Function at 0x5970cc
Capabilities:
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0
push ebx
push esi
push edi
mov esi, dword [ebp + 8]
add esi, 0xfffffff0
xor eax, eax
push ebp
push 0x597322
push dword fs:[eax]
mov dword fs:[eax], esp
xor ebx, ebx
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
mov eax, dword [eax + 8]
mov ecx, 1
mov edx, 0xc0000000
call fcn.00660d68
mov edi, eax
mov eax, dword [esi]
mov dword [eax + 0x15c], edi
inc edi
je 0x597163
call fcn.005397ec
test byte [eax + 0x54], 8
je 0x59714a
mov eax, dword [esi]
call fcn.005bc984
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
mov eax, dword [eax + 8]
mov ecx, 1
mov edx, 0x80000000
call fcn.00660d68
mov edx, dword [esi]
mov dword [edx + 0x15c], eax
mov eax, dword [esi]
mov byte [eax + 0x3ee], 1
mov eax, dword [ebp + 8]
add eax, 0xffffffd4
mov edx, dword [ebp + 8]
mov edx, dword [edx - 8]
mov edx, dword [edx + 8]
call fcn.004038bc
jmp 0x59730a
call sub.kernel32.dll_GetLastError
cmp eax, 0x20
jne 0x59720c
mov eax, dword [esi]
cmp byte [eax + 0x456], 0
jne 0x5971be
call fcn.005397ec
test byte [eax + 0x54], 0x40
jne 0x5971be
mov al, 0xa
call fcn.00626064
test al, al
jne 0x5971be
lea ecx, [ebp - 4]
mov eax, dword [ebp + 8]
mov edx, dword [eax - 8]
mov edx, dword [edx + 8]
mov eax, 0x597334
call fcn.0065d968
mov eax, dword [ebp - 4]
xor ecx, ecx
mov dl, 3
call fcn.00629794
cmp ax, 7
je 0x59730c
mov eax, dword [ebp + 8]
push eax
call fcn.005668bc
pop ecx
test al, al
je 0x59730c
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
mov ecx, 1
mov edx, 0xc0000000
call fcn.00660d68
mov edx, dword [esi]
mov dword [edx + 0x15c], eax
mov eax, dword [ebp + 8]
add eax, 0xffffffd4
mov edx, dword [ebp + 8]
mov edx, dword [edx - 4]
call fcn.004038bc
mov eax, dword [esi]
mov byte [eax + 0x3ed], 1
jmp 0x59730a
call sub.kernel32.dll_GetLastError
cmp eax, 5
je 0x597224
call sub.kernel32.dll_GetLastError
cmp eax, 0x41
jne 0x5972d8
mov eax, dword [ebp + 8]
mov eax, dword [eax - 8]
mov eax, dword [eax + 8]
mov ecx, 1
mov edx, 0x80000000
call fcn.00660d68
mov edi, eax
mov eax, dword [esi]
mov dword [eax + 0x15c], edi
inc edi
jne 0x59727f
lea ecx, [ebp - 4]
mov eax, dword [ebp + 8]
mov edx, dword [eax - 8]
mov edx, dword [edx + 8]
mov eax, 0x597368
call fcn.0065d968
mov eax, dword [ebp - 4]
mov cx, word [0x597380]
mov dl, 1
call fcn.0062941c
cmp ax, 2
je 0x59730c
jmp 0x5970ea
mov eax, dword [esi]
mov byte [eax + 0x3ee], 1
mov eax, dword [ebp + 8]
add eax, 0xffffffd4
mov edx, dword [ebp + 8]
mov edx, dword [edx - 8]
mov edx, dword [edx + 8]
call fcn.004038bc
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x2c]
push eax
call sub.kernel32.dll_GetFileAttributesW
test al, 1
jne 0x59730a
call fcn.005397ec
mov eax, dword [eax + 0x78]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 0x2c]
mov ecx, dword [eax]
call dword [ecx + 0x44]
test eax, eax
jge 0x59730a
call fcn.005397ec
mov eax, dword [eax + 0x78]
mov edx, dword [ebp + 8]
mov edx, dword [edx - 0x2c]
mov ecx, dword [eax]
call dword [ecx + 0x30]
jmp 0x59730a
lea ecx, [ebp - 4]
mov eax, dword [ebp + 8]
mov edx, dword [eax - 8]
mov edx, dword [edx + 8]
mov eax, 0x597368
call fcn.0065d968
mov eax, dword [ebp - 4]
mov cx, word [0x597380]
mov dl, 1
call fcn.0062941c
cmp ax, 2
je 0x59730c
jmp 0x5970ea
mov bl, 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x597329
lea eax, [ebp - 4]
call fcn.00403274
ret