Function at 0x421d54
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x7c
mov ebx, dword [ebp + 8]
mov eax, dword [0x4da040]
mov dword [ebp - 0x48], eax
test eax, eax
je 0x4227cc
mov esi, 0x4b1640
mov ecx, 4
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x4c], 0
lea esi, [esi]
mov edx, dword [ebp + 0xc]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x1000
mov dword [esp + 4], 1
mov ecx, dword [ebp - 0x48]
mov dword [esp], ecx
call sub.msvcrt.dll_fread
mov dword [ebp - 0x44], eax
add dword [ebp - 0x4c], eax
cmp eax, 0x1000
je 0x4227c0
mov edx, dword [ebp - 0x48]
add edx, dword [ebp - 0x44]
mov byte [edx], pe_nt_image_headers32
mov eax, dword [ebp - 0x44]
inc eax
mov ecx, eax
and ecx, 0x3f
cmp ecx, 0x38
je 0x421de4
nop
mov byte [edx + 1], 0
inc eax
inc edx
mov ecx, eax
and ecx, 0x3f
cmp ecx, 0x38
jne 0x421dd4
mov edx, dword [ebp - 0x4c]
shl edx, 3
mov ecx, dword [ebp - 0x48]
mov dword [ecx + eax], edx
mov edx, dword [ebp - 0x4c]
shr edx, 0x1d
mov dword [ecx + eax + 4], edx
add eax, 8
je 0x4227b2
mov dword [ebp - 0x40], eax
mov esi, dword [ebx]
mov dword [ebp - 0x34], esi
mov edi, dword [ebx + 4]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], edi
mov ecx, dword [ebx + 8]
mov dword [ebp - 0x30], ecx
mov esi, dword [ebx + 0xc]
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x24], ecx
jmp 0x421e3c
mov edi, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edi
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x24], edx
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
mov edx, dword [ebp - 0x28]
not edx
and edx, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x30]
and edi, dword [ebp - 0x28]
or edx, edi
lea edx, [ecx + edx - 0x28955b88]
ror edx, 0x19
add edx, dword [ebx + 4]
mov dword [ebx], edx
add esi, dword [eax + 4]
mov edi, edx
not edi
and edi, dword [ebx + 8]
mov ecx, dword [ebx + 4]
and ecx, edx
or edi, ecx
lea esi, [esi + edi - 0x173848aa]
ror esi, 0x14
add esi, edx
mov dword [ebx + 0xc], esi
mov edi, dword [ebp - 0x24]
add edi, dword [eax + 8]
mov dword [ebp - 0x24], edi
mov edi, esi
not edi
and edi, dword [ebx + 4]
mov ecx, esi
and ecx, edx
or edi, ecx
mov ecx, dword [ebp - 0x24]
lea edi, [ecx + edi + 0x242070db]
ror edi, 0xf
add edi, esi
mov dword [ebp - 0x3c], edi
mov dword [ebx + 8], edi
mov edi, dword [ebp - 0x1c]
add edi, dword [eax + 0xc]
mov dword [ebp - 0x1c], edi
mov ecx, dword [ebp - 0x3c]
not ecx
and ecx, edx
mov edi, dword [ebp - 0x3c]
and edi, esi
or ecx, edi
mov edi, dword [ebp - 0x1c]
lea edi, [edi + ecx - 0x3e423112]
ror edi, 0xa
add edi, dword [ebp - 0x3c]
mov dword [ebx + 4], edi
add edx, dword [eax + 0x10]
mov dword [ebp - 0x1c], edx
mov edx, edi
not edx
and edx, esi
mov ecx, dword [ebp - 0x3c]
and ecx, edi
or edx, ecx
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx + edx - 0xa83f051]
