Function at 0x5e712e92
Capabilities:
Get file attributes

Disassembly:
cmp word [0x61058878], 0x692e
jne 0x5e6b85b5
xchg edi, eax
inc ecx
movsb byte es:[edi], byte [esi]
cmp eax, 0xa74ceadd
push esp
out 0xd1, eax
xchg ebp, eax
mov edi, 0x86493c74
inc edi
shl eax, 0xeb
in al, dx
invalid
mov ax, word [esi]
push ecx
mov cx, ax
sub cx, word [edx]
pop ecx
jne 0x5e6b85df
cmp word [0x610bf4b3], 0x300c
jne 0x5e6bbfb0
add esi, 2
add edx, 2
dec ecx
jne 0x5e6b8583
xor eax, eax
pop esi
pop ebp
ret
cmp dword [0x61088841], 0xe73add36
je 0x5e72a63d
movzx eax, word [esi]
push ecx
mov cx, ax
sub cx, word [edx]
pop ecx
sbb eax, eax
and eax, 0xfffffffe
mov ecx, ecx
inc eax
jmp 0x5e6b85dc
into
mov ch, 0xc2
out dx, eax
or eax, 0xc0855928
je 0x5e6baf1e
mov ecx, eax
jmp 0x5e6bb31e
xor eax, eax
ret
nop
nop
mov dword [ecx + 4], 0x610e058c
mov eax, ecx
mov eax, eax
mov dword [ecx + 8], 1
and dword [ecx + 0x10c], 0
nop
mov dword [ecx], 0x610e060c
mov dword [ecx + 4], 0x610e0624
nop
ret
test eax, eax
je 0x5e6bb4e7
mov ecx, ecx
push 0x10
push 0x610e044c
mov eax, eax
push dword [ebp + 0xc]
call int.5e70e3ca
add esp, 0xc
test eax, eax
jne 0x5e6bb4f9
mov eax, eax
mov eax, dword [ebp + 8]
mov dword [esi], eax
mov eax, eax
inc dword [eax + 4]
xor eax, eax
mov eax, eax
jmp 0x5e6bb4fe
mov eax, 0x80004002
nop
nop
nop
pop esi
pop ebp
ret 0xc
nop
jmp 0x6c58e30c
mov ecx, esi
call fcn.5e6bbdbf
mov eax, eax
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop esi
nop
mov dword fs:[0], ecx
mov esp, ebp
mov eax, eax
pop ebp
ret 4
nop
nop
nop
pop esi
mov dword fs:[0], ecx
mov ecx, ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov edx, dword [esi + 0x24]
sub edx, ecx
pop edx
je 0x5e6bff94
cmp byte [esi + 0x35], cl
je 0x5e6bff94
mov eax, eax
mov eax, dword [esi + 0x40]
lea ebx, [esi + 0x48]
mov edx, dword [esi + 0x74]
mov ecx, ecx
mov dword [ebp - 0x28], eax
nop
mov eax, dword [esi + 0x44]
mov dword [ebp - 0xc], edx
lea edx, [esi + 0x2c]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 8], ecx
mov eax, dword [esi + 0x28]
cmp eax, dword [edx]
jne 0x5e6bfc7d
push edx
mov edx, ecx
and edx, ecx
pop edx
jne 0x5e6bfc7d
mov ecx, dword [ebp + 8]
xor eax, eax
push edx
push dword [esi + 0x54]
mov eax, eax
mov dword [edx], eax
push dword [esi + 0x24]
mov ecx, ecx
mov dword [esi + 0x28], eax
mov eax, dword [ecx]
push ecx
call dword [eax + 0xc]
mov dword [ebp - 8], eax
mov edi, dword [esi + 0x70]
mov ecx, ecx
mov ecx, edi
mov ecx, ecx
sub ecx, dword [ebp - 0xc]
mov edx, dword [esi + 0x50]
test word [0x61075d0b], 0x6e95
jno 0x5e6bfcb7
movsd dword es:[edi], dword [esi]
dec ebx
add eax, 0x1034cf75
wait
outsd dx, dword [esi]
scasb al, byte es:[edi]
pop es
