Function at 0x561ed1
Capabilities:
Clear file content

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 4], edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], esi
mov edx, dword [edi + 0x4c]
test edx, edx
jne 0x561e6c
mov edx, dword [edi + 0x3c]
mov esi, dword [edi + 0x40]
test esi, esi
je 0x561e79
neg esi
add esi, edx
jmp 0x561e7e
mov esi, edx
sub esi, dword [edi + 0x38]
movsx ebx, byte [edi + 0x154]
lea ecx, [esi + 4]
cmp ecx, dword [edi + 0xec]
jbe 0x561ebe
cmp ebx, 1
je 0x561ebe
push 0x200
push edi
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], ecx
call fcn.005664c0
mov ecx, dword [ebp - 0x18]
add esp, 8
mov edx, dword [ebp - 0x1c]
test eax, eax
jne 0x562eb2
movsx ebx, byte [edi + 0x154]
dec ebx
cmp ebx, 7
ja case.0x561ecf.3
mov ebx, dword [ebx*4 + 0x5cb4c8]
jmp ebx
cmp byte [edi + 0x156], 1
je case.0x561ecf.5
test byte [edi + 0x16d], 0x40
jne case.0x561ecf.5
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x561f40
movzx edx, byte [edx + 0x1e]
test edx, edx
je 0x561f40
cmp dword [edi + 0x138], 1
je case.0x561ecf.5
cmp dword [0x5ec960], 0
je 0x561f40
movzx edx, byte [edi + 0x170]
test edx, 0x80
mov ecx, dword [edi + 0x140]
je 0x561f2e
cmp ecx, 0xfffffffa
je case.0x561ecf.5
cmp ecx, 1
je case.0x561ecf.5
cmp ecx, 2
je case.0x561ecf.5
mov edx, dword [edi + 0x40]
test edx, edx
je 0x562f56
mov byte [edx + esi], 0xd
mov edx, dword [edi + 0x40]
mov byte [edx + esi + 1], 0xa
add esi, 2
jmp case.0x561ecf.5
cmp byte [edi + 0x156], 1
je case.0x561ecf.5
test byte [edi + 0x16d], 0x40
jne case.0x561ecf.5
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x561fce
movzx edx, byte [edx + 0x1e]
test edx, edx
je 0x561fce
cmp dword [edi + 0x138], 1
je case.0x561ecf.5
cmp dword [0x5ec960], 0
je 0x561fce
movzx edx, byte [edi + 0x170]
test edx, 0x80
mov ecx, dword [edi + 0x140]
je 0x561fbc
cmp ecx, 0xfffffffa
je case.0x561ecf.5
cmp ecx, 1
je case.0x561ecf.5
cmp ecx, 2
je case.0x561ecf.5
mov edx, dword [edi + 0x40]
test edx, edx
je 0x563002
mov byte [edx + esi], 0xd
inc esi
jmp case.0x561ecf.5
cmp byte [edi + 0x156], 1
je case.0x561ecf.5
test byte [edi + 0x16d], 0x40
jne case.0x561ecf.5
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562052
movzx edx, byte [edx + 0x1e]
test edx, edx
je 0x562052
cmp dword [edi + 0x138], 1
je case.0x561ecf.5
cmp dword [0x5ec960], 0
je 0x562052
movzx edx, byte [edi + 0x170]
test edx, 0x80
mov ecx, dword [edi + 0x140]
je 0x562040
cmp ecx, 0xfffffffa
je case.0x561ecf.5
cmp ecx, 1
je case.0x561ecf.5
cmp ecx, 2
je case.0x561ecf.5
mov edx, dword [edi + 0x40]
test edx, edx
je 0x562f6d
mov byte [edx + esi], 0xa
inc esi
jmp case.0x561ecf.5
add esi, 0xfffffffc
mov edx, esi
and edx, 0xff
mov ebx, dword [edi + 0x40]
test ebx, ebx
mov dword [ebp - 0x10], esi
je 0x562f7a
test byte [edi + 0x16d], 0x20
je 0x5620bf
mov eax, esi
shr eax, 0x18
mov byte [ebx], al
mov ebx, dword [edi + 0x40]
mov dword [ebp - 0x1c], eax
mov eax, esi
shr eax, 0x10
movzx eax, al
mov byte [ebx + 1], al
mov ebx, dword [edi + 0x40]
shr esi, 8
mov dword [ebp - 0x18], eax
mov eax, esi
and eax, 0xff
mov byte [ebx + 2], al
mov esi, dword [edi + 0x40]
