Function at 0x5e6de8ac
Capabilities:
Delete file
Encrypt data using aes
Get thread local storage value
Reference aes constants
Resolve function by parsing pe exports

Disassembly:
xor ecx, ebp
imul esi, esi, 0xe283c625
xor byte [0x16], dl
jo 0x5e6b6dd3
push dword [esi + 8]
mov eax, eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.5e6e3d8a
push ebp
mov eax, eax
mov ebp, esp
sub esp, 0x1c
push ebx
mov ebx, dword [ebp + 8]
mov ecx, ecx
push esi
mov eax, eax
xor esi, esi
cmp dword [ebx + 0xb4], esi
je 0x5e6de8d6
push dword [ebx]
call dword [ebx + 4]
pop ecx
nop
nop
nop
mov dword [ebx + 0xb4], esi
add byte [eax], al
add byte [ecx], bh
mov bl, 0xac
add byte [eax], al
add byte [ebx + ecx - 0x75], dh
adc eax, 0
add byte [eax], al
cmp dword [ebx + 0xac], esi
je 0x5e6de8e9
mov eax, dword [ebx + 0xd0]
jmp 0x5e6df838
push ebx
call fcn.5e6daf5a
cmp byte [0x60ff12fb], 0x51
js 0x5e729641
pop ecx
push ecx
mov ecx, eax
and ecx, eax
pop ecx
jne 0x5e6df838
test dword [0x6100ae85], 0x35b215e5
jae 0x5e6de943
push ebp
jecxz 0x5e6de8d3
lodsd eax, dword [esi]
ret 0x1b24
mov esi, dword [ebx + 0xb8]
mov ecx, ecx
mov eax, esi
or eax, dword [ebx + 0xbc]
push edi
mov dword [ebp - 8], esi
mov dword [ebp - 0x10], esi
jne 0x5e6dea15
push dword [ebx]
test word [0x610cb9a3], 0x7085
jo 0x5e70abb8
call dword [ebx + 8]
pop ecx
push ebx
mov ebx, eax
and ebx, eax
pop ebx
je 0x5e6df828
nop
lea eax, [ebp + 8]
mov eax, eax
push eax
push ebx
call fcn.5e6e0a3c
pop ecx
nop
nop
nop
lea edi, [ebx + 0x58]
mov eax, 0x800
mov esi, dword [edi]
nop
nop
pop ecx
movzx ecx, word [ebx + 0x1e9c]
cmp word [0x6108bf29], 0x5d0b
jne 0x5e72a240
shr esi, 0xb
sub eax, ecx
mov ecx, ecx
imul esi, ecx
shr eax, 5
add eax, ecx
mov eax, eax
mov word [ebx + 0x1e9c], ax
push ecx
mov ecx, esi
sub ecx, 0x1000000
pop ecx
jae 0x5e6de9e3
mov ecx, edi
shl esi, 8
call fcn.5e6dacb4
mov dword [edi], esi
mov eax, eax
push dword [ebx]
call dword [ebx + 0xc]
nop
nop
sub eax, dword [ebx + 0x34]
mov al, byte [eax]
mov eax, eax
movzx eax, al
push eax
push dword [ebx + 0x50]
push edi
mov eax, eax
call fcn.5e6ddde8
mov esi, dword [ebp - 8]
add esp, 0x10
dec dword [ebx + 0x34]
mov eax, eax
inc esi
mov eax, eax
mov dword [ebp - 8], esi
push dword [ebx]
call dword [ebx + 8]
pop ecx
test eax, eax
je 0x5e6df7e1
mov ecx, ecx
lea edi, [ebx + 0x58]
push ecx
mov ecx, dword [ebx + 0xa4]
sub ecx, 0
pop ecx
je 0x5e6dea3f
mov ecx, ecx
push ebx
call fcn.5e6dd53e
jmp 0x5e6dea53
mov ecx, dword [ebx + 0x18]
push eax
mov eax, dword [ebx + 0x1c]
sub eax, ecx
pop eax
jne 0x5e6dea5c
push esi
push ebx
call fcn.5e6db748
pop ecx
mov ecx, ecx
pop ecx
nop
mov dword [ebp - 0xc], eax
jmp 0x5e6dea83
nop
nop
mov eax, ecx
nop
nop
nop
shl eax, 5
mov edx, dword [eax + ebx + 0xbcac]
