Function at 0x5e6db748
Capabilities:
Encode data using base64
Encrypt data using aes
Encrypt data using speck
Get file attributes
Reference aes constants
Resolve function by parsing pe exports

Disassembly:
ret 0xc
sub dword [esp + 4], 4
nop
nop
nop
jmp 0x5e6c5516
nop
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
mov eax, eax
ret 4
push ebp
mov ebp, esp
sub esp, 0x80
xor eax, eax
push ebx
mov ebx, dword [ebp + 8]
push esi
cmp word [0x6105c5fc], 0xa228
js 0x5e6c42c0
push edi
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x18], eax
cmp dword [ebx + 0x34], eax
jne 0x5e6db78b
lea eax, [ebp - 0x2c]
push eax
mov ecx, ecx
push ebx
call fcn.5e6e0a3c
pop ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x2c]
nop
nop
pop ecx
jmp 0x5e6db796
mov esi, dword [ebx + 0x20]
mov ecx, ecx
mov eax, dword [ebx + 0x24]
mov dword [ebp - 0x20], esi
cmp byte [0x61022a33], 0x27
jns 0x5e6db7cb
in eax, 0xb8
call 0xfd17a653
xchg esp, eax
add ah, byte [ecx + 0x7c]
test esi, edi
call 0xe6eb1900
or edi, dword [ebx - 0x46]
rol ebp, 1
invalid
mov edi, dword [ebx + 0x28]
test byte [0x60fe4ef3], 0x78
js 0x5e6bf16e
mov dword [ebp - 0x1c], eax
push eax
mov eax, edi
sub eax, 2
pop eax
jae 0x5e6db7f6
or dword [ebx + 0x90], 0xffffffff
xor eax, eax
inc eax
jmp 0x5e6dd533
push dword [ebx]
mov eax, 0x111
push ebx
mov ebx, edi
sub ebx, eax
pop ebx
cmova edi, eax
call dword [ebx + 0xc]
and dword [ebp - 0x24], 0
xor esi, esi
nop
and dword [ebp - 0x34], esi
pop ecx
lea ecx, [eax - 1]
mov al, byte [ecx]
mov dword [ebp - 0x38], ecx
nop
mov byte [ebp - 1], al
nop
nop
mov edx, esi
mov eax, dword [ebx + edx*4 + 0x38]
test word [0x61010fff], 0xd275
jns 0x5e7290d6
mov dword [ebp + edx*4 - 0x54], eax
test dword [0x610a078b], 0x51016c7
jo 0x5e6c5eb5
mov edx, ecx
sub edx, eax
mov al, byte [ebp - 1]
push ecx
mov cl, al
sub cl, byte [edx]
pop ecx
jne 0x5e6db944
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x5e6db944
mov eax, eax
push 2
test dword [0x610299d8], 0x707d45a2
jb 0x5e71d1a3
pop eax
mov dword [ebp - 0x14], eax
cmp edi, eax
jbe 0x5e6db8ea
nop
mov ebx, dword [ebp - 0x14]
nop
nop
lea eax, [ecx + 2]
mov eax, eax
sub edx, ecx
mov dword [ebp - 0x2c], eax
mov ecx, eax
cmp word [0x61067328], 0xaf47
js 0x5e6db8d4
sti
outsb dx, byte [esi]
sbb al, 0xce
pop ds
pop edi
ror dword [edi - 0x22], 1
pushfd
mov dl, 0x84
hlt
mov al, byte [ecx]
cmp al, byte [edx + ecx]
jne 0x5e6db8e1
inc ebx
inc ecx
cmp ebx, edi
jb 0x5e6db898
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp + 8]
mov eax, dword [ebp - 0x14]
mov ecx, ecx
mov ecx, dword [ebp - 0x34]
cmp byte [0x6100ffe5], 0x3e
js 0x5e6db924
mov bh, 0x93
std
push esi
sub dl, byte [edi]
sub al, 0xb7
and al, 0x28
jecxz 0x5e6db973
stosb byte es:[edi], al
or bl, ch
aad 0x8f
into
