Function at 0x40c250
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x54
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x54], eax
mov eax, dword [0x440080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x50], 0xc7af2977
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x5c], eax
sub eax, 0x842d6c42
je 0x40d142
jmp 0x40c28c
mov eax, dword [ebp - 0x5c]
sub eax, 0x87798e67
je 0x40cb93
jmp 0x40c29f
mov eax, dword [ebp - 0x5c]
sub eax, 0x87fcacca
je 0x40cfac
jmp 0x40c2b2
mov eax, dword [ebp - 0x5c]
sub eax, 0x9da98040
je 0x40d16c
jmp 0x40c2c5
mov eax, dword [ebp - 0x5c]
sub eax, 0xa4af3f9a
je 0x40ce60
jmp 0x40c2d8
mov eax, dword [ebp - 0x5c]
sub eax, 0xac8f0639
je 0x40cc42
jmp 0x40c2eb
mov eax, dword [ebp - 0x5c]
sub eax, 0xb2029faa
je 0x40cd56
jmp 0x40c2fe
mov eax, dword [ebp - 0x5c]
sub eax, 0xb6cf9f4a
je 0x40d0fb
jmp 0x40c311
mov eax, dword [ebp - 0x5c]
sub eax, 0xbe79acb7
je 0x40d0e9
jmp 0x40c324
mov eax, dword [ebp - 0x5c]
sub eax, 0xc2e9c7fb
je 0x40cbe1
jmp 0x40c337
mov eax, dword [ebp - 0x5c]
sub eax, 0xc7af2977
je 0x40c693
jmp 0x40c34a
mov eax, dword [ebp - 0x5c]
sub eax, 0xcd53f34d
je 0x40cedf
jmp 0x40c35d
mov eax, dword [ebp - 0x5c]
sub eax, 0xd0c14ee9
je 0x40ccdc
jmp 0x40c370
mov eax, dword [ebp - 0x5c]
sub eax, 0xdf8ce189
je 0x40cd9c
jmp 0x40c383
mov eax, dword [ebp - 0x5c]
sub eax, 0xdfb6b43b
je 0x40d06d
jmp 0x40c396
mov eax, dword [ebp - 0x5c]
sub eax, 0xe5ba87e6
je 0x40c7d6
jmp 0x40c3a9
mov eax, dword [ebp - 0x5c]
sub eax, 0xe8328a55
je 0x40ce54
jmp 0x40c3bc
mov eax, dword [ebp - 0x5c]
sub eax, 0xe9f7e599
je 0x40ccf4
jmp 0x40c3cf
mov eax, dword [ebp - 0x5c]
sub eax, 0xec294a33
je 0x40c9a3
jmp 0x40c3e2
mov eax, dword [ebp - 0x5c]
sub eax, 0xf53e67ef
je 0x40cc88
jmp 0x40c3f5
mov eax, dword [ebp - 0x5c]
sub eax, 0xf5dc1589
je 0x40cce8
jmp 0x40c408
mov eax, dword [ebp - 0x5c]
sub eax, 0xfa2ab32a
je 0x40cabe
jmp 0x40c41b
mov eax, dword [ebp - 0x5c]
sub eax, 0x27745eb
je 0x40d01f
jmp 0x40c42e
mov eax, dword [ebp - 0x5c]
sub eax, 0x330371f
je 0x40c85d
jmp 0x40c441
mov eax, dword [ebp - 0x5c]
sub eax, 0x12ace7fc
je 0x40cd0e
jmp 0x40c454
mov eax, dword [ebp - 0x5c]
sub eax, 0x18abee92
je 0x40d08d
jmp 0x40c467
mov eax, dword [ebp - 0x5c]
sub eax, 0x18f3c6b4
je 0x40ce0f
jmp 0x40c47a
mov eax, dword [ebp - 0x5c]
sub eax, 0x1f9d68ea
je 0x40ce1b
jmp 0x40c48d
mov eax, dword [ebp - 0x5c]
sub eax, 0x205f7215
je 0x40cf98
jmp 0x40c4a0
mov eax, dword [ebp - 0x5c]
sub eax, 0x235624f5
je 0x40c6ab
jmp 0x40c4b3
mov eax, dword [ebp - 0x5c]
sub eax, 0x277bed36
je 0x40d107
jmp 0x40c4c6
mov eax, dword [ebp - 0x5c]
sub eax, 0x2c4fe4d8
je 0x40d14e
jmp 0x40c4d9
mov eax, dword [ebp - 0x5c]
sub eax, 0x2e1b01ae
je 0x40c8ab
jmp 0x40c4ec
mov eax, dword [ebp - 0x5c]
sub eax, 0x3307c9dd
je 0x40ca70
jmp 0x40c4ff
mov eax, dword [ebp - 0x5c]
sub eax, 0x34fe3883
je 0x40c880
jmp 0x40c512
mov eax, dword [ebp - 0x5c]
sub eax, 0x35e7109c
je 0x40cf78
jmp 0x40c525
mov eax, dword [ebp - 0x5c]
sub eax, 0x414b6e0c
je 0x40d160
jmp 0x40c538
mov eax, dword [ebp - 0x5c]
sub eax, 0x444dd494
je 0x40ce39
jmp 0x40c54b
mov eax, dword [ebp - 0x5c]
sub eax, 0x448e5e0d
je 0x40c7f1
jmp 0x40c55e
