sub eax, 0x641438d7
je 0x406ff0
jmp 0x406c62
mov eax, dword [ebp - 0x1048]
sub eax, 0x65265949
je 0x406f71
jmp 0x406c78
mov eax, dword [ebp - 0x1048]
sub eax, 0x6bbdd73e
je 0x40780b
jmp 0x406c8e
mov eax, dword [ebp - 0x1048]
sub eax, 0x6cd0476d
je 0x4070c3
jmp 0x406ca4
mov eax, dword [ebp - 0x1048]
sub eax, 0x6e2ac55b
je 0x4071f8
jmp 0x406cba
mov eax, dword [ebp - 0x1048]
sub eax, 0x71d246a3
je 0x406d2d
jmp 0x406cd0
mov eax, dword [ebp - 0x1048]
sub eax, 0x72d7208d
je 0x407327
jmp 0x406ce6
mov eax, dword [ebp - 0x1048]
sub eax, 0x732c489d
je 0x40781a
jmp 0x406cfc
mov eax, dword [ebp - 0x1048]
sub eax, 0x7aa7e634
je 0x4077a6
jmp 0x406d12
mov eax, dword [ebp - 0x1048]
sub eax, 0x7b7fdb09
je 0x407715
jmp 0x406d28
jmp 0x407833
mov eax, dword [0x439594]
mov ecx, dword [0x439590]
mov edx, eax
add edx, 0xe815860d
sub edx, 1
sub edx, 0xe815860d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xed2bb36f
mov ecx, 0x52376e58
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov eax, dword [ebp + 8]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1038], eax
mov eax, dword [0x439594]
mov ecx, dword [0x439590]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xed2bb36f
mov ecx, 0x9d40619b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov dword [ebp - 0x1044], 0x264f8ce2
jmp 0x407833
mov eax, dword [0x439594]
mov ecx, dword [0x439590]
mov edx, eax
sub edx, 0xd9cc0000
sub edx, 1
add edx, 0xd9cc0000
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdd35b57f
mov ecx, 0xa11fbbc0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov eax, 0xffffffff
cmp dword [ebp - 0x1038], eax
sete al
and al, 1
mov byte [ebp - 0x1031], al
mov eax, dword [0x439594]
mov ecx, dword [0x439590]
mov edx, eax
sub edx, 0x3e5b69dd
sub edx, 1
add edx, 0x3e5b69dd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdd35b57f
mov ecx, 0x605145de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov dl, byte [ebp - 0x1031]
mov eax, 0x9710daa0
mov ecx, 0x374e9830
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov byte [ebp - 0x1032], 0
mov dword [ebp - 0x1044], 0xbfd5a446
jmp 0x407833
mov dword [ebp - 0x1044], 0x2ae1eb99
jmp 0x407833
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x103c], eax
mov dword [ebp - 0x1044], 0x65265949
jmp 0x407833
mov edx, 0xffffffff
mov eax, 0x4b122620
mov ecx, 0x92a1cacd
cmp dword [ebp - 0x103c], edx
cmove eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov eax, dword [ebp - 0x1038]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1044], 0xb9b17f07
jmp 0x407833
mov byte [ebp - 0x1032], 0
mov dword [ebp - 0x1044], 0x2ae1eb99
jmp 0x407833
mov byte [ebp - 0x103d], 0
mov dword [ebp - 0x1044], 0xf69ecfa7
jmp 0x407833
mov dword [ebp - 0x1044], 0x641438d7
jmp 0x407833
mov ecx, dword [0x439594]
mov eax, dword [0x439590]
mov edx, ecx
sub edx, 0xd3d5e562
sub edx, 1
add edx, 0xd3d5e562
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7aa7e634
mov ecx, 0xc7327cfa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
lea eax, [ebp - 0x1010]
mov dword [ebp - 0x1030], eax
mov eax, dword [0x439594]
mov ecx, dword [0x439590]
mov edx, eax
sub edx, 0x544ca486
sub edx, 1
add edx, 0x544ca486
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7aa7e634
mov ecx, 0x6cd0476d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov dword [ebp - 0x1044], 0x2f52c16a
jmp 0x407833
mov ecx, dword [0x439594]
mov eax, dword [0x439590]
mov edx, ecx
sub edx, 0xe2a29f5d
sub edx, 1
add edx, 0xe2a29f5d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x836ddbc4
mov ecx, 0x92c8033f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov edx, dword [ebp - 0x1038]
mov ecx, dword [ebp - 0x1030]
lea eax, [ebp - 0x1018]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1029], al
mov eax, dword [0x439594]
mov ecx, dword [0x439590]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x836ddbc4
mov ecx, 0xc827e2c5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov dl, byte [ebp - 0x1029]
mov eax, 0x6e2ac55b
mov ecx, 0x8a227ffd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov dword [ebp - 0x1044], 0xc213771b
jmp 0x407833
mov eax, dword [ebp - 0x1018]
mov dword [ebp - 0x1028], eax
mov dword [ebp - 0x1044], 0x323fc4a
jmp 0x407833
mov edx, dword [ebp - 0x1028]
