Function at 0x5b8d40
Capabilities:
Get file attributes
Set file attributes

Disassembly:
sub esp, 0x378
push ebx
push ebp
push esi
mov esi, dword [esp + 0x390]
xor ebx, ebx
push edi
mov edi, dword [esp + 0x38c]
mov dword [esi + 0xb10], ebx
mov dword [esi + 0x1c6], ebx
mov dword [esi + 0x1ca], ebx
mov dword [esi + 0x1ce], ebx
mov dword [esi + 0x1d2], ebx
mov dword [esi + 0x1c2], ebx
mov ecx, dword [edi + 0x46]
lea eax, [esi + 0x3c22]
push ecx
push eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x1c], 0xfffffffd
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [esi + 0x1aa]
lea ebp, [esi + 0x3e36]
cmp eax, ebx
je 0x5b8dc4
push ebx
push 0x18b
call fcn.005bf5c0
jmp 0x5b8de0
mov edx, dword [esi + 0xdec]
mov eax, dword [esi + 0xb30]
push edx
push eax
push ebx
push 0x187
call fcn.005bf5c0
add esp, 8
push eax
push ebp
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [esi + 0xb30]
mov edx, dword [esi + 0xdec]
add esp, 0x10
lea ecx, [eax + 1]
push eax
push edx
push ebp
mov dword [esi + 0xb30], ecx
call fcn.005b77f0
add esp, 0xc
test eax, eax
je 0x5b8e1f
pop edi
pop esi
pop ebp
mov eax, 9
pop ebx
add esp, 0x378
ret
mov eax, dword [edi + 0x46]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [edi + 0x46]
mov dword [edi + 0x18], eax
xor edx, edx
push esi
cmp byte [eax + ecx - 1], 0x2f
mov word [edi + 0x2a], 0xffff
mov eax, dword [esi + 0x1aa]
sete dl
cmp eax, ebx
mov dword [esp + 0x20], edx
je 0x5b8e6e
lea eax, [esp + 0x18]
lea ecx, [esp + 0x1c]
push eax
push ecx
push ebx
call fcn.005c0040
mov ecx, dword [esp + 0x24]
add esp, 0x10
mov dword [edi + 8], eax
mov dword [esp + 0x1c], ebx
jmp 0x5b8eb6
mov ecx, dword [edi + 0x36]
lea edx, [esp + 0x18]
lea eax, [esp + 0x1c]
push edx
push eax
push ecx
call fcn.005c0040
mov ecx, dword [esp + 0x24]
add esp, 0x10
cmp eax, ebx
je 0x5b8f26
cmp ecx, 0xfffffffe
jl 0x5b8f26
mov dword [edi + 8], eax
cmp dword [esi + 0x1e6], ebx
je 0x5b8eb6
cmp dword [esi + 0x1ea], ebx
je 0x5b8eb6
mov eax, dword [esp + 0x18]
and al, 0xdf
mov dword [esp + 0x18], eax
mov ax, word [esi + 0xdf0]
test ah, 0x80
je 0x5b8eea
test ah, 0x10
je 0x5b8eea
cmp dword [esi + 0x1fa], ebx
je 0x5b8eea
cmp dword [esi + 0xe90], ebx
je 0x5b8eea
mov edx, dword [esi + 0xe94]
mov dword [edi + 8], edx
mov eax, dword [esi + 0xe98]
mov dword [esp + 0x18], eax
cmp ecx, 0xfffffffe
jne 0x5b8efb
mov dword [esp + 0x1c], 1
mov dword [esp + 0x14], ebx
mov eax, dword [esi + 0xda4]
mov dword [esi + 0x2e], 0xffffffff
cmp eax, ebx
mov dword [esi + 0x56], ebx
je 0x5b8f3f
mov ecx, dword [edi + 0x36]
push eax
push ecx
call fcn.005b8c60
add esp, 8
test eax, eax
je 0x5b8f3f
mov dword [esp + 0x10], ebx
jmp 0x5b8f49
cmp ecx, 0xfffffffd
je 0x5b8e9c
pop edi
pop esi
pop ebp
mov eax, 0x12
pop ebx
add esp, 0x378
ret
mov edx, dword [esi + 0xd7c]