mov eax, dword [ebp - 0x5c]
sub eax, 0x47fb6108
je 0x40cb52
jmp 0x40c571
mov eax, dword [ebp - 0x5c]
sub eax, 0x4af74073
je 0x40cb79
jmp 0x40c584
mov eax, dword [ebp - 0x5c]
sub eax, 0x4b9e728d
je 0x40c71e
jmp 0x40c597
mov eax, dword [ebp - 0x5c]
sub eax, 0x53275b47
je 0x40c997
jmp 0x40c5aa
mov eax, dword [ebp - 0x5c]
sub eax, 0x57936412
je 0x40ca64
jmp 0x40c5bd
mov eax, dword [ebp - 0x5c]
sub eax, 0x59c80791
je 0x40ce6c
jmp 0x40c5d0
mov eax, dword [ebp - 0x5c]
sub eax, 0x60519c1a
je 0x40c9f1
jmp 0x40c5e3
mov eax, dword [ebp - 0x5c]
sub eax, 0x60c4e88c
je 0x40c80d
jmp 0x40c5f6
mov eax, dword [ebp - 0x5c]
sub eax, 0x6b0f9805
je 0x40cf84
jmp 0x40c609
mov eax, dword [ebp - 0x5c]
sub eax, 0x7796a8b3
je 0x40d199
jmp 0x40c61c
mov eax, dword [ebp - 0x5c]
sub eax, 0x785cb98e
je 0x40c801
jmp 0x40c62f
mov eax, dword [ebp - 0x5c]
sub eax, 0x7915eb32
je 0x40cb46
jmp 0x40c642
mov eax, dword [ebp - 0x5c]
sub eax, 0x7a5bdc09
je 0x40cb6d
jmp 0x40c655
mov eax, dword [ebp - 0x5c]
sub eax, 0x7c5ff96d
je 0x40c91e
jmp 0x40c668
mov eax, dword [ebp - 0x5c]
sub eax, 0x7d2169d4
je 0x40cc27
jmp 0x40c67b
mov eax, dword [ebp - 0x5c]
sub eax, 0x7eee03c2
je 0x40c89b
jmp 0x40c68e
jmp 0x40d1a0
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x50], 0x235624f5
jmp 0x40d1a0
mov ecx, dword [0x441524]
mov eax, dword [0x441520]
mov edx, ecx
add edx, 0xbb7c22a8
sub edx, 1
sub edx, 0xbb7c22a8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x18abee92
mov ecx, 0x4b9e728d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x58]
push eax
sub esp, 0xffc
mov edx, esp
mov dword [ebp - 0x30], edx
push eax
mov edx, esp
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x48], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x48], eax
sete al
and al, 1
mov byte [ebp - 0x25], al
mov eax, dword [0x441524]
mov ecx, dword [0x441520]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x18abee92
mov ecx, 0xe5ba87e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov dl, byte [ebp - 0x25]
mov eax, 0x60c4e88c
mov ecx, 0x448e5e0d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov byte [ebp - 0x39], 0
mov dword [ebp - 0x50], 0x785cb98e
jmp 0x40d1a0
mov dword [ebp - 0x50], 0x205f7215
jmp 0x40d1a0
mov eax, dword [ebp - 0x40]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x50], 0x330371f
jmp 0x40d1a0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x4c], eax
mov edx, 0xffffffff
mov eax, 0x2e1b01ae
mov ecx, 0x34fe3883
cmp dword [ebp - 0x4c], edx
cmove eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov eax, dword [ebp - 0x48]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x50], 0x7eee03c2
jmp 0x40d1a0
mov byte [ebp - 0x39], 0
mov dword [ebp - 0x50], 0x205f7215
jmp 0x40d1a0
mov ecx, dword [0x441524]
mov eax, dword [0x441520]
mov edx, ecx
add edx, 0xe44a3942
sub edx, 1
sub edx, 0xe44a3942
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbe79acb7
mov ecx, 0x7c5ff96d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov eax, dword [ebp - 0x38]
mov byte [eax], 0
mov ecx, dword [0x441524]
mov eax, dword [0x441520]
mov edx, ecx
add edx, 0xaa5408bb
sub edx, 1