ror ecx, 0x19
add ecx, edi
mov dword [ebp - 0x5c], ecx
mov dword [ebx], ecx
add esi, dword [eax + 0x14]
mov edx, ecx
not edx
and edx, dword [ebp - 0x3c]
and ecx, edi
or edx, ecx
lea edx, [esi + edx + 0x4787c62a]
ror edx, 0x14
mov ecx, dword [ebp - 0x5c]
lea esi, [edx + ecx]
mov dword [ebx + 0xc], esi
mov edx, dword [ebp - 0x3c]
add edx, dword [eax + 0x18]
mov dword [ebp - 0x1c], edx
mov ecx, esi
not ecx
and ecx, edi
mov edx, dword [ebp - 0x5c]
and edx, esi
or ecx, edx
mov edx, dword [ebp - 0x1c]
lea edx, [edx + ecx - 0x57cfb9ed]
ror edx, 0xf
add edx, esi
mov dword [ebp - 0x3c], edx
mov dword [ebx + 8], edx
add edi, dword [eax + 0x1c]
mov ecx, edx
not ecx
and ecx, dword [ebp - 0x5c]
and edx, esi
or ecx, edx
lea ecx, [edi + ecx - 0x2b96aff]
ror ecx, 0xa
mov edx, dword [ebp - 0x3c]
lea edi, [ecx + edx]
mov dword [ebx + 4], edi
mov ecx, dword [ebp - 0x5c]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1c], ecx
mov edx, edi
not edx
and edx, esi
mov ecx, dword [ebp - 0x3c]
and ecx, edi
or edx, ecx
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx + edx + 0x698098d8]
ror ecx, 0x19
add ecx, edi
mov dword [ebp - 0x5c], ecx
mov dword [ebx], ecx
add esi, dword [eax + 0x24]
mov edx, ecx
not edx
and edx, dword [ebp - 0x3c]
and ecx, edi
or edx, ecx
lea edx, [esi + edx - 0x74bb0851]
ror edx, 0x14
mov ecx, dword [ebp - 0x5c]
lea esi, [edx + ecx]
mov dword [ebx + 0xc], esi
mov edx, dword [ebp - 0x3c]
add edx, dword [eax + 0x28]
mov dword [ebp - 0x1c], edx
mov ecx, esi
not ecx
and ecx, edi
mov edx, dword [ebp - 0x5c]
and edx, esi
or ecx, edx
mov edx, dword [ebp - 0x1c]
lea edx, [edx + ecx - 0xa44f]
ror edx, 0xf
add edx, esi
mov dword [ebp - 0x24], edx
mov dword [ebx + 8], edx
add edi, dword [eax + 0x2c]
mov ecx, edx
not ecx
and ecx, dword [ebp - 0x5c]
and edx, esi
or ecx, edx
lea ecx, [edi + ecx - 0x76a32842]
ror ecx, 0xa
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x3c], ecx
mov dword [ebx + 4], ecx
mov ecx, dword [ebp - 0x5c]
add ecx, dword [eax + 0x30]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x3c]
not ecx
and ecx, esi
mov edi, dword [ebp - 0x3c]
and edi, dword [ebp - 0x24]
or ecx, edi
mov edi, dword [ebp - 0x1c]
lea ecx, [edi + ecx + 0x6b901122]
ror ecx, 0x19
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x70], ecx
mov dword [ebx], ecx
add esi, dword [eax + 0x34]
not ecx
and ecx, dword [ebp - 0x24]
mov edi, dword [ebp - 0x3c]
and edi, dword [ebp - 0x70]
or ecx, edi
lea ecx, [esi + ecx - 0x2678e6d]
ror ecx, 0x14
add ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], ecx
mov dword [ebx + 0xc], ecx
not ecx
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x24]
add edx, dword [eax + 0x38]
mov edi, dword [ebp - 0x3c]
and edi, ecx
mov ecx, dword [ebp - 0x6c]