mov eax, dword [eax + ebx + 0xbcb0]
mov dword [ebx + 0x90], eax
lea eax, [ecx + 1]
mov dword [ebp - 0xc], edx
mov dword [ebx + 0x18], eax
add eax, 0xac18948b
mov esp, 0x848b0000
sbb byte [eax - 0x76ffff44], dh
adc dword [eax - 0x73000000], 0x41
add dword [ecx + 0x4389f455], ecx
sbb byte [ebx - 0x3174d3bd], cl
mov eax, dword [ebx + 0x2c]
mov ecx, esi
and ecx, dword [ebx + 0x4c]
mov esi, dword [edi]
shl eax, 4
add eax, ecx
mov dword [ebp - 4], ecx
test word [0x610cffbe], 0x1a0c
jns 0x5e6dead2
and al, 0x99
scasb al, byte es:[edi]
adc eax, 0xe5b7c434
xor bh, byte [esi]
push eax
pop edi
jl 0x5e6dea65
ret 0x138e
mov ecx, esi
mov dword [ebp - 0x14], eax
test dword [0x61062efe], 0x88bdbd48
jb 0x5e712d03
shr ecx, 0xb
mov eax, eax
movzx edx, word [ebx + eax*2 + 0x1e9c]
mov eax, eax
mov eax, dword [ebx + 0x90]
mov ecx, ecx
imul ecx, edx
mov ecx, ecx
mov dword [ebp + 8], eax
cmp eax, 0xffffffff
jne 0x5e6dec17
mov eax, eax
mov eax, 0x800
sub eax, edx
test word [0x6104823c], 0x74f4
jo 0x5e729514
shr eax, 5
add eax, edx
mov edx, dword [ebp - 0x14]
mov ecx, ecx
mov word [ebx + edx*2 + 0x1e9c], ax
push eax
mov eax, ecx
sub eax, 0x1000000
pop eax
jae 0x5e6deb56
mov ecx, ecx
shl ecx, 8
mov dword [ebp + 8], ecx
mov ecx, edi
call fcn.5e6dacb4
mov ecx, dword [ebp + 8]
test word [0x61090357], 0xc1b0
jb 0x5e714ea6
push dword [ebx]
cmp word [0x610cfb03], 0xdb3e
jne 0x5e712bb1
mov dword [edi], ecx
call dword [ebx + 0xc]
sub eax, dword [ebx + 0x34]
mov esi, dword [ebp - 8]
test byte [0x61033f78], 0xc1
jo 0x5e6c240d
pop ecx
mov ecx, esi
mov dword [ebp - 0x18], eax
movzx edx, byte [eax - 1]
mov al, byte [eax]
shl ecx, 8
add edx, ecx
mov byte [ebp + 0xb], al
cmp dword [0x6107f3a2], 0x1bd126e
jne 0x5e729486
and edx, dword [ebx + 0x48]
mov ecx, dword [ebx + 0x94]
shl edx, cl
mov ecx, dword [ebx + 0x2c]
imul edx, edx, 6
movzx eax, byte [ecx + 0x610e14ec]
mov dword [ebx + 0x2c], eax
add edx, dword [ebx + 0x50]
push ebx
mov ebx, ecx
sub ebx, 7
pop ebx
jae 0x5e6debf3
nop
movzx eax, byte [ebp + 0xb]
nop
push eax
push edx
push edi
nop
nop
call fcn.5e6ddde8
mov eax, eax
add esp, 0xc
jmp 0x5e6df6b1
mov eax, dword [ebp - 0x18]
mov ecx, ecx
sub eax, dword [ebx + 0x38]
movzx eax, byte [eax]
push eax
movzx eax, byte [ebp + 0xb]
push eax
push edx
push edi
mov eax, eax
call fcn.5e6ddfc3
add esp, 0x10
mov eax, eax
jmp 0x5e6df6b1
sub esi, ecx
mov eax, edx
add dword [ebx + 0x60], ecx
adc dword [ebx + 0x64], 0
shr eax, 5
sub edx, eax
nop
nop
nop
mov eax, dword [ebp - 0x14]
cmp word [0x6106d3b7], 0x7442
jne 0x5e6dec70
cmp edx, dword [ecx]
pop esi
test dword [esi], eax
test al, 0x41
loop 0x5e6debe3
fcmovbe st(0), st(3)
lds ebp, [esi - 0x20]
mov ebx, 0x2d7ef11b
jmp 0x59277a0c
mov word [ebx + eax*2 + 0x1e9c], dx
