Function at 0x404520
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x1068
call fcn.0041f620
mov eax, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1050], eax
mov eax, dword [0x436080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x104c], 0x2a27d69e
mov eax, dword [ebp - 0x104c]
mov dword [ebp - 0x1054], eax
sub eax, 0x82d11d61
je 0x40513e
jmp 0x40456c
mov eax, dword [ebp - 0x1054]
sub eax, 0x84f5820b
je 0x4052b1
jmp 0x404582
mov eax, dword [ebp - 0x1054]
sub eax, 0x88bf0760
je 0x405a13
jmp 0x404598
mov eax, dword [ebp - 0x1054]
sub eax, 0x8b18d377
je 0x4058d1
jmp 0x4045ae
mov eax, dword [ebp - 0x1054]
sub eax, 0x8c3f3c65
je 0x40507f
jmp 0x4045c4
mov eax, dword [ebp - 0x1054]
sub eax, 0x8f9c3345
je 0x4057f8
jmp 0x4045da
mov eax, dword [ebp - 0x1054]
sub eax, 0x9674e96e
je 0x404cf2
jmp 0x4045f0
mov eax, dword [ebp - 0x1054]
sub eax, 0x98f7f530
je 0x4058e0
jmp 0x404606
mov eax, dword [ebp - 0x1054]
sub eax, 0x9ea178d0
je 0x404bf0
jmp 0x40461c
mov eax, dword [ebp - 0x1054]
sub eax, 0x9fa59057
je 0x405989
jmp 0x404632
mov eax, dword [ebp - 0x1054]
sub eax, 0xa3607cb0
je 0x405069
jmp 0x404648
mov eax, dword [ebp - 0x1054]
sub eax, 0xaa553bbd
je 0x40592c
jmp 0x40465e
mov eax, dword [ebp - 0x1054]
sub eax, 0xc270d26f
je 0x405a98
jmp 0x404674
mov eax, dword [ebp - 0x1054]
sub eax, 0xc38aa785
je 0x405445
jmp 0x40468a
mov eax, dword [ebp - 0x1054]
sub eax, 0xc472333c
je 0x4053e5
jmp 0x4046a0
mov eax, dword [ebp - 0x1054]
sub eax, 0xc5706af5
je 0x405958
jmp 0x4046b6
mov eax, dword [ebp - 0x1054]
sub eax, 0xc952601c
je 0x4054a9
jmp 0x4046cc
mov eax, dword [ebp - 0x1054]
sub eax, 0xcf76cc06
je 0x404e58
jmp 0x4046e2
mov eax, dword [ebp - 0x1054]
sub eax, 0xd3e3903f
je 0x4050c8
jmp 0x4046f8
mov eax, dword [ebp - 0x1054]
sub eax, 0xd472b334
je 0x404c63
jmp 0x40470e
mov eax, dword [ebp - 0x1054]
sub eax, 0xe1e1afd4
je 0x405281
jmp 0x404724
mov eax, dword [ebp - 0x1054]
sub eax, 0xec33b75d
je 0x4053f4
jmp 0x40473a
mov eax, dword [ebp - 0x1054]
sub eax, 0xf0e72fcd
je 0x405174
jmp 0x404750
mov eax, dword [ebp - 0x1054]
sub eax, 0xf1b9c2e2
je 0x405764
jmp 0x404766
mov eax, dword [ebp - 0x1054]
sub eax, 0xf3219b70
je 0x40551f
jmp 0x40477c
mov eax, dword [ebp - 0x1054]
sub eax, 0xfa83152b
je 0x4055b8
jmp 0x404792
mov eax, dword [ebp - 0x1054]
sub eax, 0x1dd44b8
je 0x4057e9
jmp 0x4047a8
mov eax, dword [ebp - 0x1054]
sub eax, 0xadf0396
je 0x404df3
jmp 0x4047be
mov eax, dword [ebp - 0x1054]
sub eax, 0xd4c2cf6
je 0x40505a
jmp 0x4047d4
mov eax, dword [ebp - 0x1054]
sub eax, 0x10093bad
je 0x404d4a
jmp 0x4047ea
mov eax, dword [ebp - 0x1054]
sub eax, 0x1283e24e
je 0x405998
jmp 0x404800
mov eax, dword [ebp - 0x1054]
sub eax, 0x147badf5
je 0x405a22
jmp 0x404816
mov eax, dword [ebp - 0x1054]
sub eax, 0x157a7ccd
je 0x405684
jmp 0x40482c
mov eax, dword [ebp - 0x1054]
sub eax, 0x1f6f1fbf
je 0x40549a
jmp 0x404842
mov eax, dword [ebp - 0x1054]
sub eax, 0x219441e8
je 0x404ece
jmp 0x404858
mov eax, dword [ebp - 0x1054]
sub eax, 0x22dda063
je 0x4053ae
jmp 0x40486e
mov eax, dword [ebp - 0x1054]
sub eax, 0x245ae7e6
