Function at 0x407670
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x106c
call fcn.0041d6b0
mov eax, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov eax, dword [0x434080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1040], eax
mov dword [ebp - 0x1054], 0xbfe69e4d
mov eax, dword [ebp - 0x1054]
mov dword [ebp - 0x1058], eax
sub eax, 0x8e96f138
je 0x407cb2
jmp 0x4076bf
mov eax, dword [ebp - 0x1058]
sub eax, 0x97566b92
je 0x4084d2
jmp 0x4076d5
mov eax, dword [ebp - 0x1058]
sub eax, 0x98dde461
je 0x407bd3
jmp 0x4076eb
mov eax, dword [ebp - 0x1058]
sub eax, 0x99b4d650
je 0x408557
jmp 0x407701
mov eax, dword [ebp - 0x1058]
sub eax, 0x9d44dad1
je 0x407f68
jmp 0x407717
mov eax, dword [ebp - 0x1058]
sub eax, 0xa6f894f6
je 0x407f59
jmp 0x40772d
mov eax, dword [ebp - 0x1058]
sub eax, 0xa7b6e2e4
je 0x407d47
jmp 0x407743
mov eax, dword [ebp - 0x1058]
sub eax, 0xa930b965
je 0x407bc4
jmp 0x407759
mov eax, dword [ebp - 0x1058]
sub eax, 0xaad6f0cb
je 0x4084fe
jmp 0x40776f
mov eax, dword [ebp - 0x1058]
sub eax, 0xb0a2df2e
je 0x408154
jmp 0x407785
mov eax, dword [ebp - 0x1058]
sub eax, 0xb4057b8b
je 0x40824c
jmp 0x40779b
mov eax, dword [ebp - 0x1058]
sub eax, 0xb42a962c
je 0x408532
jmp 0x4077b1
mov eax, dword [ebp - 0x1058]
sub eax, 0xb8ca5e19
je 0x407fb9
jmp 0x4077c7
mov eax, dword [ebp - 0x1058]
sub eax, 0xbfe69e4d
je 0x407b26
jmp 0x4077dd
mov eax, dword [ebp - 0x1058]
sub eax, 0xc16ca0b8
je 0x407e23
jmp 0x4077f3
mov eax, dword [ebp - 0x1058]
sub eax, 0xc3d0218e
je 0x407ea2
jmp 0x407809
mov eax, dword [ebp - 0x1058]
sub eax, 0xc580c29e
je 0x40841b
jmp 0x40781f
mov eax, dword [ebp - 0x1058]
sub eax, 0xc7604ac8
je 0x408025
jmp 0x407835
mov eax, dword [ebp - 0x1058]
sub eax, 0xca77f0c3
je 0x407f10
jmp 0x40784b
mov eax, dword [ebp - 0x1058]
sub eax, 0xd69bcf15
je 0x408541
jmp 0x407861
mov eax, dword [ebp - 0x1058]
sub eax, 0xd6d9b871
je 0x407bae
jmp 0x407877
mov eax, dword [ebp - 0x1058]
sub eax, 0xd9ac9fe2
je 0x4080f6
jmp 0x40788d
mov eax, dword [ebp - 0x1058]
sub eax, 0xde0b5d0e
je 0x407dc4
jmp 0x4078a3
mov eax, dword [ebp - 0x1058]
sub eax, 0xe5cfaf4b
je 0x408351
jmp 0x4078b9
mov eax, dword [ebp - 0x1058]
sub eax, 0xebf99658
je 0x407e4d
jmp 0x4078cf
mov eax, dword [ebp - 0x1058]
sub eax, 0xf8a8684d
je 0x40856c
jmp 0x4078e5
mov eax, dword [ebp - 0x1058]
sub eax, 0xfa9c765d
je 0x408387
jmp 0x4078fb
mov eax, dword [ebp - 0x1058]
sub eax, 0xc8dcdb
je 0x408016
jmp 0x407911
mov eax, dword [ebp - 0x1058]
sub eax, 0x25ba380
je 0x4082e3
jmp 0x407927
mov eax, dword [ebp - 0x1058]
sub eax, 0x70f9b71
je 0x4083bc
jmp 0x40793d
mov eax, dword [ebp - 0x1058]
sub eax, 0xd8f7540
je 0x40850d
jmp 0x407953
mov eax, dword [ebp - 0x1058]
sub eax, 0x18699029
je 0x4084c3
jmp 0x407969
mov eax, dword [ebp - 0x1058]
sub eax, 0x1aff6dc1
je 0x4083ad
jmp 0x40797f
mov eax, dword [ebp - 0x1058]
sub eax, 0x2ae39c77
je 0x40846c
jmp 0x407995
mov eax, dword [ebp - 0x1058]
sub eax, 0x2d13177f
je 0x407d56
jmp 0x4079ab
mov eax, dword [ebp - 0x1058]
sub eax, 0x346785d9
je 0x40857b
jmp 0x4079c1
mov eax, dword [ebp - 0x1058]
sub eax, 0x35a9edb5
je 0x407c24
jmp 0x4079d7
mov eax, dword [ebp - 0x1058]
sub eax, 0x37f00c93
je 0x407e14
jmp 0x4079ed
mov eax, dword [ebp - 0x1058]
sub eax, 0x3c5d8611
je 0x407ca3
jmp 0x407a03
mov eax, dword [ebp - 0x1058]
sub eax, 0x3caefdde
je 0x4081ca
jmp 0x407a19
mov eax, dword [ebp - 0x1058]
sub eax, 0x3d9186ff
je 0x407b7f
jmp 0x407a2f
mov eax, dword [ebp - 0x1058]
sub eax, 0x3dd9521a
je 0x408523
jmp 0x407a45
mov eax, dword [ebp - 0x1058]
sub eax, 0x400b40a7
je 0x407d1f
jmp 0x407a5b
mov eax, dword [ebp - 0x1058]
sub eax, 0x4128543d
je 0x4083cb
jmp 0x407a71
mov eax, dword [ebp - 0x1058]
sub eax, 0x42208b52
je 0x408046
jmp 0x407a87
mov eax, dword [ebp - 0x1058]
sub eax, 0x46214e24
je 0x4083fe
jmp 0x407a9d
mov eax, dword [ebp - 0x1058]
sub eax, 0x49323ade
je 0x40808f
jmp 0x407ab3
mov eax, dword [ebp - 0x1058]
sub eax, 0x4b26d925
je 0x408105
jmp 0x407ac9