cmp esi, 0x1000000
jae 0x5e6dec8c
mov ecx, edi
nop
nop
shl esi, 8
call fcn.5e6dacb4
mov eax, dword [ebx + 0x2c]
mov ecx, esi
shr ecx, 0xb
movzx edx, word [ebx + eax*2 + 0x1e3c]
imul ecx, edx
push ebx
mov ebx, dword [ebp + 8]
sub ebx, 4
pop ebx
jae 0x5e6df054
sub esi, ecx
mov eax, edx
add dword [ebx + 0x60], ecx
adc dword [ebx + 0x64], 0
shr eax, 5
nop
nop
sub edx, eax
mov eax, dword [ebx + 0x2c]
mov word [ebx + eax*2 + 0x1e3c], dx
cmp esi, 0x1000000
jae 0x5e6decdd
mov ecx, edi
shl esi, 8
nop
call fcn.5e6dacb4
mov eax, dword [ebx + 0x2c]
mov ecx, ecx
mov ecx, esi
shr ecx, 0xb
movzx edx, word [ebx + eax*2 + 0x1e54]
imul ecx, edx
push ecx
mov ecx, dword [ebp + 8]
sub ecx, 0
pop ecx
jne 0x5e6deea5
nop
nop
mov eax, 0x800
mov esi, ecx
sub eax, edx
cmp dword [0x6100efd1], 0x609fb8b
js 0x5e72a240
shr eax, 5
add eax, edx
cmp dword [0x60fe4149], 0x1ea82cc7
jns 0x5e6ded5b
invalid
pop esi
xchg ecx, eax
jg 0x5e6dedaa
or al, 0x1b
salc
cmp eax, 0xc7494afb
aas
adc eax, 0xd366c285
add bl, dl
cld
retf 0xf5ad
mov edx, dword [ebx + 0x2c]
test byte [0x610b0256], 0x88
jno 0x5e6ded87
adc cl, cl
in eax, 0x29
salc
fidivr dword [ecx]
xor eax, 0x39ae0fda
mov al, byte [0x30c46ac2]
cld
jge 0x5e6dedab
and eax, dword [edx + 0x51]
pop edx
insd dword es:[edi], dx
jno 0x5e6ded24
int3
mov word [ebx + edx*2 + 0x1e54], ax
cmp ecx, 0x1000000
jae 0x5e6deda1
mov ecx, edi
shl esi, 8
call fcn.5e6dacb4
mov edx, dword [ebx + 0x2c]
mov eax, esi
shl edx, 4
test dword [0x61003d93], 0x761e75a9
jne 0x5e6dedf3
add eax, 0x61003d93
test eax, 0x75761e75
xchg ebx, eax
cmp eax, 0x75a96100
push ds
jbe 0x5e6dee29
add esp, dword ds:[esi + 0x48]
add esp, dword [esi + 0x48]
or eax, 0xe208d8d7
pop ebp
jb 0x5e6deded
mov esp, 0x938144f9
push 0xa9fe6ebe
adc al, 0x85
mov ecx, dword [edx - 0x762aa19]
jno 0x5e6dee45
out dx, al
movsd dword es:[edi], dword [esi]
jbe 0x5e6dee51
sbb byte [ecx + 0x3b], dh
push edi
int3
invalid
add edx, dword [ebp - 4]
cmp byte [0x60ff0b37], 0xe6
jne 0x5e6dee3c
xchg byte [ebp - 0x4a], bl
cmpsd dword [esi], dword es:[edi]
or byte [ecx + 0x28ed9ced], al
mov esi, 0xcc4b9ec0
xor cl, byte [ebp - 0x80]
int 0x62
dec eax
mov esp, 0x60c2c216
cmp byte [ecx], 0x4d
sbb dword [edx + 0x695aa621], edx
add eax, 0xd1298def
push eax
outsb dx, byte [esi]
lcall 0x4734, 0x28197d31
xchg esi, eax
push 0x89b393f9
insd dword es:[edi], dx
xor eax, 0x18715f82
shr eax, 0xb
movzx ecx, word [ebx + edx*2 + 0x201c]
add byte [eax], al
imul eax, ecx
push ebx
mov ebx, dword [ebp - 0xc]
sub ebx, 1
pop ebx
je 0x5e6dee71
sub esi, eax
add dword [ebx + 0x60], eax
mov eax, ecx
adc dword [ebx + 0x64], 0
shr eax, 5
sub ecx, eax
mov word [ebx + edx*2 + 0x201c], cx
jmp 0x5e6df001
nop
mov esi, eax
mov eax, 0x800
mov eax, eax