mov eax, 0x72d7208d
mov ecx, 0x32ecf77d
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov byte [ebp - 0x103d], 1
mov dword [ebp - 0x1044], 0xd38ccdb5
jmp 0x407833
mov eax, dword [0x439594]
mov ecx, dword [0x439590]
mov edx, eax
sub edx, 0x4f5ca8f4
sub edx, 1
add edx, 0x4f5ca8f4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xec8b9b3e
mov ecx, 0x1898b233
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov ecx, dword [0x439594]
mov eax, dword [0x439590]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xec8b9b3e
mov ecx, 0x3547c053
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov dword [ebp - 0x1044], 0xc213771b
jmp 0x407833
mov ecx, dword [ebp - 0x1018]
lea edx, [ebp - 0x1010]
mov esi, dword [ebp - 0x103c]
lea eax, [ebp - 0x1014]
xor edi, edi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub esp, 0x14
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1021], al
mov dword [ebp - 0x1044], 0x3c4b1927
jmp 0x407833
mov ecx, dword [0x439594]
mov eax, dword [0x439590]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6bbdd73e
mov ecx, 0xbe2d14cb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov ecx, dword [0x439594]
mov eax, dword [0x439590]
mov edx, ecx
add edx, 0xea2807c8
sub edx, 1
sub edx, 0xea2807c8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6bbdd73e
mov ecx, 0x926446d2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov dl, byte [ebp - 0x1021]
mov eax, 0xe2685e1e
mov ecx, 0x3073fb2c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov dword [ebp - 0x1044], 0xc213771b
jmp 0x407833
mov eax, dword [ebp - 0x1014]
mov dword [ebp - 0x1020], eax
mov dword [ebp - 0x1044], 0x880fe4e2
jmp 0x407833
mov esi, dword [ebp - 0x1018]
mov edx, dword [ebp - 0x1020]
mov eax, 0x93609c2c
mov ecx, 0xef91eaa0
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov ecx, dword [0x439594]
mov eax, dword [0x439590]
mov edx, ecx
sub edx, 0x55132f24
sub edx, 1
add edx, 0x55132f24
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x732c489d
mov ecx, 0x86dfed1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov ecx, dword [0x439594]
mov eax, dword [0x439590]
mov edx, ecx
add edx, 0xb01951ea
sub edx, 1
sub edx, 0xb01951ea
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x732c489d
mov ecx, 0xc6cea4db
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov dword [ebp - 0x1044], 0xc213771b
jmp 0x407833
mov eax, dword [0x439594]
mov ecx, dword [0x439590]
mov edx, eax
add edx, 0x6ccb63bd
sub edx, 1
sub edx, 0x6ccb63bd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe829fcfc
mov ecx, 0x334f7c11
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov ecx, dword [0x439594]
mov eax, dword [0x439590]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe829fcfc
mov ecx, 0x8c7ba52
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1044], eax
jmp 0x407833
mov dword [ebp - 0x1044], 0x641438d7
jmp 0x407833
mov eax, dword [ebp - 0x1038]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x103c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov al, byte [ebp - 0x103d]
mov byte [ebp - 0x101a], al
mov dword [ebp - 0x1044], 0x602ea2f4
jmp 0x407833
mov al, byte [ebp - 0x101a]
and al, 1
mov byte [ebp - 0x1032], al
mov dword [ebp - 0x1044], 0x2ae1eb99
jmp 0x407833
mov al, byte [ebp - 0x1032]
and al, 1
mov byte [ebp - 0x1019], al
mov dword [ebp - 0x1044], 0x7b7fdb09
jmp 0x407833
mov al, byte [ebp - 0x1019]
and al, 1
movzx eax, al
mov dword [ebp - 0x104c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004218f0
mov eax, dword [ebp - 0x104c]
add esp, 0x105c
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp + 8]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1038], eax
mov dword [ebp - 0x1044], 0x52376e58
jmp 0x407833
mov dword [ebp - 0x1044], 0xa11fbbc0
jmp 0x407833
mov dword [ebp - 0x1044], 0xc7327cfa
jmp 0x407833
mov edx, dword [ebp - 0x1038]
mov ecx, dword [ebp - 0x1030]
lea eax, [ebp - 0x1018]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
mov dword [ebp - 0x1044], 0x92c8033f
jmp 0x407833
mov dword [ebp - 0x1044], 0x1898b233
jmp 0x407833
mov dword [ebp - 0x1044], 0xbe2d14cb
jmp 0x407833
mov dword [ebp - 0x1044], 0x86dfed1
jmp 0x407833
mov dword [ebp - 0x1044], 0x334f7c11
jmp 0x4068aa