Function at 0x5489d0
Capabilities:
Contain obfuscated stackstrings
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x16c
mov eax, dword [0x5e6468]
xor eax, ebp
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x16c], ecx
mov eax, dword [ebp - 0x16c]
cmp dword [eax + 0x3d8], 0
je 0x548a0c
mov ecx, dword [ebp - 0x16c]
mov eax, dword [ecx + 0x3d8]
jmp 0x548e76
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x130], 0
mov byte [ebp - 0x128], 0x3a
mov byte [ebp - 0x127], 0x48
mov byte [ebp - 0x126], 0x6b
mov byte [ebp - 0x125], 0xa2
mov byte [ebp - 0x124], 0x57
mov byte [ebp - 0x123], 0x27
mov byte [ebp - 0x122], 0xb1
mov byte [ebp - 0x121], 0x80
mov byte [ebp - 0x120], 0xd
mov byte [ebp - 0x11f], 0x50
mov byte [ebp - 0x11e], 0x68
mov byte [ebp - 0x11d], 0x8d
mov byte [ebp - 0x11c], 0x6d
mov byte [ebp - 0x11b], 0x72
mov byte [ebp - 0x11a], 0xb
mov byte [ebp - 0x119], 0xe2
mov byte [ebp - 0x118], 0xc6
mov byte [ebp - 0x117], 0x78
mov byte [ebp - 0x116], 0xff
mov byte [ebp - 0x115], 0x31
mov byte [ebp - 0x114], 0x22
mov byte [ebp - 0x113], 0xcb
mov byte [ebp - 0x112], 0x44
mov byte [ebp - 0x111], 0x63
mov byte [ebp - 0x110], 0xb1
mov byte [ebp - 0x10f], 0x6d
mov byte [ebp - 0x10e], 0x1b
mov byte [ebp - 0x10d], 0x95
mov byte [ebp - 0x10c], 0xf5
mov byte [ebp - 0x10b], 0x68
mov byte [ebp - 0x10a], 0x8d
mov byte [ebp - 0x109], 0x6d
mov edx, dword [ebp - 0x16c]
cmp dword [edx], 0xffffffff
je 0x548b2e
mov eax, dword [ebp - 0x16c]
cmp dword [eax + 0x3dc], 0
jne 0x548b35
xor eax, eax
jmp 0x548e76
push 0
push 0
push 0x1cc
mov ecx, dword [ebp - 0x16c]
mov edx, dword [ecx]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0xffffffff
jne 0x548b63
xor eax, eax
jmp 0x548e76
push 0x5f232c
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax + 0x68]
push ecx
call fcn.00564025
add esp, 8
mov dword [ebp - 0x14c], eax
mov edx, dword [ebp - 0x14c]
mov dword [ebp - 0xfc], edx
push 0x5f232c
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax + 0x68]
add ecx, 0x20
push ecx
call fcn.00564025
add esp, 8
mov dword [ebp - 0x150], eax
mov edx, dword [ebp - 0x150]
mov dword [ebp - 0x100], edx
cmp dword [ebp - 0xfc], 0
je 0x548bca
cmp dword [ebp - 0x100], 0
jne 0x548bcf
jmp 0x548c86
push 0
lea eax, [ebp - 0x130]
push eax
mov ecx, dword [ebp - 0x16c]
mov edx, dword [ecx + 0x64]
sub edx, 0x1cc
push edx
mov eax, dword [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x16c]
mov edx, dword [ecx]
push edx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jne 0x548c0f
jmp 0x548c86
lea eax, [ebp - 0xf8]
push eax
push 0x80
lea ecx, [ebp - 0x128]
push ecx
call fcn.00539ba0
add esp, 0xc
push 0
lea edx, [ebp - 0x118]
push edx
lea eax, [ebp - 0xf8]
push eax
mov ecx, dword [ebp - 0x16c]
mov edx, dword [ecx + 0x68]
push edx
mov eax, dword [ebp - 0xfc]
push eax
mov ecx, dword [ebp - 0x100]
push ecx
call fcn.0053af00
add esp, 0x18
mov edx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0xfc]
mov dword [edx + 0x3d8], eax
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x12c], ecx
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax + 0x68]
mov dword [edx], ecx
cmp dword [ebp - 0x12c], 0
jne 0x548ced
cmp dword [ebp - 0x100], 0
je 0x548cbd
mov edx, dword [ebp - 0x100]
mov dword [ebp - 0x154], edx
mov eax, dword [ebp - 0x154]
push eax
call fcn.0055dfce
add esp, 4
mov dword [ebp - 0x100], 0
cmp dword [ebp - 0xfc], 0
je 0x548ceb
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x158], ecx
mov edx, dword [ebp - 0x158]
push edx
call fcn.0055dfce
add esp, 4
mov dword [ebp - 0xfc], 0
jmp 0x548d1b
cmp dword [ebp - 0x100], 0
je 0x548d1b
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x15c], eax
mov ecx, dword [ebp - 0x15c]
push ecx
call fcn.0055dfce
add esp, 4
mov dword [ebp - 0x100], 0
cmp dword [ebp + 0xc], 0
je 0x548e70
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x134], 0
mov edx, dword [ebp - 0x16c]
mov dword [edx + 0x3d8], 0
mov dword [ebp - 0x12c], 0
mov eax, dword [ebp + 8]
mov dword [eax], 0
lea ecx, [ebp - 0x144]
call fcn.00545180
lea ecx, [ebp - 0x148]
push ecx
lea edx, [ebp - 0x134]
push edx
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax + 0x68]
push ecx
mov edx, dword [ebp - 0xfc]
push edx
lea ecx, [ebp - 0x144]
call fcn.00545a70
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0xfc], 0
je 0x548dc5
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x160], eax
mov ecx, dword [ebp - 0x160]
push ecx
call fcn.0055dfce
add esp, 4
mov dword [ebp - 0xfc], 0
cmp dword [ebp - 0x13c], 0
jne 0x548df0
mov edx, dword [ebp - 0x12c]
mov dword [ebp - 0x164], edx
lea ecx, [ebp - 0x144]
call fcn.005451b0
mov eax, dword [ebp - 0x164]
jmp 0x548e76
push 0x5f232c
mov eax, dword [ebp - 0x148]
push eax
call fcn.00564025
add esp, 8
mov dword [ebp - 0x168], eax
mov ecx, dword [ebp - 0x168]
mov dword [ebp - 0x138], ecx
cmp dword [ebp - 0x138], 0
je 0x548e65
mov edx, dword [ebp - 0x148]
push edx
mov eax, dword [ebp - 0x134]
push eax
mov ecx, dword [ebp - 0x138]
push ecx
call fcn.00562ba0
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x148]
mov dword [edx], eax
mov ecx, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x138]
mov dword [ecx + 0x3d8], edx
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x12c], eax
lea ecx, [ebp - 0x144]
call fcn.005451b0
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x108]
xor ecx, ebp
call fcn.0055e289
mov esp, ebp
pop ebp
ret 8