and ecx, dword [ebp - 0x70]
or edi, ecx
lea edi, [edx + edi - 0x5986bc72]
ror edi, 0xf
mov esi, dword [ebp - 0x6c]
lea ecx, [edi + esi]
mov dword [ebx + 8], ecx
mov edi, ecx
not edi
mov dword [ebp - 0x1c], edi
mov edx, dword [ebp - 0x3c]
add edx, dword [eax + 0x3c]
mov esi, dword [ebp - 0x70]
and esi, edi
mov edi, dword [ebp - 0x6c]
and edi, ecx
or esi, edi
lea esi, [edx + esi + 0x49b40821]
ror esi, 0xa
lea edi, [esi + ecx]
mov dword [ebx + 4], edi
mov edx, dword [ebp - 0x70]
add edx, dword [eax + 4]
mov dword [ebp - 0x24], edx
mov esi, dword [ebp - 0x6c]
and esi, edi
mov edx, dword [ebp - 0x20]
and edx, ecx
or esi, edx
mov edx, dword [ebp - 0x24]
lea edx, [edx + esi - 0x9e1da9e]
ror edx, 0x1b
add edx, edi
mov dword [ebp - 0x5c], edx
mov dword [ebx], edx
mov esi, dword [ebp - 0x6c]
add esi, dword [eax + 0x18]
and edx, ecx
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x1c]
and edx, edi
or dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x24]
lea edx, [esi + edx - 0x3fbf4cc0]
ror edx, 0x17
mov esi, dword [ebp - 0x5c]
add esi, edx
mov dword [ebx + 0xc], esi
add ecx, dword [eax + 0x2c]
mov dword [ebp - 0x20], ecx
mov ecx, esi
and ecx, edi
mov dword [ebp - 0x24], ecx
mov edx, edi
not edx
mov ecx, dword [ebp - 0x5c]
and edx, ecx
or dword [ebp - 0x24], edx
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
lea edx, [ecx + edx + 0x265e5a51]
ror edx, 0x12
add edx, esi
mov dword [ebp - 0x3c], edx
mov dword [ebx + 8], edx
add edi, dword [eax]
mov dword [ebp - 0x20], edi
mov ecx, dword [ebp - 0x5c]
and ecx, edx
mov edi, dword [ebp - 0x5c]
not edi
and edi, esi
or ecx, edi
mov edx, dword [ebp - 0x20]
lea ecx, [edx + ecx - 0x16493856]
ror ecx, 0xc
mov edx, dword [ebp - 0x3c]
lea edi, [ecx + edx]
mov dword [ebx + 4], edi
mov ecx, dword [ebp - 0x5c]
add ecx, dword [eax + 0x14]
mov dword [ebp - 0x20], ecx
mov edx, edi
and edx, esi
mov dword [ebp - 0x24], edx
mov ecx, esi
not ecx
mov edx, dword [ebp - 0x3c]
and ecx, edx
or dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
lea ecx, [edx + ecx - 0x29d0efa3]
ror ecx, 0x1b
add ecx, edi
mov dword [ebp - 0x5c], ecx
mov dword [ebx], ecx
add esi, dword [eax + 0x28]
mov dword [ebp - 0x20], esi
mov edx, dword [ebp - 0x3c]
and edx, ecx
mov esi, dword [ebp - 0x3c]
not esi
and esi, edi
or edx, esi
mov ecx, dword [ebp - 0x20]
lea edx, [ecx + edx + 0x2441453]
ror edx, 0x17
mov ecx, dword [ebp - 0x5c]
lea esi, [edx + ecx]
mov dword [ebx + 0xc], esi
mov edx, dword [ebp - 0x3c]
add edx, dword [eax + 0x3c]
mov dword [ebp - 0x20], edx
mov ecx, esi
and ecx, edi
mov dword [ebp - 0x24], ecx
mov edx, edi
not edx
mov ecx, dword [ebp - 0x5c]
and edx, ecx
or dword [ebp - 0x24], edx
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
lea edx, [ecx + edx - 0x275e197f]
ror edx, 0x12
add edx, esi