mov eax, dword [ebp - 0x1058]
sub eax, 0x4b8bd3c2
je 0x40826d
jmp 0x407adf
mov eax, dword [ebp - 0x1058]
sub eax, 0x684d036a
je 0x4080e7
jmp 0x407af5
mov eax, dword [ebp - 0x1058]
sub eax, 0x6da0c21a
je 0x408360
jmp 0x407b0b
mov eax, dword [ebp - 0x1058]
sub eax, 0x6f097dc1
je 0x407e32
jmp 0x407b21
jmp 0x408585
mov eax, dword [ebp - 0x1040]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x103c], eax
mov dword [ebp - 0x1054], 0x3d9186ff
jmp 0x408585
mov eax, dword [ebp - 0x103c]
mov dword [ebp - 0x1048], eax
mov edx, 0xffffffff
mov eax, 0x98dde461
mov ecx, 0xd6d9b871
cmp dword [ebp - 0x1048], edx
cmove eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov byte [ebp - 0x1041], 0
mov dword [ebp - 0x1054], 0xa930b965
jmp 0x408585
mov dword [ebp - 0x1054], 0xc580c29e
jmp 0x408585
mov eax, dword [0x435584]
mov ecx, dword [0x435580]
mov edx, eax
add edx, 0xdf8916e2
sub edx, 1
sub edx, 0xdf8916e2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaad6f0cb
mov ecx, 0x35a9edb5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1038], eax
mov ecx, dword [0x435584]
mov eax, dword [0x435580]
mov edx, ecx
add edx, 0x452c76e8
sub edx, 1
sub edx, 0x452c76e8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xaad6f0cb
mov ecx, 0x3c5d8611
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov dword [ebp - 0x1054], 0x8e96f138
jmp 0x408585
mov eax, dword [ebp - 0x1038]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x40000000
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 0x80
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x104c], eax
mov edx, 0xffffffff
mov eax, 0x2d13177f
mov ecx, 0x400b40a7
cmp dword [ebp - 0x104c], edx
cmove eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov eax, dword [ebp - 0x1048]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov byte [ebp - 0x1041], 0
mov dword [ebp - 0x1054], 0xa7b6e2e4
jmp 0x408585
mov dword [ebp - 0x1054], 0xc580c29e
jmp 0x408585
mov ecx, dword [0x435584]
mov eax, dword [0x435580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd8f7540
mov ecx, 0xde0b5d0e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov byte [ebp - 0x104d], 0
mov eax, dword [0x435584]
mov ecx, dword [0x435580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd8f7540
mov ecx, 0x37f00c93
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov dword [ebp - 0x1054], 0xc16ca0b8
jmp 0x408585
mov dword [ebp - 0x1054], 0x6f097dc1
jmp 0x408585
lea eax, [ebp - 0x1010]
mov dword [ebp - 0x1034], eax
mov dword [ebp - 0x1054], 0xebf99658
jmp 0x408585
mov edx, dword [ebp - 0x1048]
mov ecx, dword [ebp - 0x1034]
lea eax, [ebp - 0x1018]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub esp, 0x14
mov edx, eax
mov eax, 0xc3d0218e
mov ecx, 0x9d44dad1
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov ecx, dword [0x435584]
mov eax, dword [0x435580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3dd9521a
mov ecx, 0xca77f0c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov eax, dword [0x435584]
mov ecx, dword [0x435580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3dd9521a
mov ecx, 0xa6f894f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov dword [ebp - 0x1054], 0x4128543d
jmp 0x408585
mov eax, dword [0x435584]
mov ecx, dword [0x435580]
mov edx, eax
sub edx, 0xb2fbb824
sub edx, 1
add edx, 0xb2fbb824
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb42a962c
mov ecx, 0xb8ca5e19
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov eax, dword [ebp - 0x1018]
mov dword [ebp - 0x1030], eax
mov eax, dword [0x435584]
mov ecx, dword [0x435580]
mov edx, eax
add edx, 0x5a625f49
sub edx, 1
sub edx, 0x5a625f49
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb42a962c
mov ecx, 0xc8dcdb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov dword [ebp - 0x1054], 0xc7604ac8
jmp 0x408585
mov edx, dword [ebp - 0x1030]
mov eax, 0x4b26d925
mov ecx, 0x42208b52
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov eax, dword [0x435584]
