Function at 0x407020
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x1068
call fcn.0041bff0
mov eax, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1050], eax
mov eax, dword [0x432080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x104c], 0xdbd5c174
mov eax, dword [ebp - 0x104c]
mov dword [ebp - 0x1054], eax
sub eax, 0x822708df
je 0x407704
jmp 0x40706c
mov eax, dword [ebp - 0x1054]
sub eax, 0x8ac1b0b4
je 0x407c42
jmp 0x407082
mov eax, dword [ebp - 0x1054]
sub eax, 0x8b6fc63b
je 0x407fb9
jmp 0x407098
mov eax, dword [ebp - 0x1054]
sub eax, 0x8ffd35fe
je 0x407b7f
jmp 0x4070ae
mov eax, dword [ebp - 0x1054]
sub eax, 0x901087b6
je 0x407b61
jmp 0x4070c4
mov eax, dword [ebp - 0x1054]
sub eax, 0x97c8c412
je 0x407a57
jmp 0x4070da
mov eax, dword [ebp - 0x1054]
sub eax, 0x9f1cfc92
je 0x4084a5
jmp 0x4070f0
mov eax, dword [ebp - 0x1054]
sub eax, 0x9f50f8e6
je 0x4080c6
jmp 0x407106
mov eax, dword [ebp - 0x1054]
sub eax, 0xa553583a
je 0x408392
jmp 0x40711c
mov eax, dword [ebp - 0x1054]
sub eax, 0xad15544e
je 0x4080d5
jmp 0x407132
mov eax, dword [ebp - 0x1054]
sub eax, 0xb51fdfef
je 0x407ab9
jmp 0x407148
mov eax, dword [ebp - 0x1054]
sub eax, 0xb933a760
je 0x407792
jmp 0x40715e
mov eax, dword [ebp - 0x1054]
sub eax, 0xb9da3e1e
je 0x407cc3
jmp 0x407174
mov eax, dword [ebp - 0x1054]
sub eax, 0xbc9c8407
je 0x407d6f
jmp 0x40718a
mov eax, dword [ebp - 0x1054]
sub eax, 0xbd88fe63
je 0x408375
jmp 0x4071a0
mov eax, dword [ebp - 0x1054]
sub eax, 0xbdddcbce
je 0x4084d2
jmp 0x4071b6
mov eax, dword [ebp - 0x1054]
sub eax, 0xbe221038
je 0x408050
jmp 0x4071cc
mov eax, dword [ebp - 0x1054]
sub eax, 0xc0f09cde
je 0x407db5
jmp 0x4071e2
mov eax, dword [ebp - 0x1054]
sub eax, 0xc2d723fd
je 0x4083be
jmp 0x4071f8
mov eax, dword [ebp - 0x1054]
sub eax, 0xc3ff7e7c
je 0x407e06
jmp 0x40720e
mov eax, dword [ebp - 0x1054]
sub eax, 0xca361960
je 0x40827c
jmp 0x407224
mov eax, dword [ebp - 0x1054]
sub eax, 0xce6d1baa
je 0x407e8d
jmp 0x40723a
mov eax, dword [ebp - 0x1054]
sub eax, 0xd2493037
je 0x40768e
jmp 0x407250
mov eax, dword [ebp - 0x1054]
sub eax, 0xd908eead
je 0x4082dc
jmp 0x407266
mov eax, dword [ebp - 0x1054]
sub eax, 0xdb97af2b
je 0x407cb4
jmp 0x40727c
mov eax, dword [ebp - 0x1054]
sub eax, 0xdbd5c174
je 0x40761d
jmp 0x407292
mov eax, dword [ebp - 0x1054]
sub eax, 0xdca3ef60
je 0x4084c3
jmp 0x4072a8
mov eax, dword [ebp - 0x1054]
sub eax, 0xefe950ad
je 0x4084b4
jmp 0x4072be
mov eax, dword [ebp - 0x1054]
sub eax, 0xf4701e0e
je 0x40842f
jmp 0x4072d4
mov eax, dword [ebp - 0x1054]
sub eax, 0xf5a2bc88
je 0x407d7e
jmp 0x4072ea
mov eax, dword [ebp - 0x1054]
sub eax, 0xfe3b63d0
je 0x407fda
jmp 0x407300
mov eax, dword [ebp - 0x1054]
sub eax, 0xfebc3420
je 0x408195
jmp 0x407316
mov eax, dword [ebp - 0x1054]
sub eax, 0x5516258
je 0x4079ca
jmp 0x40732c
mov eax, dword [ebp - 0x1054]
sub eax, 0xab657aa
je 0x407812
jmp 0x407342
mov eax, dword [ebp - 0x1054]
sub eax, 0xb852c6c
je 0x407d14
jmp 0x407358
mov eax, dword [ebp - 0x1054]
sub eax, 0xc89a5d5
je 0x407f03
jmp 0x40736e
mov eax, dword [ebp - 0x1054]
sub eax, 0xd4e6ee9
je 0x407b70
jmp 0x407384
mov eax, dword [ebp - 0x1054]
sub eax, 0xe7de020
je 0x408224
jmp 0x40739a
mov eax, dword [ebp - 0x1054]
sub eax, 0xedc3c3c
je 0x4083e2
jmp 0x4073b0
mov eax, dword [ebp - 0x1054]
sub eax, 0xff78cb8
je 0x407b11
jmp 0x4073c6
mov eax, dword [ebp - 0x1054]
sub eax, 0x15e9dc85
je 0x40828b
jmp 0x4073dc
mov eax, dword [ebp - 0x1054]
sub eax, 0x19f3143e
je 0x40826d
jmp 0x4073f2
mov eax, dword [ebp - 0x1054]
sub eax, 0x22695400
je 0x408419
jmp 0x407408
mov eax, dword [ebp - 0x1054]
sub eax, 0x242e04e8
je 0x4079eb
jmp 0x40741e
mov eax, dword [ebp - 0x1054]
sub eax, 0x29768746
je 0x407954
