Function at 0x5e6634
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffccc
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x324], eax
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x31c], eax
mov dword [ebp - 4], eax
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x5e729b
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x31c]
xor eax, eax
call fcn.004073d8
mov eax, dword [ebp - 0x31c]
lea edx, [ebp - 0x318]
call fcn.00426460
lea eax, [ebp - 0x318]
mov edx, 0x5e72b8
call fcn.0040b6d0
mov edx, dword [ebp - 0x318]
lea eax, [ebp - 0x304]
call fcn.00407dac
call fcn.00407158
mov edx, 1
lea eax, [ebp - 0x304]
call fcn.004081a8
call fcn.00407158
mov edx, 1
lea eax, [ebp - 0x304]
call fcn.0040818c
call fcn.00407158
lea eax, [ebp - 0x304]
call fcn.00407e7c
call fcn.00407158
push 0
push 0x80
push 3
push 0
push 0
push 0xc0000000
lea edx, [ebp - 0x324]
xor eax, eax
call fcn.004073d8
mov eax, dword [ebp - 0x324]
lea edx, [ebp - 0x320]
call fcn.00426460
lea eax, [ebp - 0x320]
mov edx, 0x5e72b8
call fcn.0040b6d0
mov eax, dword [ebp - 0x320]
call fcn.0040b4d8
push eax
call sub.kernel32.dll_CreateFileW
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
jne 0x5e675e
or ecx, 0xffffffff
or edx, 0xffffffff
mov eax, 0x5e72d8
call fcn.0055f2c8
jmp 0x5e7268
lea eax, [ebp - 4]
mov edx, dword [0x5d3f80]
call fcn.0040d96c
mov eax, dword [0x6041ec]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x5e6787
mov eax, dword [ebp - 0x30]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
lea edx, [ebp - 8]
mov eax, dword [ebp - 0x30]
inc eax
call fcn.005d5068
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, dword [0x6041ec]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x5e67bc
mov eax, dword [ebp - 0x34]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
dec eax
test eax, eax
jl 0x5e6bbd
inc eax
mov dword [ebp - 0x24], eax
xor edi, edi
mov eax, edi
add eax, eax
mov edx, dword [0x6041ec]
mov edx, dword [edx]
push dword [edx + eax*8 + 4]
push dword [edx + eax*8]
lea eax, [ebp - 8]
call fcn.005d44f0
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, edi
add eax, eax
mov edx, dword [0x6041ec]
mov edx, dword [edx]
mov eax, dword [edx + eax*8 + 8]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x5e6821
mov eax, dword [ebp - 0x3c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
lea edx, [ebp - 8]
mov eax, dword [ebp - 0x3c]
call fcn.005d5068
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, edi
add eax, eax
mov edx, dword [0x6041ec]
mov edx, dword [edx]
mov eax, dword [edx + eax*8 + 8]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
je 0x5e6864
mov eax, dword [ebp - 0x44]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
dec eax
test eax, eax
jl 0x5e6bb3
inc eax
mov dword [ebp - 0x28], eax
xor esi, esi
mov ebx, edi
add ebx, ebx
mov eax, dword [0x6041ec]
mov eax, dword [eax]
mov eax, dword [eax + ebx*8 + 8]
mov edx, esi
shl edx, 4
add edx, esi
movzx eax, byte [eax + edx*8]
mov edx, dword [ebp - 8]
mov byte [edx], al
mov eax, dword [0x6041ec]
mov eax, dword [eax]
mov eax, dword [eax + ebx*8 + 8]
mov edx, esi
shl edx, 4
add edx, esi
movzx eax, byte [eax + edx*8 + 1]
mov edx, dword [ebp - 8]
mov byte [edx + 1], al
mov eax, dword [ebp - 4]
test eax, eax
je 0x5e68be
sub eax, 4
mov eax, dword [eax]
push eax
push 2
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4b14
mov eax, dword [0x6041ec]
mov eax, dword [eax]
mov eax, dword [eax + ebx*8 + 8]
mov edx, esi
shl edx, 4
add edx, esi
mov eax, dword [eax + edx*8 + 4]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x5e68f9
mov eax, dword [ebp - 0x48]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
lea edx, [ebp - 8]
mov eax, dword [ebp - 0x48]
call fcn.005d5068
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, dword [0x6041ec]
mov eax, dword [eax]
mov eax, dword [eax + ebx*8 + 8]
mov edx, esi
shl edx, 4
add edx, esi
lea edx, [eax + edx*8 + 4]
lea ecx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, dword [0x6041ec]
mov eax, dword [eax]
mov eax, dword [eax + ebx*8 + 8]
mov edx, esi
shl edx, 4
add edx, esi
mov eax, dword [eax + edx*8 + 8]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x5e695d