mov dword [ebp - 0x14], eax
mov byte [esi + 3], dl
jmp 0x5620ec
movzx edx, byte [ebp - 0x10]
mov byte [ebx], dl
mov esi, dword [edi + 0x40]
movzx eax, byte [ebp - 0xf]
mov dword [ebp - 0x14], eax
mov byte [esi + 1], al
mov eax, dword [edi + 0x40]
movzx ebx, byte [ebp - 0xe]
mov dword [ebp - 0x18], ebx
mov byte [eax + 2], bl
mov ebx, dword [edi + 0x40]
movzx eax, byte [ebp - 0xd]
mov dword [ebp - 0x1c], eax
mov byte [ebx + 3], al
test byte [edi + 0x16d], 0x20
je 0x562117
mov esi, dword [edi + 0x3c]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x18]
mov byte [esi], al
mov eax, dword [edi + 0x3c]
mov byte [eax + 1], bl
mov ebx, dword [edi + 0x3c]
mov eax, dword [ebp - 0x14]
mov byte [ebx + 2], al
mov esi, dword [edi + 0x3c]
mov byte [esi + 3], dl
jmp 0x562137
mov esi, dword [edi + 0x3c]
mov eax, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x18]
mov byte [esi], dl
mov edx, dword [edi + 0x3c]
mov byte [edx + 1], al
mov esi, dword [edi + 0x3c]
mov eax, dword [ebp - 0x1c]
mov byte [esi + 2], bl
mov edx, dword [edi + 0x3c]
mov byte [edx + 3], al
mov esi, ecx
jmp case.0x561ecf.5
mov ecx, dword [edi + 0xf8]
cmp esi, ecx
jae 0x56215c
sub ecx, esi
push ecx
push 0x20
push edx
call fcn.0059f940
add esp, 0xc
mov esi, dword [edi + 0xf8]
test byte [edi + 0x168], 4
je case.0x561ecf.5
test byte [edi + 0x16a], 0x40
je case.0x561ecf.5
test byte [edi + 0x16b], 8
je case.0x561ecf.5
cmp byte [edi + 0x156], 1
je case.0x561ecf.5
test byte [edi + 0x16d], 0x40
jne case.0x561ecf.5
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x5621de
movzx edx, byte [edx + 0x1e]
test edx, edx
je 0x5621de
cmp dword [edi + 0x138], 1
je case.0x561ecf.5
cmp dword [0x5ec960], 0
je 0x5621de
movzx edx, byte [edi + 0x170]
test edx, 0x80
mov ecx, dword [edi + 0x140]
je 0x5621d4
cmp ecx, 0xfffffffa
je case.0x561ecf.5
cmp ecx, 1
je case.0x561ecf.5
cmp ecx, 2
je case.0x561ecf.5
mov edx, dword [edi + 0x40]
test edx, edx
je 0x562fed
mov byte [edx + esi - 2], 0xd
mov edx, dword [edi + 0x40]
mov byte [edx + esi - 1], 0xa
jmp case.0x561ecf.5
push 0x386
push str.for_put.c
push 2
push 8
call fcn.00560040
add esp, 0x10
mov ecx, dword [edi + 0x40]
test ecx, ecx
je 0x562219
mov ebx, ecx
jmp 0x56221c
mov ebx, dword [edi + 0x38]
movsx edx, byte [edi + 0x156]
cmp edx, 2
jne 0x562417
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x5622ab
movzx ecx, byte [edx + 0x1c]
test ecx, ecx
jne 0x562243
movzx ecx, byte [edx + 0x1d]
test ecx, ecx
je 0x5622a4
movzx ecx, byte [edx + 0x20]
test ecx, ecx
je 0x562281
cmp dword [edi + 0x138], 1
je 0x5622a4
cmp dword [0x5ec960], 0
je 0x562281
movzx ecx, byte [edi + 0x170]
test ecx, 0x80
mov eax, dword [edi + 0x140]
je 0x562277
cmp eax, 0xfffffffa
je 0x5622a4
cmp eax, 1
je 0x5622a4
cmp eax, 2
je 0x5622a4
mov eax, edi
lea edx, [ebp - 0x14]
mov ecx, 1
mov byte [ebp - 0x14], 0xa
call fcn.0056192c
cmp eax, 0xffffffff
je 0x56300f
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x5622ab
mov byte [edx + 0x1c], 0
mov edx, dword [edi + 0x7c]
test byte [edi + 0x168], 4
je 0x5622ca
test byte [edi + 0x16a], 0x40
je 0x5622ca
test byte [edi + 0x16b], 8
jne 0x562365
movsx ecx, byte [edi + 0x154]
