Function at 0x5ed4ad
Capabilities:
Read file via mapping

Disassembly:
push 0x6a006a
push 0
push 0
push 0
mov edx, dword [ebp - 0x4c]
push edx
push 0
mov eax, dword [ebp - 0x398]
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov edx, dword [ebp - 0x398]
mov dword [edx + 0xc], eax
push 0
push 0
push 0
mov eax, dword [ebp - 0x4c]
push eax
push 0
mov ecx, dword [ebp - 0x398]
mov edx, dword [ecx + 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, dword [ebp - 0x398]
mov dword [ecx + 0x1c], eax
clc
jb 0x5ed4c2
jae 0x5ed685
pop eax
mov eax, 0x5ed4c3
add eax, 4
dec eax
dec eax
clc
jb 0x5ed4c2
jae 0x5ed4c3
call fcn.005a4131
push 0x739372f8
xchg edx, eax
clc
jb 0x5ed459
jae 0x5ed45a
mov dword [ebp - 0x378], 0x1d350b4f
mov dword [ebp - 0x37c], 0
push 3
mov edx, dword [ebp - 0x378]
push edx
call fcn.006432b7
add esp, 8
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x380], edx
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x374], eax
mov ecx, dword [ebp - 0x380]
mov dword [ebp - 0x370], ecx
cmp dword [ebp - 0x370], 0
jne 0x5ed5d2
mov edx, dword [ebp - 0x374]
shl edx, 2
mov dword [ebp - 0x37c], edx
push 0x4c
mov eax, dword [ebp - 0x37c]
push eax
call fcn.006432b7
add esp, 8
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x388], edx
mov ecx, dword [ebp - 0x38c]
mov dword [ebp - 0x374], ecx
mov edx, dword [ebp - 0x388]
mov dword [ebp - 0x370], edx
mov eax, dword [ebp - 0x374]
mov ecx, dword [ebp - 0x37c]
lea edx, [ecx + eax*2]
mov dword [ebp - 0x37c], edx
mov eax, dword [ebp - 0x37c]
add eax, 1
mov dword [ebp - 0x37c], eax
mov ecx, dword [ebp - 0x37c]
xor ecx, 0x3dfd66ff
mov dword [ebp - 0x37c], ecx
mov edx, dword [ebp - 0x37c]
xor edx, 0x5df57dfe
mov dword [ebp - 0x37c], edx
mov eax, dword [ebp - 0x37c]
xor eax, 0x7f757dff
mov dword [ebp - 0x37c], eax
mov ecx, dword [ebp - 0x37c]
xor ecx, 0x3f756efd
mov dword [ebp - 0x37c], ecx
jmp 0x5ed685
mov edx, dword [ebp - 0x374]
lea eax, [edx*4 + 4]
mov dword [ebp - 0x37c], eax
push 0x4c
mov ecx, dword [ebp - 0x37c]
push ecx
call fcn.006432b7
add esp, 8
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x390], edx
mov edx, dword [ebp - 0x394]
mov dword [ebp - 0x374], edx
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x370], eax
mov ecx, dword [ebp - 0x374]
mov edx, dword [ebp - 0x37c]
lea eax, [edx + ecx*2]
mov dword [ebp - 0x37c], eax
mov ecx, dword [ebp - 0x37c]
add ecx, 1
mov dword [ebp - 0x37c], ecx
mov edx, dword [ebp - 0x37c]
xor edx, 0x1df57cfd
mov dword [ebp - 0x37c], edx
mov eax, dword [ebp - 0x37c]
xor eax, 0x5d776fff
mov dword [ebp - 0x37c], eax
mov ecx, dword [ebp - 0x37c]
xor ecx, 0x1d7767fc
mov dword [ebp - 0x37c], ecx
mov edx, dword [ebp - 0x37c]
xor edx, 0x1d7d74fe
mov dword [ebp - 0x37c], edx
pop eax
push 0
push 0
push 0
mov eax, dword [ebp - 0x4c]
push eax
push 0
mov ecx, dword [ebp - 0x398]
mov edx, dword [ecx + 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, dword [ebp - 0x398]
mov dword [ecx + 0x2c], eax
mov edx, dword [ebp - 0x398]
cmp dword [edx + 0xc], 0
je 0x5ed6cf
mov eax, dword [ebp - 0x398]
cmp dword [eax + 0x1c], 0
je 0x5ed6cf
mov ecx, dword [ebp - 0x398]
cmp dword [ecx + 0x2c], 0
jne 0x5ed6d4
jmp 0x5ed915
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x398]
mov eax, dword [edx + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, dword [ebp - 0x398]
mov dword [ecx + 0x10], eax
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x398]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, dword [ebp - 0x398]
mov dword [ecx + 0x20], eax
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x398]
mov eax, dword [edx + 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, dword [ebp - 0x398]
mov dword [ecx + 0x30], eax
mov edx, dword [ebp - 0x398]
cmp dword [edx + 0x10], 0
je 0x5ed75b
mov eax, dword [ebp - 0x398]
cmp dword [eax + 0x20], 0
je 0x5ed75b
mov ecx, dword [ebp - 0x398]
cmp dword [ecx + 0x30], 0
jne 0x5ed760
jmp 0x5ed915
mov edx, dword [ebp - 0x398]
mov eax, dword [edx + 0x10]
push eax
call fcn.005a518a
add esp, 4
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x398]
mov edx, dword [ecx + 0x20]
push edx
call fcn.005a518a
add esp, 4
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x398]
mov ecx, dword [eax + 0x30]
push ecx
call fcn.005a518a
add esp, 4
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x5c], 0
je 0x5ed7b1
cmp dword [ebp - 0x60], 0
je 0x5ed7b1
cmp dword [ebp - 0x58], 0
jne 0x5ed7b6
jmp 0x5ed915
push eax
call fcn.005ed7d2
push 0xfb6d8ee8
invalid
push eax
push ecx
mov eax, 0x5ed92a
inc eax
mov ecx, eax
dec ecx
push ecx
ret