Function at 0x406c00
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x60
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x60], eax
mov eax, dword [0x432080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x5c], 0xb2ab0829
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x68], eax
sub eax, 0x80dbab05
je 0x40714c
jmp 0x406c3c
mov eax, dword [ebp - 0x68]
sub eax, 0x8714e4de
je 0x407954
jmp 0x406c4f
mov eax, dword [ebp - 0x68]
sub eax, 0x8b7e6747
je 0x407824
jmp 0x406c62
mov eax, dword [ebp - 0x68]
sub eax, 0x90b208b0
je 0x407158
jmp 0x406c75
mov eax, dword [ebp - 0x68]
sub eax, 0x9450a1e0
je 0x40793c
jmp 0x406c88
mov eax, dword [ebp - 0x68]
sub eax, 0x966f4f0a
je 0x407948
jmp 0x406c9b
mov eax, dword [ebp - 0x68]
sub eax, 0x9d2ac378
je 0x4073a4
jmp 0x406cae
mov eax, dword [ebp - 0x68]
sub eax, 0xa13637d9
je 0x407110
jmp 0x406cc1
mov eax, dword [ebp - 0x68]
sub eax, 0xaf3e657f
je 0x4073bf
jmp 0x406cd4
mov eax, dword [ebp - 0x68]
sub eax, 0xb2ab0829
je 0x406fd1
jmp 0x406ce7
mov eax, dword [ebp - 0x68]
sub eax, 0xb5a1e7b5
je 0x40726f
jmp 0x406cfa
mov eax, dword [ebp - 0x68]
sub eax, 0xb6271884
je 0x4076ac
jmp 0x406d0d
mov eax, dword [ebp - 0x68]
sub eax, 0xc0308bca
je 0x40708c
jmp 0x406d20
mov eax, dword [ebp - 0x68]
sub eax, 0xc4229d91
je 0x4078f1
jmp 0x406d33
mov eax, dword [ebp - 0x68]
sub eax, 0xcbd6c7d2
je 0x40722f
jmp 0x406d46
mov eax, dword [ebp - 0x68]
sub eax, 0xd04e2cde
je 0x4075c7
jmp 0x406d59
mov eax, dword [ebp - 0x68]
sub eax, 0xd6c3864a
je 0x4075ef
jmp 0x406d6c
mov eax, dword [ebp - 0x68]
sub eax, 0xda524823
je 0x407445
jmp 0x406d7f
mov eax, dword [ebp - 0x68]
sub eax, 0xdb26dd7f
je 0x40776d
jmp 0x406d92
mov eax, dword [ebp - 0x68]
sub eax, 0xe26c034e
je 0x4074f3
jmp 0x406da5
mov eax, dword [ebp - 0x68]
sub eax, 0xe42ffd83
je 0x4070a8
jmp 0x406db8
mov eax, dword [ebp - 0x68]
sub eax, 0xe9075472
je 0x407579
jmp 0x406dcb
mov eax, dword [ebp - 0x68]
sub eax, 0xefe1fed7
je 0x40737e
jmp 0x406dde
mov eax, dword [ebp - 0x68]
sub eax, 0xf7d1c188
je 0x4077b1
jmp 0x406df1
mov eax, dword [ebp - 0x68]
sub eax, 0xf9a6a573
je 0x4078bf
jmp 0x406e04
mov eax, dword [ebp - 0x68]
sub eax, 0xff80ea55
je 0x407217
jmp 0x406e17
mov eax, dword [ebp - 0x68]
sub eax, 0x6cecca4
je 0x4078ab
jmp 0x406e2a
mov eax, dword [ebp - 0x68]
sub eax, 0x22b675a1
je 0x40750e
jmp 0x406e3d
mov eax, dword [ebp - 0x68]
sub eax, 0x25aa7c48
je 0x4073dd
jmp 0x406e50
mov eax, dword [ebp - 0x68]
sub eax, 0x26de4ddc
je 0x407363
jmp 0x406e63
mov eax, dword [ebp - 0x68]
sub eax, 0x34720aa6
je 0x407900
jmp 0x406e76
mov eax, dword [ebp - 0x68]
sub eax, 0x359fbdbc
je 0x4073f7
jmp 0x406e89
mov eax, dword [ebp - 0x68]
sub eax, 0x3c86b4a8
je 0x4071a6
jmp 0x406e9c
mov eax, dword [ebp - 0x68]
sub eax, 0x3e0d3859
je 0x406fef
jmp 0x406eaf
mov eax, dword [ebp - 0x68]
sub eax, 0x4388fb8b
je 0x40709c
jmp 0x406ec2
mov eax, dword [ebp - 0x68]
sub eax, 0x4416dd95
je 0x4076a0
jmp 0x406ed5
mov eax, dword [ebp - 0x68]
sub eax, 0x51f86b2b
je 0x407779
jmp 0x406ee8
mov eax, dword [ebp - 0x68]
sub eax, 0x591d0394
je 0x407960
jmp 0x406efb
mov eax, dword [ebp - 0x68]
sub eax, 0x5ab6856e
je 0x4073d1
jmp 0x406f0e
mov eax, dword [ebp - 0x68]
sub eax, 0x5dd637a2
je 0x4075d3
jmp 0x406f21
mov eax, dword [ebp - 0x68]
sub eax, 0x6261551f
je 0x407652
jmp 0x406f34
mov eax, dword [ebp - 0x68]
sub eax, 0x62ff5336
je 0x4078df
jmp 0x406f47
mov eax, dword [ebp - 0x68]
sub eax, 0x6eea0483
je 0x40760c
jmp 0x406f5a
mov eax, dword [ebp - 0x68]