je 0x404c84
jmp 0x404884
mov eax, dword [ebp - 0x1054]
sub eax, 0x2a27d69e
je 0x404b1d
jmp 0x40489a
mov eax, dword [ebp - 0x1054]
sub eax, 0x2d8e6ab7
je 0x405a89
jmp 0x4048b0
mov eax, dword [ebp - 0x1054]
sub eax, 0x35d88234
je 0x40560e
jmp 0x4048c6
mov eax, dword [ebp - 0x1054]
sub eax, 0x36c6e8c5
je 0x4051ea
jmp 0x4048dc
mov eax, dword [ebp - 0x1054]
sub eax, 0x3cac8ccb
je 0x404f4e
jmp 0x4048f2
mov eax, dword [ebp - 0x1054]
sub eax, 0x3d23cfe1
je 0x40514d
jmp 0x404908
mov eax, dword [ebp - 0x1054]
sub eax, 0x401c6279
je 0x4059bd
jmp 0x40491e
mov eax, dword [ebp - 0x1054]
sub eax, 0x439ebdbe
je 0x4059a7
jmp 0x404934
mov eax, dword [ebp - 0x1054]
sub eax, 0x45a58ab2
je 0x404f6f
jmp 0x40494a
mov eax, dword [ebp - 0x1054]
sub eax, 0x4659ae04
je 0x404d59
jmp 0x404960
mov eax, dword [ebp - 0x1054]
sub eax, 0x4702c4f0
je 0x40539f
jmp 0x404976
mov eax, dword [ebp - 0x1054]
sub eax, 0x4af4ae82
je 0x404daa
jmp 0x40498c
mov eax, dword [ebp - 0x1054]
sub eax, 0x4b25eae4
je 0x4055d9
jmp 0x4049a2
mov eax, dword [ebp - 0x1054]
sub eax, 0x4ebced77
je 0x4057da
jmp 0x4049b8
mov eax, dword [ebp - 0x1054]
sub eax, 0x57bab925
je 0x404e02
jmp 0x4049ce
mov eax, dword [ebp - 0x1054]
sub eax, 0x5854b1cc
je 0x4053cf
jmp 0x4049e4
mov eax, dword [ebp - 0x1054]
sub eax, 0x58a0278c
je 0x4055e8
jmp 0x4049fa
mov eax, dword [ebp - 0x1054]
sub eax, 0x593d9f36
je 0x405a7a
jmp 0x404a10
mov eax, dword [ebp - 0x1054]
sub eax, 0x5a528664
je 0x404fe5
jmp 0x404a26
mov eax, dword [ebp - 0x1054]
sub eax, 0x65487188
je 0x40571b
jmp 0x404a3c
mov eax, dword [ebp - 0x1054]
sub eax, 0x662cac26
je 0x404f2d
jmp 0x404a52
mov eax, dword [ebp - 0x1054]
sub eax, 0x66f0d297
je 0x40590f
jmp 0x404a68
mov eax, dword [ebp - 0x1054]
sub eax, 0x68d718f0
je 0x405973
jmp 0x404a7e
mov eax, dword [ebp - 0x1054]
sub eax, 0x6c8c63ad
je 0x405a31
jmp 0x404a94
mov eax, dword [ebp - 0x1054]
sub eax, 0x6e3caae5
je 0x40531f
jmp 0x404aaa
mov eax, dword [ebp - 0x1054]
sub eax, 0x7101e02e
je 0x4052a2
jmp 0x404ac0
mov eax, dword [ebp - 0x1054]
sub eax, 0x78cea241
je 0x404b82
jmp 0x404ad6
mov eax, dword [ebp - 0x1054]
sub eax, 0x791ebb56
je 0x4059cc
mov eax, dword [ebp - 0x1050]
mov dword [ebp - 0x103c], eax
mov eax, dword [ebp - 0x103c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1034], eax
mov dword [ebp - 0x104c], 0x78cea241
jmp 0x405ab4
mov ecx, dword [0x43757c]
mov eax, dword [0x437578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc5706af5
mov ecx, 0x9ea178d0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov eax, dword [ebp - 0x1034]
mov dword [ebp - 0x1040], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x1040], eax
sete al
and al, 1
mov byte [ebp - 0x102e], al
mov eax, dword [0x43757c]
mov ecx, dword [0x437578]
mov edx, eax
add edx, 0x32e43c1
sub edx, 1
sub edx, 0x32e43c1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc5706af5
mov ecx, 0xd472b334
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov dl, byte [ebp - 0x102e]
mov eax, 0x57bab925
mov ecx, 0x245ae7e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov ecx, dword [0x43757c]