lcall 0x59b7, 0x6c5be418
int3
mov edx, esi
shl edx, 2
mov dword [ebp + edx - 0x80], eax
push ebx
mov ebx, eax
sub ebx, dword [ebp + ecx - 0x80]
pop ebx
mov ecx, dword [ebp - 0x38]
jbe 0x5e6db94c
mov eax, esi
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x24], eax
jmp 0x5e6db94f
mov edx, esi
nop
and dword [ebp + edx*4 - 0x80], 0
mov eax, dword [ebp - 0x24]
inc esi
push eax
mov eax, esi
sub eax, 4
pop eax
jb 0x5e6db820
nop
mov edi, dword [ebp + eax*4 - 0x80]
nop
mov esi, dword [ebp - 0x20]
cmp edi, dword [ebx + 0x30]
jb 0x5e6db987
lea ecx, [edi - 1]
mov dword [ebx + 0x90], eax
add dword [ebx + 0x34], ecx
lea ecx, [edi - 1]
push ecx
push dword [ebx]
call dword [ebx + 0x14]
mov eax, edi
jmp 0x5e6dd52c
add byte [ecx], al
dec ebx
xor al, 0x8d
dec edi
call dword [ecx - 1]
xor edi, edi
push ebx
adc al, 0x8b
invalid
cmp esi, dword [ebx + 0x30]
jb 0x5e6db9bf
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebx + eax*4 + 0x944]
add eax, 4
nop
nop
mov dword [ebx + 0x90], eax
nop
nop
lea eax, [esi - 1]
nop
nop
add dword [ebx + 0x34], eax
lea eax, [esi - 1]
push eax
mov ecx, ecx
push dword [ebx]
call dword [ebx + 0x14]
mov eax, esi
mov ecx, ecx
jmp 0x5e6dd52c
mov edx, dword [ebp - 0x54]
mov eax, ecx
sub eax, edx
mov dword [ebp - 0x40], edx
push edx
mov edx, edi
sub edx, esi
pop edx
cmovbe edi, esi
mov al, byte [eax]
nop
nop
mov byte [ebp - 2], al
mov dword [ebp - 0x10], edi
push ebx
mov ebx, edi
sub ebx, 2
pop ebx
jae 0x5e6db9ee
cmp byte [ebp - 1], al
jne 0x5e6db7e7
mov ax, word [ebx + 0x2c]
cmp word [0x61026d6c], 0x3afb
jne 0x5e6dba1e
push 0xe34ae17a
invalid
mov word [ebx + 0xbca8], ax
mov eax, dword [ebx + 0x4c]
and eax, dword [ebp + 0xc]
movzx edx, byte [ecx - 1]
nop
nop
nop
mov ecx, dword [ebx + 0x94]
cmp dword [0x610797cd], 0xb03a8280
je 0x5e6dba65
mov bl, 0xef
dec ecx
salc
adc ebx, dword [ebx]
salc
invalid
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
mov ecx, ecx
shl eax, 8
nop
nop
add edx, eax
lea eax, [ebx + 0x748]
and edx, dword [ebx + 0x48]
nop
shl edx, cl
test byte [0x61027405], 0x3f
js 0x5e6e79d9
imul ecx, edx, 6
cmp dword [0x610dc3a1], 0x2a7eaa07
js fcn.5e6bcb1d
push eax
add ecx, dword [ebx + 0x50]
push ecx
mov ecx, dword [ebx + 0x2c]
sub ecx, 7
pop ecx
jb 0x5e6dbac7
mov ecx, ecx
movzx eax, byte [ebp - 2]
push eax
movzx eax, byte [ebp - 1]
push eax
push ecx
call fcn.5e6de228
mov eax, eax
add esp, 0x10
jmp 0x5e6dbad7
movzx eax, byte [ebp - 1]
mov ecx, ecx
push eax
push ecx
call fcn.5e6de19a
add esp, 0xc
mov ecx, dword [ebp - 0x28]
mov edx, eax
mov eax, dword [ebx + 0x2c]
shl eax, 4
add eax, ecx
movzx eax, word [ebx + eax*2 + 0x1e9c]
nop
nop
shr eax, 4
mov eax, dword [ebx + eax*4 + 0x748]
or dword [ebx + 0xbcd0], 0xffffffff
nop
add eax, edx
mov eax, eax
