Function at 0x10005a4e
Capabilities:
Check if file exists
Get file attributes

Disassembly:
sub esp, 0x118
push ebx
push ebp
push esi
xor ebx, ebx
push edi
mov ebp, ecx
mov byte [esp + 0x13], bl
call fcn.100054fc
mov esi, dword [sym.imp.KERNEL32.dll_ResetEvent]
or dword [ebp], 0xffffffff
push ebx
mov dword [esp + 0x1c], eax
mov dword [ebp + 0x10], ebx
call esi
test eax, eax
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
je 0x10005a86
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push 8
lea eax, [ebp + 0x14]
push ebx
push eax
mov dword [ebp + 4], 0xdeadbeef
call fcn.100082d0
add esp, 0xc
push ebx
call esi
test eax, eax
je 0x10005ab8
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
call fcn.10005488
push dword [esp + 0x1c]
mov dword [ebp + 0x20], eax
push eax
call fcn.100081d0
add esp, 0xc
push ebx
call esi
test eax, eax
je 0x10005af5
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push dword [ebp + 0x20]
call fcn.10008330
add eax, dword [ebp + 0x20]
pop ecx
push ebx
mov dword [esp + 0x18], eax
call esi
test eax, eax
je 0x10005b21
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov eax, dword [esp + 0x14]
jmp 0x10005b3f
cmp byte [eax], 0x5c
je 0x10005b44
dec eax
cmp eax, dword [ebp + 0x20]
ja 0x10005b39
inc eax
push ebx
mov dword [esp + 0x18], eax
call esi
test eax, eax
je 0x10005b53
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push dword [esp + 0x14]
mov dword [ebp + 8], ebx
push ebx
call fcn.10006828
pop ecx
pop ecx
push ebx
mov dword [ebp + 0x1c], eax
call esi
test eax, eax
je 0x10005b81
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov eax, dword [ebp + 0x1c]
cmp eax, ebx
je 0x10005ff6
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ebx
call esi
test eax, eax
je 0x10005bb1
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push 1
push ebx
push 1
push dword [ebp + 0x20]
call fcn.1000791a
add esp, 0x10
push ebx
call esi
test eax, eax
je 0x10005bdd
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [esp + 0x28], 0x5e
mov byte [esp + 0x29], 0x24
mov byte [esp + 0x2a], 0x6a
call esi
test eax, eax
je 0x10005c08
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [esp + 0x2b], 0xa
mov byte [esp + 0x2c], 0x59
call esi
test eax, eax
je 0x10005c2e
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [esp + 0x2d], 0x64
mov byte [esp + 0x2e], 0x40
mov byte [esp + 0x2f], 3
call esi
test eax, eax
je 0x10005c59
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [esp + 0x30], 0x5e
mov byte [esp + 0x31], 0x69
mov byte [esp + 0x32], 0xd
mov byte [esp + 0x33], 0x62
call esi
test eax, eax
je 0x10005c89
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [esp + 0x34], 0x68
mov byte [esp + 0x35], 0x23
call esi
test eax, eax
je 0x10005caf
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [esp + 0x36], 0x66
mov byte [esp + 0x37], 0xb
mov byte [esp + 0x38], 0x4c
call esi
test eax, eax
je 0x10005cda
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [esp + 0x39], 0x7b
mov byte [esp + 0x3a], 0x51
mov byte [esp + 0x3b], 0x64
mov byte [esp + 0x3c], 0x4b
mov byte [esp + 0x3d], 0x64
mov byte [esp + 0x3e], 0x68
call esi
test eax, eax
je 0x10005d14
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [esp + 0x3f], 0x6a
mov byte [esp + 0x40], 0x5b
mov byte [esp + 0x41], 0x30
mov byte [esp + 0x42], 6
call esi
test eax, eax
je 0x10005d44
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x43], 0x76
mov byte [esp + 0x44], bl
call fcn.10008330
push eax
mov dword [ebp + 0xc], eax
call fcn.10005488
push dword [ebp + 0xc]
lea ecx, [esp + 0x30]
push ecx
push eax
mov dword [ebp + 8], eax
call fcn.100084d0
add esp, 0x14
push ebx
call esi
test eax, eax
je 0x10005d90
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
push 0x80000000
push 3
push ebx
push 1
push 0xc0000000
push dword [ebp + 0x20]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push ebx
mov dword [ebp], eax
call esi
test eax, eax
je 0x10005dc8
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov eax, dword [ebp]
cmp eax, 0xffffffff
je 0x10005f57
push 8
lea ecx, [ebp + 0x14]
push ecx
push eax
call fcn.1000698b
add esp, 0xc
test al, al
je 0x10005f3b
push 4
lea eax, [ebp + 0x14]
push str.STOR
push eax
call fcn.100083c0
add esp, 0xc
test eax, eax
jne 0x10005f3b
push ebx
call esi
test eax, eax
je 0x10005e22
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov eax, dword [ebp + 0x18]
lea eax, [eax + eax*8]
shl eax, 2
push eax
mov byte [esp + 0x17], 1
call fcn.10005488
cmp dword [ebp + 0x18], ebx
pop ecx
mov dword [ebp + 0x10], eax
mov dword [esp + 0x18], ebx
jbe 0x10005f3b
mov dword [esp + 0x14], ebx
push ebx
call esi
test eax, eax
je 0x10005e67
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov eax, dword [ebp + 0x10]
add eax, dword [esp + 0x14]
push 4
push eax
push dword [ebp]
call fcn.1000698b
add esp, 0xc
test al, al
je 0x10005eff
mov eax, dword [esp + 0x14]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], eax
push ebx
call esi
test eax, eax
je 0x10005ea8
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov eax, dword [ebp + 0x10]
mov ecx, dword [esp + 0x1c]
lea eax, [ecx + eax + 4]
push eax
mov ecx, ebp
call fcn.10005692
test al, al
je 0x10005ee3
inc dword [esp + 0x20]
add dword [esp + 0x1c], 8
cmp dword [esp + 0x20], 4
jl 0x10005e9e
jmp 0x10005f03
push ebx
call esi
test eax, eax
je 0x10005eed
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov byte [esp + 0x13], bl
push ebx
call esi
test eax, eax
je 0x10005f0d
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
cmp byte [esp + 0x13], bl
je 0x10005f3b
inc dword [esp + 0x18]
mov eax, dword [esp + 0x18]
add dword [esp + 0x14], 0x24
cmp eax, dword [ebp + 0x18]
jb 0x10005e5d
push ebx
call esi
test eax, eax
je 0x10005f45
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call esi
test eax, eax
je 0x10005f61
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
cmp byte [esp + 0x13], bl
jne 0x10005ff6
push 8
lea eax, [ebp + 0x14]
push ebx
push eax
call fcn.100082d0
mov eax, dword [ebp]
add esp, 0xc
cmp eax, 0xffffffff
je 0x10005f97
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
test eax, eax
je 0x10005fa1
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
push 0x80000000
push 2
push ebx
push 1
push 0xc0000000
push dword [ebp + 0x20]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push ebx
mov dword [ebp], eax
call esi
test eax, eax
je 0x10005fd9
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
cmp dword [ebp], 0xffffffff
je 0x10005ff6
mov byte [esp + 0x13], 1
push ebx
call esi
test eax, eax
je 0x10006000
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov al, byte [esp + 0x13]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x118
ret