mov dword [ebp - 0x3c], edx
mov dword [ebx + 8], edx
add edi, dword [eax + 0x10]
mov dword [ebp - 0x20], edi
mov ecx, dword [ebp - 0x5c]
and ecx, edx
mov edi, dword [ebp - 0x5c]
not edi
and edi, esi
or ecx, edi
mov edx, dword [ebp - 0x20]
lea ecx, [edx + ecx - 0x182c0438]
ror ecx, 0xc
mov edx, dword [ebp - 0x3c]
lea edi, [ecx + edx]
mov dword [ebx + 4], edi
mov ecx, dword [ebp - 0x5c]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x20], ecx
mov edx, edi
and edx, esi
mov dword [ebp - 0x24], edx
mov ecx, esi
not ecx
mov edx, dword [ebp - 0x3c]
and ecx, edx
or dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
lea ecx, [edx + ecx + 0x21e1cde6]
ror ecx, 0x1b
add ecx, edi
mov dword [ebp - 0x5c], ecx
mov dword [ebx], ecx
add esi, dword [eax + 0x38]
mov dword [ebp - 0x20], esi
mov edx, dword [ebp - 0x3c]
and edx, ecx
mov esi, dword [ebp - 0x3c]
not esi
and esi, edi
or edx, esi
mov ecx, dword [ebp - 0x20]
lea edx, [ecx + edx - 0x3cc8f82a]
ror edx, 0x17
mov ecx, dword [ebp - 0x5c]
lea esi, [edx + ecx]
mov dword [ebx + 0xc], esi
mov edx, dword [ebp - 0x3c]
add edx, dword [eax + 0xc]
mov dword [ebp - 0x20], edx
mov ecx, esi
and ecx, edi
mov dword [ebp - 0x24], ecx
mov edx, edi
not edx
mov ecx, dword [ebp - 0x5c]
and edx, ecx
or dword [ebp - 0x24], edx
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
lea edx, [ecx + edx - 0xb2af279]
ror edx, 0x12
add edx, esi
mov dword [ebp - 0x3c], edx
mov dword [ebx + 8], edx
add edi, dword [eax + 0x20]
mov dword [ebp - 0x20], edi
mov ecx, dword [ebp - 0x5c]
and ecx, edx
mov edi, dword [ebp - 0x5c]
not edi
and edi, esi
or ecx, edi
mov edx, dword [ebp - 0x20]
lea ecx, [edx + ecx + 0x455a14ed]
ror ecx, 0xc
mov edx, dword [ebp - 0x3c]
lea edi, [ecx + edx]
mov dword [ebx + 4], edi
mov ecx, dword [ebp - 0x5c]
add ecx, dword [eax + 0x34]
mov dword [ebp - 0x20], ecx
mov edx, edi
and edx, esi
mov dword [ebp - 0x24], edx
mov ecx, esi
not ecx
mov edx, dword [ebp - 0x3c]
and ecx, edx
or dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
lea ecx, [edx + ecx - 0x561c16fb]
ror ecx, 0x1b
mov edx, ecx
add edx, edi
mov dword [ebx], edx
add esi, dword [eax + 8]
mov dword [ebp - 0x20], esi
mov esi, dword [ebp - 0x3c]
and esi, edx
mov ecx, dword [ebp - 0x3c]
not ecx
and ecx, edi
or esi, ecx
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx + esi - 0x3105c08]
ror ecx, 0x17
add ecx, edx
mov dword [ebp - 0x5c], ecx
mov dword [ebx + 0xc], ecx
mov esi, dword [ebp - 0x3c]
add esi, dword [eax + 0x1c]
and ecx, edi
mov dword [ebp - 0x24], ecx
mov ecx, edi
not ecx
and ecx, edx
or dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
lea ecx, [esi + ecx + 0x676f02d9]
ror ecx, 0x12
add ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x3c], ecx
mov dword [ebx + 8], ecx
add edi, dword [eax + 0x30]
