Function at 0x5b8000
Capabilities:
Get file attributes
Set file attributes

Disassembly:
sub esp, 0x378
push ebx
push ebp
push esi
mov esi, dword [esp + 0x390]
xor ebx, ebx
push edi
mov edi, dword [esp + 0x38c]
mov dword [esi + 0xb10], ebx
mov dword [esi + 0x1c6], ebx
mov dword [esi + 0x1ca], ebx
mov dword [esi + 0x1ce], ebx
mov dword [esi + 0x1d2], ebx
mov dword [esi + 0x1c2], ebx
mov ecx, dword [edi + 0x46]
lea eax, [esi + 0x3c22]
push ecx
push eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x1c], 0xfffffffd
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [esi + 0x1aa]
lea ebp, [esi + 0x3e36]
cmp eax, ebx
je 0x5b8084
push ebx
push 0x18b
call fcn.005be950
jmp 0x5b80a0
mov edx, dword [esi + 0xdec]
mov eax, dword [esi + 0xb30]
push edx
push eax
push ebx
push 0x187
call fcn.005be950
add esp, 8
push eax
push ebp
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [esi + 0xb30]
mov edx, dword [esi + 0xdec]
add esp, 0x10
lea ecx, [eax + 1]
push eax
push edx
push ebp
mov dword [esi + 0xb30], ecx
call fcn.005b6ab0
add esp, 0xc
test eax, eax
je 0x5b80df
pop edi
pop esi
pop ebp
mov eax, 9
pop ebx
add esp, 0x378
ret
mov eax, dword [edi + 0x46]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [edi + 0x46]
mov dword [edi + 0x18], eax
xor edx, edx
push esi
cmp byte [eax + ecx - 1], 0x2f
mov word [edi + 0x2a], 0xffff
mov eax, dword [esi + 0x1aa]
sete dl
cmp eax, ebx
mov dword [esp + 0x20], edx
je 0x5b812e
lea eax, [esp + 0x18]
lea ecx, [esp + 0x1c]
push eax
push ecx
push ebx
call fcn.005bf6c0
mov ecx, dword [esp + 0x24]
add esp, 0x10
mov dword [edi + 8], eax
mov dword [esp + 0x1c], ebx
jmp 0x5b8176
mov ecx, dword [edi + 0x36]
lea edx, [esp + 0x18]
lea eax, [esp + 0x1c]
push edx
push eax
push ecx
call fcn.005bf6c0
mov ecx, dword [esp + 0x24]
add esp, 0x10
cmp eax, ebx
je 0x5b81e6
cmp ecx, 0xfffffffe
jl 0x5b81e6
mov dword [edi + 8], eax
cmp dword [esi + 0x1e6], ebx
je 0x5b8176
cmp dword [esi + 0x1ea], ebx
je 0x5b8176
mov eax, dword [esp + 0x18]
and al, 0xdf
mov dword [esp + 0x18], eax
mov ax, word [esi + 0xdf0]
test ah, 0x80
je 0x5b81aa
test ah, 0x10
je 0x5b81aa
cmp dword [esi + 0x1fa], ebx
je 0x5b81aa
cmp dword [esi + 0xe90], ebx
je 0x5b81aa
mov edx, dword [esi + 0xe94]
mov dword [edi + 8], edx
mov eax, dword [esi + 0xe98]
mov dword [esp + 0x18], eax
cmp ecx, 0xfffffffe
jne 0x5b81bb
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], ebx
mov eax, dword [esi + 0xda4]
mov dword [esi + 0x2e], 0xffffffff
cmp eax, ebx
mov dword [esi + 0x56], ebx
je 0x5b81ff
mov ecx, dword [edi + 0x36]
push eax
push ecx
call fcn.005b7f20
add esp, 8
test eax, eax
je 0x5b81ff
mov dword [esp + 0x10], ebx
jmp 0x5b8209
cmp ecx, 0xfffffffd
je 0x5b815c
pop edi
pop esi
pop ebp
mov eax, 0x12
pop ebx
add esp, 0x378
ret