cmp ecx, 6
je 0x562365
movzx eax, byte [edi + 0x16d]
cmp ecx, 8
mov dword [ebp - 0x18], eax
je 0x56235d
test byte [ebp - 0x18], 0x40
jne 0x56235d
test edx, edx
je 0x562338
movzx ecx, byte [edx + 0x1e]
test ecx, ecx
je 0x562338
mov ecx, dword [edi + 0x138]
cmp ecx, 1
je 0x562375
cmp dword [0x5ec960], 0
je 0x562338
mov eax, dword [edi + 0x140]
mov dword [ebp - 0x1c], eax
movzx eax, byte [edi + 0x170]
test eax, 0x80
je 0x56232c
cmp dword [ebp - 0x1c], 0xfffffffa
je 0x562375
cmp dword [ebp - 0x1c], 1
je 0x562375
cmp dword [ebp - 0x1c], 2
je 0x562375
mov edx, dword [edi + 0x40]
test edx, edx
je 0x56302d
mov byte [edx + esi], 0xa
movzx eax, byte [edi + 0x16d]
inc esi
mov ecx, dword [edi + 0x138]
mov edx, dword [edi + 0x7c]
mov dword [ebp - 0x18], eax
jmp 0x562375
mov ecx, dword [edi + 0x138]
jmp 0x562375
movzx eax, byte [edi + 0x16d]
mov ecx, dword [edi + 0x138]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
and eax, 0xffffffbf
mov byte [edi + 0x16d], al
test edx, edx
je 0x5623cc
movzx eax, byte [edx + 0x1e]
test eax, eax
je 0x5623cc
cmp ecx, 1
je 0x5623c3
cmp dword [0x5ec960], 0
je 0x5623d8
movzx ecx, byte [edi + 0x170]
test ecx, 0x80
mov eax, dword [edi + 0x140]
je 0x5623b5
cmp eax, 0xfffffffa
je 0x5623c3
cmp eax, 2
je 0x5623c3
cmp eax, 1
jne 0x563087
mov byte [edx + 0x20], 1
jmp 0x562e64
cmp ecx, 1
je 0x562406
cmp dword [0x5ec960], 0
je 0x562e64
movzx ecx, byte [edi + 0x170]
test ecx, 0x80
mov eax, dword [edi + 0x140]
je 0x5623f8
cmp eax, 0xfffffffa
je 0x562406
cmp eax, 2
je 0x562406
cmp eax, 1
jne 0x562e64
test edx, edx
je 0x562e64
mov byte [edx + 0x20], 0
jmp 0x562e64
cmp edx, 1
jne 0x562dd5
cmp esi, 5
lea edx, [esi + 1]
je 0x56242a
mov edx, esi
test ecx, ecx
je 0x562433
lea ebx, [ecx + 4]
jmp 0x562439
mov ebx, dword [edi + 0x38]
add ebx, 4
test ecx, ecx
lea esi, [edx - 4]
je 0x563039
movsx ecx, byte [ecx + 5]
cmp ecx, 0x31
ja case.0x562458.1
mov ecx, dword [ecx*4 + 0x5cb500]
jmp ecx
movzx eax, byte [edi + 0x168]
test al, 2
je 0x562614
cmp dword [edi + 0x138], 1
je 0x5624ad
cmp dword [0x5ec960], 0
je 0x562614
mov ecx, dword [edi + 0x140]
mov dword [ebp - 0x1c], ecx
movzx ecx, byte [edi + 0x170]
test ecx, 0x80
je 0x56249d
cmp dword [ebp - 0x1c], 0xfffffffa
je 0x5624ad
cmp dword [ebp - 0x1c], 2
je 0x5624ad
cmp dword [ebp - 0x1c], 1
jne 0x562614
mov ecx, dword [edi + 0x7c]
inc ebx
mov dword [ebp - 0x1c], ecx
test ecx, ecx
je 0x5625ba
movzx ecx, byte [ecx + 0x1e]
test ecx, ecx
je 0x56255e
and eax, 4
shr eax, 2
test eax, eax
je 0x5624e2
mov ecx, dword [ebp - 0x1c]
movzx esi, byte [ecx + 0x20]
test esi, esi
je 0x5624e2
lea esi, [edx - 5]
jmp 0x562535
mov ecx, dword [ebp - 0x1c]
movzx esi, byte [ecx + 0x1c]
test esi, esi
jne 0x5624f5
movzx esi, byte [ecx + 0x1d]
test esi, esi
je 0x562531
test eax, eax
je 0x56251d
add ebx, 0xfffffffc
mov eax, 0xd
lea esi, [edx - 1]
mov byte [ebx], 0xa
mov byte [ebx + 1], 0xc
mov byte [ebx + 2], al
mov byte [ebx + 3], 0x20
mov byte [ebx + 4], al
mov edx, dword [edi + 0x7c]
mov dword [ebp - 0x1c], edx
jmp 0x562529
mov byte [ebx], 0xc
lea esi, [edx - 5]
mov edx, dword [edi + 0x7c]
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], 0