sub eax, ecx
mov ecx, ecx
shr eax, 5
add eax, ecx
nop
mov word [ebx + edx*2 + 0x201c], ax
nop
nop
nop
mov eax, dword [ebx + 0x2c]
nop
movzx eax, byte [eax + 0x610e1510]
mov dword [ebx + 0x2c], eax
mov ecx, ecx
jmp 0x5e6df001
sub esi, ecx
mov eax, edx
add dword [ebx + 0x60], ecx
adc dword [ebx + 0x64], 0
shr eax, 5
sub edx, eax
test word [0x61035dc2], 0xb32a
jae 0x5e6deeec
cmp bl, byte [ecx + 0x46df2a5b]
ret 0xe241
mov eax, dword [ebx + 0x2c]
mov word [ebx + eax*2 + 0x1e54], dx
push edx
mov edx, esi
sub edx, 0x1000000
pop edx
jae 0x5e6def0d
mov ecx, edi
shl esi, 8
call fcn.5e6dacb4
mov edx, dword [ebx + 0x2c]
nop
nop
mov eax, esi
mov ecx, ecx
shr eax, 0xb
movzx ecx, word [ebx + edx*2 + 0x1e6c]
imul eax, ecx
push eax
mov eax, dword [ebp + 8]
sub eax, 1
pop eax
jne 0x5e6def55
mov esi, eax
mov eax, 0x800
mov ecx, ecx
sub eax, ecx
nop
nop
nop
shr eax, 5
add eax, ecx
nop
nop
nop
mov word [ebx + edx*2 + 0x1e6c], ax
nop
mov ecx, dword [ebx + 0x3c]
jmp 0x5e6deff4
sub esi, eax
add dword [ebx + 0x60], eax
mov eax, ecx
adc dword [ebx + 0x64], 0
shr eax, 5
sub ecx, eax
mov word [ebx + edx*2 + 0x1e6c], cx
cmp esi, 0x1000000
jae 0x5e6def81
mov ecx, edi
shl esi, 8
mov ecx, ecx
call fcn.5e6dacb4
nop
mov edx, dword [ebx + 0x2c]
mov ecx, ecx
mov eax, esi
shr eax, 0xb
mov ecx, ecx
movzx ecx, word [ebx + edx*2 + 0x1e84]
mov eax, eax
imul eax, ecx
cmp dword [ebp + 8], 2
jne 0x5e6defc5
mov ecx, ecx
mov esi, eax
mov eax, 0x800
sub eax, ecx
nop
nop
nop
shr eax, 5
add eax, ecx
mov word [ebx + edx*2 + 0x1e84], ax
mov ecx, ecx
mov ecx, dword [ebx + 0x40]
mov eax, eax
jmp 0x5e6defee
sub esi, eax
add dword [ebx + 0x60], eax
mov eax, ecx
adc dword [ebx + 0x64], 0
mov ecx, ecx
shr eax, 5
mov ecx, ecx
sub ecx, eax
mov eax, eax
mov word [ebx + edx*2 + 0x1e84], cx
nop
nop
mov ecx, dword [ebx + 0x44]
mov eax, dword [ebx + 0x40]
mov dword [ebx + 0x44], eax
mov eax, dword [ebx + 0x3c]
mov dword [ebx + 0x40], eax
mov eax, eax
mov eax, dword [ebx + 0x38]
mov eax, eax
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0x38], ecx
cmp esi, 0x1000000
jae 0x5e6df013
mov ecx, edi
shl esi, 8
call fcn.5e6dacb4
mov dword [edi], esi
mov esi, dword [ebp - 0xc]
cmp esi, 1
je 0x5e6df6ac
push dword [ebp - 4]
mov ecx, ecx
lea eax, [esi - 2]
push eax
lea eax, [ebx + 0x289c]
nop
nop
push edi
push eax
call fcn.5e6dda0b
mov eax, dword [ebx + 0x2c]
add esp, 0x10
dec dword [ebx + 0xc4]
movzx eax, byte [eax + 0x610e1504]
mov dword [ebx + 0x2c], eax
jmp 0x5e6df6ac
mov eax, 0x800
mov eax, eax
sub eax, edx
shr eax, 5
add eax, edx
mov edx, dword [ebx + 0x2c]
mov word [ebx + edx*2 + 0x1e3c], ax
push eax
mov eax, ecx
sub eax, 0x1000000
pop eax
jae 0x5e6df08a
shl ecx, 8
mov dword [ebp - 0x18], ecx
mov ecx, ecx
mov ecx, edi