mov dword [ebx + 0xbcc4], eax
cmp byte [0x610527ee], 0xd0
jne 0x5e6dbb39
or cl, cl
pop ss
sub dword [ebp + 8], 0x65
adc bl, byte [edi]
shr dh, 0x59
sub eax, 0xa2bc754d
std
cmpsd dword [esi], dword es:[edi]
push es
scasd eax, dword es:[edi]
pop edx
sub dh, ch
sub byte [eax + edx + 0x10], al
push esp
add bl, al
sti
push es
fdiv st(4), st(0)
imul ebx, esi, 0x66c033ae
mov dword [ebx + 0xbcca], eax
xor eax, eax
mov word [ebx + 0xbcca], ax
mov edx, dword [ebx + 0x2c]
cmp dword [0x6103b7af], 0x88f2494c
je 0x5e6dbb87
mov dl, 0xb1
xchg edi, eax
jae 0x5e6dbba7
add ah, bh
or dh, ch
aad 0x78
mov edx, edx
pop esi
and al, 0xc9
sbb dword [esi], edx
pop esi
push esp
xor dword [ebx - 0x3f91ad29], eax
popfd
stosd dword es:[edi], eax
sbb esi, dword [edi + 0x78]
pushal
or eax, dword [edi - 0x6b]
rol byte [edx - 0x50841e58], 1
inc edi
lcall 0xefa8, 0x61e26b87
jmp 0x45f89ddb
mov eax, edx
shl eax, 4
add ecx, eax
movzx eax, word [ebx + ecx*2 + 0x1e9c]
nop
nop
xor eax, 0x7f0
mov ecx, ecx
shr eax, 4
mov eax, dword [ebx + eax*4 + 0x748]
add byte [eax], al
mov ecx, ecx
mov dword [ebp - 0x30], eax
movzx eax, word [ebx + edx*2 + 0x1e3c]
add byte [eax], al
mov eax, eax
xor eax, 0x7f0
mov eax, eax
shr eax, 4
mov eax, dword [ebx + eax*4 + 0x748]
mov ecx, ecx
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov al, byte [ebp - 2]
cmp al, byte [ebp - 1]
jne 0x5e6dbc8c
push ecx
mov ecx, dword [ebp - 0x80]
sub ecx, 0
pop ecx
jne 0x5e6dbc8c
test byte [0x6108ca7e], 0x5e
jo 0x5e72a12a
movzx ecx, word [ebx + ecx*2 + 0x201c]
movzx eax, word [ebx + edx*2 + 0x1e54]
shr ecx, 4
shr eax, 4
mov ecx, dword [ebx + ecx*4 + 0x748]
cmp byte [0x610dc2b0], 0x1a
jns 0x5e6dbc41
stosd dword es:[edi], eax
and al, cl
mov dl, 0x56
jp 0x5e6dbbb4
stosd dword es:[edi], eax
xchg edi, eax
add byte [esi], bl
outsb dx, byte [esi]
cdq
sub esi, ecx
loopne 0x5e6dbc37
out 0x15, al
mov ss, word [ebx - 0x30]
outsd dx, dword [esi]
pop ebp
invalid
invalid
add ecx, dword [ebx + eax*4 + 0x748]
add ecx, dword [ebp - 0x34]
push eax
mov eax, ecx
sub eax, dword [ebx + 0xbcc4]
pop eax
jae 0x5e6dbc72
mov ecx, ecx
and dword [ebx + 0xbcd0], 0
nop
nop
nop
xor eax, eax
mov dword [ebx + 0xbcc4], ecx
mov word [ebx + 0xbcca], ax
cmp edi, 2
jae 0x5e6dbc8c
mov eax, dword [ebx + 0xbcd0]
mov eax, eax
mov dword [ebx + 0x90], eax
mov eax, eax
jmp 0x5e6db7ee
mov ecx, dword [ebp - 0x40]
xor eax, eax
mov esi, dword [ebp - 0x28]
inc eax
mov edi, dword [ebp - 0x34]
xor edx, edx
nop
mov dword [ebx + 0xbccc], eax
mov dword [ebp - 0x70], eax
mov ecx, ecx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x58], eax
mov dword [ebx + 0xbcb8], eax
mov eax, dword [ebp - 0x4c]
nop
nop
nop
mov dword [ebx + 0xbcbc], eax
mov ecx, ecx
mov eax, dword [ebp - 0x48]
mov ecx, ecx
mov dword [ebx + 0xbcb4], ecx