jne 0x562535
jmp 0x562552
inc ebx
lea esi, [edx - 6]
mov edx, dword [ebp - 0x1c]
mov byte [edx + 0x1c], 0
mov ecx, dword [edi + 0x7c]
test ecx, ecx
mov dword [ebp - 0x1c], ecx
je 0x562552
mov edx, ecx
mov byte [edx + 0x1d], 0
mov ecx, dword [edi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
mov byte [edx + 0x20], 1
jmp 0x562e64
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x20]
test ecx, ecx
je 0x56257f
test al, 4
je 0x562574
mov byte [ebx + esi - 1], 0xd
jmp 0x5625e4
inc ebx
lea esi, [edx - 5]
mov byte [esi + ebx - 1], 0xd
jmp 0x5625e4
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1c]
test ecx, ecx
jne 0x562595
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1d]
test ecx, ecx
je 0x5625ba
test al, 4
je 0x5625dc
add ebx, 0xfffffffc
mov eax, 0xd
mov byte [ebx], 0xa
mov byte [ebx + 1], 0xc
mov byte [ebx + 2], al
mov byte [ebx + 3], 0x20
mov byte [ebx + 4], al
mov byte [ebx + esi + 3], al
mov esi, edx
jmp 0x5625e4
test al, 4
je 0x5625dc
add ebx, 0xfffffffd
mov eax, 0xd
mov byte [ebx], 0xc
mov byte [ebx + 1], al
mov byte [ebx + 2], 0x20
mov byte [ebx + 3], al
mov byte [ebx + esi + 2], al
lea esi, [edx - 1]
jmp 0x5625e4
mov byte [ebx], 0xc
mov byte [ebx + esi - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x20], 0
jmp 0x562e64
mov ecx, dword [edi + 0x7c]
inc ebx
mov dword [ebp - 0x1c], ecx
test ecx, ecx
je 0x562657
movzx ecx, byte [ecx + 0x1c]
test ecx, ecx
jne 0x562632
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1d]
test ecx, ecx
je 0x562657
test al, 4
je 0x562679
add ebx, 0xfffffffc
mov eax, 0xd
mov byte [ebx], 0xa
mov byte [ebx + 1], 0xc
mov byte [ebx + 2], al
mov byte [ebx + 3], 0x20
mov byte [ebx + 4], al
mov byte [ebx + esi + 3], al
mov esi, edx
jmp 0x562681
test al, 4
je 0x562679
add ebx, 0xfffffffd
mov eax, 0xd
mov byte [ebx], 0xc
mov byte [ebx + 1], al
mov byte [ebx + 2], 0x20
mov byte [ebx + 3], al
mov byte [ebx + esi + 2], al
lea esi, [edx - 1]
jmp 0x562681
mov byte [ebx], 0xc
mov byte [ebx + esi - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x20], 0
jmp 0x562e64
movzx eax, byte [edi + 0x168]
test al, 2
je 0x56286e
cmp dword [edi + 0x138], 1
je 0x562704
cmp dword [0x5ec960], 0
je 0x56286e
mov ecx, dword [edi + 0x140]
mov dword [ebp - 0x1c], ecx
movzx ecx, byte [edi + 0x170]
test ecx, 0x80
je 0x5626f4
cmp dword [ebp - 0x1c], 0xfffffffa
je 0x562704
cmp dword [ebp - 0x1c], 2
je 0x562704
cmp dword [ebp - 0x1c], 1
jne 0x56286e
mov ecx, dword [edi + 0x7c]
test ecx, ecx
mov dword [ebp - 0x1c], ecx
je 0x56281e
movzx ecx, byte [ecx + 0x1e]
test ecx, ecx
je 0x5627b4
and eax, 4
shr eax, 2
test eax, eax
je 0x562739
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x20]
test ecx, ecx
je 0x562739
inc ebx
lea esi, [edx - 5]
jmp 0x56278b
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1c]
test ecx, ecx
jne 0x56274f
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1d]
test ecx, ecx
je 0x562785
test eax, eax
je 0x56276d
dec ebx
mov eax, 0xa
lea esi, [edx - 3]
mov byte [ebx], al
mov byte [ebx + 1], 0xd
mov byte [ebx + 2], al
mov edx, dword [edi + 0x7c]
mov dword [ebp - 0x1c], edx
jmp 0x56277d