mov eax, dword [ebp - 0x4c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 8]
mov eax, dword [ebp - 0x4c]
call fcn.005d5068
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, dword [0x6041ec]
mov eax, dword [eax]
mov eax, dword [eax + ebx*8 + 8]
mov edx, esi
shl edx, 4
add edx, esi
lea edx, [eax + edx*8 + 8]
lea ecx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, dword [0x6041ec]
mov eax, dword [eax]
mov eax, dword [eax + ebx*8 + 8]
mov edx, esi
shl edx, 4
add edx, esi
mov eax, dword [eax + edx*8 + 0xc]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x5e69c1
mov eax, dword [ebp - 0x50]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
lea edx, [ebp - 8]
mov eax, dword [ebp - 0x50]
call fcn.005d5068
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, dword [0x6041ec]
mov eax, dword [eax]
mov eax, dword [eax + ebx*8 + 8]
mov edx, esi
shl edx, 4
add edx, esi
lea edx, [eax + edx*8 + 0xc]
lea ecx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.005d4d94
mov ebx, 1
mov eax, edi
add eax, eax
mov edx, dword [0x6041ec]
mov edx, dword [edx]
mov eax, dword [edx + eax*8 + 8]
mov edx, esi
shl edx, 4
add edx, esi
lea eax, [eax + edx*8]
push dword [eax + ebx*8 + 0xc]
push dword [eax + ebx*8 + 8]
lea eax, [ebp - 8]
call fcn.005d44f0
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
inc ebx
cmp ebx, 0xf
jne 0x5e6a00
mov eax, edi
add eax, eax
mov edx, dword [0x6041ec]
mov edx, dword [edx]
mov eax, dword [edx + eax*8 + 8]
mov edx, esi
shl edx, 4
add edx, esi
mov eax, dword [eax + edx*8 + 0x80]
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x5e6a6b
sub ebx, 4
mov ebx, dword [ebx]
lea edx, [ebp - 8]
mov eax, ebx
call fcn.005d5068
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, edi
add eax, eax
mov edx, dword [0x6041ec]
mov edx, dword [edx]
mov eax, dword [edx + eax*8 + 8]
mov edx, esi
shl edx, 4
add edx, esi
mov eax, dword [eax + edx*8 + 0x80]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x5e6ab0
sub eax, 4
mov eax, dword [eax]
dec eax
test eax, eax
jl 0x5e6ba9
inc eax
mov dword [ebp - 0x2c], eax
xor ebx, ebx
mov eax, edi
add eax, eax
mov edx, dword [0x6041ec]
mov edx, dword [edx]
mov eax, dword [edx + eax*8 + 8]
mov edx, esi
shl edx, 4
add edx, esi
mov eax, dword [eax + edx*8 + 0x80]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + edx*4]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x5e6af7
mov eax, dword [ebp - 0x5c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
lea edx, [ebp - 8]
mov eax, dword [ebp - 0x5c]
call fcn.005d5068
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, edi
add eax, eax
mov edx, dword [0x6041ec]
mov edx, dword [edx]
mov eax, dword [edx + eax*8 + 8]
mov edx, esi
shl edx, 4
add edx, esi
mov eax, dword [eax + edx*8 + 0x80]
lea edx, [ebx + ebx*2]
lea edx, [eax + edx*4]
lea ecx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, edi
add eax, eax
mov edx, dword [0x6041ec]
mov edx, dword [edx]
mov eax, dword [edx + eax*8 + 8]
mov edx, esi
shl edx, 4
add edx, esi
mov eax, dword [eax + edx*8 + 0x80]
lea edx, [ebx + ebx*2]
lea edx, [eax + edx*4 + 4]
lea ecx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, edi
add eax, eax
mov edx, dword [0x6041ec]
mov edx, dword [edx]
mov eax, dword [edx + eax*8 + 8]
mov edx, esi
shl edx, 4
add edx, esi
mov eax, dword [eax + edx*8 + 0x80]
lea edx, [ebx + ebx*2]
lea edx, [eax + edx*4 + 8]
lea ecx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.005d4d94
inc ebx
dec dword [ebp - 0x2c]
jne 0x5e6abf
inc esi
dec dword [ebp - 0x28]
jne 0x5e6876
inc edi
dec dword [ebp - 0x24]
jne 0x5e67ce
mov eax, dword [0x604874]
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 8]
call fcn.005d44f0
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, dword [0x604874]
mov eax, dword [eax + 8]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x5e6bff
mov eax, dword [ebp - 0x64]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
lea edx, [ebp - 8]
mov eax, dword [ebp - 0x64]
call fcn.005d5068
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, dword [0x604874]
mov eax, dword [eax + 8]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x5e6c3a
mov eax, dword [ebp - 0x6c]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