mov edx, dword [esi + 0xd7c]
mov dword [esp + 0x10], edx
push edi
call fcn.0040f330
mov eax, dword [esp + 0x20]
add esp, 4
cmp eax, ebx
je 0x5b822f
xor ebp, ebp
xor ecx, ecx
mov dword [esi + 0x2a], 0xffffffff
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], ecx
jmp 0x5b8246
cmp dword [esi + 0x1aa], ebx
je 0x5b825d
mov dword [esi + 0x2a], 0xffffffff
mov ecx, dword [esp + 0x14]
mov ebp, dword [esp + 0x10]
cmp dword [esi + 0x1aa], ebx
je 0x5b82a0
mov eax, dword [esi + 0x1ae]
cdq
mov dword [esi + 0x36], eax
mov dword [esi + 0x3a], edx
jmp 0x5b82ba
mov eax, dword [edi + 0x36]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebp
call fcn.005b9440
add esp, 4
push ebx
push 0x8000080
push 3
push ebx
push 3
push connect
push ebp
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [esi + 0x2a], eax
jne 0x5b823e
pop edi
pop esi
pop ebp
mov eax, 0x12
pop ebx
add esp, 0x378
ret
mov ecx, dword [esi + 0x2a]
push ecx
call fcn.005b2050
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov dword [esi + 0x36], eax
add esp, 4
mov dword [esi + 0x3a], edx
cmp ecx, ebx
jne 0x5b82c2
xor ebp, ebp
jmp 0x5b82cc
cmp ebp, 0xffffffff
jne 0x5b82d0
mov ebp, 8
mov dword [esp + 0x10], ebp
mov edx, dword [esi + 0xd80]
mov eax, ebp
neg edx
sbb edx, edx
mov word [edi + 4], 8
and edx, 0xfffff500
add edx, 0xb14
neg eax
sbb eax, eax
mov word [edi], dx
mov edx, dword [esp + 0x1c]
and eax, 0xa
add eax, 0xa
cmp edx, ebx
mov word [edi + 2], ax
je 0x5b830c
mov dword [edi + 0xc], ebx
jmp 0x5b8315
mov eax, dword [edi + 8]
shl eax, 0x10
mov dword [edi + 0xc], eax
cmp dword [esi + 0xda8], ebx
mov eax, 9
je 0x5b8374
mov word [edi + 4], ax
test byte [esi + 0xdf1], 0x80
jne 0x5b835f
cmp dword [esi + 0x1a6], ebx
jne 0x5b835f
cmp edx, ebx
jne 0x5b8357
mov ecx, dword [esi + 0x2a]
push esi
push ecx
call fcn.005b9220
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
add esp, 8
mov dword [edi + 0xc], eax
and word [edi + 4], 0xfff7
jmp 0x5b8374
cmp edx, ebx
jne 0x5b8370
mov edx, dword [edi + 8]
shl edx, 0x10
mov dword [edi + 0xc], edx
mov edx, dword [esp + 0x1c]
mov word [edi + 4], ax
mov ax, word [edi + 4]
cmp ebp, ebx
mov word [edi + 0x2c], ax
mov word [edi + 6], bp
jne 0x5b838c
cmp ecx, ebx
jl 0x5b838c
mov eax, ecx
jmp 0x5b838e
xor eax, eax
mov dword [edi + 0x10], eax
xor eax, eax
cmp ecx, ebx
mov word [edi + 0x28], bx
setl al
dec eax
and eax, ecx
cmp word [edi + 0x2a], 0xffff
mov dword [edi + 0x14], eax
jne 0x5b83b6
mov word [edi + 0x2a], bx
mov dword [esp + 0x28], 1
mov eax, dword [esi + 0xd80]
cmp eax, ebx
mov eax, dword [esp + 0x18]
je 0x5b83c9
and eax, 0xff
mov dword [edi + 0x2e], eax
mov ecx, dword [esi + 0xdd0]
mov dword [edi + 0x32], ecx
mov dword [esi + 0x3d26], ebx
test byte [esi + 0xdf1], 0x80
mov dword [esi + 0x32], ebx
je 0x5b8414