jmp 0x407434
mov eax, dword [ebp - 0x1054]
sub eax, 0x2cb1552f
je 0x40811e
jmp 0x40744a
mov eax, dword [ebp - 0x1054]
sub eax, 0x2f620ee6
je 0x407c93
jmp 0x407460
mov eax, dword [ebp - 0x1054]
sub eax, 0x2fa22cf2
je 0x407a06
jmp 0x407476
mov eax, dword [ebp - 0x1054]
sub eax, 0x322e988b
je 0x4077c9
jmp 0x40748c
mov eax, dword [ebp - 0x1054]
sub eax, 0x3290e1a7
je 0x4083f1
jmp 0x4074a2
mov eax, dword [ebp - 0x1054]
sub eax, 0x37588668
je 0x4081b6
jmp 0x4074b8
mov eax, dword [ebp - 0x1054]
sub eax, 0x44327b1e
je 0x408186
jmp 0x4074ce
mov eax, dword [ebp - 0x1054]
sub eax, 0x46eb9b53
je 0x408358
jmp 0x4074e4
mov eax, dword [ebp - 0x1054]
sub eax, 0x50ac4a78
je 0x407888
jmp 0x4074fa
mov eax, dword [ebp - 0x1054]
sub eax, 0x54b18156
je 0x407ac8
jmp 0x407510
mov eax, dword [ebp - 0x1054]
sub eax, 0x56439ec8
je 0x40844d
jmp 0x407526
mov eax, dword [ebp - 0x1054]
sub eax, 0x5d4f5517
je 0x40845c
jmp 0x40753c
mov eax, dword [ebp - 0x1054]
sub eax, 0x5fd426b5
je 0x407d9f
jmp 0x407552
mov eax, dword [ebp - 0x1054]
sub eax, 0x6634ce5e
je 0x408349
jmp 0x407568
mov eax, dword [ebp - 0x1054]
sub eax, 0x679a2c26
je 0x407897
jmp 0x40757e
mov eax, dword [ebp - 0x1054]
sub eax, 0x684d083d
je 0x4083d3
jmp 0x407594
mov eax, dword [ebp - 0x1054]
sub eax, 0x6f420341
je 0x407903
jmp 0x4075aa
mov eax, dword [ebp - 0x1054]
sub eax, 0x72d8dbec
je 0x40843e
jmp 0x4075c0
mov eax, dword [ebp - 0x1054]
sub eax, 0x7696c7e9
je 0x4077b3
jmp 0x4075d6
mov eax, dword [ebp - 0x1054]
sub eax, 0x79dd9f56
je 0x407e57
mov eax, dword [ebp - 0x1050]
mov dword [ebp - 0x103c], eax
mov eax, dword [ebp - 0x103c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1040], eax
mov eax, dword [ebp - 0x1040]
mov dword [ebp - 0x1034], eax
mov dword [ebp - 0x104c], 0xd2493037
jmp 0x408500
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
mov edx, ecx
sub edx, 0xaa34170d
sub edx, 1
add edx, 0xaa34170d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc2d723fd
mov ecx, 0x822708df
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov eax, dword [ebp - 0x1034]
mov ecx, 0xffffffff
cmp eax, ecx
sete al
and al, 1
mov byte [ebp - 0x102e], al
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
mov edx, ecx
add edx, 0xdfd01cb
sub edx, 1
sub edx, 0xdfd01cb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc2d723fd
mov ecx, 0xb933a760
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov dl, byte [ebp - 0x102e]
mov eax, 0x679a2c26
mov ecx, 0x7696c7e9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov byte [ebp - 0x1035], 0
mov dword [ebp - 0x104c], 0x322e988b
jmp 0x408500
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x684d083d
mov ecx, 0xab657aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
mov edx, ecx
sub edx, 0xe1b58b1e
sub edx, 1
add edx, 0xe1b58b1e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x684d083d
mov ecx, 0x50ac4a78
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov dword [ebp - 0x104c], 0xbd88fe63
jmp 0x408500
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1044], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x1044], eax
sete al
and al, 1
mov byte [ebp - 0x102d], al
mov dword [ebp - 0x104c], 0x6f420341
jmp 0x408500
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
mov edx, eax
add edx, 0x368897e3
sub edx, 1
sub edx, 0x368897e3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xedc3c3c
mov ecx, 0x29768746
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
mov edx, ecx
add edx, 0x66817499
sub edx, 1
sub edx, 0x66817499
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xedc3c3c
mov ecx, 0x5516258
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov dl, byte [ebp - 0x102d]
