Function at 0x52e0e0
Capabilities:
Get file system object information
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57e797
mov eax, dword fs:[0]
push eax
mov eax, 0x13c0
call fcn.0053d080
mov eax, dword [0x5edd38]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x13bc], esi
cmp dword [esi + 0xdc], 0
jne 0x52e12c
mov eax, 0x80004005
jmp 0x52e9d2
cmp dword [esi + 0x5c], 0
jne 0x52e139
xor eax, eax
jmp 0x52e9d2
xorps xmm0, xmm0
mov dword [ebp - 0x1060], 0
movq qword [ebp - 0x1068], xmm0
mov dword [ebp - 0x1068], 0
mov dword [ebp - 0x1064], 0
mov dword [ebp - 0x1060], 0
push 1
xor eax, eax
mov dword [ebp - 4], 0
push 0x591b34
lea ecx, [ebp - 0x105c]
mov dword [ebp - 0x104c], 0
mov dword [ebp - 0x1048], 7
mov word [ebp - 0x105c], ax
call fcn.00408f30
lea eax, [ebp - 0x1068]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x105c]
push eax
lea eax, [esi + 0x4c]
push eax
call fcn.0042d500
mov edx, eax
add esp, 0xc
mov dword [ebp - 0x13b4], edx
mov ecx, dword [ebp - 0x1048]
mov byte [ebp - 4], 2
cmp ecx, 8
jb 0x52e1f0
inc ecx
push ecx
push dword [ebp - 0x105c]
lea ecx, [ebp - 0x105c]
call fcn.0040a2e0
mov edx, dword [ebp - 0x13b4]
xor eax, eax
xor edi, edi
mov word [ebp - 0x105c], ax
mov byte [ebp - 4], al
test edx, edx
je 0x52e8fb
xor ecx, ecx
mov edx, 0x7ffffffe
lfence
mov dword [ebp - 0x13c0], ecx
mov esi, dword [ebp - 0x1068]
add esi, ecx
mov dword [ebp - 0x104c], 0
mov dword [ebp - 0x1048], 0
cmp dword [esi + 0x14], 8
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x1044], eax
jb 0x52e243
mov esi, dword [esi]
cmp eax, 8
jae 0x52e269
movups xmm0, xmmword [esi]
mov dword [ebp - 0x104c], eax
mov eax, 7
mov dword [ebp - 0x1048], 7
movups xmmword [ebp - 0x105c], xmm0
jmp 0x52e2bd
or eax, 7
lea ecx, [ebp - 0x105c]
cmp eax, 0x7ffffffe
cmova eax, edx
mov dword [ebp - 0x13a8], eax
inc eax
push eax
call fcn.00409030
mov ecx, dword [ebp - 0x1044]
mov dword [ebp - 0x105c], eax
lea ecx, [ecx*2 + 2]
push ecx
push esi
push eax
call fcn.0053e840
mov eax, dword [ebp - 0x1044]
add esp, 0xc
mov dword [ebp - 0x104c], eax
mov eax, dword [ebp - 0x13a8]
mov dword [ebp - 0x1048], eax
cmp dword [ebp - 0x1044], 0
mov byte [ebp - 4], 3
jne 0x52e2d3
mov byte [ebp - 4], 4
jmp 0x52e8be
push 0
lea eax, [ebp - 0x105c]
push 0
push eax
call fcn.0042bb50
add esp, 0xc
test al, al
jne 0x52e2f3
mov byte [ebp - 4], 5
jmp 0x52e8b8
push 0x40
lea eax, [ebp - 0x10ac]
push 0
push eax
call fcn.0053f340
add esp, 0xc
lea ecx, [ebp - 0x105c]
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
cmovae eax, dword [ebp - 0x105c]
push 0
push 0
push 0
push ecx
push eax
lea ecx, [ebp - 0x10ac]
call fcn.0049b6f0
lea ecx, [ebp - 0x10ac]
mov byte [ebp - 4], 6
call fcn.004a0950
test al, al
jne 0x52e365
lea ecx, [ebp - 0x10a8]
call fcn.0044df70
lea ecx, [ebp - 0x10ac]
call fcn.0044df70
mov byte [ebp - 4], 7
jmp 0x52e8b8
push 0
lea eax, [ebp - 0x105c]
push 0
push eax
call fcn.004ce130
add esp, 0xc
test al, al
jne 0x52e39b
lea ecx, [ebp - 0x10a8]
call fcn.0044df70
lea ecx, [ebp - 0x10ac]
call fcn.0044df70
mov byte [ebp - 4], 8
jmp 0x52e8b8
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
cmovae eax, dword [ebp - 0x105c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x52e3d9
lea ecx, [ebp - 0x10a8]
call fcn.0044df70
lea ecx, [ebp - 0x10ac]
call fcn.0044df70
mov byte [ebp - 4], 9
jmp 0x52e8b8
mov eax, dword [ebp - 0x13bc]
lea ecx, [ebp - 0x13a4]
push ecx