mov edx, 0xa
mov byte [ebx], dl
mov byte [ebx + 1], dl
mov ecx, dword [edi + 0x7c]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 0
jne 0x56278b
jmp 0x5627a8
add ebx, 2
lea esi, [edx - 6]
mov edx, dword [ebp - 0x1c]
mov byte [edx + 0x1c], 0
mov ecx, dword [edi + 0x7c]
test ecx, ecx
mov dword [ebp - 0x1c], ecx
je 0x5627a8
mov edx, ecx
mov byte [edx + 0x1d], 0
mov ecx, dword [edi + 0x7c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
mov byte [edx + 0x20], 1
jmp 0x562e64
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x20]
test ecx, ecx
je 0x5627d8
test al, 4
je 0x5627cb
inc ebx
mov byte [ebx + esi - 1], 0xd
jmp 0x56283e
add ebx, 2
lea esi, [edx - 5]
mov byte [esi + ebx - 1], 0xd
jmp 0x56283e
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1c]
test ecx, ecx
jne 0x5627ee
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1d]
test ecx, ecx
je 0x56281e
test al, 4
je 0x56280b
dec ebx
mov eax, 0xa
mov byte [ebx], al
mov byte [ebx + 1], 0xd
mov byte [ebx + 2], al
mov byte [ebx + esi + 1], 0xd
lea esi, [edx - 2]
jmp 0x56283e
mov eax, 0xa
mov byte [ebx], al
mov byte [ebx + 1], al
mov byte [ebx + esi], 0xd
lea esi, [edx - 3]
jmp 0x56283e
test al, 4
je 0x562835
mov eax, 0xd
mov byte [ebx], al
mov byte [ebx + 1], 0xa
mov byte [ebx + esi], al
lea esi, [edx - 3]
jmp 0x56283e
inc ebx
mov byte [ebx], 0xa
mov byte [ebx + esi - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x20], 0
jmp 0x562e64
mov ecx, dword [edi + 0x7c]
test ecx, ecx
mov dword [ebp - 0x1c], ecx
je 0x5628bb
movzx ecx, byte [ecx + 0x1c]
test ecx, ecx
jne 0x56288b
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x1d]
test ecx, ecx
je 0x5628bb
test al, 4
je 0x5628a8
dec ebx
mov eax, 0xa
mov byte [ebx], al
mov byte [ebx + 1], 0xd
mov byte [ebx + 2], al
mov byte [ebx + esi + 1], 0xd
lea esi, [edx - 2]
jmp 0x5628db
mov eax, 0xa
mov byte [ebx], al
mov byte [ebx + 1], al
mov byte [ebx + esi], 0xd
lea esi, [edx - 3]
jmp 0x5628db
test al, 4
je 0x5628d2
mov eax, 0xd
mov byte [ebx], al
mov byte [ebx + 1], 0xa
mov byte [ebx + esi], al
lea esi, [edx - 3]
jmp 0x5628db
inc ebx
mov byte [ebx], 0xa
mov byte [ebx + esi - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x20], 0
jmp 0x562e64
movzx eax, byte [edi + 0x168]
test al, 2
je 0x562a01
cmp dword [edi + 0x138], 1
je 0x56295e
cmp dword [0x5ec960], 0
je 0x562a01
mov ecx, dword [edi + 0x140]
mov dword [ebp - 0x1c], ecx
movzx ecx, byte [edi + 0x170]
test ecx, 0x80
je 0x56294e
cmp dword [ebp - 0x1c], 0xfffffffa
je 0x56295e
cmp dword [ebp - 0x1c], 2
je 0x56295e
cmp dword [ebp - 0x1c], 1
jne 0x562a01
mov ecx, dword [edi + 0x7c]
test ecx, ecx
mov dword [ebp - 0x1c], ecx
je 0x5629a9
movzx ecx, byte [ecx + 0x1e]
test ecx, ecx
je 0x5629a9
test al, 4
je 0x562985
mov eax, dword [ebp - 0x1c]
movzx ecx, byte [eax + 0x20]
test ecx, ecx
je 0x562985
inc ebx
lea esi, [edx - 5]
jmp 0x56298b
add ebx, 2
lea esi, [edx - 6]
mov edx, dword [ebp - 0x1c]
mov byte [edx + 0x1c], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x5629a0
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x20], 1
jmp 0x562e64
test al, 4
je 0x5629c6
cmp dword [ebp - 0x1c], 0
je 0x5629c6