mov dword [ebx + 0xbcc0], eax
mov dword [ebp - 8], edx
cmp dword [0x610bb53a], 0x50059df0
js 0x5e6b2a8a
mov eax, dword [ebp + edx*4 - 0x80]
cmp byte [0x61020086], 0xec
je 0x5e6c56d7
mov dword [ebp - 0x2c], eax
cmp eax, 2
jb 0x5e6dbe60
mov eax, eax
mov eax, dword [ebx + 0x2c]
nop
nop
nop
movzx ecx, word [ebx + eax*2 + 0x1e54]
push ecx
mov ecx, edx
and ecx, edx
pop ecx
jne 0x5e6dbd46
shl eax, 4
add eax, esi
shr ecx, 4
movzx eax, word [ebx + eax*2 + 0x201c]
xor eax, 0x7f0
shr eax, 4
mov eax, dword [ebx + eax*4 + 0x748]
add eax, dword [ebx + ecx*4 + 0x748]
mov eax, eax
jmp 0x5e6dbe00
movzx edx, word [ebx + eax*2 + 0x1e6c]
xor ecx, 0x7f0
nop
shr ecx, 4
test dword [0x60ff8995], 0xf0f8e2d
jno 0x5e6dbd9c
jne 0x5e6dbdb7
push cs
out 0xea, eax
rcl byte [esp + ecx*2 - 0x1a940c2f], 0x89
mov ebx, 0xe46aaeb4
adc al, 0xd5
cmpsb byte [esi], byte es:[edi]
int3
mov ecx, dword [ebx + ecx*4 + 0x748]
mov dword [ebp - 0xc], ecx
xor ecx, ecx
inc ecx
cmp dword [ebp - 8], ecx
jne 0x5e6dbdc0
mov eax, dword [ebp - 0xc]
nop
nop
shr edx, 4
add eax, dword [ebx + edx*4 + 0x748]
test byte [ebx + 0x748], dl
nop
jmp 0x5e6dbdfb
movzx ecx, word [ebx + eax*2 + 0x1e84]
xor edx, 0x7f0
push 2
nop
pop eax
sub eax, dword [ebp - 8]
shr eax, 4
nop
nop
nop
and eax, 0x7f
shr ecx, 4
xor ecx, eax
shr edx, 4
mov eax, dword [ebx + ecx*4 + 0x748]
add eax, dword [ebx + edx*4 + 0x748]
nop
add dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
nop
nop
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x2c]
mov ecx, ecx
add eax, edi
mov dword [ebp - 0x38], eax
imul eax, esi, 0x110
add eax, 0x1e27
add eax, ecx
lea eax, [ebx + eax*4]
mov dword [ebp - 0x2c], eax
mov eax, eax
mov eax, ecx
mov esi, dword [ebp - 0x2c]
shl eax, 5
add eax, 0xbcb0
add eax, ebx
mov ebx, dword [esi]
add ebx, dword [ebp - 0x38]
push ecx
mov ecx, ebx
sub ecx, dword [eax - 0xc]
pop ecx
jae 0x5e6dbe4c
mov dword [eax - 0xc], ebx
xor ebx, ebx
mov dword [eax - 4], ecx
mov eax, eax
mov dword [eax], edx
mov word [eax - 6], bx
dec ecx
sub esi, 4
sub eax, 0x20
cmp ecx, 2
jae 0x5e6dbe2e
mov ebx, dword [ebp + 8]
nop
nop
mov esi, dword [ebp - 0x28]
mov eax, eax
inc edx
mov dword [ebp - 8], edx
cmp edx, 4
jb 0x5e6dbcd4
mov edx, dword [ebp - 0x80]
mov edi, dword [ebp - 0x10]
inc edx
push ebx
mov ebx, edx
sub ebx, dword [ebp - 0x20]
pop ebx
ja 0x5e6dc022
cmp dword [0x61010f0b], 0xcb1e398
jne 0x5e6dbebd
add dword [ecx], esp
push ebp
mov ebx, 0x2ea3ef31
out 9, eax
in al, dx
bound eax, qword [ebp + 0x761c237b]
pop ecx
sbb ecx, dword [ebp - 6]
fadd st(3)
inc ebx
invalid
mov eax, dword [ebx + 0x2c]
xor ecx, ecx
mov dword [ebp - 0x24], ecx
mov ecx, ecx
movzx eax, word [ebx + eax*2 + 0x1e3c]
nop
shr eax, 4
mov eax, dword [ebx + eax*4 + 0x748]
add eax, dword [ebp - 0x30]
mov eax, eax