mov dword [ebp - 0x20], edi
and ecx, edx
mov esi, edx
not esi
mov edi, dword [ebp - 0x5c]
and esi, edi
or ecx, esi
mov esi, dword [ebp - 0x20]
lea ecx, [esi + ecx - 0x72d5b376]
ror ecx, 0xc
mov esi, dword [ebp - 0x3c]
lea edi, [ecx + esi]
mov dword [ebx + 4], edi
add edx, dword [eax + 0x14]
mov ecx, dword [ebp - 0x5c]
xor ecx, esi
xor ecx, edi
lea ecx, [edx + ecx - 0x5c6be]
ror ecx, 0x1c
add ecx, edi
mov dword [ebp - 0x24], ecx
mov dword [ebx], ecx
mov edx, dword [ebp - 0x5c]
add edx, dword [eax + 0x20]
mov dword [ebp - 0x1c], edx
mov edx, esi
xor edx, edi
xor edx, ecx
mov ecx, dword [ebp - 0x1c]
lea edx, [ecx + edx - 0x788e097f]
ror edx, 0x15
mov ecx, dword [ebp - 0x24]
lea esi, [edx + ecx]
mov dword [ebx + 0xc], esi
mov edx, dword [ebp - 0x3c]
add edx, dword [eax + 0x2c]
xor ecx, edi
xor ecx, esi
lea ecx, [edx + ecx + 0x6d9d6122]
ror ecx, 0x10
add ecx, esi
mov dword [ebp - 0x3c], ecx
mov dword [ebx + 8], ecx
add edi, dword [eax + 0x38]
mov ecx, dword [ebp - 0x24]
xor ecx, esi
xor ecx, dword [ebp - 0x3c]
lea ecx, [edi + ecx - 0x21ac7f4]
ror ecx, 9
mov edx, dword [ebp - 0x3c]
lea edi, [ecx + edx]
mov dword [ebx + 4], edi
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax + 4]
xor edx, esi
xor edx, edi
lea edx, [ecx + edx - 0x5b4115bc]
ror edx, 0x1c
add edx, edi
mov dword [ebp - 0x24], edx
mov dword [ebx], edx
add esi, dword [eax + 0x10]
mov edx, dword [ebp - 0x3c]
xor edx, edi
xor edx, dword [ebp - 0x24]
lea edx, [esi + edx + 0x4bdecfa9]
ror edx, 0x15
mov ecx, dword [ebp - 0x24]
lea esi, [edx + ecx]
mov dword [ebx + 0xc], esi
mov edx, dword [ebp - 0x3c]
add edx, dword [eax + 0x1c]
xor ecx, edi
xor ecx, esi
lea ecx, [edx + ecx - 0x944b4a0]
ror ecx, 0x10
add ecx, esi
mov dword [ebp - 0x3c], ecx
mov dword [ebx + 8], ecx
add edi, dword [eax + 0x28]
mov ecx, dword [ebp - 0x24]
xor ecx, esi
xor ecx, dword [ebp - 0x3c]
lea ecx, [edi + ecx - 0x41404390]
ror ecx, 9
mov edx, dword [ebp - 0x3c]
lea edi, [ecx + edx]
mov dword [ebx + 4], edi
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax + 0x34]
xor edx, esi
xor edx, edi
lea edx, [ecx + edx + 0x289b7ec6]
ror edx, 0x1c
add edx, edi
mov dword [ebp - 0x24], edx
mov dword [ebx], edx
add esi, dword [eax]
mov edx, dword [ebp - 0x3c]
xor edx, edi
xor edx, dword [ebp - 0x24]
lea edx, [esi + edx - 0x155ed806]
ror edx, 0x15
mov ecx, dword [ebp - 0x24]
lea esi, [edx + ecx]
mov dword [ebx + 0xc], esi
mov edx, dword [ebp - 0x3c]
add edx, dword [eax + 0xc]
xor ecx, edi
xor ecx, esi
lea ecx, [edx + ecx - 0x2b10cf7b]
ror ecx, 0x10
add ecx, esi
mov dword [ebp - 0x3c], ecx
mov dword [ebx + 8], ecx
add edi, dword [eax + 0x18]
mov ecx, dword [ebp - 0x24]
xor ecx, esi
xor ecx, dword [ebp - 0x3c]
lea ecx, [edi + ecx + 0x4881d05]
ror ecx, 9
mov edx, dword [ebp - 0x3c]
lea edi, [ecx + edx]