mov dword [esp + 0x10], edx
push edi
call fcn.005c0270
mov eax, dword [esp + 0x20]
add esp, 4
cmp eax, ebx
je 0x5b8f6f
xor ebp, ebp
xor ecx, ecx
mov dword [esi + 0x2a], 0xffffffff
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], ecx
jmp 0x5b8f86
cmp dword [esi + 0x1aa], ebx
je 0x5b8f9d
mov dword [esi + 0x2a], 0xffffffff
mov ecx, dword [esp + 0x14]
mov ebp, dword [esp + 0x10]
cmp dword [esi + 0x1aa], ebx
je 0x5b8fe0
mov eax, dword [esi + 0x1ae]
cdq
mov dword [esi + 0x36], eax
mov dword [esi + 0x3a], edx
jmp 0x5b8ffa
mov eax, dword [edi + 0x36]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebp
call fcn.005ba180
add esp, 4
push ebx
push 0x8000080
push 3
push ebx
push 3
push 0x80000000
push ebp
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [esi + 0x2a], eax
jne 0x5b8f7e
pop edi
pop esi
pop ebp
mov eax, 0x12
pop ebx
add esp, 0x378
ret
mov ecx, dword [esi + 0x2a]
push ecx
call fcn.005b2d90
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov dword [esi + 0x36], eax
add esp, 4
mov dword [esi + 0x3a], edx
cmp ecx, ebx
jne 0x5b9002
xor ebp, ebp
jmp 0x5b900c
cmp ebp, 0xffffffff
jne 0x5b9010
mov ebp, 8
mov dword [esp + 0x10], ebp
mov edx, dword [esi + 0xd80]
mov eax, ebp
neg edx
sbb edx, edx
mov word [edi + 4], 8
and edx, 0xfffff500
add edx, 0xb14
neg eax
sbb eax, eax
mov word [edi], dx
mov edx, dword [esp + 0x1c]
and eax, 0xa
add eax, 0xa
cmp edx, ebx
mov word [edi + 2], ax
je 0x5b904c
mov dword [edi + 0xc], ebx
jmp 0x5b9055
mov eax, dword [edi + 8]
shl eax, 0x10
mov dword [edi + 0xc], eax
cmp dword [esi + 0xda8], ebx
mov eax, 9
je 0x5b90b4
mov word [edi + 4], ax
test byte [esi + 0xdf1], 0x80
jne 0x5b909f
cmp dword [esi + 0x1a6], ebx
jne 0x5b909f
cmp edx, ebx
jne 0x5b9097
mov ecx, dword [esi + 0x2a]
push esi
push ecx
call fcn.005b9f60
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
add esp, 8
mov dword [edi + 0xc], eax
and word [edi + 4], 0xfff7
jmp 0x5b90b4
cmp edx, ebx
jne 0x5b90b0
mov edx, dword [edi + 8]
shl edx, 0x10
mov dword [edi + 0xc], edx
mov edx, dword [esp + 0x1c]
mov word [edi + 4], ax
mov ax, word [edi + 4]
cmp ebp, ebx
mov word [edi + 0x2c], ax
mov word [edi + 6], bp
jne 0x5b90cc
cmp ecx, ebx
jl 0x5b90cc
mov eax, ecx
jmp 0x5b90ce
xor eax, eax
mov dword [edi + 0x10], eax
xor eax, eax
cmp ecx, ebx
mov word [edi + 0x28], bx
setl al
dec eax
and eax, ecx
cmp word [edi + 0x2a], 0xffff
mov dword [edi + 0x14], eax
jne 0x5b90f6
mov word [edi + 0x2a], bx
mov dword [esp + 0x28], 1
mov eax, dword [esi + 0xd80]
cmp eax, ebx
mov eax, dword [esp + 0x18]
je 0x5b9109
and eax, 0xff
mov dword [edi + 0x2e], eax
mov ecx, dword [esi + 0xdd0]
mov dword [edi + 0x32], ecx
mov dword [esi + 0x3d26], ebx
test byte [esi + 0xdf1], 0x80
mov dword [esi + 0x32], ebx
je 0x5b9154
mov ax, word [esi + 0xdf2]