mov ax, word [esi + 0xdf2]
mov word [edi + 0x28], ax
mov eax, dword [esi + 0xda8]
cmp eax, ebx
jne 0x5b8414
cmp edx, ebx
jne 0x5b8414
cmp ebp, ebx
jne 0x5b8414
mov ecx, dword [esi + 0x2a]
push esi
push ecx
call fcn.005b9220
add esp, 8
mov dword [edi + 0xc], eax
cmp dword [esi + 0x1fa], ebx
je 0x5b851f
test byte [esi + 0xdf1], 0x10
jne 0x5b851f
mov edx, dword [edi + 0x46]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [esp + 0x174]
push edx
push eax
call ebx
mov ecx, dword [edi + 0x36]
lea edx, [esp + 0x284]
push ecx
push edx
call ebx
mov eax, dword [edi + 8]
mov edx, dword [esi + 0x1fe]
mov ebp, dword [edi + 0x2e]
xor ecx, ecx
mov cx, word [edi + 8]
push edx
shr eax, 0x10
mov dword [esp + 0x27c], eax
lea eax, [esp + 0x178]
push eax
mov dword [esp + 0x284], ecx
mov dword [esp + 0x288], ebp
call dword [esi + 0x1fa]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [esp + 0x174]
push ecx
call ebx
mov edx, eax
mov eax, dword [edi + 0x46]
push eax
mov dword [esp + 0x28], edx
call ebx
mov ecx, dword [esp + 0x24]
cmp ecx, eax
jle 0x5b84d1
mov edx, dword [edi + 0x46]
push edx
call fcn.005ce291
add esp, 4
lea eax, [esp + 0x174]
push eax
call ebx
add eax, 2
push eax
call fcn.005ce37a
add esp, 4
mov dword [edi + 0x46], eax
mov edx, dword [edi + 0x46]
lea ecx, [esp + 0x174]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [edi + 0x46]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebx, dword [esp + 0x280]
mov ecx, dword [esp + 0x27c]
mov edx, dword [esp + 0x278]
mov dword [edi + 0x18], eax
mov eax, ebp
and ecx, 0xffff
xor eax, ebx
shl edx, 0x10
and eax, 0x27
add ecx, edx
xor eax, ebp
mov dword [edi + 8], ecx
mov dword [edi + 0x2e], eax
mov ebx, dword [esp + 0x390]
push esi
push ebx
push edi
call fcn.005c17c0
add esp, 0xc
test eax, eax
jne 0x5b89f6
mov ecx, dword [edi + 0x1c]
mov edx, dword [edi + 0x18]
lea eax, [ecx + edx + 0x1e]
mov edx, dword [esi + 0xdd0]
add edx, eax
mov eax, dword [esi + 0xda8]
test eax, eax
mov dword [esi + 0xdd0], edx
je 0x5b85bc
mov ecx, dword [edi + 0xc]
push esi
push ebx
push ecx
push eax
call fcn.005c2500
mov ebp, eax
add esp, 0x10
test ebp, ebp
je 0x5b85a1
push esi
push 0
push 0x188
call fcn.005be950
add esp, 8
push eax
push ebp
call fcn.005ba000
mov edx, dword [esi + 0x2a]
add esp, 0xc
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x378
ret
mov edx, dword [edi + 0x10]
mov eax, 0xc
add edx, eax
mov dword [edi + 0x10], edx
mov ecx, dword [esi + 0xdd0]
add ecx, eax
mov dword [esi + 0xdd0], ecx
mov eax, dword [ebx]
xor ebp, ebp
push 1
push ebp
push ebp
push eax
call fcn.005bfdc0
push esi
push ebp
push ebp
mov dword [esi + 0x32], ebp
call fcn.005b93c0
add esp, 0x1c
mov dword [esi + 0x3d2a], eax
test byte [esi + 0xdf1], 0x80
je 0x5b85ed
mov dword [esi + 0xe04], ebp