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ecx + 0x20]
test ecx, ecx
je 0x5629c6
inc ebx
mov byte [ebx + esi - 1], 0xd
jmp 0x5629d1
add ebx, 2
lea esi, [edx - 5]
mov byte [esi + ebx - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x20], 0
jmp 0x562e64
add ebx, 2
lea esi, [edx - 5]
mov byte [esi + ebx - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x20], 0
jmp 0x562e64
test byte [edi + 0x168], 2
je 0x562b31
cmp dword [edi + 0x138], 1
je 0x562a86
cmp dword [0x5ec960], 0
je 0x562b31
movzx eax, byte [edi + 0x170]
test eax, 0x80
mov ecx, dword [edi + 0x140]
je 0x562a78
cmp ecx, 0xfffffffa
je 0x562a86
cmp ecx, 2
je 0x562a86
cmp ecx, 1
jne 0x562b31
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x562b02
movzx ecx, byte [eax + 0x1e]
test ecx, ecx
je 0x562ad6
movzx ecx, byte [eax + 0x1c]
test ecx, ecx
jne 0x562aa5
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x562ab5
inc ebx
lea esi, [edx - 5]
mov byte [ebx], 0xa
mov eax, dword [edi + 0x7c]
test eax, eax
jne 0x562abb
jmp 0x562acd
add ebx, 2
lea esi, [edx - 6]
mov byte [eax + 0x1c], 0
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x562acd
mov byte [eax + 0x1d], 0
mov eax, dword [edi + 0x7c]
mov byte [eax + 0x20], 1
jmp 0x562e64
movzx ecx, byte [eax + 0x20]
test ecx, ecx
je 0x562ae6
add ebx, 2
lea esi, [edx - 6]
jmp 0x562b0c
movzx ecx, byte [eax + 0x1c]
test ecx, ecx
jne 0x562af6
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x562b02
inc ebx
lea esi, [edx - 5]
mov byte [ebx], 0xa
mov eax, dword [edi + 0x7c]
jmp 0x562b08
add ebx, 2
lea esi, [edx - 6]
test eax, eax
je 0x562b13
mov byte [eax + 0x1c], 0
mov eax, dword [edi + 0x7c]
mov byte [eax + 0x1d], 1
mov edx, dword [edi + 0x7c]
mov dword [edx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x20], 0
jmp 0x562e64
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x562b54
movzx ecx, byte [eax + 0x1c]
test ecx, ecx
jne 0x562b48
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x562b54
inc ebx
lea esi, [edx - 5]
mov byte [ebx], 0xa
mov eax, dword [edi + 0x7c]
jmp 0x562b5a
add ebx, 2
lea esi, [edx - 6]
test eax, eax
je 0x562b65
mov byte [eax + 0x1c], 0
mov eax, dword [edi + 0x7c]
mov byte [eax + 0x1d], 1
mov edx, dword [edi + 0x7c]
mov dword [edx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x20], 0
jmp 0x562e64
test byte [edi + 0x168], 2
je 0x562c2a
cmp dword [edi + 0x138], 1
je 0x562bc9
cmp dword [0x5ec960], 0
je 0x562c2a
movzx eax, byte [edi + 0x170]
test eax, 0x80
mov ecx, dword [edi + 0x140]
je 0x562bbf
cmp ecx, 0xfffffffa
je 0x562bc9
cmp ecx, 2
je 0x562bc9
cmp ecx, 1
jne 0x562c2a
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x562bd6
movzx ecx, byte [eax + 0x1e]
jmp 0x562bd8
xor ecx, ecx
add ebx, 2
lea esi, [edx - 6]
test ecx, ecx
je 0x562c01
test eax, eax
je 0x562bf8
mov byte [eax + 0x1c], 0
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x562bf8
mov byte [eax + 0x1d], 0
mov eax, dword [edi + 0x7c]
mov byte [eax + 0x20], 1
jmp 0x562e64
test eax, eax
je 0x562c0c
mov byte [eax + 0x1c], 0
mov eax, dword [edi + 0x7c]
mov byte [eax + 0x1d], 1
mov edx, dword [edi + 0x7c]
