Function at 0x51bcb0
Capabilities:
Get file system object information
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x565ff7
mov eax, dword fs:[0]
push eax
mov eax, 0x13cc
call fcn.005271e0
mov eax, dword [0x5c7cec]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x13c4], eax
cmp dword [eax + 0xdc], 0
jne 0x51bcfc
mov eax, 0x80004005
jmp 0x51c4ef
cmp dword [eax + 0x5c], 0
lea esi, [eax + 0x4c]
jne 0x51bd0c
xor eax, eax
jmp 0x51c4ef
xorps xmm0, xmm0
mov dword [ebp - 0x1060], 0
movq qword [ebp - 0x1068], xmm0
mov dword [ebp - 0x1068], 0
mov dword [ebp - 0x1064], 0
mov dword [ebp - 0x1060], 0
push 1
xor eax, eax
mov dword [ebp - 4], 0
push 0x573168
lea ecx, [ebp - 0x105c]
mov dword [ebp - 0x104c], 0
mov dword [ebp - 0x1048], 7
mov word [ebp - 0x105c], ax
call fcn.00408740
lea eax, [ebp - 0x1068]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x105c]
push eax
push esi
call fcn.00427fc0
add esp, 0xc
mov byte [ebp - 4], 0
mov esi, eax
lea ecx, [ebp - 0x105c]
mov dword [ebp - 0x13c0], esi
call fcn.00408e50
xor edi, edi
mov dword [ebp - 0x13b4], edi
mov dword [ebp - 0x13c8], edi
test esi, esi
je 0x51c470
xor edx, edx
mov dword [ebp - 0x13cc], edx
mov eax, dword [ebp - 0x1068]
mov ecx, 0x7ffffffe
add eax, edx
mov dword [ebp - 0x104c], 0
mov dword [ebp - 0x1048], 0
mov dword [ebp - 0x13b8], eax
cmp dword [eax + 0x14], 8
mov esi, dword [eax + 0x10]
jb 0x51bdfd
mov eax, dword [eax]
mov dword [ebp - 0x13b8], eax
cmp esi, 8
jae 0x51be1b
movups xmm0, xmmword [eax]
mov dword [ebp - 0x1048], 7
movups xmmword [ebp - 0x105c], xmm0
jmp 0x51beab
mov eax, esi
or eax, 7
cmp eax, 0x7ffffffe
cmova eax, ecx
mov dword [ebp - 0x13bc], eax
inc eax
lea ecx, [eax + eax]
cmp eax, 0x7fffffff
jbe 0x51be3e
or ecx, 0xffffffff
jmp 0x51be46
cmp ecx, 0x1000
jb 0x51be6f
lea eax, [ecx + 0x23]
cmp eax, ecx
mov ecx, 0xffffffff
cmovbe eax, ecx
push eax
call fcn.00406909
add esp, 4
test eax, eax
je 0x51c50a
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
jmp 0x51be82
test ecx, ecx
je 0x51be80
push ecx
call fcn.00406909
add esp, 4
mov ecx, eax
jmp 0x51be82
xor ecx, ecx
lea eax, [esi*2 + 2]
mov dword [ebp - 0x105c], ecx
push eax
push dword [ebp - 0x13b8]
push ecx
call fcn.005285f0
mov eax, dword [ebp - 0x13bc]
add esp, 0xc
mov dword [ebp - 0x1048], eax
mov dword [ebp - 0x104c], esi
mov byte [ebp - 4], 2
test esi, esi
je 0x51c439
push 0
lea eax, [ebp - 0x105c]
push 0
push eax
call fcn.004257c0
add esp, 0xc
test al, al
je 0x51c439
push 0x40
lea eax, [ebp - 0x10ac]
push 0
push eax
call fcn.005290f0
add esp, 0xc
lea ecx, [ebp - 0x105c]
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
cmovae eax, dword [ebp - 0x105c]
push 0
push 0
push 0
push ecx
push eax
lea ecx, [ebp - 0x10ac]
call fcn.00492ac0
lea ecx, [ebp - 0x10ac]
mov byte [ebp - 4], 3
call fcn.00497290
test al, al
je 0x51c42e
lea eax, [ebp - 0x105c]
push 0
push eax
call fcn.004c1930
add esp, 8
test al, al
je 0x51c42e
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
cmovae eax, dword [ebp - 0x105c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x51c42e
mov dword [ebp - 0x13a4], eax
lea ecx, [ebp - 0x13a4]
mov dword [ebp - 0x106c], eax
mov eax, dword [ebp - 0x13c4]
