Function at 0x406450
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x60
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x60], eax
mov eax, dword [0x432080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x5c], 0xf285072e
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x68], eax
sub eax, 0x833ca3a6
je 0x406bed
jmp 0x40648c
mov eax, dword [ebp - 0x68]
sub eax, 0x843d09d0
je 0x406f9e
jmp 0x40649f
mov eax, dword [ebp - 0x68]
sub eax, 0x86b06fd1
je 0x406dff
jmp 0x4064b2
mov eax, dword [ebp - 0x68]
sub eax, 0x8d53675f
je 0x406c09
jmp 0x4064c5
mov eax, dword [ebp - 0x68]
sub eax, 0x9972c104
je 0x4071ea
jmp 0x4064d8
mov eax, dword [ebp - 0x68]
sub eax, 0x9b129723
je 0x407133
jmp 0x4064eb
mov eax, dword [ebp - 0x68]
sub eax, 0xa353b122
je 0x406d94
jmp 0x4064fe
mov eax, dword [ebp - 0x68]
sub eax, 0xa3c1e013
je 0x406f43
jmp 0x406511
mov eax, dword [ebp - 0x68]
sub eax, 0xa477bf30
je 0x40709d
jmp 0x406524
mov eax, dword [ebp - 0x68]
sub eax, 0xaa27d379
je 0x4068c8
jmp 0x406537
mov eax, dword [ebp - 0x68]
sub eax, 0xac60c294
je 0x406c76
jmp 0x40654a
mov eax, dword [ebp - 0x68]
sub eax, 0xad0481c6
je 0x406d5d
jmp 0x40655d
mov eax, dword [ebp - 0x68]
sub eax, 0xb88a2e14
je 0x406c82
jmp 0x406570
mov eax, dword [ebp - 0x68]
sub eax, 0xbe496e18
je 0x406a98
jmp 0x406583
mov eax, dword [ebp - 0x68]
sub eax, 0xbf36cc9b
je 0x406bf9
jmp 0x406596
mov eax, dword [ebp - 0x68]
sub eax, 0xc3a2c537
je 0x406e53
jmp 0x4065a9
mov eax, dword [ebp - 0x68]
sub eax, 0xc53a7875
je 0x4071ae
jmp 0x4065bc
mov eax, dword [ebp - 0x68]
sub eax, 0xc9c62098
je 0x406c15
jmp 0x4065cf
mov eax, dword [ebp - 0x68]
sub eax, 0xce46b2f9
je 0x4069ae
jmp 0x4065e2
mov eax, dword [ebp - 0x68]
sub eax, 0xcf1d5a5c
je 0x406a21
jmp 0x4065f5
mov eax, dword [ebp - 0x68]
sub eax, 0xcf1f29bb
je 0x406d51
jmp 0x406608
mov eax, dword [ebp - 0x68]
sub eax, 0xd399e452
je 0x406e5f
jmp 0x40661b
mov eax, dword [ebp - 0x68]
sub eax, 0xd60c16aa
je 0x406f92
jmp 0x40662e
mov eax, dword [ebp - 0x68]
sub eax, 0xd7fba966
je 0x4071f6
jmp 0x406641
mov eax, dword [ebp - 0x68]
sub eax, 0xdbbf78f4
je 0x407091
jmp 0x406654
mov eax, dword [ebp - 0x68]
sub eax, 0xddeb1ab4
je 0x406ea7
jmp 0x406667
mov eax, dword [ebp - 0x68]
sub eax, 0xdf2c79ca
je 0x406aee
jmp 0x40667a
mov eax, dword [ebp - 0x68]
sub eax, 0xe27bd602
je 0x4071da
jmp 0x40668d
mov eax, dword [ebp - 0x68]
sub eax, 0xeeea3ac5
je 0x406a8c
jmp 0x4066a0
mov eax, dword [ebp - 0x68]
sub eax, 0xf285072e
je 0x40685a
jmp 0x4066b3
mov eax, dword [ebp - 0x68]
sub eax, 0xffd8f411
je 0x406c2d
jmp 0x4066c6
mov eax, dword [ebp - 0x68]
sub eax, 0x3160bb5
je 0x406f4f
jmp 0x4066d9
mov eax, dword [ebp - 0x68]
sub eax, 0x541ae51
je 0x406d78
jmp 0x4066ec
mov eax, dword [ebp - 0x68]
sub eax, 0x11e59fb1
je 0x406d88
jmp 0x4066ff
mov eax, dword [ebp - 0x68]
sub eax, 0x1d1ea054
je 0x4068e5
jmp 0x406712
mov eax, dword [ebp - 0x68]
sub eax, 0x2681bd86
je 0x4070c0
jmp 0x406725
mov eax, dword [ebp - 0x68]
sub eax, 0x2b0ae022
je 0x406be1
jmp 0x406738
mov eax, dword [ebp - 0x68]
sub eax, 0x31baadce
je 0x40725d
jmp 0x40674b
mov eax, dword [ebp - 0x68]
sub eax, 0x332ce54f
je 0x4071ba
jmp 0x40675e
mov eax, dword [ebp - 0x68]
sub eax, 0x386d8c8a
je 0x407224
jmp 0x406771
mov eax, dword [ebp - 0x68]
sub eax, 0x39896066
je 0x4069a2
jmp 0x406784
mov eax, dword [ebp - 0x68]
sub eax, 0x41b4ca6c
je 0x406950
jmp 0x406797
mov eax, dword [ebp - 0x68]
sub eax, 0x46506436
je 0x407242
jmp 0x4067aa
mov eax, dword [ebp - 0x68]
sub eax, 0x47732367
je 0x407215
jmp 0x4067bd
mov eax, dword [ebp - 0x68]
sub eax, 0x4d453a8b
je 0x406f6b
jmp 0x4067d0
mov eax, dword [ebp - 0x68]
sub eax, 0x5643bb4a
je 0x407236
jmp 0x4067e3
mov eax, dword [ebp - 0x68]
