Function at 0x590276d0
Capabilities:
Read file on windows

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5914ed40
push eax
mov eax, dword [esp + 0x10]
mov dword fs:[0], esp
push ebx
push ebp
push esi
push edi
test eax, eax
je 0x59027941
mov edi, dword [esp + 0x24]
test edi, edi
je 0x59027941
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x59027941
push 0x1001
xor ebp, ebp
call fcn.5913e1e0
mov ebx, dword [esp + 0x2c]
mov esi, eax
add esp, 4
test esi, esi
je 0x59027906
mov eax, dword [esp + 0x20]
push 0x180
push 0x8000
push eax
call fcn.5908a6ad
mov edx, eax
add esp, 0xc
cmp edx, 0xffffffff
mov dword [esp + 0x20], edx
je 0x590278fd
cmp edi, 0x1000
mov ebp, edi
jbe 0x5902775f
mov ebp, 0x1000
mov ecx, 0x400
xor eax, eax
mov edi, esi
push ebp
push esi
push edx
rep stosd dword es:[edi], eax
call fcn.5908ae5b
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.5908a3dd
push str.__sKey_
push str._sKey_
push ebp
lea edx, [esp + 0x3c]
push esi
push edx
call fcn.5901c360
add esp, 0x24
push eax
mov ecx, ebx
mov dword [esp + 0x1c], 0
call fcn.590a77f0
or edi, 0xffffffff
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], edi
call fcn.590a7660
mov eax, dword [ebx]
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x590277f4
push 0x5918993c
push str.sha
push ebp
lea ecx, [esp + 0x2c]
push esi
push ecx
call fcn.5901c360
add esp, 0x14
push eax
mov ecx, ebx
mov dword [esp + 0x1c], 1
call fcn.590a77f0
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], edi
call fcn.590a7660
mov edx, dword [ebx]
mov eax, dword [edx - 8]
test eax, eax
jne 0x59027833
push 0x5918986c
push str.sha
push ebp
lea eax, [esp + 0x2c]
push esi
push eax
call fcn.5901c360
add esp, 0x14
push eax
mov ecx, ebx
mov dword [esp + 0x1c], 2
call fcn.590a77f0
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], edi
call fcn.590a7660
mov ecx, dword [ebx]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x59027872
push 0x591898f0
push str._sKey_:_
push ebp
lea edx, [esp + 0x2c]
push esi
push edx
call fcn.5901c360
add esp, 0x14
push eax
mov ecx, ebx
mov dword [esp + 0x1c], 3
call fcn.590a77f0
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], edi
call fcn.590a7660
push 0x5918993c
push str.size
push ebp
lea eax, [esp + 0x30]
push esi
push eax
call fcn.5901c360
add esp, 0x14
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x18], 4
mov eax, dword [ecx - 8]
test eax, eax
jne 0x590278d4
push 0x5918992c
push str._size_:
push ebp
lea edx, [esp + 0x2c]
push esi
push edx
call fcn.5901c360
add esp, 0x14
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x1c], 5
call fcn.590a77f0
lea ecx, [esp + 0x20]
mov byte [esp + 0x18], 4
call fcn.590a7660
mov eax, dword [esp + 0x24]
push 0xa
push 0
push eax
call fcn.5908a052
mov ecx, dword [esp + 0x38]
add esp, 0xc
mov ebp, 1
mov dword [ecx], eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x18], edi
call fcn.590a7660
push esi
call fcn.5913e209
add esp, 4
mov eax, dword [0x591ae1c8]
test eax, eax
je 0x5902792c
mov edx, dword [ebx]
push edx
push ebp
push str.GetQQexAttachHeadData__bRet:_d____s_
push str.MailLog
push 0xffffffffffffffff
push 0x591ae15c
call fcn.590851e0
add esp, 0x18
mov eax, ebp
mov ecx, dword [esp + 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret
mov ecx, dword [esp + 0x10]
pop edi
pop esi
pop ebp
xor eax, eax
mov dword fs:[0], ecx
pop ebx
add esp, 0xc
ret