adc esi, dword [edx + 0x14]
out 0x68, eax
lahf
push edx
daa
mov ebx, 0x1288da58
adc eax, 0xf7b3b602
movsd dword es:[edi], dword [esi]
in al, 0xeb
mov eax, dword [esi + 0x74]
mov dword [ebp - 0x18], eax
cmp ecx, edx
jbe 0x5e6bfcc8
mov ecx, ecx
mov edi, dword [ebp - 0xc]
add edi, edx
sub edi, eax
xor eax, eax
nop
nop
mov ecx, eax
push ecx
mov cl, byte [esi + 0x36]
sub cl, al
pop ecx
je 0x5e6bfd04
nop
nop
mov edx, dword [esi + 0x38]
sub edx, dword [ebx]
mov eax, dword [esi + 0x3c]
sbb eax, dword [ebx + 4]
cmp dword [ebp - 0x20], eax
jb 0x5e6bfd04
ja 0x5e6bfcf5
push ecx
mov ecx, edi
sub ecx, edx
pop ecx
jb 0x5e6bfd04
push eax
mov al, byte [esi + 0x34]
sub al, cl
pop eax
mov edi, edx
push 1
pop eax
cmovne ecx, eax
mov ecx, ecx
mov eax, dword [esi + 0x2c]
nop
sub eax, dword [esi + 0x28]
test word [0x6103bc6d], 0x563a
je 0x5e71e893
mov dword [ebp - 0x14], eax
mov ecx, ecx
lea eax, [ebp - 0x10]
push eax
nop
nop
push ecx
lea eax, [ebp - 0x14]
push eax
mov eax, dword [esi + 0x24]
add eax, dword [esi + 0x28]
push eax
mov eax, dword [ebp - 0x18]
add eax, edi
mov eax, eax
push eax
nop
nop
nop
lea eax, [esi + 0x5c]
test byte [0x61000045], 0x42
jns 0x5e6bfd87
nop
sub dword [ebp - 0x2d], esi
xor dword [esi + 0x24], edi
rol dword [edi + 0x55], 1
fcom qword es:[edx + 0x2ddeef4a]
insd dword es:[edi], dx
dec esi
mov ebx, 0x1367d6ca
loop 0x5e6bfd24
xor eax, 0x40712a22
push ebx
lcall 0x5351, 0xa6f0507e
pop ebp
lea esi, [eax]
aad 0xad
rcr dword [ebp - 0x67], 1
mov ecx, 0xf92282ce
sbb byte [ecx - 0x43], 0xcb
fistp dword [edx]
invalid
push eax
call int.5e6d9278
mov ecx, dword [esi + 0x74]
add esp, 0x18
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], eax
nop
nop
nop
mov eax, dword [ebp - 0x14]
add dword [esi + 0x28], eax
add dword [esi + 0x40], eax
push 0
pop eax
adc dword [esi + 0x44], eax
sub ecx, dword [ebp - 0x18]
add dword [ebx], ecx
mov dword [esi + 0x30], edx
adc dword [ebx + 4], eax
push ebx
mov bl, byte [esi + 0x36]
sub bl, al
pop ebx
je 0x5e6bfddb
mov eax, dword [ebx + 4]
push ecx
mov ecx, eax
sub ecx, dword [esi + 0x3c]
pop ecx
jb 0x5e6bfdd9
ja 0x5e6bfdd4
mov eax, dword [ebx]
cmp eax, dword [esi + 0x38]
jb 0x5e6bfdd9
xor eax, eax
inc eax
jmp 0x5e6bfddb
xor eax, eax
push ecx
mov ecx, dword [ebp - 0x1c]
sub ecx, 0
pop ecx
mov byte [ebp - 2], al
jne 0x5e6bfe1d
push ecx
mov ecx, dword [ebp - 0x14]
sub ecx, 0
pop ecx
jne 0x5e6bfdf6
test ecx, ecx
je 0x5e6bfe1d
push eax
mov eax, edx
sub eax, 1
pop eax
je 0x5e6bfe1d
push ecx
mov cl, al
and cl, al
pop ecx
je 0x5e6bfe0c
cmp edx, 3
jne 0x5e6bfe1d
xor eax, eax
mov eax, eax
mov byte [ebp - 1], al
push ebx
mov ebx, ecx
sub ebx, edi
pop ebx
jb 0x5e6bfe78
jmp 0x5e6bfe23
