Function at 0x5c3920
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x3a8]
sub esp, 0x3a8
push 0xffffffffffffffff
push 0x65bd38
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x74d890]
xor eax, ebp
mov dword [ebp + 0x3a4], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 0x3b0]
mov eax, dword [ebp + 0x3b4]
mov dword [ebp - 0x30], eax
xor edi, edi
cmp esi, edi
jne 0x5c3978
xor eax, eax
jmp 0x5c3cc7
call fcn.005c1220
cmp dword [0x7547c0], edi
jne 0x5c39c5
mov eax, dword [0x7547bc]
cmp eax, edi
jne 0x5c39a4
push str.Urlmon.dll
call fcn.00447330
add esp, 4
mov dword [0x7547bc], eax
cmp eax, edi
je 0x5c39b5
push str.FindMimeFromData
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x7547c0], eax
cmp dword [0x7547c0], edi
jne 0x5c39c5
cmp dword [0x7547b4], edi
je 0x5c3971
push edi
push edi
push 3
push edi
push 3
push 0x80000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov dword [ebp - 0x28], esi
cmp esi, 0xffffffff
je 0x5c3971
mov byte [ebp - 0x11], 1
mov dword [ebp - 0x24], edi
lea ecx, [ebp - 0x1c]
call fcn.00402500
mov dword [ebp - 4], edi
mov ebx, pe_nt_image_headers32
mov dword [ebp - 0x2c], ebx
push 0x101
push edi
lea ecx, [ebp + 0x2a0]
push ecx
call fcn.00615eb0
add esp, 0xc
mov dword [ebp - 0x18], edi
push edi
lea edx, [ebp - 0x18]
push edx
push ebx
lea eax, [ebp + 0x2a0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, edi
je 0x5c3cab
cmp dword [ebp - 0x18], edi
jbe 0x5c3cab
cmp dword [0x7547c0], edi
je 0x5c3b33
mov byte [ebp - 4], 1
mov dword [ebp - 0x20], edi
push edi
lea ecx, [ebp - 0x20]
push ecx
push edi
push edi
mov edx, dword [ebp - 0x18]
push edx
lea eax, [ebp + 0x2a0]
push eax
push edi
push edi
call dword [0x7547c0]
cmp eax, edi
jne 0x5c3b1c
mov eax, dword [ebp - 0x20]
cmp eax, edi
je 0x5c3b1c
mov byte [ebp - 0x11], 0
push eax
lea ecx, [ebp - 0x1c]
call fcn.0040e140
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 4], 1
jmp 0x5c3aaf
push str.application_octet_stream
mov edx, dword [ebp - 0x1c]
push edx
call fcn.006172ee
add esp, 8
test eax, eax
je 0x5c3b10
push str.text_plain
mov eax, dword [ebp - 0x1c]
push eax
call fcn.006172ee
add esp, 8
test eax, eax
je 0x5c3b10
push str.text_html
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.006172ee
add esp, 8
test eax, eax
je 0x5c3b10
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, 0x752c78
call fcn.00430490
test eax, eax
je 0x5c3b1c
mov dword [ebp - 0x24], 1
mov dword [ebp - 4], edi
jmp 0x5c3b33
cmp dword [0x7547b4], edi
je 0x5c3b1c
mov byte [ebp - 0x11], 1
mov dword [ebp - 4], edi
jmp 0x5c3b33
cmp dword [0x7547b4], edi
je 0x5c3cab
cmp byte [ebp - 0x11], 0
je 0x5c3cab
push 0x2a0
push edi
lea ecx, [ebp]
push ecx
call fcn.00615eb0
add esp, 0xc
mov byte [ebp], 1
lea edx, [ebp - 0x2c]
push edx
mov eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
cmp esi, 0xffffffff
jne 0x5c3b82
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x5c3c16
push 1
push 0
push 0
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.0061a480
xor ecx, ecx
add eax, esi
adc edx, ecx
js 0x5c3c16
jg 0x5c3ba2
cmp eax, 0x100
jbe 0x5c3c16
test edx, edx
jg 0x5c3bb3
jl 0x5c3baf
cmp eax, 0x2710
jae 0x5c3bb3
mov ebx, eax
jmp 0x5c3bb8
mov ebx, 0x2710
push ebx
call fcn.005e9aa7
add esp, 4
mov esi, eax
test esi, esi
je 0x5c3c16
mov dword [ebp - 0x18], 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
lea eax, [ebp - 0x18]
push eax
push ebx
push esi
mov ecx, dword [ebp - 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x5c3c0b
mov eax, dword [ebp - 0x18]
test eax, eax
jbe 0x5c3c0b
lea edx, [ebp]
push edx
push 0
push eax
push esi
call dword [0x7547b4]
mov edi, eax
push esi
call fcn.005e9ab2
add esp, 4
jmp 0x5c3c2f
lea eax, [ebp]
push eax
push 0
mov ecx, dword [ebp - 0x18]
push ecx
lea edx, [ebp + 0x2a0]
push edx
call dword [0x7547b4]
mov edi, eax
cmp edi, 3
jne 0x5c3c3e
cmp ebx, 0x1388
jb 0x5c3cab
jmp 0x5c3c48
cmp edi, 1
je 0x5c3c48
cmp edi, 2
jne 0x5c3cab
lea eax, [ebp + 0x12d]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5c3c51
sub eax, edx
je 0x5c3c76
lea eax, [ebp + 0x12d]
push eax
push 0x66dea8
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.00402f70
add esp, 0xc
jmp 0x5c3ca4
lea eax, [ebp + 0xc9]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5c3c80
sub eax, edx
je 0x5c3cab
mov edx, dword [ebp - 0x30]
push edx
lea eax, [ebp + 0xc9]
push eax
mov ecx, 0x752c78
call fcn.00430490
test eax, eax
je 0x5c3cab
mov dword [ebp - 0x24], 1
mov ecx, dword [ebp - 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.00402570
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x3a4]
xor ecx, ebp
call fcn.006157d3
add ebp, 0x3a8
mov esp, ebp
pop ebp
ret