Function at 0x40d8f0
Capabilities:
Get file size
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1d4
mov eax, dword [0x43b080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1d8], 0x37c61aed
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1dc], eax
sub eax, 0x80a4f690
je 0x4162b0
jmp 0x40d92c
mov eax, dword [ebp - 0x1dc]
sub eax, 0x811c02ea
je 0x41a343
jmp 0x40d942
mov eax, dword [ebp - 0x1dc]
sub eax, 0x81524428
je 0x41a054
jmp 0x40d958
mov eax, dword [ebp - 0x1dc]
sub eax, 0x81bba6df
je 0x419b6f
jmp 0x40d96e
mov eax, dword [ebp - 0x1dc]
sub eax, 0x821be2ab
je 0x414032
jmp 0x40d984
mov eax, dword [ebp - 0x1dc]
sub eax, 0x825cbc6f
je 0x41b398
jmp 0x40d99a
mov eax, dword [ebp - 0x1dc]
sub eax, 0x827707a1
je 0x415792
jmp 0x40d9b0
mov eax, dword [ebp - 0x1dc]
sub eax, 0x82d1aeed
je 0x41301d
jmp 0x40d9c6
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8383941a
je 0x41a3e8
jmp 0x40d9dc
mov eax, dword [ebp - 0x1dc]
sub eax, 0x83d4d3a0
je 0x413864
jmp 0x40d9f2
mov eax, dword [ebp - 0x1dc]
sub eax, 0x847c421f
je 0x4150f3
jmp 0x40da08
mov eax, dword [ebp - 0x1dc]
sub eax, 0x848650e9
je 0x416968
jmp 0x40da1e
mov eax, dword [ebp - 0x1dc]
sub eax, 0x84e834ec
je 0x41364e
jmp 0x40da34
mov eax, dword [ebp - 0x1dc]
sub eax, 0x850e8880
je 0x4190c8
jmp 0x40da4a
mov eax, dword [ebp - 0x1dc]
sub eax, 0x857090ab
je 0x41b698
jmp 0x40da60
mov eax, dword [ebp - 0x1dc]
sub eax, 0x85b99741
je 0x41acda
jmp 0x40da76
mov eax, dword [ebp - 0x1dc]
sub eax, 0x871b7057
je 0x41ae03
jmp 0x40da8c
mov eax, dword [ebp - 0x1dc]
sub eax, 0x87707ca3
je 0x414b7a
jmp 0x40daa2
mov eax, dword [ebp - 0x1dc]
sub eax, 0x87f4edcb
je 0x412ea6
jmp 0x40dab8
mov eax, dword [ebp - 0x1dc]
sub eax, 0x88188852
je 0x411ef7
jmp 0x40dace
mov eax, dword [ebp - 0x1dc]
sub eax, 0x887df945
je 0x412d1e
jmp 0x40dae4
mov eax, dword [ebp - 0x1dc]
sub eax, 0x88cb9864
je 0x414559
jmp 0x40dafa
mov eax, dword [ebp - 0x1dc]
sub eax, 0x895d2c62
je 0x41a2af
jmp 0x40db10
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8a79b619
je 0x41b4ed
jmp 0x40db26
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8b05e393
je 0x41ad2b
jmp 0x40db3c
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8b198b2d
je 0x41af50
jmp 0x40db52
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8b2d7ffa
je 0x418847
jmp 0x40db68
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8bd47c9b
je 0x416301
jmp 0x40db7e
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8cc60ce7
je 0x41b6c0
jmp 0x40db94
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8ccb0e79
je 0x415f7a
jmp 0x40dbaa
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8d6ae7a4
je 0x418781
jmp 0x40dbc0
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8d768633
je 0x411ed9
jmp 0x40dbd6
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8e255107
je 0x415102
jmp 0x40dbec
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8e2f85a4
je 0x417985
jmp 0x40dc02
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8e3263d4
je 0x4167b7
jmp 0x40dc18
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8fa788a8
je 0x41ae21
jmp 0x40dc2e
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8fc8f8e9
je 0x4145d2
jmp 0x40dc44
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8fcfdcbe
je 0x4127ed
jmp 0x40dc5a
mov eax, dword [ebp - 0x1dc]
sub eax, 0x8feb2756
je 0x414794
jmp 0x40dc70
mov eax, dword [ebp - 0x1dc]
sub eax, 0x90082ed6
je 0x413a29
jmp 0x40dc86
mov eax, dword [ebp - 0x1dc]
sub eax, 0x9036ad28
je 0x419c0b
jmp 0x40dc9c
mov eax, dword [ebp - 0x1dc]
sub eax, 0x905101c1
je 0x412a6e
jmp 0x40dcb2
mov eax, dword [ebp - 0x1dc]
sub eax, 0x90a5268c
je 0x415570
jmp 0x40dcc8
mov eax, dword [ebp - 0x1dc]
sub eax, 0x90c4d41d
je 0x41b14b