mov dword [edx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x20], 0
jmp 0x562e64
add ebx, 2
lea esi, [edx - 6]
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562c3e
mov byte [edx + 0x1c], 0
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1d], 1
mov edx, dword [edi + 0x7c]
mov dword [edx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x20], 0
jmp 0x562e64
movzx ecx, byte [edi + 0x168]
test cl, 2
mov dword [ebp - 0x1c], ecx
je 0x562d7a
cmp dword [edi + 0x138], 1
je 0x562cad
cmp dword [0x5ec960], 0
je 0x562d7a
movzx ecx, byte [edi + 0x170]
test ecx, 0x80
mov eax, dword [edi + 0x140]
je 0x562c9f
cmp eax, 0xfffffffa
je 0x562cad
cmp eax, 2
je 0x562cad
cmp eax, 1
jne 0x562d7a
mov eax, dword [edi + 0x7c]
inc ebx
test eax, eax
je 0x562d41
movzx ecx, byte [eax + 0x1e]
test ecx, ecx
je 0x562d12
test byte [ebp - 0x1c], 4
je 0x562cd4
movzx ecx, byte [eax + 0x20]
test ecx, ecx
je 0x562cd4
lea esi, [edx - 5]
jmp 0x562cf7
movzx ecx, byte [eax + 0x1c]
test ecx, ecx
jne 0x562ce4
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x562cf3
mov byte [ebx], 0xa
lea esi, [edx - 5]
mov eax, dword [edi + 0x7c]
test eax, eax
jne 0x562cf7
jmp 0x562d09
inc ebx
lea esi, [edx - 6]
mov byte [eax + 0x1c], 0
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x562d09
mov byte [eax + 0x1d], 0
mov eax, dword [edi + 0x7c]
mov byte [eax + 0x20], 1
jmp 0x562e64
movzx ecx, byte [eax + 0x20]
test ecx, ecx
je 0x562d27
test byte [ebp - 0x1c], 4
je 0x562d41
mov byte [ebx + esi - 1], 0xd
jmp 0x562d4a
movzx ecx, byte [eax + 0x1c]
test ecx, ecx
jne 0x562d37
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x562d41
mov byte [ebx], 0xa
mov byte [ebx + esi - 1], 0xd
jmp 0x562d4a
inc ebx
lea esi, [edx - 5]
mov byte [esi + ebx - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x20], 0
jmp 0x562e64
mov eax, dword [edi + 0x7c]
inc ebx
test eax, eax
je 0x562d9c
movzx ecx, byte [eax + 0x1c]
test ecx, ecx
jne 0x562d92
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x562d9c
mov byte [ebx], 0xa
mov byte [ebx + esi - 1], 0xd
jmp 0x562da5
inc ebx
lea esi, [edx - 5]
mov byte [esi + ebx - 1], 0xd
mov edx, dword [edi + 0x7c]
mov byte [edx + 0x1c], 1
mov ecx, dword [edi + 0x7c]
mov dword [ecx + 0x10], edi
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x1d], 0
mov edx, dword [edi + 0x7c]
test edx, edx
je 0x562e64
mov byte [edx + 0x20], 0
jmp 0x562e64
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x56306a
mov ecx, dword [edi + 0x138]
movzx edx, byte [eax + 0x1e]
test edx, edx
je 0x562e2a
cmp ecx, 1
je 0x562e24
cmp dword [0x5ec960], 0
je 0x562e36
movzx edx, byte [edi + 0x170]
test edx, 0x80
mov ecx, dword [edi + 0x140]
je 0x562e16
cmp ecx, 0xfffffffa
je 0x562e24
cmp ecx, 2
je 0x562e24
cmp ecx, 1
jne 0x563075
mov byte [eax + 0x20], 1
jmp 0x562e64
cmp ecx, 1
je 0x562e5c
cmp dword [0x5ec960], 0
je 0x562e64
movzx edx, byte [edi + 0x170]
test edx, 0x80
mov ecx, dword [edi + 0x140]
je 0x562e52
cmp ecx, 0xfffffffa
je 0x562e5c
cmp ecx, 2
je 0x562e5c
cmp ecx, 1
jne 0x562e64
test eax, eax
je 0x562e64
mov byte [eax + 0x20], 0
mov eax, edi
mov edx, ebx
mov ecx, esi
call fcn.0056192c
and byte [edi + 0x16c], 0xbf