cmp dword [esp + 0x10], 8
jne 0x5b865a
mov ecx, dword [ebx]
push esi
push ecx
call fcn.005c2af0
add esp, 8
test eax, eax
jne 0x5b866d
cmp dword [esp + 0x28], ebp
je 0x5b8610
mov word [edi + 0x2a], 0xffff
lea edx, [esp + 0x10]
push esi
lea eax, [edi + 0x2a]
push edx
push eax
call fcn.005c38b0
mov eax, dword [esi + 0xd88]
lea ebp, [edi + 4]
push esi
push ebp
push eax
call fcn.005c2fd0
mov cl, byte [edi + 0x2c]
mov al, byte [ebp]
xor cl, al
push esi
and ecx, 6
xor word [edi + 0x2c], cx
call fcn.005c3630
push esi
mov ebp, eax
call fcn.005c2ba0
mov edx, dword [esi + 4]
add esp, 0x20
mov dword [ebx], edx
jmp 0x5b8725
push 0x2000
call fcn.005ce37a
mov ebp, eax
add esp, 4
test ebp, ebp
jne 0x5b867d
pop edi
pop esi
pop ebp
mov eax, 4
pop ebx
add esp, 0x378
ret
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x5b8719
mov eax, dword [esi + 0x3a]
mov ecx, dword [esi + 0x36]
mov edx, dword [esp + 0x2c]
push 0
push 0
push eax
push ecx
push edx
call fcn.005b6930
mov eax, dword [esi + 0x8e]
add esp, 0x14
test eax, eax
jne 0x5b8713
mov eax, dword [esi + 0x1aa]
push esi
test eax, eax
push 0x2000
push ebp
je 0x5b86cf
call fcn.005b8f50
xor ecx, ecx
add esp, 0xc
mov dword [esp + 0x20], eax
cmp ecx, eax
jmp 0x5b86df
call fcn.005b8e40
xor edx, edx
add esp, 0xc
mov dword [esp + 0x20], eax
cmp edx, eax
sbb eax, eax
neg eax
test eax, eax
je 0x5b8709
mov eax, dword [esp + 0x20]
push esi
push ebx
push eax
push ebp
call fcn.005c2790
mov ecx, dword [esp + 0x30]
add esp, 0x10
cmp eax, ecx
jne 0x5b8741
mov eax, dword [esi + 0x8e]
test eax, eax
je 0x5b86ac
mov eax, dword [esi + 0x8e]
test eax, eax
je 0x5b8719
mov dword [esi], 9
push ebp
call fcn.005ce291
mov ebp, dword [esi + 0x32]
add esp, 4
cmp dword [esi], 0
je 0x5b8787
mov edx, dword [esi + 0x2a]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x378
ret
push ebp
call fcn.005ce291
mov ecx, dword [esi + 0x2a]
add esp, 4
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test byte [esi + 0xdf1], 0x80
je 0x5b8777
mov eax, dword [esi + 0x8e]
pop edi
neg eax
sbb eax, eax
pop esi
and al, 0xfb
pop ebp
add eax, 0xe
pop ebx
add esp, 0x378
ret
pop edi
pop esi
pop ebp
mov eax, 0xa
pop ebx
add esp, 0x378
ret
mov eax, dword [esi + 0x2a]
cmp eax, 0xffffffff
je 0x5b87a6
cmp dword [esp + 0x20], 0xffffffff
je 0x5b88cf
cmp eax, 0xffffffff
je 0x5b87a6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x8000
test word [esi + 0xdf0], ax
je 0x5b87ca
mov ecx, dword [esi + 0xe04]
mov edx, dword [esi + 0xdd0]
add edx, ecx
mov dword [esi + 0xdd0], edx
jmp 0x5b87d0
add dword [esi + 0xdd0], ebp
mov ecx, dword [esi + 0x3d2a]
mov edx, dword [esi + 0xdd0]
mov dword [edi + 0xc], ecx
mov dword [edi + 0x10], ebp
mov ecx, dword [esi + 0xda8]
mov dword [esp + 0x24], edx
test ecx, ecx
je 0x5b87f6
add ebp, 0xc