jmp 0x40dcde
mov eax, dword [ebp - 0x1dc]
sub eax, 0x90ffb8f9
je 0x41319f
jmp 0x40dcf4
mov eax, dword [ebp - 0x1dc]
sub eax, 0x910c535f
je 0x41897f
jmp 0x40dd0a
mov eax, dword [ebp - 0x1dc]
sub eax, 0x9115f404
je 0x41b306
jmp 0x40dd20
mov eax, dword [ebp - 0x1dc]
sub eax, 0x918070fd
je 0x41a6de
jmp 0x40dd36
mov eax, dword [ebp - 0x1dc]
sub eax, 0x91ac7d4e
je 0x4171bb
jmp 0x40dd4c
mov eax, dword [ebp - 0x1dc]
sub eax, 0x92876141
je 0x41b2f7
jmp 0x40dd62
mov eax, dword [ebp - 0x1dc]
sub eax, 0x92f0a985
je 0x4194de
jmp 0x40dd78
mov eax, dword [ebp - 0x1dc]
sub eax, 0x937bf79c
je 0x41a809
jmp 0x40dd8e
mov eax, dword [ebp - 0x1dc]
sub eax, 0x9384029e
je 0x4192a1
jmp 0x40dda4
mov eax, dword [ebp - 0x1dc]
sub eax, 0x93ec8cfa
je 0x417428
jmp 0x40ddba
mov eax, dword [ebp - 0x1dc]
sub eax, 0x941ca55f
je 0x417297
jmp 0x40ddd0
mov eax, dword [ebp - 0x1dc]
sub eax, 0x9444ac79
je 0x413dba
jmp 0x40dde6
mov eax, dword [ebp - 0x1dc]
sub eax, 0x945231e4
je 0x413611
jmp 0x40ddfc
mov eax, dword [ebp - 0x1dc]
sub eax, 0x946cc016
je 0x41b04a
jmp 0x40de12
mov eax, dword [ebp - 0x1dc]
sub eax, 0x948053e4
je 0x41ac29
jmp 0x40de28
mov eax, dword [ebp - 0x1dc]
sub eax, 0x948fe826
je 0x41ac63
jmp 0x40de3e
mov eax, dword [ebp - 0x1dc]
sub eax, 0x94d28279
je 0x417e9c
jmp 0x40de54
mov eax, dword [ebp - 0x1dc]
sub eax, 0x95c4ba8c
je 0x415f61
jmp 0x40de6a
mov eax, dword [ebp - 0x1dc]
sub eax, 0x95e32aab
je 0x4146e3
jmp 0x40de80
mov eax, dword [ebp - 0x1dc]
sub eax, 0x96f5809e
je 0x419f8e
jmp 0x40de96
mov eax, dword [ebp - 0x1dc]
sub eax, 0x97bce071
je 0x417353
mov dword [ebp - 0x1d8], 0xf61a76ba
jmp 0x41b791
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x1d8], 0x6e171b8e
jmp 0x41b791
mov byte [ebp - 0x179], 0
mov eax, dword [0x43c52c]
mov ecx, dword [0x43c528]
mov edx, eax
add edx, 0x3c1391d5
sub edx, 1
sub edx, 0x3c1391d5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x51dfce25
mov ecx, 0x64a08c2b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov dword [ebp - 0x180], 0xefb8ed3
mov eax, dword [0x43c52c]
mov ecx, dword [0x43c528]
mov edx, eax
add edx, 0x2feab4f3
sub edx, 1
sub edx, 0x2feab4f3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1ed2e26e
mov ecx, 0x122a3839
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov dl, byte [ebp - 0x125]
mov eax, 0xc33ba973
mov ecx, 0x56cd63d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov dl, byte [ebp - 0x11d]
mov eax, 0xa8ab55dd
mov ecx, 0x166441aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x1d8], 0x981bee96
jmp 0x41b791
mov dword [ebp - 0x188], 0xefb8ed0
mov dword [ebp - 0x1d8], 0xfceca9ed
jmp 0x41b791
mov dword [ebp - 0x1d8], 0xe010a4fc
jmp 0x41b791
mov dl, byte [ebp - 0xf5]
mov eax, 0xfdfb6857
mov ecx, 0x376722a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov eax, dword [0x43c52c]
mov ecx, dword [0x43c528]
mov edx, eax
sub edx, 0x8bdb3d90
sub edx, 1
add edx, 0x8bdb3d90
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6610e41
mov ecx, 0x29bc8a5e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov dword [ebp - 0x1d8], 0x1f8de74c
jmp 0x41b791
mov ecx, dword [0x43c52c]
mov eax, dword [0x43c528]
mov edx, ecx
sub edx, 0xd6d4749f
sub edx, 1
add edx, 0xd6d4749f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x51408b5c
mov ecx, 0xf3850d88
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov dl, byte [ebp - 0xe9]
mov eax, 0xccf40b59
mov ecx, 0xc42d22f3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov dl, byte [ebp - 0xda]
mov eax, 0x7e29f52e
mov ecx, 0xd8246202
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov ecx, dword [0x43c52c]
mov eax, dword [0x43c528]
mov edx, ecx
sub edx, 0x5266a400
sub edx, 1
add edx, 0x5266a400