mov eax, dword [0x437578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x68d718f0
mov ecx, 0x9674e96e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov byte [ebp - 0x1035], 0
mov eax, dword [0x43757c]
mov ecx, dword [0x437578]
mov edx, eax
sub edx, 0x9f221bbb
sub edx, 1
add edx, 0x9f221bbb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x68d718f0
mov ecx, 0x10093bad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov dword [ebp - 0x104c], 0x4659ae04
jmp 0x405ab4
mov eax, dword [0x43757c]
mov ecx, dword [0x437578]
mov edx, eax
add edx, 0xb50b8ac7
sub edx, 1
sub edx, 0xb50b8ac7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9fa59057
mov ecx, 0x4af4ae82
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov eax, dword [0x43757c]
mov ecx, dword [0x437578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9fa59057
mov ecx, 0xadf0396
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov dword [ebp - 0x104c], 0x66f0d297
jmp 0x405ab4
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1044], eax
mov dword [ebp - 0x104c], 0xcf76cc06
jmp 0x405ab4
mov ecx, dword [0x43757c]
mov eax, dword [0x437578]
mov edx, ecx
sub edx, 0xaf35c459
sub edx, 1
add edx, 0xaf35c459
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1283e24e
mov ecx, 0x219441e8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov eax, 0xffffffff
cmp dword [ebp - 0x1044], eax
sete al
and al, 1
mov byte [ebp - 0x102d], al
mov eax, dword [0x43757c]
mov ecx, dword [0x437578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1283e24e
mov ecx, 0x662cac26
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov dl, byte [ebp - 0x102d]
mov eax, 0xa3607cb0
mov ecx, 0x3cac8ccb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov eax, dword [ebp - 0x1040]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x104c], 0x45a58ab2
jmp 0x405ab4
mov ecx, dword [0x43757c]
mov eax, dword [0x437578]
mov edx, ecx
sub edx, 0xdc2f6196
sub edx, 1
add edx, 0xdc2f6196
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x439ebdbe
mov ecx, 0x5a528664
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov byte [ebp - 0x1035], 0
mov ecx, dword [0x43757c]
mov eax, dword [0x437578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x439ebdbe
mov ecx, 0xd4c2cf6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov dword [ebp - 0x104c], 0x66f0d297
jmp 0x405ab4
mov byte [ebp - 0x1045], 0
mov dword [ebp - 0x104c], 0x8c3f3c65
jmp 0x405ab4
mov eax, dword [0x43757c]
mov ecx, dword [0x437578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x401c6279
mov ecx, 0xd3e3903f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov ecx, dword [0x43757c]
mov eax, dword [0x437578]
mov edx, ecx
add edx, 0xcd4b6e21
sub edx, 1
sub edx, 0xcd4b6e21
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x401c6279
mov ecx, 0x82d11d61
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov dword [ebp - 0x104c], 0x3d23cfe1
jmp 0x405ab4
lea eax, [ebp - 0x1010]
mov dword [ebp - 0x102c], eax
mov eax, dword [ebp - 0x1040]