xor eax, eax
inc eax
mov byte [ebp - 1], al
mov eax, dword [esi + 0x74]
sub eax, dword [ebp - 0xc]
nop
nop
nop
push eax
test word [0x61018b20], 0xa673
jb 0x5e6cf099
mov eax, dword [esi + 0x6c]
add eax, dword [ebp - 0xc]
push eax
push dword [ebp + 0xc]
call fcn.5e6d6a19
mov ecx, dword [esi + 0x74]
nop
nop
add esp, 0xc
cmp ecx, dword [esi + 0x70]
jne 0x5e6bfe5d
xor ecx, ecx
mov dword [esi + 0x74], ecx
mov ecx, dword [esi + 0x74]
mov dword [ebp - 0xc], ecx
test eax, eax
jne 0x5e6bff9b
add byte [eax], al
push edx
mov dl, byte [ebp - 1]
sub dl, al
pop edx
jne 0x5e6bff31
mov eax, eax
mov edi, dword [ebp + 0x10]
test dword [0x6107fe10], 0x9284573c
js 0x5e6bfeb1
jge 0x5e6bff06
int3
lea edx, [esi + 0x2c]
mov ecx, ecx
mov ecx, dword [ebp - 8]
test edi, edi
je 0x5e6bfc50
mov ecx, dword [esi + 0x40]
sub ecx, dword [ebp - 0x28]
mov eax, dword [esi + 0x44]
sbb eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x34]
push ebx
test byte [0x610717e7], 0x49
jns 0x5e6bff00
adc dword [eax - 0x1a3c7f8], 0x519ddb26
jo 0x5e6bfe69
invalid
mov dword [ebp - 0x30], eax
mov eax, eax
mov eax, dword [edi]
pop es
push ecx
mov eax, eax
push edi
nop
nop
call dword [eax + 0xc]
mov ecx, dword [ebp - 8]
test byte [0x610ce718], 0xb1
je 0x5e6be90c
lea edx, [esi + 0x2c]
push edx
mov edx, eax
and edx, eax
pop edx
je 0x5e6bfc50
jmp 0x5e6bff9b
cmp dword [ebp - 0x1c], 0
jne 0x5e6bff94
mov ecx, ecx
xor ecx, ecx
inc ecx
push edx
mov edx, dword [ebp - 0x10]
sub edx, ecx
pop edx
jne 0x5e6bff6f
push eax
mov al, byte [esi + 0x34]
sub al, 0
pop eax
je 0x5e6bff8f
push ecx
mov cl, byte [esi + 0x36]
sub cl, 0
pop ecx
je 0x5e6bff8f
mov eax, dword [esi + 0x38]
cmp eax, dword [ebx]
jne 0x5e6bff6b
mov eax, dword [esi + 0x3c]
push ecx
mov ecx, eax
sub ecx, dword [ebx + 4]
pop ecx
je 0x5e6bff8f
mov eax, ecx
jmp 0x5e6bff9b
cmp byte [ebp - 2], 0
je 0x5e6bff6b
push eax
mov eax, dword [ebp - 0x10]
sub eax, 3
pop eax
je 0x5e6bff6b
cmp byte [esi + 0x34], 0
je 0x5e6bff8f
push edx
mov edx, dword [ebp - 0x10]
sub edx, 4
pop edx
jne 0x5e6bff6b
mov eax, dword [ebp - 8]
jmp 0x5e6bff9b
mov ecx, ecx
xor eax, eax
mov eax, eax
inc eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
xor ecx, ecx
push ebx
mov ebx, eax
sub ebx, 0xffffffff
pop ebx
setne al
pop ebp
ret
mov ecx, dword [edi + 0x38]
and dword [ebp - 0x14], 0
mov dword [ebp - 0x34], eax
cmp dword [0x6109a61d], 0xe84c965a
jne 0x5e6cf015
aaa
mov byte [eax], cl
push esi
mov al, 0x76
inc ebx
mov eax, dword [0xbcd6aae8]
xor eax, 0x9fdf8c2e
shr dword [eax - 0x5fa84a27], 1
movsb byte es:[edi], byte [esi]
stosd dword es:[edi], eax
jae 0x5e6ceff4
xor edi, dword [ecx + 0x26]
lodsd eax, dword [esi]
sub al, 0x52