call fcn.5e6dacb4
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebx + 0x2c]
mov esi, dword [ebp - 0xc]
mov eax, eax
push dword [ebp - 4]
test byte [0x610d1672], 0xa2
jae 0x5e6df0cf
mov edx, dword [ebx + 3]
mov cl, 0x2e
push ebp
hlt
mov dword [edi], ecx
movzx eax, byte [eax + str._a_a_a_a_a_a_a_n_n_n_n_n_b_b_b_b_b_b_b_v_v_v_v_v_t_t_t_t_t_t_t_v_v_v_v_v]
mov dword [ebx + 0x2c], eax
lea eax, [esi - 2]
cmp word [0x61085adb], 0xd882
je 0x5e70c27f
push eax
nop
nop
lea eax, [ebx + 0x249c]
push edi
cmp dword [0x610242d0], 0xc60949c8
js 0x5e71aa0f
push eax
mov ecx, ecx
call fcn.5e6dda0b
mov ecx, ecx
mov eax, dword [ebx + 0x40]
add esp, 0x10
mov edx, dword [ebp + 8]
sub edx, 4
mov dword [ebx + 0x44], eax
mov eax, dword [ebx + 0x3c]
mov dword [ebx + 0x40], eax
mov eax, dword [ebx + 0x38]
mov dword [ebx + 0x3c], eax
lea eax, [edx + 1]
mov dword [ebx + 0x38], eax
mov eax, edx
mov eax, eax
inc dword [ebx + 0xc0]
mov dword [ebp + 8], edx
push ebx
mov ebx, edx
sub ebx, 0x80
pop ebx
jae 0x5e6df15c
mov eax, eax
and eax, 0x7f
mov eax, eax
movzx eax, byte [eax + ebx + 0x2c9c]
jmp 0x5e6df17f
push ebx
mov ebx, edx
sub ebx, 0x20000
pop ebx
sbb ecx, ecx
and ecx, 0xfffffff6
mov ecx, ecx
add ecx, 0x10
shr eax, cl
mov eax, eax
movzx eax, byte [eax + ebx + 0x2c9c]
lea eax, [eax + ecx*2]
nop
nop
mov dword [ebp - 0x18], eax
mov eax, eax
lea edx, [eax + 0x40]
mov eax, dword [edi]
push eax
mov eax, esi
sub eax, 5
pop eax
mov dword [ebp - 4], eax
lea eax, [esi - 2]
push 3
pop ecx
cmovb ecx, eax
lea eax, [ebx + 0x219c]
shl ecx, 7
add eax, ecx
mov dword [ebp - 0x14], eax
mov edi, edx
test byte [0x6100427a], 0xc1
jno 0x5e6df1ef
test dword [edx + 0x5690e6fe], eax
xor byte [ecx], ah
arpl word [esi - 0x53135ff8], di
invalid
mov ecx, edx
add edx, edx
shr edi, 6
shr ecx, 5
mov ecx, ecx
and ecx, 1
test byte [0x610a2026], 0xed
jb 0x5e6b9df0
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp - 4]
movzx esi, word [eax + edi*2]
mov eax, ecx
shr edx, 0xb
neg eax
and dword [ebp - 4], eax
nop
nop
nop
imul edx, esi
and eax, edx
sub dword [ebp - 4], eax
add dword [ebx + 0x60], eax
adc dword [ebx + 0x64], 0
dec ecx
mov eax, ecx
test dword [0x610cf648], 0xec88f7ff
js 0x5e72a57b
and ecx, 0x7e1
nop
nop
sub ecx, esi
mov ecx, ecx
and eax, edx
add dword [ebp - 4], eax
add ecx, 0x1f
mov eax, dword [ebp - 0x14]
test word [0x61029701], 0x192b
jo 0x5e6e0561
sar ecx, 5
add ecx, esi
cmp byte [0x60fed855], 0xe9
je 0x5e6e902c
lea esi, [ebx + 0x58]
mov word [eax + edi*2], cx
mov edi, dword [ebp - 4]
push eax
mov eax, edi
sub eax, 0x1000000
pop eax
jae 0x5e6df2a1
shl edi, 8
mov ecx, esi
mov dword [ebp - 4], edi
call fcn.5e6dacb4
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
cmp edx, 0x1000
jb 0x5e6df1ac