mov eax, 0x54b18156
mov ecx, 0x242e04e8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov eax, dword [ebp - 0x1040]
mov dword [ebp - 0x102c], eax
mov dword [ebp - 0x104c], 0x2fa22cf2
jmp 0x408500
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
mov edx, eax
add edx, 0x9c397873
sub edx, 1
sub edx, 0x9c397873
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3290e1a7
mov ecx, 0x97c8c412
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov eax, dword [ebp - 0x102c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov byte [ebp - 0x1035], 0
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3290e1a7
mov ecx, 0xb51fdfef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov dword [ebp - 0x104c], 0xbd88fe63
jmp 0x408500
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x22695400
mov ecx, 0xff78cb8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov byte [ebp - 0x1045], 0
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x22695400
mov ecx, 0x901087b6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov dword [ebp - 0x104c], 0xd4e6ee9
jmp 0x408500
mov dword [ebp - 0x104c], 0x8ffd35fe
jmp 0x408500
lea ecx, [ebp - 0x1010]
mov edx, dword [ebp - 0x1040]
lea eax, [ebp - 0x1018]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1026], al
mov dword [ebp - 0x104c], 0x7c3b5332
jmp 0x408500
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
mov edx, eax
sub edx, 0x20d7ddd8
sub edx, 1
add edx, 0x20d7ddd8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf4701e0e
mov ecx, 0x2f620ee6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov dl, byte [ebp - 0x1026]
mov eax, 0xdb97af2b
mov ecx, 0xb9da3e1e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov dword [ebp - 0x104c], 0x15e9dc85
jmp 0x408500
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
mov edx, eax
sub edx, 0xb7748edf
sub edx, 1
add edx, 0xb7748edf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x72d8dbec
mov ecx, 0xb852c6c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
cmp dword [ebp - 0x1018], 0
sete al
and al, 1
mov byte [ebp - 0x1025], al
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x72d8dbec
mov ecx, 0xbc9c8407
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov dword [ebp - 0x104c], 0xf5a2bc88
jmp 0x408500
mov dl, byte [ebp - 0x1025]
mov eax, 0x7b2850a2
mov ecx, 0x5fd426b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov byte [ebp - 0x1045], 1
mov dword [ebp - 0x104c], 0xc0f09cde
jmp 0x408500
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
mov edx, eax
sub edx, 0x75de1c0a
sub edx, 1
add edx, 0x75de1c0a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x56439ec8
mov ecx, 0xc3ff7e7c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
mov edx, eax
sub edx, 0xff5f0060
sub edx, 1
add edx, 0xff5f0060
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x56439ec8
mov ecx, 0x79dd9f56
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
mov edx, ecx
add edx, 0x53f5edc4
sub edx, 1
sub edx, 0x53f5edc4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5d4f5517
mov ecx, 0xc89a5d5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov esi, dword [ebp - 0x1044]
mov ecx, dword [ebp - 0x1024]
mov edx, dword [ebp - 0x1020]
lea eax, [ebp - 0x1014]
xor edi, edi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub esp, 0x14
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x101b], al
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5d4f5517
mov ecx, 0x8b6fc63b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov dl, byte [ebp - 0x101b]
mov eax, 0xfe3b63d0
mov ecx, 0xad15544e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
mov edx, ecx
add edx, 0xd91f560
