Function at 0x5430f0
Capabilities:
Get file system object information
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ad617
mov eax, dword fs:[0]
push eax
mov eax, 0x13c0
call fcn.00552d20
mov eax, dword [0x62cf50]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x13b8], esi
cmp dword [esi + 0xdc], 0
jne 0x54313c
mov eax, 0x80004005
jmp 0x543b53
cmp dword [esi + 0x5c], 0
jne 0x543149
xor eax, eax
jmp 0x543b53
xorps xmm0, xmm0
mov dword [ebp - 0x1060], 0
movq qword [ebp - 0x1068], xmm0
mov dword [ebp - 0x1068], 0
mov dword [ebp - 0x1064], 0
mov dword [ebp - 0x1060], 0
push 1
xor eax, eax
mov dword [ebp - 4], 0
push 0x5c697c
lea ecx, [ebp - 0x105c]
mov dword [ebp - 0x104c], 0
mov dword [ebp - 0x1048], 7
mov word [ebp - 0x105c], ax
call fcn.00409db0
lea eax, [ebp - 0x1068]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x105c]
push eax
lea eax, [esi + 0x4c]
push eax
call fcn.004320f0
mov esi, eax
add esp, 0xc
mov dword [ebp - 0x13b4], esi
mov ecx, dword [ebp - 0x1048]
mov byte [ebp - 4], 2
cmp ecx, 8
jb 0x5431fa
inc ecx
push ecx
push dword [ebp - 0x105c]
lea ecx, [ebp - 0x105c]
call fcn.0040a5e0
xor eax, eax
xor edi, edi
mov word [ebp - 0x105c], ax
mov byte [ebp - 4], al
mov dword [ebp - 0x13bc], eax
test esi, esi
je 0x543a7c
lfence
mov edx, 0x7ffffffe
nop
lea ecx, [eax + eax*2]
mov dword [ebp - 0x104c], 0
mov eax, dword [ebp - 0x1068]
lea eax, [eax + ecx*8]
mov dword [ebp - 0x1048], 0
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x13a8], eax
mov dword [ebp - 0x1044], ecx
jb 0x54325d
mov eax, dword [eax]
mov dword [ebp - 0x13a8], eax
cmp ecx, 8
jae 0x54327d
movups xmm0, xmmword [eax]
mov dword [ebp - 0x1048], 7
mov esi, 7
movups xmmword [ebp - 0x105c], xmm0
jmp 0x5432c9
mov esi, ecx
lea ecx, [ebp - 0x105c]
or esi, 7
cmp esi, 0x7ffffffe
cmova esi, edx
lea eax, [esi + 1]
push eax
call fcn.00409eb0
mov ecx, dword [ebp - 0x1044]
mov dword [ebp - 0x105c], eax
lea ecx, [ecx*2 + 2]
push ecx
push dword [ebp - 0x13a8]
push eax
call fcn.0056a3d0
mov ecx, dword [ebp - 0x1044]
add esp, 0xc
mov dword [ebp - 0x1048], esi
mov dword [ebp - 0x104c], ecx
mov byte [ebp - 4], 3
test ecx, ecx
jne 0x5432ec
mov byte [ebp - 4], 4
cmp esi, 8
jb 0x543a5a
lea eax, [esi + 1]
jmp 0x543a48
push 0
lea eax, [ebp - 0x105c]
push 0
push eax
call fcn.00430510
add esp, 0xc
test al, al
jne 0x54330c
mov byte [ebp - 4], 5
jmp 0x543a3c
push 0x40
lea eax, [ebp - 0x10ac]
push 0
push eax
call fcn.0056aed0
add esp, 0xc
lea ecx, [ebp - 0x105c]
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
cmovae eax, dword [ebp - 0x105c]
push 0
push 0
push 0
push ecx
push eax
lea ecx, [ebp - 0x10ac]
call fcn.004a6d80
lea ecx, [ebp - 0x10ac]
mov byte [ebp - 4], 6
call fcn.004abf10
test al, al
jne 0x5433c8
mov eax, dword [ebp - 0x10a8]
mov byte [ebp - 4], 7
test eax, eax
je 0x54338f
cmp eax, 0xffffffff
je 0x54338f
call fcn.00413e80
push dword [ebp - 0x10a8]
call fcn.00415030
add esp, 4
mov dword [ebp - 0x10a8], 0