lea ecx, [ebp - 0x106c]
mov dword [ebp - 0x13a4], 0
push ecx
mov eax, dword [eax + 0xdc]
mov dword [ebp - 0x106c], 0
push 0
push 0
mov esi, dword [eax]
push eax
mov esi, dword [esi + 0x40]
mov ecx, esi
call dword [0x5817c0]
call esi
test eax, eax
js 0x52e648
mov ecx, dword [ebp - 0x13a4]
test ecx, ecx
je 0x52e64e
push 0x30
lea eax, [ebp - 0x1040]
push 0
push eax
call fcn.0053f340
add esp, 0xc
mov dword [ebp - 0x1040], 0x37050003
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
mov dword [ebp - 0x1038], 1
cmovae eax, dword [ebp - 0x105c]
push eax
mov dword [ebp - 0x1028], 0
mov dword [ebp - 0x1018], 0
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
test eax, eax
je 0x52e49b
mov dword [ebp - 0x1030], 0x3704001f
mov dword [ebp - 0x1028], eax
push 0x2b4
lea eax, [ebp - 0x13a0]
push 0
push eax
call fcn.0053f340
add esp, 0xc
lea ecx, [ebp - 0x13a0]
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
cmovae eax, dword [ebp - 0x105c]
push 0x200
push 0x2b4
push ecx
push 0
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test eax, eax
je 0x52e4f9
lea eax, [ebp - 0x1394]
mov dword [ebp - 0x1020], 0x3001001f
mov dword [ebp - 0x1018], eax
mov eax, dword [ebp - 0x13a4]
lea ecx, [ebp - 0x13b0]
push ecx
mov dword [ebp - 0x13b0], 0
lea ecx, [ebp - 0x1040]
push ecx
mov esi, dword [eax]
push 3
push eax
mov esi, dword [esi + 0x20]
mov ecx, esi
call dword [0x5817c0]
call esi
test eax, eax
js 0x52e648
mov ecx, dword [ebp - 0x13b0]
test ecx, ecx
je 0x52e648
xor eax, eax
mov dword [ebp - 0x1044], eax
cmp dword [ecx], eax
jbe 0x52e62e
xor edx, edx
mov dword [ebp - 0x13a8], edx
nop word [eax + eax]
cmp dword [edx + ecx + 0xc], 0x80040103
movq xmm0, qword [edx + ecx + 4]
movq qword [ebp - 0x13cc], xmm0
jne 0x52e616
push dword [ebp - 0x1028]
call fcn.0052c620
push dword [ebp - 0x1018]
mov esi, eax
mov dword [ebp - 0x13b8], esi
call fcn.0052c620
add esp, 8
mov edi, eax
test esi, esi
je 0x52e5f7
test edi, edi
je 0x52e5ee
mov eax, dword [ebp - 0x13a4]
lea ecx, [ebp - 0x1040]
push 0
mov dword [ebp - 0x1028], esi
mov dword [ebp - 0x1030], 0x3704001e
mov dword [ebp - 0x1020], 0x3001001e
mov dword [ebp - 0x1018], edi
mov esi, dword [eax]
push ecx
push 3
push eax
mov esi, dword [esi + 0x20]
mov ecx, esi
call dword [0x5817c0]
call esi
mov esi, dword [ebp - 0x13b8]
push esi
call fcn.00409f38
add esp, 4
test edi, edi
je 0x52e604
push edi
call fcn.00409f38
add esp, 4
mov edx, dword [ebp - 0x13a8]
mov eax, dword [ebp - 0x1044]
mov ecx, dword [ebp - 0x13b0]
inc eax
add edx, 0xc
mov dword [ebp - 0x1044], eax
mov dword [ebp - 0x13a8], edx
cmp eax, dword [ecx]
jb 0x52e560
mov eax, dword [ebp - 0x13bc]
push ecx
mov eax, dword [eax + 0xac]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x5817c0]
call esi
mov ecx, dword [ebp - 0x13a4]
mov dword [ebp - 0x13ac], 0
test ecx, ecx
je 0x52e86d
mov esi, dword [ecx]
lea eax, [ebp - 0x13ac]
push eax
push 3
push 1
mov esi, dword [esi + 0x1c]
push 0x5c8290
push 0x37010102
push ecx
mov ecx, esi
call dword [0x5817c0]
call esi
test eax, eax
js 0x52e867
cmp dword [ebp - 0x13ac], 0
je 0x52e867
push 0x40
lea eax, [ebp - 0x10ec]
push 0
push eax
call fcn.0053f340
add esp, 0xc
lea eax, [ebp - 0x105c]
cmp dword [ebp - 0x1048], 8
lea ecx, [ebp - 0x10ec]
cmovae eax, dword [ebp - 0x105c]
push 0
push 0
push 0
push 0
push eax
call fcn.0049b6f0
lea ecx, [ebp - 0x10ec]
mov byte [ebp - 4], 0xa
call fcn.004a0950
test al, al
je 0x52e808