sub eax, 0x5bc470aa
je 0x406cf5
jmp 0x4067f6
mov eax, dword [ebp - 0x68]
sub eax, 0x623fe59e
je 0x406b0d
jmp 0x406809
mov eax, dword [ebp - 0x68]
sub eax, 0x6dc04336
je 0x406ef5
jmp 0x40681c
mov eax, dword [ebp - 0x68]
sub eax, 0x738879a0
je 0x406b5b
jmp 0x40682f
mov eax, dword [ebp - 0x68]
sub eax, 0x7cf152ff
je 0x406f86
jmp 0x406842
mov eax, dword [ebp - 0x68]
sub eax, 0x7dcf4a81
je 0x407011
jmp 0x406855
jmp 0x407264
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x64]
push eax
sub esp, 0xffc
mov edx, esp
mov dword [ebp - 0x40], edx
push eax
mov edx, esp
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x5c], 0xaa27d379
jmp 0x407264
mov edx, 0xffffffff
mov eax, 0xbe496e18
mov ecx, 0x1d1ea054
cmp dword [ebp - 0x50], edx
cmove eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe27bd602
mov ecx, 0x41b4ca6c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov byte [ebp - 0x41], 0
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
mov edx, eax
add edx, 0xd7e34e71
sub edx, 1
sub edx, 0xd7e34e71
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe27bd602
mov ecx, 0x39896066
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov dword [ebp - 0x5c], 0xce46b2f9
jmp 0x407264
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
mov edx, ecx
add edx, 0xf8959a34
sub edx, 1
sub edx, 0xf8959a34
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9972c104
mov ecx, 0xcf1d5a5c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9972c104
mov ecx, 0xeeea3ac5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov dword [ebp - 0x5c], 0x2681bd86
jmp 0x407264
mov eax, dword [ebp - 0x48]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x5c], 0xdf2c79ca
jmp 0x407264
mov edx, dword [ebp - 0x38]
mov esi, 0xffffffff
mov eax, 0xbf36cc9b
mov ecx, 0x623fe59e
cmp edx, esi
cmove eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
mov edx, eax
add edx, 0xeba4720c
sub edx, 1
sub edx, 0xeba4720c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd7fba966
mov ecx, 0x738879a0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov eax, dword [ebp - 0x50]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x41], 0
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
mov edx, ecx
add edx, 0xd352dac7
sub edx, 1
sub edx, 0xd352dac7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd7fba966
mov ecx, 0x2b0ae022
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov dword [ebp - 0x5c], 0x833ca3a6
jmp 0x407264
mov dword [ebp - 0x5c], 0x2681bd86
jmp 0x407264
mov byte [ebp - 0x55], 0
mov dword [ebp - 0x5c], 0x8d53675f
jmp 0x407264
mov dword [ebp - 0x5c], 0xc9c62098
jmp 0x407264
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x5c], 0xffd8f411
jmp 0x407264
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, eax
mov eax, 0xac60c294
mov ecx, 0xb88a2e14
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov dword [ebp - 0x5c], 0x843d09d0
jmp 0x407264
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
mov edx, ecx
add edx, 0x68ebd2c7
sub edx, 1
sub edx, 0x68ebd2c7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x47732367
mov ecx, 0x5bc470aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov eax, dword [ebp - 0x3c]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x29], al
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
mov edx, eax
add edx, 0xf80a5287
sub edx, 1
sub edx, 0xf80a5287
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x47732367
mov ecx, 0xcf1f29bb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov dword [ebp - 0x5c], 0xad0481c6
jmp 0x407264
mov dl, byte [ebp - 0x29]
mov eax, 0xa353b122
mov ecx, 0x541ae51
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov byte [ebp - 0x55], 1
