Function at 0x6101b240
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
xor edi, edi
push esi
push ebx
sub esp, 0x5c
mov eax, dword [0x6110742c]
test byte [0x6110a820], 1
mov dword [esp + 0x3c], edi
mov ebx, dword [esp + 0x70]
mov esi, dword [esp + 0x74]
mov dword [esp + 0x40], eax
mov eax, dword [0x61107430]
mov dword [esp + 0x44], eax
mov eax, dword [0x61107434]
mov dword [esp + 0x48], eax
jne 0x6101b500
lea eax, [ebx + 0x90]
mov dword [esp + 0x30], eax
movzx eax, byte [ebx + 5]
and eax, 7
cmp eax, 1
jl 0x6101b3f9
cmp eax, 2
jg 0x6101b3f0
mov dword [ebx + 0xc], 0x80000000
test esi, 0x400
jne 0x6101b430
mov eax, esi
shr eax, 9
and al, 1
cmp al, 1
sbb edi, edi
add edi, 4
test esi, 0x800
jne 0x6101b460
test esi, 8
je 0x6101b2d9
or byte [ebx + 4], 0x40
mov eax, dword [0x611630ec]
mov ecx, pe_nt_image_headers32
test esi, 0x100000
mov dword [esp + 0x38], ecx
mov eax, dword [eax + 0xc]
mov dword [esp + 0x34], eax
je 0x6101b2ff
mov eax, 0x2000080
mov dword [esp + 0x38], eax
test esi, 0x2000
je 0x6101b30f
or dword [esp + 0x38], 0x80000000
test esi, 0x80000
je 0x6101b31f
or dword [esp + 0x38], 0x20000000
cmp word [ebx + 0x72], 0x75
je 0x6101b540
test esi, 0x200
je 0x6101b33f
cmp dword [ebx + 0x70], 0xf7
je 0x6101b616
mov dword [esp + 0x10], edi
mov eax, dword [esp + 0x38]
xor edx, edx
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], eax
lea eax, [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 8], eax
mov eax, dword [ebx + 0xc]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call sub.KERNEL32.dll_CreateFileA
sub esp, 0x1c
cmp eax, 0xffffffff
mov ebp, eax
je 0x6101b5c4
mov dword [ebx + 0x10], ebp
mov eax, dword [ebx + 0x60]
test al, 2
jne 0x6101b476
mov dword [esp + 4], esi
shr eax, 0x19
and al, 1
mov dword [esp], ebx
cmp al, 1
sbb eax, eax
not eax
and eax, 0x20000
mov dword [esp + 8], eax
call method.fhandler_base.set_flags_int__int_
mov eax, 1
mov dword [esp + 0x3c], eax
movzx eax, word [ebx + 4]
mov word [ebx + 8], ax
movzx edx, byte [0x6110a820]
and edx, 1
test dl, dl
jne 0x6101b560
jne 0x6101b4b3
lea esi, [esi]
mov eax, dword [esp + 0x3c]
add esp, 0x5c
pop ebx
pop esi
pop edi
pop ebp
ret
cmp eax, 4
jle 0x6101b550
mov eax, esi
and eax, 3
je 0x6101b2a0
dec eax
sete al
movzx eax, al
dec eax
and eax, 0x80000000
add eax, 0x40000000
mov dword [ebx + 0xc], eax
test esi, 0x400
je 0x6101b2b3
lea esi, [esi]
lea edi, [edi]
test esi, 3
je 0x6101b2b3
mov eax, esi
shr eax, 9
and al, 1
cmp al, 1
sbb edi, edi
and edi, 3
add edi, 2
test esi, 0x800
je 0x6101b2cd
lea esi, [esi]
test esi, 0x200
je 0x6101b2cd
mov edi, 1
jmp 0x6101b2cd
mov dword [esp + 4], esi
mov eax, 0x10000
mov dword [esp + 8], eax
mov dword [esp], ebx
call method.fhandler_base.set_flags_int__int_
movzx eax, word [ebx + 4]
mov ecx, 1
mov dword [esp + 0x3c], ecx
mov word [ebx + 8], ax
movzx eax, byte [0x6110a820]
test al, 1
jne 0x6101b560
test al, 1
je 0x6101b3e0
mov dword [esp + 0x18], esi
mov eax, dword [esp + 0x30]
mov edx, str._d__fhandler_base::open___s___p_
mov dword [esp + 0xc], edx
mov dword [esp], 0x6110a820
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10], eax
mov eax, str.int_fhandler_base::open_9x_int__mode_t_
mov dword [esp + 8], eax