mov word [edi + 0x28], ax
mov eax, dword [esi + 0xda8]
cmp eax, ebx
jne 0x5b9154
cmp edx, ebx
jne 0x5b9154
cmp ebp, ebx
jne 0x5b9154
mov ecx, dword [esi + 0x2a]
push esi
push ecx
call fcn.005b9f60
add esp, 8
mov dword [edi + 0xc], eax
cmp dword [esi + 0x1fa], ebx
je 0x5b925f
test byte [esi + 0xdf1], 0x10
jne 0x5b925f
mov edx, dword [edi + 0x46]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [esp + 0x174]
push edx
push eax
call ebx
mov ecx, dword [edi + 0x36]
lea edx, [esp + 0x284]
push ecx
push edx
call ebx
mov eax, dword [edi + 8]
mov edx, dword [esi + 0x1fe]
mov ebp, dword [edi + 0x2e]
xor ecx, ecx
mov cx, word [edi + 8]
push edx
shr eax, 0x10
mov dword [esp + 0x27c], eax
lea eax, [esp + 0x178]
push eax
mov dword [esp + 0x284], ecx
mov dword [esp + 0x288], ebp
call dword [esi + 0x1fa]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea ecx, [esp + 0x174]
push ecx
call ebx
mov edx, eax
mov eax, dword [edi + 0x46]
push eax
mov dword [esp + 0x28], edx
call ebx
mov ecx, dword [esp + 0x24]
cmp ecx, eax
jle 0x5b9211
mov edx, dword [edi + 0x46]
push edx
call fcn.005cebb0
add esp, 4
lea eax, [esp + 0x174]
push eax
call ebx
add eax, 2
push eax
call fcn.005cec99
add esp, 4
mov dword [edi + 0x46], eax
mov edx, dword [edi + 0x46]
lea ecx, [esp + 0x174]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [edi + 0x46]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ebx, dword [esp + 0x280]
mov ecx, dword [esp + 0x27c]
mov edx, dword [esp + 0x278]
mov dword [edi + 0x18], eax
mov eax, ebp
and ecx, 0xffff
xor eax, ebx
shl edx, 0x10
and eax, 0x27
add ecx, edx
xor eax, ebp
mov dword [edi + 8], ecx
mov dword [edi + 0x2e], eax
mov ebx, dword [esp + 0x390]
push esi
push ebx
push edi
call fcn.005c20e0
add esp, 0xc
test eax, eax
jne 0x5b9736
mov ecx, dword [edi + 0x1c]
mov edx, dword [edi + 0x18]
lea eax, [ecx + edx + 0x1e]
mov edx, dword [esi + 0xdd0]
add edx, eax
mov eax, dword [esi + 0xda8]
test eax, eax
mov dword [esi + 0xdd0], edx
je 0x5b92fc
mov ecx, dword [edi + 0xc]
push esi
push ebx
push ecx
push eax
call fcn.005c2e20
mov ebp, eax
add esp, 0x10
test ebp, ebp
je 0x5b92e1
push esi
push 0
push 0x188
call fcn.005bf5c0
add esp, 8
push eax
push ebp
call fcn.005bac70
mov edx, dword [esi + 0x2a]
add esp, 0xc
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x378
ret
mov edx, dword [edi + 0x10]
mov eax, 0xc
add edx, eax
mov dword [edi + 0x10], edx
mov ecx, dword [esi + 0xdd0]
add ecx, eax
mov dword [esi + 0xdd0], ecx
mov eax, dword [ebx]
xor ebp, ebp
push 1
push ebp
push ebp
push eax
call fcn.005b2d20
push esi
push ebp
push ebp
mov dword [esi + 0x32], ebp
call fcn.005ba100
add esp, 0x1c
mov dword [esi + 0x3d2a], eax
test byte [esi + 0xdf1], 0x80
je 0x5b932d
mov dword [esi + 0xe04], ebp