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3984d007
mov ecx, 0x3d903e70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov eax, dword [0x43c52c]
mov ecx, dword [0x43c528]
mov edx, eax
add edx, 0xaca8a42e
sub edx, 1
sub edx, 0xaca8a42e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x14118fa6
mov ecx, 0x3cd597f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov byte [ebp - 0x19e], 0
mov dword [ebp - 0x1d8], 0xe6514d77
jmp 0x41b791
mov dword [ebp - 0x1d8], 0x29b0c935
jmp 0x41b791
mov dword [ebp - 0x1d8], 0x8e255107
jmp 0x41b791
mov byte [ebp - 0x1a5], 1
mov al, byte [ebp - 0x1a5]
mov byte [ebp - 0xd2], al
mov dword [ebp - 0x1d8], 0xb6c89874
jmp 0x41b791
mov dword [ebp - 0x1ac], 0xefb8f15
cmp dword [ebp - 0x1ac], 0xefb8f01
setg al
and al, 1
mov byte [ebp - 0xd1], al
mov ecx, dword [0x43c52c]
mov eax, dword [0x43c528]
mov edx, ecx
add edx, 0x2cfc6bfc
sub edx, 1
sub edx, 0x2cfc6bfc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1053fa25
mov ecx, 0x9b518198
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0xd0], eax
mov eax, dword [0x43c52c]
mov ecx, dword [0x43c528]
mov edx, eax
sub edx, 0x3b6e4ee7
sub edx, 1
add edx, 0x3b6e4ee7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x327b9425
mov ecx, 0xc0c42fec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov dword [ebp - 0x1b4], 1
mov dword [ebp - 0x1d8], 0x8ccb0e79
jmp 0x41b791
mov eax, dword [0x43c52c]
mov ecx, dword [0x43c528]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfe17cabc
mov ecx, 0x6385e399
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov eax, dword [0x43c52c]
mov ecx, dword [0x43c528]
mov edx, eax
sub edx, 0x3c047572
sub edx, 1
add edx, 0x3c047572
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe4a695b3
mov ecx, 0x8bd47c9b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov ecx, dword [0x43c52c]
mov eax, dword [0x43c528]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe4a695b3
mov ecx, 0xa57e2815
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov dword [ebp - 0x1bc], 1
mov dword [ebp - 0x1d8], 0xc49a6685
jmp 0x41b791
mov ecx, dword [0x43c52c]
mov eax, dword [0x43c528]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4dd230a3
mov ecx, 0x73a69190
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov dword [ebp - 0x1d8], 0x5544aaf8
jmp 0x41b791
mov dword [ebp - 0x1d8], 0x6dff2a1f
jmp 0x41b791
mov dword [ebp - 0x1d8], 0x155dba51
jmp 0x41b791
mov eax, dword [0x43c52c]
mov ecx, dword [0x43c528]
mov edx, eax
add edx, 0x871fbafc
sub edx, 1
sub edx, 0x871fbafc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe4864250
mov ecx, 0xf2c52338
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov eax, dword [0x43c52c]
mov ecx, dword [0x43c528]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x92876141
mov ecx, 0x1743fbe2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov dword [ebp - 0x1d8], 0x6a4c86e
jmp 0x41b791
mov dword [ebp - 0x1d8], 0x28265429
jmp 0x41b791
mov dword [ebp - 0x1d8], 0x338ee6b5
jmp 0x41b791
mov eax, dword [0x43c52c]
mov ecx, dword [0x43c528]
mov edx, eax
add edx, 0x56170297
sub edx, 1
sub edx, 0x56170297
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x304fac54
mov ecx, 0xb6d4c310
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov ecx, dword [0x43c52c]
mov eax, dword [0x43c528]
mov edx, ecx
add edx, 0x4e464275
sub edx, 1
sub edx, 0x4e464275
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdccff489
mov ecx, 0x8bc7d50
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov eax, dword [ebp - 0x160]
mov ecx, dword [eax]
add ecx, 0x5cff31ae
add ecx, 1
sub ecx, 0x5cff31ae
mov eax, dword [ebp - 0x160]
mov dword [eax], ecx
mov eax, dword [0x43c52c]
mov ecx, dword [0x43c528]
mov edx, eax
sub edx, 0x2d44edfb