mov dword [ebx + 4], edi
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax + 0x24]
xor edx, esi
xor edx, edi
lea edx, [ecx + edx - 0x262b2fc7]
ror edx, 0x1c
add edx, edi
mov dword [ebx], edx
add esi, dword [eax + 0x30]
mov ecx, dword [ebp - 0x3c]
xor ecx, edi
xor ecx, edx
lea esi, [esi + ecx - 0x1924661b]
ror esi, 0x15
add esi, edx
mov dword [ebp - 0x24], esi
mov dword [ebx + 0xc], esi
mov ecx, dword [ebp - 0x3c]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x1c], ecx
mov esi, edx
xor esi, edi
mov ecx, dword [ebp - 0x24]
xor esi, ecx
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx + esi + 0x1fa27cf8]
ror ecx, 0x10
add ecx, dword [ebp - 0x24]
mov dword [ebx + 8], ecx
add edi, dword [eax + 8]
mov esi, dword [ebp - 0x24]
xor esi, edx
xor esi, ecx
lea edi, [edi + esi - 0x3b53a99b]
ror edi, 9
add edi, ecx
mov dword [ebx + 4], edi
add edx, dword [eax]
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp - 0x24]
not edx
or edx, edi
xor edx, ecx
mov esi, dword [ebp - 0x1c]
lea esi, [esi + edx - 0xbd6ddbc]
ror esi, 0x1a
add esi, edi
mov dword [ebp - 0x3c], esi
mov dword [ebx], esi
mov edx, dword [ebp - 0x24]
add edx, dword [eax + 0x1c]
mov dword [ebp - 0x1c], edx
mov esi, ecx
not esi
mov edx, dword [ebp - 0x3c]
or esi, edx
xor esi, edi
mov edx, dword [ebp - 0x1c]
lea edx, [edx + esi + 0x432aff97]
ror edx, 0x16
mov esi, dword [ebp - 0x3c]
add esi, edx
mov dword [ebx + 0xc], esi
add ecx, dword [eax + 0x38]
mov dword [ebp - 0x1c], ecx
mov ecx, edi
not ecx
or ecx, esi
mov edx, dword [ebp - 0x3c]
xor ecx, edx
mov edx, dword [ebp - 0x1c]
lea edx, [edx + ecx - 0x546bdc59]
ror edx, 0x11
add edx, esi
mov dword [ebp - 0x24], edx
mov dword [ebx + 8], edx
add edi, dword [eax + 0x14]
mov ecx, dword [ebp - 0x3c]
not ecx
or ecx, edx
xor ecx, esi
lea ecx, [edi + ecx - 0x36c5fc7]
ror ecx, 0xb
lea edi, [ecx + edx]
mov dword [ebx + 4], edi
mov ecx, dword [ebp - 0x3c]
add ecx, dword [eax + 0x30]
mov dword [ebp - 0x1c], ecx
mov edx, esi
not edx
or edx, edi
mov ecx, dword [ebp - 0x24]
xor edx, ecx
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx + edx + 0x655b59c3]
ror ecx, 0x1a
add ecx, edi
mov dword [ebp - 0x3c], ecx
mov dword [ebx], ecx
add esi, dword [eax + 0xc]
mov edx, dword [ebp - 0x24]
not edx
or edx, ecx
xor edx, edi
lea edx, [esi + edx - 0x70f3336e]
ror edx, 0x16
lea esi, [edx + ecx]
mov dword [ebx + 0xc], esi
mov edx, dword [ebp - 0x24]
add edx, dword [eax + 0x28]
mov dword [ebp - 0x1c], edx
mov ecx, edi
not ecx
or ecx, esi
mov edx, dword [ebp - 0x3c]
xor ecx, edx
mov edx, dword [ebp - 0x1c]
lea edx, [edx + ecx - 0x100b83]
ror edx, 0x11
add edx, esi
mov dword [ebp - 0x24], edx
mov dword [ebx + 8], edx
add edi, dword [eax + 4]
mov ecx, dword [ebp - 0x3c]
not ecx
or ecx, edx
xor ecx, esi
lea ecx, [edi + ecx - 0x7a7ba22f]