push ecx
lea ecx, [ebp - 0x106c]
push ecx
mov eax, dword [eax + 0xdc]
push 0
push 0
push eax
mov esi, dword [eax]
mov esi, dword [esi + 0x40]
mov ecx, esi
call dword [0x5677a4]
call esi
test eax, eax
js 0x51c1c9
mov ecx, dword [ebp - 0x13a4]
test ecx, ecx
je 0x51c1cf
push 0x30
lea eax, [ebp - 0x1040]
push 0
push eax
call fcn.005290f0
add esp, 0xc
mov dword [ebp - 0x1040], 0x37050003
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
mov dword [ebp - 0x1038], 1
cmovae eax, dword [ebp - 0x105c]
push eax
mov dword [ebp - 0x1028], 0
mov dword [ebp - 0x1018], 0
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
test eax, eax
je 0x51c025
mov dword [ebp - 0x1030], 0x3704001f
mov dword [ebp - 0x1028], eax
push 0x2b4
lea eax, [ebp - 0x13a0]
push 0
push eax
call fcn.005290f0
add esp, 0xc
lea ecx, [ebp - 0x13a0]
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
cmovae eax, dword [ebp - 0x105c]
push 0x200
push 0x2b4
push ecx
push 0
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test eax, eax
je 0x51c083
lea eax, [ebp - 0x1394]
mov dword [ebp - 0x1020], 0x3001001f
mov dword [ebp - 0x1018], eax
mov eax, dword [ebp - 0x13a4]
lea ecx, [ebp - 0x13ac]
push ecx
mov dword [ebp - 0x13ac], 0
lea ecx, [ebp - 0x1040]
push ecx
mov esi, dword [eax]
push 3
push eax
mov esi, dword [esi + 0x20]
mov ecx, esi
call dword [0x5677a4]
call esi
test eax, eax
js 0x51c1c9
mov ecx, dword [ebp - 0x13ac]
test ecx, ecx
je 0x51c1c9
xor eax, eax
mov dword [ebp - 0x13b4], eax
cmp dword [ecx], eax
jbe 0x51c1af
xor edx, edx
mov dword [ebp - 0x13b8], edx
cmp dword [edx + ecx + 0xc], 0x80040103
movq xmm0, qword [edx + ecx + 4]
movq qword [ebp - 0x13d8], xmm0
jne 0x51c197
push dword [ebp - 0x1028]
call fcn.0051a140
push dword [ebp - 0x1018]
mov esi, eax
mov dword [ebp - 0x13bc], esi
call fcn.0051a140
add esp, 8
mov edi, eax
test esi, esi
je 0x51c178
test edi, edi
je 0x51c16f
mov eax, dword [ebp - 0x13a4]
lea ecx, [ebp - 0x1040]
push 0
mov dword [ebp - 0x1028], esi
mov dword [ebp - 0x1030], 0x3704001e
mov dword [ebp - 0x1020], 0x3001001e
mov dword [ebp - 0x1018], edi
mov esi, dword [eax]
push ecx
push 3
push eax
mov esi, dword [esi + 0x20]
mov ecx, esi
call dword [0x5677a4]
call esi
mov esi, dword [ebp - 0x13bc]
push esi
call fcn.004097f9
add esp, 4
test edi, edi
je 0x51c185
push edi
call fcn.004097f9
add esp, 4
mov edx, dword [ebp - 0x13b8]
mov eax, dword [ebp - 0x13b4]
mov ecx, dword [ebp - 0x13ac]
inc eax
add edx, 0xc
mov dword [ebp - 0x13b4], eax
mov dword [ebp - 0x13b8], edx
cmp eax, dword [ecx]
jb 0x51c0e1
mov eax, dword [ebp - 0x13c4]
push ecx
mov eax, dword [eax + 0xac]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x5677a4]
call esi
mov ecx, dword [ebp - 0x13a4]
mov dword [ebp - 0x13a8], 0
test ecx, ecx
je 0x51c3f7
mov esi, dword [ecx]
lea eax, [ebp - 0x13a8]
push eax
push 3
push 1
mov esi, dword [esi + 0x1c]
push 0x5a6d70
push 0x37010102
push ecx
mov ecx, esi
call dword [0x5677a4]
call esi
test eax, eax
js 0x51c3f1
cmp dword [ebp - 0x13a8], 0
je 0x51c3f1
push 0x40
lea eax, [ebp - 0x10ec]
push 0
push eax
call fcn.005290f0
add esp, 0xc
lea eax, [ebp - 0x105c]
cmp dword [ebp - 0x1048], 8
lea ecx, [ebp - 0x10ec]