lea eax, [ebp - 0x10ec]
push eax
lea ecx, [ebp - 0x10ac]
call fcn.004a0ae0
test al, al
je 0x52e808
push 0x1000
xor edi, edi
lea eax, [ebp - 0x1010]
push edi
push eax
call fcn.0053f340
add esp, 0xc
mov dword [ebp - 0x1044], edi
lea eax, [ebp - 0x1044]
push edi
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
push dword [ebp - 0x10ec]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x52e80d
nop dword [eax + eax]
mov ecx, dword [ebp - 0x1044]
test ecx, ecx
je 0x52e80d
lea esi, [ebp - 0x1010]
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp - 0x13ac]
lea edx, [ebp - 0x13a8]
push edx
mov dword [ebp - 0x13a8], 0
push ecx
mov edi, dword [eax]
push esi
push eax
mov edi, dword [edi + 0x10]
mov ecx, edi
call dword [0x5817c0]
call edi
mov edx, dword [ebp - 0x13a8]
mov edi, eax
test edx, edx
je 0x52e801
mov ecx, dword [ebp - 0x1044]
cmp edx, ecx
ja 0x52e801
test edi, edi
js 0x52e80d
sub ecx, edx
add esi, edx
mov dword [ebp - 0x1044], ecx
test ecx, ecx
jne 0x52e770
push 0x1000
push ecx
lea eax, [ebp - 0x1010]
push eax
call fcn.0053f340
add esp, 0xc
lea eax, [ebp - 0x1044]
push 0
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
push dword [ebp - 0x10ec]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x52e750
jmp 0x52e80d
mov edi, 0x8004000d
jmp 0x52e80d
mov edi, 0x8004000c
mov eax, dword [ebp - 0x13ac]
push 0
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x20]
mov ecx, esi
call dword [0x5817c0]
call esi
mov eax, dword [ebp - 0x13ac]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x5817c0]
call esi
lea ecx, [ebp - 0x10e8]
mov dword [ebp - 0x13ac], 0
mov byte [ebp - 4], 6
call fcn.0044df70
lea ecx, [ebp - 0x10ec]
call fcn.0044df70
mov ecx, dword [ebp - 0x13a4]
jmp 0x52e872
mov ecx, dword [ebp - 0x13a4]
mov edi, 0x80004005
test ecx, ecx
je 0x52e89e
mov eax, dword [ecx]
push 0
push ecx
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0x5817c0]
call esi
mov eax, dword [ebp - 0x13a4]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x5817c0]
call esi
lea ecx, [ebp - 0x10a8]
call fcn.0044df70
lea ecx, [ebp - 0x10ac]
call fcn.0044df70
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x1048]
cmp eax, 8
jb 0x52e8d6
inc eax
lea ecx, [ebp - 0x105c]
push eax
push dword [ebp - 0x105c]
call fcn.0040a2e0
mov ecx, dword [ebp - 0x13c0]
mov edx, 0x7ffffffe
add ecx, 0x18
mov byte [ebp - 4], 0
sub dword [ebp - 0x13b4], 1
mov dword [ebp - 0x13c0], ecx
jne 0x52e216
mov esi, dword [ebp - 0x1068]
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x52e9d0
mov eax, dword [ebp - 0x1064]
mov dword [ebp - 0x13b8], eax
cmp esi, eax
je 0x52e980
mov ecx, dword [esi + 0x14]
cmp ecx, 8
jb 0x52e966
mov eax, dword [esi]
lea ecx, [ecx*2 + 2]
mov dword [ebp - 4], 0xc
cmp ecx, 0x1000
jb 0x52e956
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52e9ed
mov eax, edx
push ecx
push eax
call fcn.00409f25
mov eax, dword [ebp - 0x13b8]
add esp, 8
xor ecx, ecx
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], cx
add esi, 0x18
cmp esi, eax
jne 0x52e920
mov ecx, dword [ebp - 0x1060]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x1068]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
mov dword [ebp - 4], 0xd
cmp ecx, 0x1000
jb 0x52e9c6
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x52e9ed
push ecx
push esi
call fcn.00409f25
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00401682
mov esp, ebp
pop ebp
ret
call fcn.0054223b
int3