ror ecx, 0xb
lea edi, [ecx + edx]
mov dword [ebx + 4], edi
mov ecx, dword [ebp - 0x3c]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1c], ecx
mov edx, esi
not edx
or edx, edi
mov ecx, dword [ebp - 0x24]
xor edx, ecx
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx + edx + 0x6fa87e4f]
ror ecx, 0x1a
add ecx, edi
mov dword [ebp - 0x3c], ecx
mov dword [ebx], ecx
add esi, dword [eax + 0x3c]
mov edx, dword [ebp - 0x24]
not edx
or edx, ecx
xor edx, edi
lea edx, [esi + edx - 0x1d31920]
ror edx, 0x16
lea esi, [edx + ecx]
mov dword [ebx + 0xc], esi
mov edx, dword [ebp - 0x24]
add edx, dword [eax + 0x18]
mov dword [ebp - 0x1c], edx
mov ecx, edi
not ecx
or ecx, esi
mov edx, dword [ebp - 0x3c]
xor ecx, edx
mov edx, dword [ebp - 0x1c]
lea edx, [edx + ecx - 0x5cfebcec]
ror edx, 0x11
add edx, esi
mov dword [ebp - 0x24], edx
mov dword [ebx + 8], edx
add edi, dword [eax + 0x34]
mov ecx, dword [ebp - 0x3c]
not ecx
or ecx, edx
xor ecx, esi
lea ecx, [edi + ecx + 0x4e0811a1]
ror ecx, 0xb
lea edi, [ecx + edx]
mov dword [ebx + 4], edi
mov ecx, dword [ebp - 0x3c]
add ecx, dword [eax + 0x10]
mov dword [ebp - 0x1c], ecx
mov edx, esi
not edx
or edx, edi
mov ecx, dword [ebp - 0x24]
xor edx, ecx
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx + edx - 0x8ac817e]
ror ecx, 0x1a
mov edx, ecx
add edx, edi
mov dword [ebx], edx
add esi, dword [eax + 0x2c]
mov dword [ebp - 0x1c], esi
mov esi, dword [ebp - 0x24]
not esi
or esi, edx
xor esi, edi
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx + esi - 0x42c50dcb]
ror ecx, 0x16
add ecx, edx
mov dword [ebp - 0x20], ecx
mov dword [ebx + 0xc], ecx
mov esi, dword [ebp - 0x24]
add esi, dword [eax + 8]
mov ecx, edi
not ecx
or ecx, dword [ebp - 0x20]
xor ecx, edx
lea ecx, [esi + ecx + 0x2ad7d2bb]
ror ecx, 0x11
add ecx, dword [ebp - 0x20]
mov dword [ebx + 8], ecx
add edi, dword [eax + 0x24]
mov dword [ebp - 0x1c], edi
mov edi, edx
not edi
or edi, ecx
xor edi, dword [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
lea edi, [esi + edi - 0x14792c6f]
ror edi, 0xb
add dword [ebp - 0x34], edx
mov edx, dword [ebp - 0x34]
mov dword [ebx], edx
lea edi, [ecx + edi]
add dword [ebp - 0x28], edi
mov esi, dword [ebp - 0x28]
mov dword [ebx + 4], esi
add dword [ebp - 0x30], ecx
mov edi, dword [ebp - 0x30]
mov dword [ebx + 8], edi
mov edx, dword [ebp - 0x20]
add dword [ebp - 0x2c], edx
mov esi, dword [ebp - 0x2c]
mov dword [ebx + 0xc], esi
add dword [ebp - 0x38], 0x40
add eax, 0x40
mov ecx, dword [ebp - 0x40]
cmp dword [ebp - 0x38], ecx
jb 0x421e30
cmp dword [ebp - 0x44], 0x1000
je 0x421d88
mov eax, ebx
add esp, 0x7c
pop ebx
pop esi
pop edi
leave
ret 4
mov dword [ebp - 0x40], 0x1000
jmp 0x421e06
mov dword [esp], 0x1040
call fcn.004992ac
mov dword [ebp - 0x48], eax
mov dword [0x4da040], eax
jmp 0x421d70