mov dword [ebp - 0x2c], eax
cmp edx, 2
jae 0x5e6dbeef
push 2
nop
nop
nop
pop edx
jmp 0x5e6dbf0f
push ecx
mov ecx, edx
sub ecx, dword [ebx + 0x948]
pop ecx
jbe 0x5e6dbf0f
nop
add ecx, 2
push eax
mov eax, edx
sub eax, dword [ebx + ecx*4 + 0x948]
pop eax
ja 0x5e6dbefb
mov dword [ebp - 0x24], ecx
imul eax, dword [ebp - 0x28], 0x110
mov edi, edx
mov ecx, ecx
shl edi, 5
mov eax, eax
add edi, 0xbcb0
add eax, 0xd26
add eax, edx
mov eax, eax
add edi, ebx
lea eax, [ebx + eax*4]
mov dword [ebp - 8], eax
mov eax, dword [eax]
test word [0x610bf1d9], 0x2692
jo 0x5e6d689e
add eax, dword [ebp - 0x2c]
push ecx
mov ecx, edx
sub ecx, 5
pop ecx
mov esi, dword [ebx + ecx*4 + 0x94c]
mov dword [ebp - 0x14], esi
mov dword [ebp - 0xc], eax
lea eax, [edx - 2]
push 3
pop esi
cmovb esi, eax
mov eax, dword [ebp - 0x14]
push ebx
mov ebx, eax
sub ebx, 0x80
pop ebx
jae 0x5e6dbf91
shl esi, 7
and eax, 0x7f
add esi, eax
mov eax, dword [ebp - 0xc]
mov eax, eax
add eax, dword [ebx + esi*4 + 0x161c]
mov esi, dword [ebp - 0x14]
mov ecx, ecx
jmp 0x5e6dbfda
cmp eax, 0x20000
sbb ecx, ecx
mov ecx, ecx
shl esi, 5
and ecx, 0xfffffff6
add ecx, 0x10
mov eax, eax
shr eax, cl
add esi, ecx
mov eax, eax
movzx eax, byte [eax + ebx + 0x2c9c]
lea eax, [eax + esi*2]
mov esi, dword [ebp - 0x14]
mov eax, dword [ebx + eax*4 + 0x121c]
mov ecx, esi
mov ecx, ecx
and ecx, 0xf
add eax, dword [ebx + ecx*4 + 0x11dc]
nop
nop
nop
add dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc]
cmp eax, dword [edi - 0xc]
jae 0x5e6dbff5
mov dword [edi - 0xc], eax
lea eax, [esi + 4]
mov dword [edi], eax
nop
nop
nop
xor eax, eax
nop
nop
mov dword [edi - 4], edx
mov word [edi - 6], ax
cmp edx, dword [ebx + ecx*4 + 0x948]
jne 0x5e6dc00d
add ecx, 2
mov dword [ebp - 0x24], ecx
push edx
mov edx, ecx
sub edx, dword [ebp - 0x1c]
pop edx
je 0x5e6dc01f
mov eax, dword [ebp - 8]
inc edx
add eax, 4
add edi, 0x20
mov dword [ebp - 8], eax
jmp 0x5e6dbf36
mov edi, dword [ebp - 0x10]
xor eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov ecx, eax
cmp edi, eax
je 0x5e6dd50b
mov edx, 0x6146b0ae
dec ebp
and al, 0x2d
sub byte [0x35b1a476], bl
bnd call 0x1eb40756
push eax
nop
nop
call fcn.5e6b2d6b
add esp, 0xc
lea ecx, [ebp - 0x28]
push eax
call fcn.5e6b2aa5
push 0
push ebx
lea ecx, [ebp - 0x40]
call fcn.5e6b4aa6
push 0
push ebx
test word [0x6109cbf6], 0xcb9
jae 0x5e6e79f1
pushal
fldlg2
invalid
js 0x5e6e7982
cmp eax, 0x795213cb
add bh, bl
cmp al, byte [ebx]
lcall 0x95e8, 0x18602218
popal
rcr byte [ecx + edi*8 - 0x57b272d4], 1
lea ecx, [ebp - 0x58]
test dword [0x6100214c], 0xfa741478
jno 0x5e6e7a2e
xchg edi, eax
popal
and eax, 0x3ef34739
fldcw word [edi]
or edx, ebx
js 0x5e6e79ac
or esp, dword [ebx + 0x29]
arpl word [ecx], bp
push esp
fdiv dword [edx]
inc esp