mov dword [ebp - 0x1028], eax
mov dword [ebp - 0x104c], 0xf0e72fcd
jmp 0x405ab4
mov ecx, dword [0x43757c]
mov eax, dword [0x437578]
mov edx, ecx
add edx, 0x6276a5bb
sub edx, 1
sub edx, 0x6276a5bb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x791ebb56
mov ecx, 0x36c6e8c5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov ecx, dword [ebp - 0x102c]
mov edx, dword [ebp - 0x1028]
lea eax, [ebp - 0x1018]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1022], al
mov eax, dword [0x43757c]
mov ecx, dword [0x437578]
mov edx, eax
sub edx, 0xd5617ae5
sub edx, 1
add edx, 0xd5617ae5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x791ebb56
mov ecx, 0xe1e1afd4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov dl, byte [ebp - 0x1022]
mov eax, 0x7101e02e
mov ecx, 0x84f5820b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov dword [ebp - 0x104c], 0x8f9c3345
jmp 0x405ab4
mov ecx, dword [0x43757c]
mov eax, dword [0x437578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x88bf0760
mov ecx, 0x6e3caae5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
cmp dword [ebp - 0x1018], 0
sete al
and al, 1
mov byte [ebp - 0x1021], al
mov ecx, dword [0x43757c]
mov eax, dword [0x437578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x88bf0760
mov ecx, 0x4702c4f0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov dword [ebp - 0x104c], 0x22dda063
jmp 0x405ab4
mov dl, byte [ebp - 0x1021]
mov eax, 0xec33b75d
mov ecx, 0x5854b1cc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov byte [ebp - 0x1045], 1
mov dword [ebp - 0x104c], 0xc472333c
jmp 0x405ab4
mov dword [ebp - 0x104c], 0x8f9c3345
jmp 0x405ab4
mov eax, dword [0x43757c]
mov ecx, dword [0x437578]
mov edx, eax
add edx, 0xe81aafa3
sub edx, 1
sub edx, 0xe81aafa3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x147badf5
mov ecx, 0xc38aa785
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov eax, dword [ebp - 0x1018]
mov dword [ebp - 0x1020], eax
mov eax, dword [0x43757c]
mov ecx, dword [0x437578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x147badf5
mov ecx, 0x1f6f1fbf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov dword [ebp - 0x104c], 0xc952601c
jmp 0x405ab4
mov ecx, dword [0x43757c]
mov eax, dword [0x437578]
mov edx, ecx
add edx, 0xe838a51d
sub edx, 1
sub edx, 0xe838a51d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6c8c63ad
mov ecx, 0xf3219b70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
lea edx, [ebp - 0x1010]
mov esi, dword [ebp - 0x1044]
mov ecx, dword [ebp - 0x1020]
lea eax, [ebp - 0x1014]
xor edi, edi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub esp, 0x14
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x101b], al
mov eax, dword [0x43757c]
mov ecx, dword [0x437578]
mov edx, eax
sub edx, 0x5b98def6
sub edx, 1
add edx, 0x5b98def6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6c8c63ad
mov ecx, 0xfa83152b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov dl, byte [ebp - 0x101b]
mov eax, 0x4b25eae4
mov ecx, 0x58a0278c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov dword [ebp - 0x104c], 0x8f9c3345