mov ecx, dword [0x435580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd69bcf15
mov ecx, 0x49323ade
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov byte [ebp - 0x104d], 1
mov eax, dword [0x435584]
mov ecx, dword [0x435580]
mov edx, eax
sub edx, 0x1e350618
sub edx, 1
add edx, 0x1e350618
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd69bcf15
mov ecx, 0x684d036a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov dword [ebp - 0x1054], 0xd9ac9fe2
jmp 0x408585
mov dword [ebp - 0x1054], 0x4128543d
jmp 0x408585
mov ecx, dword [ebp - 0x1018]
lea edx, [ebp - 0x1010]
mov esi, dword [ebp - 0x104c]
lea eax, [ebp - 0x1014]
xor edi, edi
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub esp, 0x14
mov dword [ebp - 0x102c], eax
mov dword [ebp - 0x1054], 0xb0a2df2e
jmp 0x408585
mov ecx, dword [0x435584]
mov eax, dword [0x435580]
mov edx, ecx
sub edx, 0x464fc1d6
sub edx, 1
add edx, 0x464fc1d6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x99b4d650
mov ecx, 0x3caefdde
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov eax, dword [ebp - 0x102c]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1025], al
mov ecx, dword [0x435584]
mov eax, dword [0x435580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x99b4d650
mov ecx, 0xb4057b8b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov dl, byte [ebp - 0x1025]
mov eax, 0x4b8bd3c2
mov ecx, 0x6da0c21a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov ecx, dword [0x435584]
mov eax, dword [0x435580]
mov edx, ecx
add edx, 0x1be9c5b2
sub edx, 1
sub edx, 0x1be9c5b2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf8a8684d
mov ecx, 0x25ba380
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov ecx, dword [0x435584]
mov eax, dword [0x435580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf8a8684d
mov ecx, 0xe5cfaf4b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov dword [ebp - 0x1054], 0x4128543d
jmp 0x408585
mov eax, dword [ebp - 0x1014]
mov dword [ebp - 0x1024], eax
mov eax, dword [ebp - 0x1018]
mov dword [ebp - 0x1020], eax
mov dword [ebp - 0x1054], 0xfa9c765d
jmp 0x408585
mov edx, dword [ebp - 0x1024]
mov esi, dword [ebp - 0x1020]
mov eax, 0x70f9b71
mov ecx, 0x1aff6dc1
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov dword [ebp - 0x1054], 0x4128543d
jmp 0x408585
mov dword [ebp - 0x1054], 0x6f097dc1
jmp 0x408585
mov eax, dword [ebp - 0x1048]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x104c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1054], 0x46214e24
jmp 0x408585
mov al, byte [ebp - 0x104d]
and al, 1
mov byte [ebp - 0x1041], al
mov dword [ebp - 0x1054], 0xc580c29e
jmp 0x408585
mov eax, dword [0x435584]
mov ecx, dword [0x435580]
mov edx, eax
sub edx, 0xac4477ca
sub edx, 1
add edx, 0xac4477ca
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x346785d9
mov ecx, 0x2ae39c77
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov al, byte [ebp - 0x1041]
and al, 1
mov byte [ebp - 0x1019], al
mov eax, dword [0x435584]
mov ecx, dword [0x435580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x346785d9
mov ecx, 0x18699029
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1054], eax
jmp 0x408585
mov dword [ebp - 0x1054], 0x97566b92
jmp 0x408585
mov al, byte [ebp - 0x1019]
and al, 1
movzx eax, al
mov dword [ebp - 0x105c], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041d6a0
mov eax, dword [ebp - 0x105c]
add esp, 0x106c
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1054], 0x35a9edb5
jmp 0x408585
mov byte [ebp - 0x104d], 0
mov dword [ebp - 0x1054], 0xde0b5d0e
jmp 0x408585
mov dword [ebp - 0x1054], 0xca77f0c3
jmp 0x408585
mov dword [ebp - 0x1054], 0xb8ca5e19
jmp 0x408585
mov byte [ebp - 0x104d], 1
mov dword [ebp - 0x1054], 0x49323ade
jmp 0x408585
mov eax, dword [ebp - 0x102c]
mov dword [ebp - 0x1054], 0x3caefdde
jmp 0x408585
mov dword [ebp - 0x1054], 0x25ba380
jmp 0x408585
mov dword [ebp - 0x1054], 0x2ae39c77
jmp 0x4076a3