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
mov eax, dword [ecx + 8]
sub eax, dword [ebp - 0x28]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x24]
mov dword [edx + ecx*4], eax
mov ecx, esi
call fcn.5e6cdc8b
mov ebx, eax
mov eax, eax
mov dword [ebp - 0x44], ebx
test ebx, ebx
je 0x5e6cf503
cmp ebx, 0x40
ja 0x5e6cf503
and dword [ebp - 0x38], 0
test ebx, ebx
je 0x5e6cf2c2
mov esi, dword [ebp + 0xc]
mov edx, dword [ebp - 0x10]
mov ecx, edx
call fcn.5e6cc848
mov byte [ebp + 0xb], al
test al, 0xc0
jne 0x5e6cf503
movzx ecx, al
and ecx, 0xf
cmp ecx, 8
ja 0x5e6cf503
cmp byte [0x610d8bcd], 0x84
je 0x5e6cf0a9
cdq
fld dword [edi + ebp*8 - 0x67]
xor edi, dword [edi - 0x37]
jns 0x5e6cf0ab
daa
wait
push ds
jno 0x5e6cf0b4
fmul st(6), st(0)
stosb byte es:[edi], al
stosb byte es:[edi], al
mov ebx, 0x647fc42a
jg 0x5e6cf0ff
inc ecx
pop eax
lea ecx, [ebx + 0xfed8075]
mov al, 0x20
jle 0x5e6cf08e
les eax, [0x8bf0558b]
ror byte [ebx + 0x422b0442], 8
mov edx, dword [ebp - 0x10]
mov eax, eax
mov eax, dword [edx + 4]
sub eax, dword [edx + 8]
invalid
cmp ecx, eax
ja 0x5e6cf508
mov eax, dword [edx]
xorps xmm0, xmm0
nop
nop
nop
add eax, dword [edx + 8]
mov dword [ebp - 0x20], eax
xor eax, eax
movlpd qword [ebp - 0x4c], xmm0
mov dword [ebp - 0x30], eax
push eax
mov eax, ecx
and eax, ecx
pop eax
je 0x5e6cf12f
mov edi, dword [ebp - 0x48]
nop
nop
mov esi, dword [ebp - 0x4c]
mov ebx, dword [ebp - 0x20]
movzx eax, byte [eax + ebx]
shld edi, esi, 8
nop
cdq
shl esi, 8
or edi, edx
test word [0x610180b6], 0x10a
je 0x5e729463
or esi, eax
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
push ebx
mov ebx, eax
sub ebx, ecx
pop ebx
jb 0x5e6cf0e7
mov ebx, dword [ebp - 0x44]
nop
nop
mov edx, dword [ebp - 0x10]
nop
nop
nop
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x40]
mov dword [ebp - 0x30], esi
mov esi, dword [ebp + 0xc]
jmp 0x5e6cf13b
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x30], eax
add dword [edx + 8], ecx
cmp dword [esi + 0x50], 0x80
jae 0x5e6cf15c
push dword [ebp - 0x20]
lea ecx, [esi + 0x4c]
mov ecx, ecx
push dword [ebp - 0x30]
call fcn.5e6caff6
mov eax, eax
mov edx, dword [ebp - 0x10]
nop
nop
xor eax, eax
nop
nop
inc eax
test byte [ebp + 0xb], 0x10
je 0x5e6cf198
mov ecx, ecx
mov ecx, edx
call fcn.5e6cdc8b
mov dword [ebp - 0x48], eax
push ebx
mov ebx, eax
sub ebx, 0x40
pop ebx
ja 0x5e6cf503
mov eax, eax
mov ecx, dword [ebp - 0x10]
call fcn.5e6cdc8b
cmp eax, 1
jne 0x5e6cf503
mov eax, dword [ebp - 0x48]
nop
nop
nop
mov ecx, dword [ebp - 0x14]
test byte [0x61076778], 0x8e
js 0x5e7030cf
add ecx, eax
mov dword [ebp - 0x14], ecx
push ebx
mov ebx, ecx
sub ebx, 0x40
pop ebx
ja 0x5e6cf503
push ecx
mov cl, byte [ebp + 0xb]