cmovae eax, dword [ebp - 0x105c]
push 0
push 0
push 0
push 0
push eax
call fcn.00492ac0
lea ecx, [ebp - 0x10ec]
mov byte [ebp - 4], 4
call fcn.00497290
test al, al
je 0x51c283
lea eax, [ebp - 0x10ec]
push eax
lea ecx, [ebp - 0x10ac]
call fcn.00497420
test al, al
je 0x51c283
xor edi, edi
jmp 0x51c288
mov edi, 0x8004000c
mov dword [ebp - 0x13b4], edi
test edi, edi
js 0x51c3a2
push 0x1000
lea eax, [ebp - 0x1010]
push 0
push eax
call fcn.005290f0
add esp, 0xc
mov dword [ebp - 0x1044], 0
lea eax, [ebp - 0x1044]
push 0
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
push dword [ebp - 0x10ec]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x51c3a2
nop
mov ecx, dword [ebp - 0x1044]
test ecx, ecx
je 0x51c3a2
lea esi, [ebp - 0x1010]
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp - 0x13a8]
lea edx, [ebp - 0x13b0]
push edx
mov dword [ebp - 0x13b0], 0
push ecx
mov edi, dword [eax]
push esi
push eax
mov edi, dword [edi + 0x10]
mov ecx, edi
call dword [0x5677a4]
call edi
mov edx, dword [ebp - 0x13b0]
mov edi, eax
mov dword [ebp - 0x13b4], edi
test edx, edx
je 0x51c397
mov ecx, dword [ebp - 0x1044]
cmp edx, ecx
ja 0x51c397
test edi, edi
js 0x51c3a2
sub ecx, edx
add esi, edx
mov dword [ebp - 0x1044], ecx
test ecx, ecx
jne 0x51c300
push 0x1000
push ecx
lea eax, [ebp - 0x1010]
push eax
call fcn.005290f0
add esp, 0xc
lea eax, [ebp - 0x1044]
push 0
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
push dword [ebp - 0x10ec]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x51c2e0
jmp 0x51c3a2
mov edi, 0x8004000d
mov dword [ebp - 0x13b4], edi
mov eax, dword [ebp - 0x13a8]
push 0
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x20]
mov ecx, esi
call dword [0x5677a4]
call esi
mov eax, dword [ebp - 0x13a8]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x5677a4]
call esi
lea ecx, [ebp - 0x10ec]
mov dword [ebp - 0x13a8], 0
mov byte [ebp - 4], 3
call fcn.00474c20
mov ecx, dword [ebp - 0x13a4]
jmp 0x51c402
mov ecx, dword [ebp - 0x13a4]
mov edi, 0x80004005
mov dword [ebp - 0x13b4], edi
test ecx, ecx
je 0x51c42e
mov eax, dword [ecx]
push 0
push ecx
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0x5677a4]
call esi
mov eax, dword [ebp - 0x13a4]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x5677a4]
call esi
lea ecx, [ebp - 0x10ac]
call fcn.00474c20
lea ecx, [ebp - 0x105c]
mov byte [ebp - 4], 0
call fcn.00408e50
mov ecx, dword [ebp - 0x13c8]
mov edx, dword [ebp - 0x13cc]
inc ecx
add edx, 0x18
mov dword [ebp - 0x13c8], ecx
mov dword [ebp - 0x13cc], edx
cmp ecx, dword [ebp - 0x13c0]
jb 0x51bdc5
mov esi, dword [ebp - 0x1068]
mov dword [ebp - 4], 5
test esi, esi
je 0x51c4ed
mov eax, dword [ebp - 0x1064]
cmp esi, eax
je 0x51c4aa
mov edi, eax
nop dword [eax]
mov ecx, esi
call fcn.00408e50
add esi, 0x18
cmp esi, edi
jne 0x51c490
mov esi, dword [ebp - 0x1068]
mov edi, dword [ebp - 0x13b4]
mov ecx, dword [ebp - 0x1060]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x51c4e3
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x51c50a
push ecx
push esi
call fcn.004097e6
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040154f
mov esp, ebp
pop ebp
ret
call fcn.0052cae1
int3