cmp dword [esp + 0x10], 8
jne 0x5b939a
mov ecx, dword [ebx]
push esi
push ecx
call fcn.005c3410
add esp, 8
test eax, eax
jne 0x5b93ad
cmp dword [esp + 0x28], ebp
je 0x5b9350
mov word [edi + 0x2a], 0xffff
lea edx, [esp + 0x10]
push esi
lea eax, [edi + 0x2a]
push edx
push eax
call fcn.005c41d0
mov eax, dword [esi + 0xd88]
lea ebp, [edi + 4]
push esi
push ebp
push eax
call fcn.005c38f0
mov cl, byte [edi + 0x2c]
mov al, byte [ebp]
xor cl, al
push esi
and ecx, 6
xor word [edi + 0x2c], cx
call fcn.005c3f50
push esi
mov ebp, eax
call fcn.005c34c0
mov edx, dword [esi + 4]
add esp, 0x20
mov dword [ebx], edx
jmp 0x5b9465
push 0x2000
call fcn.005cec99
mov ebp, eax
add esp, 4
test ebp, ebp
jne 0x5b93bd
pop edi
pop esi
pop ebp
mov eax, 4
pop ebx
add esp, 0x378
ret
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x5b9459
mov eax, dword [esi + 0x3a]
mov ecx, dword [esi + 0x36]
mov edx, dword [esp + 0x2c]
push 0
push 0
push eax
push ecx
push edx
call fcn.005b7670
mov eax, dword [esi + 0x8e]
add esp, 0x14
test eax, eax
jne 0x5b9453
mov eax, dword [esi + 0x1aa]
push esi
test eax, eax
push 0x2000
push ebp
je 0x5b940f
call fcn.005b9c90
xor ecx, ecx
add esp, 0xc
mov dword [esp + 0x20], eax
cmp ecx, eax
jmp 0x5b941f
call fcn.005b9b80
xor edx, edx
add esp, 0xc
mov dword [esp + 0x20], eax
cmp edx, eax
sbb eax, eax
neg eax
test eax, eax
je 0x5b9449
mov eax, dword [esp + 0x20]
push esi
push ebx
push eax
push ebp
call fcn.005c30b0
mov ecx, dword [esp + 0x30]
add esp, 0x10
cmp eax, ecx
jne 0x5b9481
mov eax, dword [esi + 0x8e]
test eax, eax
je 0x5b93ec
mov eax, dword [esi + 0x8e]
test eax, eax
je 0x5b9459
mov dword [esi], 9
push ebp
call fcn.005cebb0
mov ebp, dword [esi + 0x32]
add esp, 4
cmp dword [esi], 0
je 0x5b94c7
mov edx, dword [esi + 0x2a]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x378
ret
push ebp
call fcn.005cebb0
mov ecx, dword [esi + 0x2a]
add esp, 4
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test byte [esi + 0xdf1], 0x80
je 0x5b94b7
mov eax, dword [esi + 0x8e]
pop edi
neg eax
sbb eax, eax
pop esi
and al, 0xfb
pop ebp
add eax, 0xe
pop ebx
add esp, 0x378
ret
pop edi
pop esi
pop ebp
mov eax, 0xa
pop ebx
add esp, 0x378
ret
mov eax, dword [esi + 0x2a]
cmp eax, 0xffffffff
je 0x5b94e6
cmp dword [esp + 0x20], 0xffffffff
je 0x5b960f
cmp eax, 0xffffffff
je 0x5b94e6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x8000
test word [esi + 0xdf0], ax
je 0x5b950a
mov ecx, dword [esi + 0xe04]
mov edx, dword [esi + 0xdd0]
add edx, ecx
mov dword [esi + 0xdd0], edx
jmp 0x5b9510
add dword [esi + 0xdd0], ebp
mov ecx, dword [esi + 0x3d2a]
mov edx, dword [esi + 0xdd0]
mov dword [edi + 0xc], ecx
mov dword [edi + 0x10], ebp
mov ecx, dword [esi + 0xda8]
mov dword [esp + 0x24], edx
test ecx, ecx
je 0x5b9536
add ebp, 0xc