mov dword [ebp - 0x5c], 0x11e59fb1
jmp 0x407264
mov dword [ebp - 0x5c], 0x843d09d0
jmp 0x407264
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x386d8c8a
mov ecx, 0x86b06fd1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x24], eax
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x386d8c8a
mov ecx, 0xc3a2c537
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov dword [ebp - 0x5c], 0xd399e452
jmp 0x407264
mov esi, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
lea eax, [ebp - 0x14]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, eax
mov eax, 0xddeb1ab4
mov ecx, 0x3160bb5
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
mov edx, eax
add edx, 0xb71ebfdc
sub edx, 1
sub edx, 0xb71ebfdc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5643bb4a
mov ecx, 0x6dc04336
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
mov edx, eax
add edx, 0xa084af53
sub edx, 1
sub edx, 0xa084af53
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5643bb4a
mov ecx, 0xa3c1e013
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov dword [ebp - 0x5c], 0x843d09d0
jmp 0x407264
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x3c]
cmp eax, dword [ecx]
setne al
and al, 1
mov byte [ebp - 0x1d], al
mov dword [ebp - 0x5c], 0x4d453a8b
jmp 0x407264
mov dl, byte [ebp - 0x1d]
mov eax, 0xd60c16aa
mov ecx, 0x7cf152ff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov dword [ebp - 0x5c], 0x843d09d0
jmp 0x407264
mov dword [ebp - 0x5c], 0xc9c62098
jmp 0x407264
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
mov edx, ecx
sub edx, 0xdd65f8fd
sub edx, 1
add edx, 0xdd65f8fd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x46506436
mov ecx, 0x7dcf4a81
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov eax, dword [ebp - 0x50]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x1c], eax
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x46506436
mov ecx, 0xdbbf78f4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov dword [ebp - 0x5c], 0xa477bf30
jmp 0x407264
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, byte [ebp - 0x55]
and al, 1
mov byte [ebp - 0x41], al
mov dword [ebp - 0x5c], 0x2681bd86
jmp 0x407264
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
mov edx, ecx
add edx, 0xd327eb18
sub edx, 1
sub edx, 0xd327eb18
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x31baadce
mov ecx, 0x9b129723
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov al, byte [ebp - 0x41]
and al, 1
mov byte [ebp - 0x15], al
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
mov edx, ecx
add edx, 0x1c076729
sub edx, 1
sub edx, 0x1c076729
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x31baadce
mov ecx, 0xc53a7875
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x407264
mov dword [ebp - 0x5c], 0x332ce54f
jmp 0x407264
mov al, byte [ebp - 0x15]
and al, 1
movzx eax, al
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041c430
mov eax, dword [ebp - 0x6c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov byte [ebp - 0x41], 0
mov dword [ebp - 0x5c], 0x41b4ca6c
jmp 0x407264
mov dword [ebp - 0x5c], 0xcf1d5a5c
jmp 0x407264
mov eax, dword [ebp - 0x50]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x41], 0
mov dword [ebp - 0x5c], 0x738879a0
jmp 0x407264
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x5c], 0x5bc470aa
jmp 0x407264
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x5c], 0x86b06fd1
jmp 0x407264
mov dword [ebp - 0x5c], 0x6dc04336
jmp 0x407264
mov eax, dword [ebp - 0x50]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x5c], 0x7dcf4a81
jmp 0x407264
mov dword [ebp - 0x5c], 0x9b129723
jmp 0x406476