scasd eax, dword es:[edi]
aas
test byte [eax], dl
popal
dec ecx
les ebp, [edi - 0x38a14e59]
or dword [ebx], 0x44
cmp edi, dword [edx]
pop edi
push edi
jbe 0x5e6e7a0e
or eax, 0xf66b9170
call fcn.5e6b4aa6
cmp byte [0x610591ee], 0xfb
jns 0x5e6e7a78
mov cl, dl
pop es
or eax, 0x8c90a0af
push es
push ds
sbb byte [ebx + 0x2ca6c76a], bl
inc ebp
cmp al, 0x9f
dec eax
pop ecx
mov dl, 0xe0
fbstp tbyte [ebx - 0x6f]
push 0xc12ccef4
arpl word [ecx + 0x3c], sp
cmp eax, dword [0xdc500545]
and dword ss:[ebp + 0x6b2cab3e], esi
mov ds, word [ebp + 0x4c]
xchg ebp, eax
daa
sbb esi, dword [eax - 0x7f20d4d9]
lahf
push 0
push ebx
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], bl
call fcn.5e6b4aa6
lea eax, [ebp - 0x28]
cmp dword [0x610148dd], 0x97cc0b5e
jns 0x5e6e7ab6
sub bl, byte [esi + ecx*2 - 0x57]
or byte [ebx + 4], ah
mov ecx, 0xb0ddafc0
shl byte [ecx + 0x57ef5e8], 0x58
push esp
mov dl, 0x2a
sub al, 0x9e
inc esp
xchg ebp, eax
dec esp
invalid
push eax
cmp byte [0x6100360e], 0x92
js 0x5e6dae9e
call fcn.5e6c8450
pop ecx
push ecx
mov cl, al
and cl, al
pop ecx
je 0x5e6e7ae3
mov eax, eax
lea eax, [ebp - 0x28]
nop
push eax
call int.5e6c836e
pop ecx
test al, al
je 0x5e6e7aea
mov edi, ebx
jmp 0x5e6e7bbc
nop
nop
push 0x24
call fcn.5e6bacbc
pop ecx
mov dword [ebp + 0xc], eax
mov eax, eax
mov byte [ebp - 4], 4
push edx
mov edx, eax
and edx, eax
pop edx
je 0x5e6e7b14
mov ecx, eax
mov eax, eax
call fcn.5e6e8318
mov esi, eax
mov eax, eax
jmp 0x5e6e7b18
mov eax, eax
xor esi, esi
cmp byte [0x6102db1d], 0xb8
jne 0x5e6e7b47
xor bl, byte es:[edi + 0x286553f1]
dec esi
insd dword es:[edi], dx
pushal
and eax, 0xb06f7df2
invalid
mov byte [ebp - 4], bl
nop
mov dword [ebp + 0xc], esi
push ecx
mov ecx, esi
and ecx, esi
pop ecx
je 0x5e6e7b5e
mov eax, dword [esi]
mov ecx, ecx
push esi
call dword [eax + 4]
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
lea ecx, [esi + 0x14]
mov byte [ebp - 4], 5
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.5e6e7f0c
test al, al
jne 0x5e6e7bb7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
mov ebx, eax
and ebx, eax
pop ebx
jne 0x5e6e7b91
nop
nop
mov edi, 0x80004005
jmp 0x5e6e7ba1
mov ecx, ecx
movzx edi, ax
or edi, 0x80070000
test eax, eax
cmovle edi, eax
mov byte [ebp - 4], bl
push edx
mov edx, esi
and edx, esi
pop edx
je 0x5e6e7bbc
mov eax, dword [esi]
push esi
call dword [eax + 8]
nop
nop
nop
jmp 0x5e6e7bbc
nop
mov dword [edi], esi
xor edi, edi
push 0
nop
nop
push ebx
lea ecx, [ebp - 0x28]
call fcn.5e6b4aa6
mov eax, eax
mov eax, edi
nop
jmp 0x5e6e7bde
nop
nop
nop
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebp, esp
push 0
push dword [ebp + 8]
call fcn.5e71d1b7
mov ecx, ecx
pop ecx
mov eax, eax
pop ecx
pop ebp
ret
jmp fcn.5e711bbd
nop
nop
add ecx, 0x6c
jmp fcn.5e6ec989