mov dword [edi + 0x10], ebp
mov ecx, dword [esi + 0x1a6]
test ecx, ecx
je 0x5b9551
mov edx, dword [esi + 0x1c6]
and edx, 0x7fffffff
mov dword [edi + 0x14], edx
jmp 0x5b9557
mov ecx, dword [esi + 0x32]
mov dword [edi + 0x14], ecx
test word [esi + 0xdf0], ax
jne 0x5b9637
mov edx, dword [edi + 0x32]
mov eax, dword [ebx]
push 0
push 0
push edx
push eax
call fcn.005b2d20
and eax, edx
add esp, 0x10
cmp eax, 0xffffffff
je 0x5b95f4
mov eax, dword [esi + 0x1a6]
mov ebp, dword [edi + 0xc]
test eax, eax
jne 0x5b959a
mov eax, 0xfff7
and word [edi + 0x2c], ax
and word [edi + 4], ax
jmp 0x5b95ad
mov eax, dword [esi + 0xda8]
test eax, eax
je 0x5b95ad
mov ecx, dword [edi + 8]
shl ecx, 0x10
mov dword [edi + 0xc], ecx
mov eax, dword [esp + 0x10]
push esi
mov word [edi + 6], ax
push ebx
neg eax
sbb eax, eax
push edi
and eax, 0xa
add eax, 0xa
mov word [edi + 2], ax
call fcn.005c20e0
add esp, 0xc
mov dword [edi + 0xc], ebp
test eax, eax
jne 0x5b9736
mov edx, dword [esp + 0x24]
mov eax, dword [ebx]
push 0
push 0
push edx
push eax
call fcn.005b2d20
and eax, edx
add esp, 0x10
cmp eax, 0xffffffff
jne 0x5b961f
push esi
push 0
push 0x189
call fcn.005bf5c0
add esp, 8
push eax
push 0xb
call fcn.005bac70
add esp, 0xc
pop edi
pop esi
pop ebp
mov eax, 0xb
pop ebx
add esp, 0x378
ret
mov eax, 0x8000
test word [esi + 0xdf0], ax
jne 0x5b9637
mov eax, dword [esi + 0x1a6]
test eax, eax
je 0x5b965e
cmp dword [esp + 0x10], 8
je 0x5b9644
test byte [edi + 4], 8
je 0x5b965e
push esi
push ebx
push edi
call fcn.005c23a0
add esp, 0xc
test eax, eax
jne 0x5b9736
add dword [esi + 0xdd0], 0x10
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x5b967f
mov eax, dword [edi + 0x3a]
mov ecx, dword [edi + 0x3e]
cmp eax, ecx
je 0x5b9678
push eax
call fcn.005cebb0
add esp, 4
mov dword [edi + 0x1c], 0
mov eax, dword [esi + 0x1aa]
test eax, eax
je 0x5b96ae
mov ecx, dword [esp + 0x2c]
push ecx
push 2
push 0x2c1
call fcn.005bf5c0
add esp, 8
lea edx, [esp + 0x34]
push eax
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x5b9727
mov eax, dword [esi + 0x1e6]
test eax, eax
je 0x5b96fb
mov eax, dword [esi + 0x1ea]
test eax, eax
je 0x5b96fb
mov eax, dword [edi + 0x36]
lea ecx, [esp + 0x30]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [esp + 0x30]
push edx
call fcn.005ba180
add esp, 4
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
and al, 0xdf
lea ecx, [esp + 0x30]
push eax
push ecx
mov dword [esp + 0x20], eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov edx, dword [edi + 0x36]
push edx
push 2
push 0x2bf
call fcn.005bf5c0
add esp, 8
push eax
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [esp + 0x3c]
push ecx
call fcn.005ba180
add esp, 0x10
lea edx, [esp + 0x30]
push edx
call fcn.005b8810
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x378
ret