sub edx, 0xaa5408bb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbe79acb7
mov ecx, 0x53275b47
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov dword [ebp - 0x50], 0xec294a33
jmp 0x40d1a0
mov eax, dword [0x441524]
mov ecx, dword [0x441520]
mov edx, eax
sub edx, 0x6e41fe2a
sub edx, 1
add edx, 0x6e41fe2a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb6cf9f4a
mov ecx, 0x60519c1a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov ecx, dword [0x441524]
mov eax, dword [0x441520]
mov edx, ecx
sub edx, 0x6268fef1
sub edx, 1
add edx, 0x6268fef1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb6cf9f4a
mov ecx, 0x57936412
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov dword [ebp - 0x50], 0x3307c9dd
jmp 0x40d1a0
mov eax, dword [0x441524]
mov ecx, dword [0x441520]
mov edx, eax
sub edx, 0x2fed832b
sub edx, 1
add edx, 0x2fed832b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x277bed36
mov ecx, 0xfa2ab32a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x2c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1e], al
mov eax, dword [0x441524]
mov ecx, dword [0x441520]
mov edx, eax
sub edx, 0xbe4644fd
sub edx, 1
add edx, 0xbe4644fd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x277bed36
mov ecx, 0x7915eb32
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov dword [ebp - 0x50], 0x47fb6108
jmp 0x40d1a0
mov dl, byte [ebp - 0x1e]
mov eax, 0x7a5bdc09
mov ecx, 0x4af74073
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov dword [ebp - 0x50], 0x59c80791
jmp 0x40d1a0
mov eax, dword [ebp - 0x2c]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x1d], al
mov dword [ebp - 0x50], 0x87798e67
jmp 0x40d1a0
mov eax, dword [0x441524]
mov ecx, dword [0x441520]
mov edx, eax
add edx, 0xedca871c
sub edx, 1
sub edx, 0xedca871c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x842d6c42
mov ecx, 0xc2e9c7fb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov eax, dword [0x441524]
mov ecx, dword [0x441520]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x842d6c42
mov ecx, 0x7d2169d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov dl, byte [ebp - 0x1d]
mov eax, 0xe9f7e599
mov ecx, 0xac8f0639
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov eax, dword [0x441524]
mov ecx, dword [0x441520]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2c4fe4d8
mov ecx, 0xf53e67ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov eax, dword [ebp - 0x38]
mov byte [eax], 1
mov eax, dword [0x441524]
mov ecx, dword [0x441520]
mov edx, eax
add edx, 0x82660c1
sub edx, 1
sub edx, 0x82660c1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2c4fe4d8
mov ecx, 0xd0c14ee9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov dword [ebp - 0x50], 0xf5dc1589
jmp 0x40d1a0
mov dword [ebp - 0x50], 0x59c80791
jmp 0x40d1a0
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x50], 0x12ace7fc
jmp 0x40d1a0
mov esi, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, eax
mov eax, 0xb2029faa
mov ecx, 0x1f9d68ea
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov eax, dword [0x441524]
mov ecx, dword [0x441520]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x414b6e0c
mov ecx, 0xdf8ce189