and cl, 0x20
pop ecx
je 0x5e6cf2a9
nop
mov ecx, dword [ebp - 0x10]
call fcn.5e6cdc8b
mov edx, dword [ebp - 0x10]
nop
nop
nop
mov dword [ebp + 8], eax
mov ecx, dword [edx + 4]
sub ecx, dword [edx + 8]
cmp eax, ecx
ja 0x5e6cf508
nop
nop
nop
mov ecx, dword [ebp - 0x30]
cmp ecx, 0x21
jne 0x5e6cf25e
cmp dword [ebp - 0x20], 0
jne 0x5e6cf25e
cmp eax, 1
jne 0x5e6cf2a1
mov eax, dword [edi + 0x38]
mov ecx, dword [eax + 8]
cmp word [0x610dfa92], 0x2e4a
jns 0x5e6cf24d
outsd dx, dword [esi]
adc byte [esi], al
das
mov edi, 0x20bd70d5
invalid
mov eax, dword [eax]
mov ecx, ecx
mov al, byte [ecx + eax]
cmp byte [esi + 0x44], al
jae 0x5e6cf29e
mov byte [esi + 0x44], al
jmp 0x5e6cf29e
push eax
mov eax, ecx
sub eax, 0x30101
pop eax
jne 0x5e6cf2a1
cmp dword [ebp - 0x20], 0
jne 0x5e6cf2a1
cmp eax, 5
jne 0x5e6cf2a1
nop
nop
nop
mov eax, dword [edi + 0x38]
mov ecx, dword [eax + 8]
cmp byte [0x61088b1a], 0x62
jne 0x5e6bb4c9
mov eax, dword [eax]
mov eax, dword [ecx + eax + 1]
push ecx
mov ecx, dword [esi + 0x48]
sub ecx, eax
pop ecx
jae 0x5e6cf29e
mov ecx, ecx
mov dword [esi + 0x48], eax
mov eax, dword [ebp + 8]
add dword [edx + 8], eax
nop
nop
nop
jmp 0x5e6cf2ac
mov edx, dword [ebp - 0x10]
nop
nop
nop
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
push edx
mov edx, eax
sub edx, ebx
pop edx
jb 0x5e6cf059
mov eax, dword [ebp - 0x14]
cmp ebx, 1
jne 0x5e6cf2e0
push ecx
mov ecx, eax
sub ecx, ebx
pop ecx
jne 0x5e6cf2e0
and dword [ebp - 0x34], 0
xor esi, esi
inc esi
nop
nop
jmp 0x5e6cf477
lea esi, [ebx - 1]
cmp eax, esi
jb 0x5e6cf503
nop
push eax
lea eax, [ebp - 0x74]
push eax
test dword [0x610891b9], 0x636e9c4e
jno 0x5e6cf32e
rcr ebp, 0x90
and ebx, esp
and esi, dword [0x3332abf5]
invalid
call 0x5e6cb186
mov eax, eax
lea eax, [ebp - 0x68]
push ebx
test word [0x6100485a], 0x6325
js 0x5e6baf0c
push eax
nop
nop
call 0x5e6cb186
and dword [ebp + 8], 0
add esp, 0x10
push ecx
mov ecx, esi
and ecx, esi
pop ecx
je 0x5e6cf3bf
mov eax, eax
mov ecx, dword [edi + 0x38]
call fcn.5e6cdc8b
push ecx
mov ecx, eax
sub ecx, dword [ebp - 0x14]
pop ecx
jae 0x5e6cf503
mov ecx, dword [ebp - 0x74]
cmp byte [ecx + eax], 0
jne 0x5e6cf503
nop
nop
nop
mov byte [ecx + eax], 1
mov eax, eax
mov ecx, dword [edi + 0x38]
nop
nop
nop
call fcn.5e6cdc8b
cmp eax, ebx
jae 0x5e6cf503
mov ecx, dword [ebp - 0x68]
push ebx
mov bl, byte [ecx + eax]
sub bl, 0
pop ebx
jne 0x5e6cf503
mov byte [ecx + eax], 1
mov eax, dword [ebp + 8]
inc eax
mov dword [ebp + 8], eax
cmp eax, esi
jb 0x5e6cf35f
test word [0x6103738c], 0x4bfc
jne 0x5e6cf3f0
dec ecx
xor dword [ebx], edi
aad 0xca
lahf
push edx
push edx
inc ebx
mov bl, 0xeb
retf 0xc703
mov esi, dword [ebp - 0x14]
lea eax, [ebx - 1]
sub esi, eax