dec eax
test eax, eax
jl 0x5e6fbd
inc eax
mov dword [ebp - 0x24], eax
xor esi, esi
mov eax, esi
shl eax, 4
add eax, esi
mov edx, dword [0x604874]
mov edx, dword [edx + 8]
movzx eax, byte [edx + eax*8]
mov edx, dword [ebp - 8]
mov byte [edx], al
mov eax, esi
shl eax, 4
add eax, esi
mov edx, dword [0x604874]
mov edx, dword [edx + 8]
movzx eax, byte [edx + eax*8 + 1]
mov edx, dword [ebp - 8]
mov byte [edx + 1], al
mov eax, dword [ebp - 4]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x5e6c97
mov eax, dword [ebp - 0x70]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
push eax
push 2
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4b14
mov eax, esi
shl eax, 4
add eax, esi
mov edx, dword [0x604874]
mov edx, dword [edx + 8]
mov eax, dword [edx + eax*8 + 4]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
je 0x5e6cd9
mov eax, dword [ebp - 0x78]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
lea edx, [ebp - 8]
mov eax, dword [ebp - 0x78]
call fcn.005d5068
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, esi
shl eax, 4
add eax, esi
mov edx, dword [0x604874]
mov edx, dword [edx + 8]
lea edx, [edx + eax*8 + 4]
lea ecx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, esi
shl eax, 4
add eax, esi
mov edx, dword [0x604874]
mov edx, dword [edx + 8]
mov eax, dword [edx + eax*8 + 8]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je 0x5e6d3f
mov eax, dword [ebp - 0x80]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
lea edx, [ebp - 8]
mov eax, dword [ebp - 0x80]
call fcn.005d5068
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, esi
shl eax, 4
add eax, esi
mov edx, dword [0x604874]
mov edx, dword [edx + 8]
lea edx, [edx + eax*8 + 8]
lea ecx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, esi
shl eax, 4
add eax, esi
mov edx, dword [0x604874]
mov edx, dword [edx + 8]
mov eax, dword [edx + eax*8 + 0xc]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x5e6db7
mov eax, dword [ebp - 0x88]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
lea edx, [ebp - 8]
mov eax, dword [ebp - 0x88]
call fcn.005d5068
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, esi
shl eax, 4
add eax, esi
mov edx, dword [0x604874]
mov edx, dword [edx + 8]
lea edx, [edx + eax*8 + 0xc]
lea ecx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.005d4d94
mov ebx, 1
mov eax, esi
shl eax, 4
add eax, esi
mov edx, dword [0x604874]
mov edx, dword [edx + 8]
lea eax, [edx + eax*8]
push dword [eax + ebx*8 + 0xc]
push dword [eax + ebx*8 + 8]
lea eax, [ebp - 8]
call fcn.005d44f0
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
inc ebx
cmp ebx, 0xf
jne 0x5e6df7
mov eax, esi
shl eax, 4
add eax, esi
mov edx, dword [0x604874]
mov edx, dword [edx + 8]
mov eax, dword [edx + eax*8 + 0x80]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x5e6e71
mov eax, dword [ebp - 0x90]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x90], eax
lea edx, [ebp - 8]
mov eax, dword [ebp - 0x90]
call fcn.005d5068
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, esi
shl eax, 4
add eax, esi
mov edx, dword [0x604874]
mov edx, dword [edx + 8]
mov eax, dword [edx + eax*8 + 0x80]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
je 0x5e6ed0
mov eax, dword [ebp - 0x98]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
dec eax
test eax, eax
jl 0x5e6fb3
inc eax
mov dword [ebp - 0x28], eax
xor ebx, ebx
mov eax, esi
shl eax, 4
add eax, esi
mov edx, dword [0x604874]
mov edx, dword [edx + 8]
mov eax, dword [edx + eax*8 + 0x80]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + edx*4]
mov dword [ebp - 0x9c], eax
mov edi, dword [ebp - 0x9c]
test edi, edi
je 0x5e6f17
sub edi, 4
mov edi, dword [edi]
lea edx, [ebp - 8]
mov eax, edi
call fcn.005d5068
lea ecx, [ebp - 4]
lea edx, [ebp - 8]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, esi
shl eax, 4
add eax, esi
mov edx, dword [0x604874]
mov edx, dword [edx + 8]
mov eax, dword [edx + eax*8 + 0x80]
lea edx, [ebx + ebx*2]
lea edx, [eax + edx*4]
lea ecx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, esi
shl eax, 4
add eax, esi
mov edx, dword [0x604874]
mov edx, dword [edx + 8]
mov eax, dword [edx + eax*8 + 0x80]