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov ecx, dword [0x441524]
mov eax, dword [0x441520]
mov edx, ecx
sub edx, 0xc96a64a9
sub edx, 1
add edx, 0xc96a64a9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x414b6e0c
mov ecx, 0x18f3c6b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov dword [ebp - 0x50], 0x59c80791
jmp 0x40d1a0
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
cmp eax, dword [ecx]
setne al
and al, 1
mov byte [ebp - 0x13], al
mov dword [ebp - 0x50], 0x444dd494
jmp 0x40d1a0
mov dl, byte [ebp - 0x13]
mov eax, 0xa4af3f9a
mov ecx, 0xe8328a55
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov dword [ebp - 0x50], 0x59c80791
jmp 0x40d1a0
mov dword [ebp - 0x50], 0x3307c9dd
jmp 0x40d1a0
mov ecx, dword [0x441524]
mov eax, dword [0x441520]
mov edx, ecx
add edx, 0xd38d4562
sub edx, 1
sub edx, 0xd38d4562
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9da98040
mov ecx, 0xcd53f34d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov eax, dword [ebp - 0x48]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x4c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x38]
mov al, byte [eax]
mov byte [ebp - 0x12], al
mov ecx, dword [0x441524]
mov eax, dword [0x441520]
mov edx, ecx
add edx, 0xe1a02312
sub edx, 1
sub edx, 0xe1a02312
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9da98040
mov ecx, 0x35e7109c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov dword [ebp - 0x50], 0x6b0f9805
jmp 0x40d1a0
mov al, byte [ebp - 0x12]
and al, 1
mov byte [ebp - 0x39], al
mov dword [ebp - 0x50], 0x205f7215
jmp 0x40d1a0
mov al, byte [ebp - 0x39]
and al, 1
mov byte [ebp - 0x11], al
mov dword [ebp - 0x50], 0x87fcacca
jmp 0x40d1a0
mov ecx, dword [0x441524]
mov eax, dword [0x441520]
mov edx, ecx
add edx, 0xa018f747
sub edx, 1
sub edx, 0xa018f747
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7796a8b3
mov ecx, 0x27745eb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov eax, dword [0x441524]
mov ecx, dword [0x441520]
mov edx, eax
add edx, 0x10ed0c24
sub edx, 1
sub edx, 0x10ed0c24
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7796a8b3
mov ecx, 0xdfb6b43b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x50], eax
jmp 0x40d1a0
mov al, byte [ebp - 0x11]
and al, 1
movzx eax, al
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00428eb0
mov eax, dword [ebp - 0x60]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x50], 0x4b9e728d
jmp 0x40d1a0
mov eax, dword [ebp - 0x38]
mov byte [eax], 0
mov dword [ebp - 0x50], 0x7c5ff96d
jmp 0x40d1a0
mov dword [ebp - 0x50], 0x60519c1a
jmp 0x40d1a0
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x2c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x50], 0xfa2ab32a
jmp 0x40d1a0
mov dword [ebp - 0x50], 0xc2e9c7fb
jmp 0x40d1a0
mov eax, dword [ebp - 0x38]
mov byte [eax], 1
mov dword [ebp - 0x50], 0xf53e67ef
jmp 0x40d1a0
mov dword [ebp - 0x50], 0xdf8ce189
jmp 0x40d1a0
mov eax, dword [ebp - 0x48]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x4c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x50], 0xcd53f34d
jmp 0x40d1a0
mov dword [ebp - 0x50], 0x27745eb
jmp 0x40c276