mov eax, 0x10
mov dword [esp + 4], eax
call method.strace.prntf_unsigned_int__char_const__char_const__..._
mov eax, dword [esp + 0x3c]
add esp, 0x5c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0x14], esi
lea eax, [ebx + 0x90]
mov dword [esp + 0x30], eax
mov dword [esp + 0x10], eax
mov eax, str.__s___p_
mov dword [esp + 0xc], eax
mov eax, str.int_fhandler_base::open_9x_int__mode_t_
mov dword [esp + 8], eax
mov eax, 0x10
mov dword [esp + 4], eax
mov dword [esp], 0x6110a820
call method.strace.prntf_unsigned_int__char_const__char_const__..._
jmp 0x6101b287
or dword [esp + 0x38], 0x40000000
jmp 0x6101b32a
mov dword [ebx + 0xc], 0x80000100
jmp 0x6101b2a7
mov dword [esp + 0x24], edi
mov eax, dword [esp + 0x38]
mov ecx, str._p__CreateFile___s___p___p___p___p___p__0_
mov edx, str.int_fhandler_base::open_9x_int__mode_t_
mov dword [esp + 0x28], eax
lea eax, [esp + 0x40]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x1c], eax
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x10], ebp
mov dword [esp + 0xc], ecx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 8], edx
mov dword [esp], 0x6110a820
mov dword [esp + 0x14], eax
mov eax, 0x40
mov dword [esp + 4], eax
call method.strace.prntf_unsigned_int__char_const__char_const__..._
movzx eax, byte [0x6110a820]
test al, 1
jmp 0x6101b4ad
mov eax, dword [ebx + 0x40]
xor edx, edx
cmp eax, 0xffffffff
je 0x6101b5e0
test al, 0x10
jne 0x6101b668
lea esi, [esi]
lea edi, [edi]
test edx, edx
je 0x6101b649
test esi, 3
je 0x6101b633
test byte [0x6110a820], 1
jne 0x6101b698
call sym.cygwin1.dll___errno
mov edx, dword [sym.cygwin1.dll__impure_ptr]
mov dword [edx], 0x15
mov dword [eax], 0x15
movzx eax, byte [ebx + 4]
jmp 0x6101b63c
test byte [esp + 0x78], 0x92
jne 0x6101b622
or dword [esp + 0x38], 1
mov eax, dword [esp + 0x38]
and eax, 0x31a7
mov dword [ebx + 0x40], eax
jmp 0x6101b33f
movzx eax, byte [ebx + 4]
or al, 0x10
mov byte [ebx + 4], al
test al, 0x10
jne 0x6101b382
jmp 0x6101b49c
call sub.KERNEL32.dll_GetLastError
cmp eax, 6
je 0x6101b672
mov eax, str._ext_build_netrel_src_cygwin_1.5.24_2_winsup_cygwin_fhandler.cc
mov edx, 0x217
call sym.__Z8seterrnoPKci_8
movzx eax, byte [ebx + 4]
jmp 0x6101b63c
mov edx, 1
jmp 0x6101b5e0
test byte [0x6110a820], 1
jne 0x6101b6df
call sym.cygwin1.dll___errno
mov edx, dword [sym.cygwin1.dll__impure_ptr]
mov dword [edx], 2
mov dword [eax], 2
movzx eax, byte [ebx + 4]
jmp 0x6101b63c
mov dword [esp], 0x6110a820
mov eax, 0x15
mov ecx, 0x6111aff0
mov dword [esp + 0x18], eax
mov eax, 0x210
mov edx, 0x40
mov dword [esp + 0x14], eax
mov eax, str.int_fhandler_base::open_9x_int__mode_t_
mov dword [esp + 0x10], eax
mov eax, 0x6111b073
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
call method.strace.prntf_unsigned_int__char_const__char_const__..._
jmp 0x6101b5f9
mov dword [esp], 0x6110a820
mov eax, 2
mov dword [esp + 0x18], eax
mov eax, 0x215
mov dword [esp + 0x14], eax
mov eax, str.int_fhandler_base::open_9x_int__mode_t_
mov dword [esp + 0x10], eax
mov eax, 0x6111b073
mov dword [esp + 0xc], eax
mov eax, 0x6111aff0
mov dword [esp + 8], eax
mov eax, 0x40
mov dword [esp + 4], eax
call method.strace.prntf_unsigned_int__char_const__char_const__..._
jmp 0x6101b67b