sub eax, 0x6f4f2fd6
je 0x4072e2
jmp 0x406f6d
mov eax, dword [ebp - 0x68]
sub eax, 0x719132bd
je 0x40789f
jmp 0x406f80
mov eax, dword [ebp - 0x68]
sub eax, 0x74f8043b
je 0x40738a
jmp 0x406f93
mov eax, dword [ebp - 0x68]
sub eax, 0x77fddbd0
je 0x40712b
jmp 0x406fa6
mov eax, dword [ebp - 0x68]
sub eax, 0x7dcf2870
je 0x4076fa
jmp 0x406fb9
mov eax, dword [ebp - 0x68]
sub eax, 0x7ea0f144
je 0x407223
jmp 0x406fcc
jmp 0x40796f
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x5c], 0x3e0d3859
jmp 0x40796f
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x64]
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
sub esp, 0xffc
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x54]
mov dword [eax], edx
mov eax, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x4c]
mov esi, 0xffffffff
mov eax, 0xe42ffd83
mov ecx, 0xc0308bca
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov byte [ebp - 0x55], 0
mov dword [ebp - 0x5c], 0x4388fb8b
jmp 0x40796f
mov dword [ebp - 0x5c], 0x6cecca4
jmp 0x40796f
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x31], al
mov dword [ebp - 0x5c], 0xa13637d9
jmp 0x40796f
mov dl, byte [ebp - 0x31]
mov eax, 0x90b208b0
mov ecx, 0x77fddbd0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x55], 0
mov dword [ebp - 0x5c], 0x80dbab05
jmp 0x40796f
mov dword [ebp - 0x5c], 0x6cecca4
jmp 0x40796f
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
mov edx, eax
add edx, 0x5aa5152d
sub edx, 1
sub edx, 0x5aa5152d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x62ff5336
mov ecx, 0x3c86b4a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov eax, dword [ebp - 0x44]
mov byte [eax], 0
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x62ff5336
mov ecx, 0xff80ea55
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov dword [ebp - 0x5c], 0x7ea0f144
jmp 0x40796f
mov dword [ebp - 0x5c], 0xcbd6c7d2
jmp 0x40796f
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x38]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x5c], 0xb5a1e7b5
jmp 0x40796f
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
sub edx, 0x8cf38b20
sub edx, 1
add edx, 0x8cf38b20
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc4229d91
mov ecx, 0x6f4f2fd6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov eax, dword [ebp - 0x30]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x2a], al
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
add edx, 0x94ad0204
sub edx, 1
sub edx, 0x94ad0204
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc4229d91
mov ecx, 0x26de4ddc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov dl, byte [ebp - 0x2a]
mov eax, 0xefe1fed7
mov ecx, 0x74f8043b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov dword [ebp - 0x5c], 0x51f86b2b
jmp 0x40796f
mov eax, dword [ebp - 0x38]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x29], al
mov dword [ebp - 0x5c], 0x9d2ac378
jmp 0x40796f
mov dl, byte [ebp - 0x29]
mov eax, 0x25aa7c48
mov ecx, 0xaf3e657f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov eax, dword [ebp - 0x44]
mov byte [eax], 1
mov dword [ebp - 0x5c], 0x5ab6856e
jmp 0x40796f
mov dword [ebp - 0x5c], 0x51f86b2b
jmp 0x40796f
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x5c], 0x359fbdbc
jmp 0x40796f
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
mov edx, eax
add edx, 0x2d1657e
sub edx, 1
sub edx, 0x2d1657e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x34720aa6
mov ecx, 0xda524823