mov eax, dword [ebp + 8]
nop
nop
nop
mov dword [esi], edi
cmp eax, 4
jb 0x5e6df6a8
mov edx, dword [ebp - 0x18]
mov ecx, edx
shr ecx, 1
dec ecx
mov dword [ebp - 0x1c], ecx
push edx
mov edx, eax
sub edx, 0x80
pop edx
jae 0x5e6df2fd
and edx, 1
lea edi, [ebx + 0x58]
push eax
or edx, 2
lea eax, [ebx + 0x239c]
shl edx, cl
push ecx
lea eax, [eax + edx*2]
push eax
push edi
call 0x5e6e08fb
add esp, 0x10
jmp 0x5e6df6ac
nop
push 0x20
pop ecx
sub ecx, dword [ebp - 0x1c]
mov edx, eax
nop
nop
or edx, 0xf
shl edx, cl
mov eax, edx
shr edi, 1
shr eax, 0x1f
mov eax, eax
neg eax
and eax, edi
add dword [ebx + 0x60], eax
adc dword [ebx + 0x64], 0
add edx, edx
test dword [0x610a46ed], 0x7aefd86b
jb 0x5e6cc759
mov dword [ebp - 0x1c], edx
cmp edi, 0x1000000
jae 0x5e6df34b
mov ecx, esi
shl edi, 8
call fcn.5e6dacb4
mov edx, dword [ebp - 0x1c]
push ecx
mov ecx, edx
sub ecx, 0xf0000000
pop ecx
jne 0x5e6df30d
movzx esi, word [ebx + 0x1e1e]
mov edx, edi
mov eax, eax
mov eax, dword [ebp + 8]
mov ecx, eax
mov eax, eax
and ecx, 1
shr eax, 1
nop
nop
nop
shr edx, 0xb
mov dword [ebp + 8], eax
mov eax, eax
mov eax, ecx
imul edx, esi
test dword [0x61092dee], 0x6cf7b6f
jns 0x5e6df3b7
sbb ebx, dword [esi + edx*4 + 0x3c6b8c4b]
cdq
adc edi, dword [ebx + 4]
sar byte [eax + 0x40], cl
jp 0x5e6df3fe
dec esi
fst dword [ebx]
jb 0x5e6df402
pop ebp
inc ebx
and bh, byte [ecx + esi*4]
int 6
push ebp
popfd
mov dh, 0x82
inc esp
sbb ah, byte [edi + 0xe]
outsb dx, byte [esi]
cli
invalid
neg eax
and edi, eax
mov ecx, ecx
mov dword [ebp - 0x18], ecx
test byte [0x61050206], 0x4e
js 0x5e729d01
and eax, edx
mov ecx, ecx
sub edi, eax
add dword [ebx + 0x60], eax
adc dword [ebx + 0x64], 0
dec ecx
mov eax, ecx
and ecx, 0x7e1
sub ecx, esi
and eax, edx
add ecx, 0x1f
mov eax, eax
add edi, eax
sar ecx, 5
add ecx, esi
nop
mov word [ebx + 0x1e1e], cx
push edx
mov edx, edi
sub edx, 0x1000000
add byte [ecx], al
pop edx
jae 0x5e6df414
lea ecx, [ebx + 0x58]
mov ecx, ecx
shl edi, 8
call fcn.5e6dacb4
mov eax, dword [ebp + 8]
nop
nop
mov edx, edi
nop
nop
mov ecx, eax
shr edx, 0xb
shr eax, 1
and ecx, 1
mov dword [ebp + 8], eax
nop
nop
nop
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
nop
nop
movzx esi, word [ebx + eax*2 + 0x1e20]
mov eax, ecx
imul edx, esi
mov ecx, ecx
neg eax
and edi, eax
and eax, edx
nop
sub edi, eax
add dword [ebx + 0x60], eax
adc dword [ebx + 0x64], 0
dec ecx
mov eax, ecx
cmp word [0x61002fed], 0x6e47
jne 0x5e72a48d
and ecx, 0x7e1
sub ecx, esi
nop
nop
and eax, edx
add ecx, 0x1f
cmp word [0x6107ec0c], 0x9e56
je 0x5e6df4b3
leave
leave
dec ebx
pushfd
test byte [ebx + 0x3a], bh
movsd dword es:[edi], dword [esi]
mov eax, dword [0xdac72b0b]
pop esp
xchg ecx, eax
add eax, 0x7bdea66e
iretd
add edi, eax
