Function at 0x5e6cecf4
Capabilities:
Read file on windows

Disassembly:
mov eax, 0x5e729ee4
call fcn.5e711585
nop
sub esp, 0x10
mov eax, eax
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
mov esi, ecx
push edi
cmp dword [0x60fd558d], 0xe98ac2a7
jns 0x5e6f829c
push dword [ebp + 0x10]
mov dword [ebp - 0x10], esi
call fcn.5e6cc6af
xor ebx, ebx
mov ecx, ecx
mov word [ebp - 0x18], bx
cmp dword [0x610987d9], 0x563b5fa7
je 0x5e6ced76
lodsd eax, dword [esi]
mov esp, 0xee9cb902
xor eax, 0xab01fcc8
sbb ah, byte [edx + 0x1012d2f7]
adc byte [eax], 0xb3
and al, 0x9d
in al, 0x80
xor dword [eax - 0x46], esp
push edx
stosd dword es:[edi], eax
adc al, 0x1a
mov word [ecx + 0x2f], ss
jecxz 0x5e6ced60
iretd
push dword [ebp + 8]
test byte [0x60fe577b], 0x4f
jo 0x5e6e8086
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], ebx
push esi
call fcn.5e6cf878
mov eax, eax
push dword [ebp + 0x10]
lea ecx, [edi + 0xc]
call fcn.5e6ed0e3
cmp word [0x61018a2e], 0xd9
jne 0x5e714337
mov eax, dword [ebp + 0x10]
mov dword [edi + 0x10], eax
mov ecx, dword [edi]
mov esi, dword [edi + 0xc]
mov eax, eax
mov dword [ebp + 0xc], ecx
test eax, eax
je 0x5e6cedfb
mov edi, dword [ebp - 0x10]
cmp byte [ebx + ecx], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x14], xmm0
je 0x5e6cede2
mov ecx, dword [edi + 0x38]
call fcn.5e6cec8e
mov ecx, ecx
mov ecx, dword [ebp + 0xc]
jmp 0x5e6cedec
mov eax, eax
mov edx, dword [ebp - 0x10]
mov ecx, ecx
mov eax, dword [ebp - 0x14]
mov ecx, ecx
mov dword [esi + ebx*8], eax
mov dword [esi + ebx*8 + 4], edx
inc ebx
cmp ebx, dword [ebp + 0x10]
jb 0x5e6cedc5
lea ecx, [ebp - 0x1c]
nop
nop
call fcn.5e6cf74f
mov ecx, dword [ebp - 0xc]
mov ecx, ecx
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, dword [ebp + 0x10]
push edx
mov edx, eax
and edx, eax
pop edx
mov ecx, dword [ebp - 4]
setne al
mov eax, eax
mov dword [edx], ecx
mov esp, ebp
pop ebp
ret 0xc
nop
mov ebp, esp
cmp dword [0x610433af], 0xc7b0ee57
jns 0x5e6e80c7
jmp 0x5e6e803b
push ecx
nop
mov edx, dword [ebp + 0xc]
mov eax, edx
nop
push esi
push dword [ebp + 0x10]
sar eax, 0x1f
clc
pop ds
test byte [0x6100dce9], 0x20
jno 0x5e6e8106
and byte [ecx + 0x27], dh
mov edi, 0x46b9c5c4
cmp al, 0xc4
pushal
inc ebx
jnp 0x5e6e80dc
adc byte [edi - 0x2f3ce2a3], ch
jb 0x5e6e80d4
int 0x8e
dec edi
fdiv st(6)
xchg ecx, eax
sub eax, 0xfd223a4c
add byte [esi], dl
sub al, 0x11
adc bh, byte [ebp - 0x72669217]
inc ebp
cld
lea eax, [ebp - 4]
mov dword [ebp - 4], edx
push eax
push dword [ebp + 8]
push dword [ecx]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov esi, eax
cmp esi, 0xffffffff
jne 0x5e6e812d
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x5e6e812d
xor al, al
jmp 0x5e6e8147
mov eax, dword [ebp + 0x14]
xor ecx, ecx
mov eax, eax
mov edx, dword [ebp - 4]
add ecx, esi
adc edx, 0
mov eax, eax
mov dword [eax], ecx
mov dword [eax + 4], edx
mov ecx, ecx
mov al, 1
pop esi
mov esp, ebp
pop ebp
ret 0x10
stosd dword es:[edi], eax
lahf
inc edi
iretd
cmp esi, dword [ebp + 0x14]
je 0x5e7143b5
add byte [eax - 0x75], dl
mov byte [ebx + 0x7e58ffe8], 0xc
push eax
mov eax, esi
sub eax, 0xffffffff
pop eax
jle 0x5e7142d5
call [eax + 0x7e]
or al, 0x8b
inc ebp
adc byte [edx - 0x75], dl
salc
mov eax, dword [ebp + 0x10]
push edx
mov edx, esi
sub edx, dword [eax + 4]
pop edx
jl 0x5e7142da
call fcn.5e7166b7
cmp dword [0x610b88b3], 0x3cabc3f9
je 0x5e714325
or eax, 0x3e27d2d
push ebx
or dword [ecx - 0x1e], edi
jno 0x5e7142c5
pop esp
sbb ch, byte [edi + eax*2 - 0xb]
jg 0x5e7142bf
cmp dl, byte [ecx + 0x2fe46691]
and esi, 0x6578584e
add al, 0xd9
and dword [edx - 0x99866f1], ebx
mov bl, 0x73
int 0x68
xchg ebx, eax
in eax, 0x9c
into
or eax, 0xd3b8d534
sbb dword [ecx - 0x40], ecx
adc byte [esi], 0x78
or dword [ecx + ebx*4], edx
mov esi, 0x4d8bdc23
adc byte [ebx + 0x5f70841], cl
sub dword [ecx - 0x1fef9ef3], ebp
stc
jmp 0x92a76ab2
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 8]
test dword [0x610da929], 0xe9f9e010
jns 0x5e71435e
xor al, 0xa0
mov edi, 0x8f16e6a8
add ebx, eax
mov cs, word [ebx + 0x3a0131e4]
lodsb al, byte [esi]
dec eax
or eax, 0xd9628af4
cdq
pop ds
dec edx
pushal
inc ebp
movsd dword es:[edi], dword [esi]
leave
dec ebp
jno 0x5e714337
add cl, byte [ebx - 0x2e]
das
test byte [esi], 0x8b
adc al, 0xf0
mov edx, dword [eax + esi*8]
mov dword [ebp - 0x20], edx
mov dword [ebp - 4], 1
push ecx
mov ecx, dword [eax + esi*8 + 4]
sub ecx, 0
pop ecx
je 0x5e7143a5
mov eax, dword [ebp + 8]
mov ecx, ecx
mov dword [eax + 8], edx
push 0x103
mov eax, eax
push eax
mov eax, dword [ecx + 8]
push dword [eax + esi*8 + 4]
call fcn.5e71bf4c
jmp 0x5e7143a5
and dword [ebp - 4], 0
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x1c], esi
nop
jmp 0x5e7142b7
mov dword [ebp - 4], 0xfffffffe
call fcn.5e7143e3
push ebx
mov ebx, esi
sub ebx, dword [ebp + 0x14]
pop ebx
je 0x5e7143cf
call fcn.5e7166b7
mov eax, dword [ebp + 8]
mov eax, eax
mov dword [eax + 8], esi
call fcn.5e716bae
ret