push eax
mov eax, esi
sub eax, 1
pop eax
je 0x5e6cf44a
and dword [ebp + 8], 0
test esi, esi
je 0x5e6cf44a
mov ecx, dword [ebp - 0x10]
call fcn.5e6cdc8b
push ebx
mov ebx, eax
sub ebx, dword [ebp - 0x14]
pop ebx
jae 0x5e6cf503
mov eax, eax
mov ecx, dword [ebp - 0x74]
push edx
mov dl, byte [ecx + eax]
sub dl, 0
pop edx
jne 0x5e6cf503
mov ecx, ecx
mov byte [ecx + eax], 1
mov eax, eax
mov eax, dword [ebp + 8]
nop
nop
inc eax
mov dword [ebp + 8], eax
push edx
mov edx, eax
sub edx, esi
pop edx
jb 0x5e6cf409
xor eax, eax
push ecx
mov ecx, ebx
and ecx, ebx
pop ecx
je 0x5e6cf46b
mov ecx, dword [ebp - 0x68]
push ebx
mov bl, byte [ecx + eax]
sub bl, 0
pop ebx
je 0x5e6cf468
inc eax
cmp eax, ebx
jb 0x5e6cf457
jmp 0x5e6cf46b
mov dword [ebp - 0x34], eax
push edx
mov edx, eax
sub edx, ebx
pop edx
je 0x5e6cf503
mov eax, dword [ebp - 0x50]
mov eax, eax
mov ecx, dword [ebp - 0x24]
nop
mov edx, dword [ebp - 0x18]
test word [0x6105cbaa], 0x4735
je 0x5e6bb77e
mov eax, dword [eax]
mov ecx, ecx
mov dword [eax + ecx*4], edx
add edx, ebx
mov ecx, ecx
mov eax, dword [ebp - 0x54]
mov ebx, dword [ebp - 0x1c]
mov ecx, ecx
mov dword [ebp - 0x18], edx
mov eax, dword [eax]
nop
nop
mov dword [eax + ecx*4], ebx
mov ebx, dword [ebp + 0xc]
cmp dword [0x6103415a], 0xfd1194f4
je 0x5e71569c
mov eax, dword [ebx]
test byte [0x610d8255], 0x4f
js 0x5e7082f7
sub eax, dword [ebp - 0x1c]
push ecx
mov ecx, esi
sub ecx, eax
pop ecx
ja 0x5e6cf50f
mov eax, dword [ebx + 0x34]
mov edx, dword [ebp - 0x34]
add dword [ebp - 0x1c], esi
mov eax, eax
mov byte [eax + ecx], dl
inc ecx
nop
nop
nop
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x24], ecx
cmp ecx, dword [ebp - 0x2c]
jae 0x5e6cf517
mov esi, dword [ebp - 0x10]
xor eax, eax
jmp 0x5e6cefde
call fcn.5e6cfe06
mov eax, eax
call fcn.5e6cfde7
nop
call fcn.5e6cfde7
mov edx, ecx
mov ecx, ecx
mov eax, dword [edi + 0x38]
mov esi, dword [eax + 8]
sub esi, dword [ebp - 0x28]
add esi, dword [eax]
mov ecx, ecx
mov eax, dword [ebx + 0x2c]
push esi
nop
nop
nop
push dword [ebp - 0x28]
mov dword [eax + ecx*4], edx
mov ecx, ecx
mov eax, dword [ebx + 0x30]
mov edx, dword [ebp - 0x1c]
mov dword [eax + ecx*4], edx
mov ecx, dword [edi + 0x38]
mov eax, eax
mov edx, dword [ebx + 0x38]
mov eax, dword [ecx + 8]
nop
nop
nop
sub eax, dword [ebp - 0x28]
add eax, dword [ecx]
mov ecx, ecx
mov ecx, dword [ebp - 0x24]
mov dword [edx + ecx*4], eax
nop
nop
lea ecx, [ebx + 0x3c]
call fcn.5e6c4dd9
nop
push dword [ebp - 0x68]
call fcn.5e6d68f8
push dword [ebp - 0x74]
call fcn.5e6d68f8
or dword [ebp - 4], 0xffffffff
nop
nop
nop
pop ecx
pop ecx
lea ecx, [ebp - 0x5c]
call fcn.5e6cf74f
cmp dword [0x6101f063], 0x1bbb3e28
js 0x5e6cf5c3
