Function at 0x452c00
Capabilities:
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x2d0
mov eax, dword [0x4de47c]
mov eax, dword [eax]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov ecx, dword [ecx]
mov dword [ebp - 0x298], ecx
mov dword [ebp - 0x288], ecx
mov dword [ebp - 0x264], 0xaaaaaaaa
mov dword [ebp - 0x268], 0xaaaaaaaa
mov dword [ebp - 0x260], 0x4d430001
lea eax, [ebp - 0x268]
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x258], 8
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
lea eax, [ebp - 0x260]
mov dword [ebp - 0x294], eax
xor edx, edx
mov dword [ebp - 0x290], edx
rol edi, 3
rol edi, 0xd
rol edi, 0x3d
rol edi, 0x33
xchg ebx, ebx
mov eax, dword [ebp - 0x294]
mov edx, dword [ebp - 0x290]
mov dword [ebp - 0x244], 0xaaaaaaaa
mov dword [ebp - 0x248], 0xaaaaaaaa
mov dword [ebp - 0x260], 0x4d430001
lea esi, [ebp - 0x248]
mov dword [ebp - 0x25c], esi
mov dword [ebp - 0x258], 8
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
rol edi, 3
rol edi, 0xd
rol edi, 0x3d
rol edi, 0x33
xchg ebx, ebx
mov edx, dword [ebp - 0x28c]
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 0x10], 4
mov dword [eax + 0xc], 8
call sub.ntdll.dll_NtQueryVolumeInformationFile
sub esp, 0x14
mov dword [ebp - 0x284], eax
test eax, eax
je 0x452e59
jmp 0x452e2b
mov eax, esp
lea esi, [ebp - 0x240]
mov dword [eax], esi
mov dword [eax + 8], 0x20c
mov dword [eax + 4], 0x4ac690
call fcn.004a72a0
mov ecx, dword [ebp - 0x298]
mov dword [ebp - 0x30], 0xaaaaaaaa
mov dword [ebp - 0x34], 0xaaaaaaaa
mov dword [ebp - 0x260], 0x4d430001
lea eax, [ebp - 0x34]
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x258], 8
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
lea eax, [ebp - 0x260]
xor edx, edx
rol edi, 3
rol edi, 0xd
rol edi, 0x3d
rol edi, 0x33
xchg ebx, ebx
mov edx, dword [ebp - 0x2a0]
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 0x10], 9
mov dword [eax + 0xc], 0x20c
call sub.ntdll.dll_NtQueryInformationFile
sub esp, 0x14
mov dword [ebp - 0x280], eax
mov ecx, eax
mov dword [ebp - 0x29c], ecx
sub eax, 0xc000000d
je 0x452ee2
jmp 0x452e0d
mov eax, dword [ebp - 0x29c]
test eax, eax
je 0x452ee0
jmp 0x452eb2
cmp dword [ebp - 0x248], 0x11
jne 0x452e60
jmp 0x452e8e
xor eax, eax
mov dword [ebp - 0x2a4], eax
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
mov eax, dword [0x4de47c]
mov eax, dword [eax]
sub eax, ecx
jne 0x453076
jmp 0x452e49
mov eax, dword [ebp - 0x2a4]
add esp, 0x2d0
pop esi
pop edi
pop ebp
ret
jmp 0x452e20
jmp 0x452d44
xor eax, eax
mov dword [ebp - 0x2a8], eax
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
mov eax, dword [0x4de47c]
mov eax, dword [eax]
sub eax, ecx
jne 0x453076
jmp 0x452e7e
mov eax, dword [ebp - 0x2a8]
add esp, 0x2d0
pop esi
pop edi
pop ebp
ret
jmp 0x452e5b
lea eax, [ebp - 0x240]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x240]
add eax, 4
mov dword [ebp - 0x2ac], eax
setb al
jb 0x452f04
jmp 0x452f27
xor eax, eax
mov dword [ebp - 0x2b0], eax
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
mov eax, dword [0x4de47c]
mov eax, dword [eax]
sub eax, ecx
jne 0x453076
jmp 0x452ed0
mov eax, dword [ebp - 0x2b0]
add esp, 0x2d0
pop esi
pop edi
pop ebp
ret
jmp 0x452e90
mov ecx, str.reached_unreachable_code
mov edx, 0x18
xor eax, eax
lea eax, [0x4ac89c]
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.00401e40
lea ecx, [0x4aa18c]
mov edx, 0x10
xor eax, eax
lea eax, [0x4aa1a0]
mov dword [esp], 0
mov dword [esp + 4], eax
call fcn.00401e40
mov ecx, dword [ebp - 0x2ac]
lea eax, [ebp - 0x240]
add eax, 4
mov dword [ebp - 0x2b4], eax
mov eax, 4
cmp eax, ecx
jbe 0x452f61
jmp 0x452f63
mov eax, dword [ebp - 0x2ac]
mov ecx, eax
sub ecx, 4
mov dword [ebp - 0x2b8], ecx
cmp eax, 0x20c
jbe 0x452f84
jmp 0x452f86
jmp 0x452f47
mov edx, dword [ebp - 0x2ac]
mov ecx, 4
call fcn.00401eb0
mov ecx, dword [ebp - 0x2ac]
mov eax, 4
cmp eax, ecx
jbe 0x452ff7
jmp 0x452ff9
jmp 0x452f73
mov ecx, dword [ebp - 0x2ac]
mov edx, 0x20c
call fcn.00401ee0
mov edx, dword [ebp - 0x2b8]
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp - 0x274], edx
mov dword [ebp - 0x278], ecx
call fcn.0045ed50
mov ecx, edx
mov dword [ebp - 0x2c0], ecx
mov ecx, eax
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x26c], edx
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov esi, str.msys_cygwin__pty
mov eax, 6
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0045ee40
test al, 1
jne 0x453018
jmp 0x453022
jmp 0x452f96
mov edx, dword [ebp - 0x2ac]
mov ecx, 4
call fcn.00401ee0
mov al, byte [ebp - 0x2c1]
test al, 1
jne 0x45308b
jmp 0x4530cf
mov al, 1
mov byte [ebp - 0x2c1], al
jmp 0x453009
mov eax, dword [ebp - 0x2c0]
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov esi, 0x4ac8b0
mov eax, 8
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0045ee40
mov byte [ebp - 0x2c1], al
jmp 0x453009
mov al, byte [ebp - 0x2c3]
mov byte [ebp - 0x2c2], al
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
mov eax, dword [0x4de47c]
mov eax, dword [eax]
sub eax, ecx
jne 0x453076
jmp 0x45307b
call fcn.004a85b0
mov al, byte [ebp - 0x2c2]
add esp, 0x2d0
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp - 0x2c0]
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x18]
mov esi, 0x4ac8c0
mov eax, 4
lea ecx, [ebp - 0x14]
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], eax
call fcn.0045ef40
cmp byte [ebp - 0x10], 0
setne al
mov byte [ebp - 0x2c3], al
jmp 0x453058
xor eax, eax
mov byte [ebp - 0x2c3], al
jmp 0x453058