mov dword [edi + 0x10], ebp
mov ecx, dword [esi + 0x1a6]
test ecx, ecx
je 0x5b8811
mov edx, dword [esi + 0x1c6]
and edx, 0x7fffffff
mov dword [edi + 0x14], edx
jmp 0x5b8817
mov ecx, dword [esi + 0x32]
mov dword [edi + 0x14], ecx
test word [esi + 0xdf0], ax
jne 0x5b88f7
mov edx, dword [edi + 0x32]
mov eax, dword [ebx]
push 0
push 0
push edx
push eax
call fcn.005bfdc0
and eax, edx
add esp, 0x10
cmp eax, 0xffffffff
je 0x5b88b4
mov eax, dword [esi + 0x1a6]
mov ebp, dword [edi + 0xc]
test eax, eax
jne 0x5b885a
mov eax, 0xfff7
and word [edi + 0x2c], ax
and word [edi + 4], ax
jmp 0x5b886d
mov eax, dword [esi + 0xda8]
test eax, eax
je 0x5b886d
mov ecx, dword [edi + 8]
shl ecx, 0x10
mov dword [edi + 0xc], ecx
mov eax, dword [esp + 0x10]
push esi
mov word [edi + 6], ax
push ebx
neg eax
sbb eax, eax
push edi
and eax, 0xa
add eax, 0xa
mov word [edi + 2], ax
call fcn.005c17c0
add esp, 0xc
mov dword [edi + 0xc], ebp
test eax, eax
jne 0x5b89f6
mov edx, dword [esp + 0x24]
mov eax, dword [ebx]
push 0
push 0
push edx
push eax
call fcn.005bfdc0
and eax, edx
add esp, 0x10
cmp eax, 0xffffffff
jne 0x5b88df
push esi
push 0
push 0x189
call fcn.005be950
add esp, 8
push eax
push 0xb
call fcn.005ba000
add esp, 0xc
pop edi
pop esi
pop ebp
mov eax, 0xb
pop ebx
add esp, 0x378
ret
mov eax, 0x8000
test word [esi + 0xdf0], ax
jne 0x5b88f7
mov eax, dword [esi + 0x1a6]
test eax, eax
je 0x5b891e
cmp dword [esp + 0x10], 8
je 0x5b8904
test byte [edi + 4], 8
je 0x5b891e
push esi
push ebx
push edi
call fcn.005c1a80
add esp, 0xc
test eax, eax
jne 0x5b89f6
add dword [esi + 0xdd0], 0x10
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x5b893f
mov eax, dword [edi + 0x3a]
mov ecx, dword [edi + 0x3e]
cmp eax, ecx
je 0x5b8938
push eax
call fcn.005ce291
add esp, 4
mov dword [edi + 0x1c], 0
mov eax, dword [esi + 0x1aa]
test eax, eax
je 0x5b896e
mov ecx, dword [esp + 0x2c]
push ecx
push 2
push 0x2c1
call fcn.005be950
add esp, 8
lea edx, [esp + 0x34]
push eax
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x5b89e7
mov eax, dword [esi + 0x1e6]
test eax, eax
je 0x5b89bb
mov eax, dword [esi + 0x1ea]
test eax, eax
je 0x5b89bb
mov eax, dword [edi + 0x36]
lea ecx, [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [esp + 0x30]
push edx
call fcn.005b9440
add esp, 4
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
and al, 0xdf
lea ecx, [esp + 0x30]
push eax
push ecx
mov dword [esp + 0x20], eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov edx, dword [edi + 0x36]
push edx
push 2
push 0x2bf
call fcn.005be950
add esp, 8
push eax
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [esp + 0x3c]
push ecx
call fcn.005b9440
add esp, 0x10
lea edx, [esp + 0x30]
push edx
call fcn.005b7ad0
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x378
ret