cmp eax, 0xffffffff
je 0x56300f
test byte [edi + 0x16d], 8
je 0x562ea3
push dword [edi + 0xe4]
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
test eax, eax
je 0x563045
and byte [edi + 0x16d], 0xf7
xor eax, eax
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
push 4
push edi
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], ecx
call fcn.005664c0
mov ecx, dword [ebp - 0x18]
add esp, 8
mov edx, dword [ebp - 0x1c]
test eax, eax
je 0x561eb7
mov eax, dword [edi + 0x18]
test eax, eax
je 0x562f37
test byte [eax + 0x44], 2
je 0x562f0d
mov edx, 0x42
mov dword [eax + 0x38], edx
mov eax, dword [edi + 0x18]
mov dword [eax + 0x3c], edx
mov eax, dword [edi + 0x64]
test eax, eax
je 0x562efb
xor edx, edx
mov dword [eax + 4], edx
mov dword [edi + 0x64], edx
mov eax, 0x42
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
mov eax, 0x42
push eax
movzx edx, byte [edi + 0x16c]
push eax
and edx, 7
push edx
push 0xffffffffffffffff
push edi
call fcn.005640b0
add esp, 0x14
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
push edi
mov eax, 0x42
push eax
push eax
push 1
call fcn.0055df70
add esp, 0x10
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
mov edx, dword [edi + 0x38]
mov byte [edx + esi], 0xd
mov ecx, dword [edi + 0x38]
mov byte [ecx + esi + 1], 0xa
add esi, 2
jmp case.0x561ecf.5
mov edx, dword [edi + 0x38]
mov byte [edx + esi], 0xa
inc esi
jmp case.0x561ecf.5
test byte [edi + 0x16d], 0x20
je 0x562fb8
mov esi, dword [edi + 0x38]
movzx edx, byte [ebp - 0xd]
movzx eax, byte [ebp - 0xe]
mov byte [esi], dl
mov ebx, dword [edi + 0x38]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], edx
mov byte [ebx + 1], al
mov eax, dword [edi + 0x38]
movzx edx, byte [ebp - 0xf]
mov dword [ebp - 0x14], edx
mov byte [eax + 2], dl
mov ebx, dword [edi + 0x38]
movzx edx, byte [ebp - 0x10]
mov byte [ebx + 3], dl
jmp 0x5620ec
mov esi, dword [edi + 0x38]
movzx edx, byte [ebp - 0x10]
movzx eax, byte [ebp - 0xf]
mov byte [esi], dl
mov ebx, dword [edi + 0x38]
mov dword [ebp - 0x14], eax
mov byte [ebx + 1], al
mov eax, dword [edi + 0x38]
movzx ebx, byte [ebp - 0xe]
mov dword [ebp - 0x18], ebx
mov byte [eax + 2], bl
mov esi, dword [edi + 0x38]
movzx eax, byte [ebp - 0xd]
mov dword [ebp - 0x1c], eax
mov byte [esi + 3], al
jmp 0x5620ec
mov edx, dword [edi + 0x38]
mov byte [edx + esi - 2], 0xd
mov ecx, dword [edi + 0x38]
mov byte [ecx + esi - 1], 0xa
jmp case.0x561ecf.5
mov edx, dword [edi + 0x38]
mov byte [edx + esi], 0xd
inc esi
jmp case.0x561ecf.5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [edi + 0xe8], eax
mov eax, 0x26
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
mov edx, dword [edi + 0x38]
mov byte [edx + esi], 0xa
jmp 0x562347
mov ecx, dword [edi + 0x38]
movsx ecx, byte [ecx + 5]
jmp 0x562448
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [edi + 0xe8], eax
mov eax, 0x26
and byte [edi + 0x16d], 0xf7
mov ebx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
mov edi, dword [ebp - 4]
mov esp, ebp
pop ebp
ret
mov ecx, dword [edi + 0x138]
jmp 0x562e2a
cmp dword [0x5ec960], 0
jne 0x562e38
jmp 0x562e64
cmp dword [0x5ec960], 0
jne 0x5623de
jmp 0x562e64