sub edx, 1
sub edx, 0xd91f560
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9f1cfc92
mov ecx, 0xbe221038
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
mov edx, ecx
sub edx, 0x5d8631da
sub edx, 1
add edx, 0x5d8631da
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9f1cfc92
mov ecx, 0x9f50f8e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov dword [ebp - 0x104c], 0x15e9dc85
jmp 0x408500
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xefe950ad
mov ecx, 0x2cb1552f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov eax, dword [ebp - 0x1014]
cmp eax, dword [ebp - 0x1018]
setne al
and al, 1
mov byte [ebp - 0x101a], al
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
mov edx, eax
add edx, 0x39a87ac0
sub edx, 1
sub edx, 0x39a87ac0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xefe950ad
mov ecx, 0x44327b1e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov dword [ebp - 0x104c], 0xfebc3420
jmp 0x408500
mov dl, byte [ebp - 0x101a]
mov eax, 0xca361960
mov ecx, 0x37588668
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov ecx, dword [0x43359c]
mov eax, dword [0x433598]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdca3ef60
mov ecx, 0xe7de020
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdca3ef60
mov ecx, 0x19f3143e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov dword [ebp - 0x104c], 0x15e9dc85
jmp 0x408500
mov dword [ebp - 0x104c], 0x8ffd35fe
jmp 0x408500
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
mov edx, eax
sub edx, 0xd9ccb69d
sub edx, 1
add edx, 0xd9ccb69d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbdddcbce
mov ecx, 0xd908eead
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov eax, dword [ebp - 0x1040]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x1044]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [0x43359c]
mov ecx, dword [0x433598]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbdddcbce
mov ecx, 0x6634ce5e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x104c], eax
jmp 0x408500
mov dword [ebp - 0x104c], 0x46eb9b53
jmp 0x408500
mov al, byte [ebp - 0x1045]
and al, 1
mov byte [ebp - 0x1035], al
mov dword [ebp - 0x104c], 0xbd88fe63
jmp 0x408500
mov al, byte [ebp - 0x1035]
and al, 1
mov byte [ebp - 0x1019], al
mov dword [ebp - 0x104c], 0xa553583a
jmp 0x408500
mov al, byte [ebp - 0x1019]
and al, 1
movzx eax, al
mov dword [ebp - 0x1058], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041bfe0
mov eax, dword [ebp - 0x1058]
add esp, 0x1068
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x1034]
mov dword [ebp - 0x104c], 0x822708df
jmp 0x408500
mov dword [ebp - 0x104c], 0xab657aa
jmp 0x408500
mov dword [ebp - 0x104c], 0x29768746
jmp 0x408500
mov eax, dword [ebp - 0x102c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov byte [ebp - 0x1035], 0
mov dword [ebp - 0x104c], 0x97c8c412
jmp 0x408500
mov byte [ebp - 0x1045], 0
mov dword [ebp - 0x104c], 0xff78cb8
jmp 0x408500
mov dword [ebp - 0x104c], 0x8ac1b0b4
jmp 0x408500
mov dword [ebp - 0x104c], 0xb852c6c
jmp 0x408500
mov dword [ebp - 0x104c], 0xc3ff7e7c
jmp 0x408500
mov esi, dword [ebp - 0x1044]
mov ecx, dword [ebp - 0x1024]
mov edx, dword [ebp - 0x1020]
lea eax, [ebp - 0x1014]
xor edi, edi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub esp, 0x14
mov dword [ebp - 0x104c], 0xc89a5d5
jmp 0x408500
mov dword [ebp - 0x104c], 0xbe221038
jmp 0x408500
mov dword [ebp - 0x104c], 0x2cb1552f
jmp 0x408500
mov dword [ebp - 0x104c], 0xe7de020
jmp 0x408500
mov eax, dword [ebp - 0x1040]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x1044]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x104c], 0xd908eead
jmp 0x407050