sar ecx, 5
add ecx, esi
mov esi, dword [ebp - 0x18]
mov word [ebx + esi*2 + 0x1e20], cx
cmp edi, 0x1000000
jae 0x5e6df4da
lea ecx, [ebx + 0x58]
mov ecx, ecx
shl edi, 8
call fcn.5e6dacb4
nop
nop
mov eax, dword [ebp - 0x1c]
add esi, 2
lea edx, [eax + esi*2]
mov eax, dword [ebp + 8]
movzx esi, word [ebx + edx*2 + 0x1e1c]
mov ecx, ecx
mov ecx, eax
and ecx, 1
shr eax, 1
mov dword [ebp - 0x1c], edx
mov edx, edi
shr edx, 0xb
imul edx, esi
mov dword [ebp + 8], eax
mov eax, ecx
neg eax
mov dword [ebp - 0x18], ecx
and edi, eax
test dword [0x61057f02], 0xffd90ee3
jno 0x5e6df55a
mov byte [eax], bh
cwde
add eax, 0x2f001c84
push esp
bnd jno 0x5e6df4c5
pcmpeqw mm7, mm2
insb byte es:[edi], dx
mov al, byte [0x2f3c1594]
mov al, 0xfe
mov esp, 0x4e5f66d2
ret
and eax, edx
nop
nop
sub edi, eax
add dword [ebx + 0x60], eax
adc dword [ebx + 0x64], 0
nop
dec ecx
mov eax, ecx
and ecx, 0x7e1
sub ecx, esi
and eax, edx
add ecx, 0x1f
add edi, eax
nop
nop
sar ecx, 5
add ecx, esi
nop
nop
mov dword [ebp - 4], edi
mov esi, dword [ebp - 0x1c]
mov word [ebx + esi*2 + 0x1e1c], cx
push ecx
mov ecx, edi
sub ecx, 0x1000000
pop ecx
jae 0x5e6df5af
shl edi, 8
nop
nop
lea ecx, [ebx + 0x58]
mov ecx, ecx
mov dword [ebp - 4], edi
call fcn.5e6dacb4
nop
mov eax, dword [ebp - 0x18]
nop
nop
nop
mov ecx, dword [ebp - 4]
mov edx, ecx
cmp byte [0x61029cb2], 0x3e
je 0x5e70dd63
shr edx, 0xb
lea edi, [eax + esi*2]
test word [0x610aa2c3], 0x6810
je 0x5e7011dc
mov eax, dword [ebp + 8]
movzx esi, word [ebx + edi*2 + 0x1e1c]
cmp dword [0x610c5909], 0x94e691c3
jne 0x5e6fd8eb
and eax, 1
imul edx, esi
nop
nop
mov dword [ebp + 8], eax
neg eax
and ecx, eax
and eax, edx
nop
nop
sub ecx, eax
add dword [ebx + 0x60], eax
mov dword [ebp - 4], ecx
adc dword [ebx + 0x64], 0
mov ecx, dword [ebp + 8]
dec ecx
mov eax, ecx
mov ecx, ecx
and ecx, 0x7e1
sub ecx, esi
and eax, edx
mov edx, dword [ebp - 4]
mov ecx, ecx
add ecx, 0x1f
cmp word [0x610462ff], 0xb18c
jns 0x5e6df665
sbb ah, al
std
or ebp, edi
lea edi, [ecx]
push es
jmp 0x2f412c36
sar ecx, 5
add edx, eax
add ecx, esi
cmp word [0x610b3668], 0x1989
je 0x5e714aa6
mov word [ebx + edi*2 + 0x1e1c], cx
lea edi, [ebx + 0x58]
push ebx
mov ebx, edx
sub ebx, 0x1000000
pop ebx
jae 0x5e6df6a4
shl edx, 8
mov ecx, edi
nop
nop
mov dword [ebp - 4], edx
call fcn.5e6dacb4
mov edx, dword [ebp - 4]
mov dword [edi], edx
jmp 0x5e6df6ac
nop
lea edi, [ebx + 0x58]
mov ecx, ecx
mov esi, dword [ebp - 8]
cmp word [0x6104ba13], 0x8782
je 0x5e6df6ef
xor ebx, dword [ebx + 0x67]
in al, dx
mov cl, 0x72
aam 0x4a
out 0x99, al
sbb eax, 0x250b7d83
mov eax, dword [0xaf750dd]
dec ebp
and byte [esi - 0x517bc6c5], bh
xchg edi, eax
invalid
mov eax, dword [ebp - 0xc]
add esi, eax
sub dword [ebx + 0x34], eax
mov dword [ebp - 8], esi