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov eax, dword [ebp - 0x48]
mov esi, dword [eax]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1d], al
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
add edx, 0x6a3da7c7
sub edx, 1
sub edx, 0x6a3da7c7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x34720aa6
mov ecx, 0xe26c034e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov dl, byte [ebp - 0x1d]
mov eax, 0x22b675a1
mov ecx, 0x5dd637a2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9450a1e0
mov ecx, 0xe9075472
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
mov edx, eax
add edx, 0x96b0b2cc
sub edx, 1
sub edx, 0x96b0b2cc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9450a1e0
mov ecx, 0xd04e2cde
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov dword [ebp - 0x5c], 0x51f86b2b
jmp 0x40796f
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x5c], 0xd6c3864a
jmp 0x40796f
mov edx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x18]
mov eax, 0xb6271884
mov ecx, 0x6eea0483
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x966f4f0a
mov ecx, 0x6261551f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
mov edx, eax
add edx, 0xf7ce6177
sub edx, 1
sub edx, 0xf7ce6177
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x966f4f0a
mov ecx, 0x4416dd95
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov dword [ebp - 0x5c], 0x51f86b2b
jmp 0x40796f
mov eax, dword [0x43356c]
mov ecx, dword [0x433568]
mov edx, eax
sub edx, 0x2e782288
sub edx, 1
add edx, 0x2e782288
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8714e4de
mov ecx, 0x7dcf2870
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
add edx, 0x8ebade23
sub edx, 1
sub edx, 0x8ebade23
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8714e4de
mov ecx, 0xdb26dd7f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov dword [ebp - 0x5c], 0xcbd6c7d2
jmp 0x40796f
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x44]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x12], al
mov dword [ebp - 0x5c], 0xf7d1c188
jmp 0x40796f
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
add edx, 0x4f3c3eb7
sub edx, 1
sub edx, 0x4f3c3eb7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x591d0394
mov ecx, 0x8b7e6747
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov al, byte [ebp - 0x12]
and al, 1
mov byte [ebp - 0x55], al
mov ecx, dword [0x43356c]
mov eax, dword [0x433568]
mov edx, ecx
sub edx, 0x54725814
sub edx, 1
add edx, 0x54725814
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x591d0394
mov ecx, 0x719132bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x40796f
mov dword [ebp - 0x5c], 0x6cecca4
jmp 0x40796f
mov al, byte [ebp - 0x55]
and al, 1
mov byte [ebp - 0x11], al
mov dword [ebp - 0x5c], 0xf9a6a573
jmp 0x40796f
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041bcf0
mov eax, dword [ebp - 0x6c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x44]
mov byte [eax], 0
mov dword [ebp - 0x5c], 0x3c86b4a8
jmp 0x40796f
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x5c], 0x6f4f2fd6
jmp 0x40796f
mov eax, dword [ebp - 0x48]
mov esi, dword [eax]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x5c], 0xda524823
jmp 0x40796f
mov dword [ebp - 0x5c], 0xe9075472
jmp 0x40796f
mov dword [ebp - 0x5c], 0x6261551f
jmp 0x40796f
mov dword [ebp - 0x5c], 0x7dcf2870
jmp 0x40796f
mov al, byte [ebp - 0x12]
and al, 1
mov byte [ebp - 0x55], al
mov dword [ebp - 0x5c], 0x8b7e6747
jmp 0x406c26