sbb esi, dword [ebx]
jle 0x5e6cf60d
in eax, dx
jle 0x5e6cf608
pop ebx
mov ch, 0xdc
insd dword es:[edi], dx
mov edi, 0xc805e9ed
rcl byte [ecx - 0x658e98bd], cl
enter 0xffffffffffff91d2, 0x43
jno 0x5e6cf541
inc ebx
mov ecx, 0xa5410d3e
std
rol byte [esi - 0x44], cl
cdq
mov al, byte [0xeff0921e]
loop 0x5e6cf5f3
xor ch, byte [ecx]
mov cl, pe_nt_image_headers32
push eax
test eax, 0x6aaff5
push 0
cmp byte [0x60ff119d], 0xf
je 0x5e6cf5f1
dec esi
cmpsb byte [esi], byte es:[edi]
jae 0x5e6cf5a0
enter 0xa4, 0xffffffffffffffc5
and cl, byte [edi - 0x18]
inc ebx
pop ecx
mov ecx, 0xc52fa5f6
and byte [ebx - 0x33], al
add al, 0xcf
pop ebp
retf
push 0xc
nop
nop
mov ecx, edi
call fcn.5e6cfe1f
push dword [ebp - 0x18]
lea ecx, [ebx + 0x28]
nop
nop
nop
call fcn.5e6cb0cc
xor esi, esi
cmp dword [ebp - 0x18], esi
invalid
jne 0x5e6cf5f7
jbe 0x5e6cf62f
mov ecx, dword [edi + 0x38]
call fcn.5e6cdcdd
mov ecx, dword [ebx + 0x28]
mov dword [ecx + esi*8], eax
nop
nop
mov dword [ecx + esi*8 + 4], edx
inc esi
push eax
mov eax, esi
sub eax, dword [ebp - 0x18]
pop eax
jb 0x5e6cf611
nop
nop
mov ecx, dword [edi + 0x38]
cmp dword [0x6103562a], 0xcc9acacc
js 0x5e715b62
call fcn.5e6cdcdd
mov esi, eax
mov ecx, esi
or ecx, edx
je 0x5e6cf68b
push ebx
mov ebx, esi
sub ebx, 0xa
pop ebx
jne 0x5e6cf675
push ecx
mov ecx, edx
and ecx, edx
pop ecx
jne 0x5e6cf675
lea eax, [ebx + 0xc]
mov ecx, edi
nop
nop
nop
push eax
push dword [ebp - 0x2c]
call fcn.5e6cd1c8
jmp 0x5e6cf67d
mov ecx, dword [edi + 0x38]
call fcn.5e6cfbff
mov ecx, dword [edi + 0x38]
call fcn.5e6cdcdd
mov esi, eax
or eax, edx
jne 0x5e6cf651
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
nop
nop
nop
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
mov ecx, ecx
pop ebp
ret 8
nop
mov ecx, dword [ebp + 8]
mov ecx, ecx
call fcn.5e6b2a72
mov eax, eax
mov eax, dword [ebp + 8]
mov esp, ebp
pop ebp
ret 4
mov dword [ebp - 0x10], edi
and dword [ebp - 4], 0
mov esi, dword [edi + 4]
push eax
mov eax, esi
and eax, esi
pop eax
je 0x5e7083b0
push ebx
test word [0x60fdd586], 0xe2b1
jno 0x5e708357
aam 9
dec esp
push edi
jp 0x5e708361
and dh, byte [ebx + 0xeae9ade]
movsb byte es:[edi], byte [esi]
or dh, cl
mov dl, 0xd3
invalid
mov eax, dword [edi]
test dword [0x61065022], 0x5e57c636
push edi
pop esi
jno 0x5e70838d
cmp al, 0x6e
pop ebx
fadd qword [esp + ebp*4]
pop esi
mov byte [0x2f8832a9], al
pushfd
aad 0xaa
out 0xba, al
pushfd
lea edx, [0xbb043eb3]
push ds
jl 0x5e7083c7
call 0xf3786a72
xchg edx, eax
jecxz 0x5e70831b
int 0x9c
and esi, ebp
pop esi
dec esi
mov ebx, dword [eax + esi*4]
push ecx
mov ecx, ebx
and ecx, ebx
pop ecx
je 0x5e7083a7
mov ecx, ebx
call fcn.5e70bb62
push ebx
call fcn.5e6d68f8
pop ecx