jne 0x5e6dea28
push edx
mov edx, dword [ebx + 0xa4]
sub edx, 0
pop edx
jne 0x5e6df796
push ecx
mov ecx, dword [ebx + 0xc0]
sub ecx, 0x40
pop ecx
jb 0x5e6df75b
push ebx
nop
nop
call 0x5e6dafb6
push ebx
call int.5e6db1da
nop
pop ecx
mov eax, eax
pop ecx
mov ecx, dword [ebx + 0x9c]
mov ecx, ecx
lea eax, [ebx + 0x748]
xor edx, edx
push eax
inc edx
mov ecx, ecx
lea eax, [ebx + 0x249c]
nop
nop
shl edx, cl
lea ecx, [ebx + 0x349c]
push eax
call fcn.5e6da8e3
cmp dword [ebx + 0xc4], 0
jg 0x5e6df796
mov ecx, dword [ebx + 0x9c]
lea eax, [ebx + 0x748]
xor edx, edx
mov eax, eax
mov dword [ebx + 0xc4], 0x40
push eax
inc edx
lea eax, [ebx + 0x289c]
mov ecx, ecx
shl edx, cl
lea ecx, [ebx + 0x78a0]
push eax
call fcn.5e6da8e3
push dword [ebx]
call dword [ebx + 8]
pop ecx
test eax, eax
je 0x5e6df7e1
nop
nop
nop
mov eax, esi
sub eax, dword [ebp - 0x10]
cmp dword [ebp + 0xc], 0
je 0x5e6df843
add eax, 0x92c
push edx
mov edx, eax
sub edx, dword [ebp + 0x10]
pop edx
jae 0x5e6df7e1
mov ecx, dword [ebx + 0x80]
sub ecx, dword [ebx + 0x78]
mov eax, dword [ebx + 0x68]
add ecx, dword [ebx + 0x70]
add eax, 0x4000
mov ecx, ecx
add eax, ecx
cmp eax, dword [ebp + 0xc]
jb 0x5e6dea28
mov eax, esi
test word [0x610d4989], 0xe009
js 0x5e6df818
movsb byte es:[edi], byte [esi]
les ebx, [ecx + ebx*2 - 0x14]
fist word [esi - 0x31]
cmp dword [edx + 0x2f], esp
add dl, ah
mov byte [edx], cl
cmp al, 4
inc esi
mov eax, dword [0x89ffc53]
wait
xor dword [ebx + 0xd32730a], 0xdb829285
pop ecx
mov byte [0x2b2d22bc], al
inc ebp
lock add dword [ebx + 0xb8], eax
sub eax, dword [ebp - 0x10]
add dword [ebx + 0xb8], eax
adc dword [ebx + 0xbc], 0
push esi
push ebx
mov eax, eax
call fcn.5e6db6bd
mov ecx, ecx
pop ecx
mov eax, eax
pop ecx
pop edi
pop esi
nop
nop
nop
pop ebx
mov esp, ebp
mov ecx, ecx
pop ebp
ret
push ebx
mov ebx, eax
sub ebx, 0x20000
pop ebx
jb 0x5e6dea28
mov ecx, ecx
sub esi, dword [ebp - 0x10]
add dword [ebx + 0xb8], esi
push ebx
adc dword [ebx + 0xbc], 0
call fcn.5e6daf5a
jmp 0x5e6df834
sub ecx, 0
pop ecx
je 0x5e6e903b
mov eax, 0x80004005
mov ecx, ecx
jmp 0x5e6e903f
mov ecx, ecx
xor eax, eax
pop ebp
ret 0x10
mov edi, ecx
mov ecx, ecx
call fcn.5e701274
lea ebx, [esi + 0x14]
xor esi, esi
push edx
mov edx, ebx
and edx, ebx
pop edx
je 0x5e70126b
mov ebp, esp
push ecx
cmp dword [0x6109a9e6], 0xa7a1a5ab
js 0x5e6b6df9
and dword [ebp - 4], 0
lea edx, [ebp - 4]
push esi
mov esi, dword [ebp + 8]
push edi
push edx
push dword [ebp + 0x10]
cmp byte [0x61054367], 0x5e
mov eax, dword [0x3b218823]
mov ecx, ecx
lea ecx, [ebp + 0x28]
mov eax, eax
jmp fcn.5e711bbd
jmp fcn.5e6b44d5
lea ecx, [ebp - 0x60]
jmp 0x5e6c7043
nop
lea ecx, [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
add ecx, 0xc
jmp fcn.5e70436b