lea edx, [ebx + ebx*2]
lea edx, [eax + edx*4 + 4]
lea ecx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.005d4d94
mov eax, esi
shl eax, 4
add eax, esi
mov edx, dword [0x604874]
mov edx, dword [edx + 8]
mov eax, dword [edx + eax*8 + 0x80]
lea edx, [ebx + ebx*2]
lea edx, [eax + edx*4 + 8]
lea ecx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.005d4d94
inc ebx
dec dword [ebp - 0x28]
jne 0x5e6ee5
inc esi
dec dword [ebp - 0x24]
jne 0x5e6c4c
mov eax, dword [ebp - 4]
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
je 0x5e6fe0
mov eax, dword [ebp - 0xa0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xa0], eax
lea ecx, [ebp - 0x334]
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 4]
call fcn.005d8a94
lea eax, [ebp - 0x334]
lea edx, [ebp - 0x314]
mov ecx, 0xf
call fcn.005d8ac4
lea eax, [ebp - 8]
mov edx, dword [0x5d3f80]
call fcn.0040d96c
push 0x10
lea eax, [ebp - 8]
mov ecx, 1
mov edx, dword [0x5d3f80]
call fcn.0040d848
add esp, 4
lea eax, [ebp - 0x314]
mov ecx, 0x10
mov edx, dword [ebp - 8]
call fcn.004071b4
call fcn.00407454
lea eax, [ebp - 0xc]
mov edx, dword [0x5d3f80]
call fcn.0040d96c
push 0x20
lea eax, [ebp - 0xc]
mov ecx, 1
mov edx, dword [0x5d3f80]
call fcn.0040d848
add esp, 4
xor edi, edi
mov eax, 0xff
call fcn.004074a4
mov edx, dword [ebp - 0xc]
mov byte [edx + edi], al
inc edi
cmp edi, 0x20
jne 0x5e7070
mov eax, dword [ebp - 4]
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
je 0x5e70a9
mov eax, dword [ebp - 0xa4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x20], eax
push 1
lea edx, [ebp - 0x20]
lea eax, [ebp - 4]
mov ecx, dword [ebp - 0xc]
call fcn.005df2a4
lea ecx, [ebp - 4]
lea edx, [ebp - 4]
lea eax, [ebp - 8]
call fcn.005d4d94
lea ecx, [ebp - 4]
lea edx, [ebp - 4]
lea eax, [ebp - 0xc]
call fcn.005d4d94
mov eax, dword [ebp - 4]
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
je 0x5e7101
mov eax, dword [ebp - 0xa8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xa8], eax
lea edx, [ebp - 8]
mov eax, dword [ebp - 0xa8]
add eax, 8
call fcn.005d5068
lea ecx, [ebp - 4]
lea edx, [ebp - 4]
lea eax, [ebp - 8]
call fcn.005d4d94
mov eax, dword [ebp - 8]
mov byte [eax], 0x54
mov eax, dword [ebp - 8]
mov byte [eax + 1], 0x44
mov eax, dword [ebp - 8]
mov byte [eax + 2], 0x53
mov eax, dword [ebp - 8]
mov byte [eax + 3], 0x46
lea ecx, [ebp - 4]
lea edx, [ebp - 4]
lea eax, [ebp - 8]
call fcn.005d4d94
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
jmp 0x5e721f
mov eax, dword [ebp - 4]
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
je 0x5e717f
mov eax, dword [ebp - 0xb0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
cdq
sub eax, dword [ebp - 0x18]
sbb edx, dword [ebp - 0x14]
cmp edx, 0
jne 0x5e719a
cmp eax, 0x100000
jbe 0x5e71a3
jmp 0x5e719c
jle 0x5e71a3
mov ebx, 0x100000
jmp 0x5e71cf
mov eax, dword [ebp - 4]
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
je 0x5e71c6
mov eax, dword [ebp - 0xb4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
mov ebx, dword [ebp - 0xb4]
sub ebx, dword [ebp - 0x18]
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp ebx, dword [ebp - 0x1c]
je 0x5e720b
push 0
push 0
push dword [ebp - 0x14]
push dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
push eax
call sub.kernel32.dll_SetFilePointerEx
push 0
lea eax, [ebp - 0x1c]
push eax
push ebx
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 4]
lea eax, [edx + eax]
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.kernel32.dll_WriteFile
cmp ebx, dword [ebp - 0x1c]
jne 0x5e71d9
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
add eax, 0x100000
adc edx, 0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 4]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
je 0x5e7242
mov eax, dword [ebp - 0xac]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cdq
cmp edx, dword [ebp - 0x14]
jne 0x5e7259
cmp eax, dword [ebp - 0x18]
ja 0x5e715c
jmp 0x5e725f
jg 0x5e715c
mov eax, dword [ebp - 0x10]
push eax
call sub.kernel32.dll_CloseHandle
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5e72a2
lea eax, [ebp - 0x324]
mov edx, 4
call fcn.0040a6f8
lea eax, [ebp - 0xc]
mov edx, dword [0x5d3f80]
mov ecx, 3
call fcn.0040c420
pop eax
jmp eax