jmp 0x405ab4
mov eax, dword [ebp - 0x1014]
cmp eax, dword [ebp - 0x1018]
setne al
and al, 1
mov byte [ebp - 0x101a], al
mov dword [ebp - 0x104c], 0x35d88234
jmp 0x405ab4
mov ecx, dword [0x43757c]
mov eax, dword [0x437578]
mov edx, ecx
sub edx, 0x1043b38b
sub edx, 1
add edx, 0x1043b38b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x593d9f36
mov ecx, 0x157a7ccd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov ecx, dword [0x43757c]
mov eax, dword [0x437578]
mov edx, ecx
add edx, 0xe6f5e776
sub edx, 1
sub edx, 0xe6f5e776
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x593d9f36
mov ecx, 0x7c8db129
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov eax, dword [0x43757c]
mov ecx, dword [0x437578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2d8e6ab7
mov ecx, 0xf1b9c2e2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov ecx, dword [0x43757c]
mov eax, dword [0x437578]
mov edx, ecx
add edx, 0xd4bda1ab
sub edx, 1
sub edx, 0xd4bda1ab
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2d8e6ab7
mov ecx, 0x4ebced77
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov dword [ebp - 0x104c], 0x8f9c3345
jmp 0x405ab4
mov dword [ebp - 0x104c], 0x3d23cfe1
jmp 0x405ab4
mov eax, dword [0x43757c]
mov ecx, dword [0x437578]
mov edx, eax
add edx, 0xa330f519
sub edx, 1
sub edx, 0xa330f519
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc270d26f
mov ecx, 0x7f253a05
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x405ab4
mov dword [ebp - 0x104c], 0x98f7f530
jmp 0x405ab4
mov eax, dword [ebp - 0x1044]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov al, byte [ebp - 0x1045]
and al, 1
mov byte [ebp - 0x1035], al
mov dword [ebp - 0x104c], 0x66f0d297
jmp 0x405ab4
mov al, byte [ebp - 0x1035]
and al, 1
mov byte [ebp - 0x1019], al
mov dword [ebp - 0x104c], 0xaa553bbd
jmp 0x405ab4
mov al, byte [ebp - 0x1019]
and al, 1
movzx eax, al
mov dword [ebp - 0x1058], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041f610
mov eax, dword [ebp - 0x1058]
add esp, 0x1068
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x1034]
mov dword [ebp - 0x1040], eax
mov dword [ebp - 0x104c], 0x9ea178d0
jmp 0x405ab4
mov byte [ebp - 0x1035], 0
mov dword [ebp - 0x104c], 0x9674e96e
jmp 0x405ab4
mov dword [ebp - 0x104c], 0x4af4ae82
jmp 0x405ab4
mov dword [ebp - 0x104c], 0x219441e8
jmp 0x405ab4
mov byte [ebp - 0x1035], 0
mov dword [ebp - 0x104c], 0x5a528664
jmp 0x405ab4
mov dword [ebp - 0x104c], 0xd3e3903f
jmp 0x405ab4
mov dword [ebp - 0x104c], 0x6e3caae5
jmp 0x405ab4
mov dword [ebp - 0x104c], 0xc38aa785
jmp 0x405ab4
lea edx, [ebp - 0x1010]
mov esi, dword [ebp - 0x1044]
mov ecx, dword [ebp - 0x1020]
lea eax, [ebp - 0x1014]
xor edi, edi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub esp, 0x14
mov dword [ebp - 0x104c], 0xf3219b70
jmp 0x405ab4
mov dword [ebp - 0x104c], 0x157a7ccd
jmp 0x405ab4
mov dword [ebp - 0x104c], 0xf1b9c2e2
jmp 0x405ab4
mov eax, dword [ebp - 0x1040]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x104c], 0x7f253a05
jmp 0x404550