test esi, esi
jne 0x5e70830e
pop ebx
mov eax, eax
push dword [edi]
call fcn.5e6d68f8
pop ecx
mov eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, ecx
mov esp, ebp
pop ebp
add byte [ebx + 0x5de58bc9], cl
ret
push es
mov ah, 0x32
push cs
popal
cmp dword [0x61066d7b], 0x56308268
js 0x5e712ecb
sub byte [edx], dl
je 0x5e712f18
in al, 0xc
fmul dword [eax + 0xa04e4b5]
popfd
insb byte es:[edi], dx
mov eax, dword [0x1d271520]
cmp edi, esi
xlatb
mov cs, word [esi]
std
jae 0x5e712e3e
add dword [edx + ebx*8 + 0x48], ebp
lahf
xor eax, 0xdca14995
bound esi, qword [esi + 0x29]
bound esi, qword [edi]
imul esp, dword [edi + esi*8 + 0x6a], 0x30
push 0x30
mov eax, eax
push 0x5e731bb4
call fcn.5e716b5c
mov eax, dword [ebp + 0x18]
mov eax, eax
mov dword [ebp - 0x1c], eax
xor ebx, ebx
mov dword [ebp - 0x38], ebx
mov edi, dword [ebp + 0xc]
pop ebp
enter 0x7d8b, 0xc
test byte [0x61088389], 0xea
js 0x5e6b85d8
mov eax, dword [edi - 4]
mov dword [ebp - 0x28], eax
mov esi, dword [ebp + 8]
mov ecx, ecx
push dword [esi + 0x18]
test dword [0x61014604], 0xb09dd1a9
jne 0x5e712f3e
mov edi, 0xb0b7219
xlatb
std
syscall
insb byte es:[edi], dx
mov ah, dh
loope 0x5e712ee4
in al, 0xc6
xlatb
imul esp, dword [eax + 0x10], 0x5ef94796
xor ch, byte [esi - 0x53d6066]
and al, 0x4a
xor al, 0x3c
push esp
invalid
lea eax, [ebp - 0x40]
push eax
mov eax, eax
call fcn.5e711ab9
cmp word [0x61073dc7], 0xb278
js 0x5e6c845c
pop ecx
pop ecx
mov dword [ebp - 0x2c], eax
nop
call fcn.5e71aa1e
mov eax, dword [eax + 0x88]
nop
nop
nop
mov dword [ebp - 0x30], eax
call fcn.5e71aa1e
mov eax, dword [eax + 0x8c]
mov eax, eax
mov dword [ebp - 0x34], eax
test word [0x6108bc4f], 0x4663
jno 0x5e712fb5
xor al, 0x65
lds esp, [edx - 0x28]
push ebp
or al, 4
add ebx, ebx
add al, 0x20
retf 0x57a1
call fcn.5e71aa1e
mov dword [eax + 0x88], esi
call fcn.5e71aa1e
nop
nop
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x8c], ecx
mov dword [ebp - 4], ebx
xor eax, eax
inc eax
cmp word [0x61094ffa], 0x95c5
jns 0x5e713006
mov dl, 0xec
and al, 0x1a
and dword [esi], edi
adc dword [ebx], ecx
imul ebx, esi, 0x39
in al, 0x22
add eax, 0x8f877907
sbb al, 0x9c
retf
mov dword [ebp + 0x10], eax
nop
mov dword [ebp - 4], eax
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
nop
push dword [ebp + 0x18]
push dword [ebp + 0x14]
nop
nop
nop
push edi
call fcn.5e7116eb
add esp, 0x14
mov eax, eax
mov dword [ebp - 0x1c], eax
test word [0x61090906], 0x4f6c
js 0x5e6bfc1b
mov dword [ebp - 4], ebx
jmp 0x5e713102
mov dword [ebp - 4], 0xfffffffe
mov dword [ebp + 0x10], 0
call fcn.5e713125
mov eax, edi
call fcn.5e716bae
nop
nop
ret
mov ecx, ecx
pop ecx
pop ecx
nop
nop
pop ebp
ret
nop
nop
jmp fcn.5e711bbd