sub edx, 1
add edx, 0x2d44edfb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x62c6a0fc
mov ecx, 0xc2d82468
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov eax, dword [ebp - 0x158]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, eax
mov eax, dword [ebp - 0x154]
mov dword [eax], ecx
mov eax, dword [ebp - 0x154]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.00424c5e
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x150]
mov dword [eax], ecx
mov eax, dword [ebp - 0x154]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, dword [0x43c52c]
mov ecx, dword [0x43c528]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe6d86bc6
mov ecx, 0x9036ad28
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov dword [ebp - 0x1d8], 0xb77ef9e9
jmp 0x41b791
mov eax, dword [0x43c52c]
mov ecx, dword [0x43c528]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa1804d7e
mov ecx, 0xef8150e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov dword [ebp - 0x174], 1
mov eax, dword [0x43c52c]
mov ecx, dword [0x43c528]
mov edx, eax
sub edx, 0x20065cc3
sub edx, 1
add edx, 0x20065cc3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x857090ab
mov ecx, 0xb2295028
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov dl, byte [ebp - 0x39]
mov eax, 0x60e30061
mov ecx, 0x8383941a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov eax, dword [ebp - 0x40]
sub esp, 4
mov dword [esp], eax
call fcn.00424c67
add esp, 4
mov ecx, dword [0x43c52c]
mov eax, dword [0x43c528]
mov edx, ecx
add edx, 0x224de68e
sub edx, 1
sub edx, 0x224de68e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8cc60ce7
mov ecx, 0x264bf7f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x1d8], 0xc480f95a
jmp 0x41b791
mov dword [ebp - 0x174], 1
mov ecx, dword [0x43c52c]
mov eax, dword [0x43c528]
mov edx, ecx
add edx, 0x348b38a3
sub edx, 1
sub edx, 0x348b38a3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x508501fc
mov ecx, 0x77468522
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov eax, dword [ebp - 0x150]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp eax, 0
sete al
and al, 1
mov byte [ebp - 0x1d], al
mov ecx, dword [0x43c52c]
mov eax, dword [0x43c528]
mov edx, ecx
sub edx, 0x9e25a833
sub edx, 1
add edx, 0x9e25a833
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd516dbf2
mov ecx, 0xbd1a2171
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1d8], eax
jmp 0x41b791
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1e0], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00424c50
mov eax, dword [ebp - 0x1e0]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1d8], 0x577c007d
jmp 0x41b791
mov dword [ebp - 0x1d8], 0x989cd5ad
jmp 0x41b791
mov dword [ebp - 0x1d8], 0xd7553868
jmp 0x41b791
mov dword [ebp - 0x1d8], 0xa24c9d36
jmp 0x41b791
mov dword [ebp - 0x1d8], 0x5e4bdd71
jmp 0x41b791
mov dword [ebp - 0x1d8], 0xfaf4a4ac
jmp 0x41b791
mov dword [ebp - 0x1d8], 0x49d00e6c
jmp 0x41b791
mov dword [ebp - 0x1d8], 0xdb504f46
jmp 0x41b791
mov dword [ebp - 0x1d8], 0x1743fbe2
jmp 0x41b791
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1d8], 0x56831755
jmp 0x41b791
mov dword [ebp - 0x1d8], 0x376725d5
jmp 0x41b791
mov ecx, dword [ebp - 0x15c]
call fcn.0041bf90
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.0040a3c0
add esp, 4
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.0040a3c0
add esp, 4
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x1d8], 0x69a8e639
jmp 0x41b791
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x1d8], 0x81524428
jmp 0x41b791
mov eax, dword [ebp - 0x40]
sub esp, 4
mov dword [esp], eax
call fcn.00424c67
add esp, 4
mov dword [ebp - 0x1d8], 0x811c02ea
jmp 0x41b791
jmp 0x40d910