Function at 0x5b4930
Capabilities:
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x67eb9b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x418
push ebx
mov ebx, ecx
push ebp
push esi
mov al, byte [ebx + 0x14]
push edi
test al, al
mov dword [esp + 0x24], ebx
jne 0x5b4974
push 0
push 0
push str.SiplProcess____ReadBMP:_Call_QueryReadBMP_before_ReadBMP_for_getting_information__nabout_the_image_to_be_read._This_is_required_for_memory_allocation
call fcn.0062dd90
mov eax, 0xfffffffb
jmp 0x5b4c33
mov eax, dword [esp + 0x438]
test eax, eax
jne 0x5b4997
push 0
push 0
push str.SiplProcess____ReadBMP:_Data_pointer_is_NULL
call fcn.0062dd90
mov eax, 0xfffffff4
jmp 0x5b4c33
mov eax, dword [0x6ed544]
mov dword [esp + 0x18], eax
mov eax, dword [ebx + 0x18]
push 0x6eaf78
push eax
mov dword [esp + 0x438], 0
call fcn.005e242f
mov ebp, eax
add esp, 8
test ebp, ebp
mov dword [esp + 0x1c], ebp
jne 0x5b4a01
mov ecx, dword [ebx + 0x18]
push str._for_reading__t_t_tTerminate_application_
push ecx
push str.ReadBMP:_Cant_open
lea edx, [esp + 0x24]
push str._s_s_s
push edx
call fcn.0060da8c
mov eax, dword [esp + 0x2c]
add esp, 0x14
push ebp
push 4
push eax
call fcn.0062dd90
cmp eax, 6
jne 0x5b4a8b
jmp 0x5b4a84
mov ecx, dword [esp + 0x43c]
push ebp
push 1
push 0xe
push ecx
call fcn.005e3cfb
mov esi, dword [esp + 0x450]
push ebp
push 1
push 0x28
push esi
call fcn.005e3cfb
mov edx, dword [esi + 8]
mov edi, dword [esi + 4]
xor eax, eax
add esp, 0x20
mov ax, word [esi + 0xe]
mov dword [esp + 0x10], edx
cmp eax, 8
je 0x5b4ab0
cmp eax, 0x10
je 0x5b4ab0
cmp eax, 0x18
je 0x5b4ab0
cmp eax, 0xa
je 0x5b4aa9
cmp eax, 0xc
je 0x5b4aa9
mov eax, dword [ebx + 0x18]
push str.image_is_neither_8__10__12__16_bit_nor_24_bit._nHence_cant_read._n_nTerminate_application_
push eax
push str.ReadBMP:
lea ecx, [esp + 0x24]
push str._s__s__s
push ecx
call fcn.0060da8c
mov edx, dword [esp + 0x2c]
add esp, 0x14
push 0
push 4
push edx
call fcn.0062dd90
cmp eax, 6
jne 0x5b4a8b
push 0
call fcn.005e246f
lea ecx, [esp + 0x18]
mov dword [esp + 0x430], 0xffffffff
call fcn.00619871
mov eax, 0xfffffff2
jmp 0x5b4c33
mov ebx, 2
jmp 0x5b4abb
cdq
and edx, 7
add eax, edx
mov ebx, eax
sar ebx, 3
mov eax, edi
mov byte [esp + 0x14], 0
and eax, reloc.WSOCK32.dll_closesocket
jns 0x5b4ace
dec eax
or eax, 0xfffffffc
inc eax
je 0x5b4aef
inc byte [esp + 0x14]
mov ecx, dword [esp + 0x14]
and ecx, 0xff
add ecx, edi
and ecx, reloc.WSOCK32.dll_closesocket
jns 0x5b4aed
dec ecx
or ecx, 0xfffffffc
inc ecx
jne 0x5b4ad0
cmp ebx, 1
jne 0x5b4b08
push ebp
push ebx
lea edx, [esp + 0x30]
push 0x400
push edx
call fcn.005e3cfb
add esp, 0x10
mov eax, dword [esp + 0x10]
lea ecx, [eax - 1]
mov al, byte [esp + 0x14]
test al, al
mov dword [esp + 0x10], ecx
jbe 0x5b4bc8
mov eax, dword [esp + 0x14]
and eax, 0xff
mov dword [esp + 0x20], eax
jl 0x5b4bc2
push eax
call fcn.00619f42
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
je 0x5b4b49
inc dword [0x6f3014]
mov ecx, dword [esp + 0x10]
test ecx, ecx
jl 0x5b4ba8
mov eax, dword [esp + 0x10]
mov ebp, ebx
mov esi, eax
imul ebp, edi
imul esi, ebx
imul esi, edi
mov ecx, dword [esp + 0x438]
neg ebp
add esi, ecx
inc eax
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x1c]
push ecx
push edi
push ebx
push esi
call fcn.005e3cfb
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
push 1
push edx
push eax
call fcn.005e3e12
mov eax, dword [esp + 0x2c]
add esp, 0x1c
add esi, ebp
dec eax
mov dword [esp + 0x10], eax
jne 0x5b4b72
mov eax, dword [esp + 0x14]
mov ebp, dword [esp + 0x1c]
test eax, eax
je 0x5b4c0a
push eax
call fcn.00619f6b
mov eax, dword [0x6f3014]
add esp, 4
dec eax
mov dword [0x6f3014], eax
jmp 0x5b4c0a
mov eax, dword [esp + 0x14]
jmp 0x5b4b4d
test ecx, ecx
jl 0x5b4c0a
mov esi, ecx
mov ebp, ebx
imul esi, ebx
imul ebp, edi
imul esi, edi
mov eax, dword [esp + 0x438]
neg ebp
add esi, eax
inc ecx
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x1c]
push ecx
push edi
push ebx
push esi
call fcn.005e3cfb
mov eax, dword [esp + 0x20]
add esp, 0x10
add esi, ebp
dec eax
mov dword [esp + 0x10], eax
jne 0x5b4be9
mov ebp, dword [esp + 0x1c]
mov esi, dword [esp + 0x24]
push ebp
mov ecx, esi
call fcn.005b59b0
lea ecx, [esp + 0x18]
mov byte [esi + 0x14], 0
mov dword [esp + 0x430], 0xffffffff
call fcn.00619871
mov eax, 1
mov ecx, dword [esp + 0x428]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x424
ret 0xc