mov eax, dword [ebp - 0x10ac]
mov byte [ebp - 4], 8
test eax, eax
je 0x5433bf
cmp eax, 0xffffffff
je 0x5433bf
call fcn.00413e80
push dword [ebp - 0x10ac]
call fcn.00415030
add esp, 4
mov dword [ebp - 0x10ac], 0
mov byte [ebp - 4], 9
jmp 0x543a3c
push 0
lea eax, [ebp - 0x105c]
push 0
push eax
call fcn.004ddba0
add esp, 0xc
test al, al
jne 0x543448
mov eax, dword [ebp - 0x10a8]
mov byte [ebp - 4], 0xa
test eax, eax
je 0x54340f
cmp eax, 0xffffffff
je 0x54340f
call fcn.00413e80
push dword [ebp - 0x10a8]
call fcn.00415030
add esp, 4
mov dword [ebp - 0x10a8], 0
mov eax, dword [ebp - 0x10ac]
mov byte [ebp - 4], 0xb
test eax, eax
je 0x54343f
cmp eax, 0xffffffff
je 0x54343f
call fcn.00413e80
push dword [ebp - 0x10ac]
call fcn.00415030
add esp, 4
mov dword [ebp - 0x10ac], 0
mov byte [ebp - 4], 0xc
jmp 0x543a3c
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
cmovae eax, dword [ebp - 0x105c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x5434d0
mov eax, dword [ebp - 0x10a8]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x543497
cmp eax, 0xffffffff
je 0x543497
call fcn.00413e80
push dword [ebp - 0x10a8]
call fcn.00415030
add esp, 4
mov dword [ebp - 0x10a8], 0
mov eax, dword [ebp - 0x10ac]
mov byte [ebp - 4], 0xe
test eax, eax
je 0x5434c7
cmp eax, 0xffffffff
je 0x5434c7
call fcn.00413e80
push dword [ebp - 0x10ac]
call fcn.00415030
add esp, 4
mov dword [ebp - 0x10ac], 0
mov byte [ebp - 4], 0xf
jmp 0x543a3c
mov eax, dword [ebp - 0x13b8]
lea ecx, [ebp - 0x13a4]
push ecx
lea ecx, [ebp - 0x106c]
mov dword [ebp - 0x13a4], 0
push ecx
mov eax, dword [eax + 0xdc]
mov dword [ebp - 0x106c], 0
push 0
push 0
mov esi, dword [eax]
push eax
mov esi, dword [esi + 0x40]
mov ecx, esi
call dword [0x5b1854]
call esi
test eax, eax
js 0x543738
mov ecx, dword [ebp - 0x13a4]
test ecx, ecx
je 0x54373e
push 0x30
lea eax, [ebp - 0x1040]
push 0
push eax
call fcn.0056aed0
add esp, 0xc
mov dword [ebp - 0x1040], 0x37050003
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
mov dword [ebp - 0x1038], 1
cmovae eax, dword [ebp - 0x105c]
push eax
mov dword [ebp - 0x1028], 0
mov dword [ebp - 0x1018], 0
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
test eax, eax
je 0x543592
mov dword [ebp - 0x1030], 0x3704001f
mov dword [ebp - 0x1028], eax
push 0x2b4
lea eax, [ebp - 0x13a0]
push 0
push eax
call fcn.0056aed0
add esp, 0xc
lea ecx, [ebp - 0x13a0]
cmp dword [ebp - 0x1048], 8
lea eax, [ebp - 0x105c]
cmovae eax, dword [ebp - 0x105c]
push 0x200
push 0x2b4
push ecx
push 0
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
test eax, eax
je 0x5435f0
lea eax, [ebp - 0x1394]
mov dword [ebp - 0x1020], 0x3001001f
mov dword [ebp - 0x1018], eax
mov eax, dword [ebp - 0x13a4]
lea ecx, [ebp - 0x13b0]
push ecx
mov dword [ebp - 0x13b0], 0
lea ecx, [ebp - 0x1040]
push ecx
mov esi, dword [eax]
push 3
push eax
mov esi, dword [esi + 0x20]
mov ecx, esi
call dword [0x5b1854]
call esi
test eax, eax
js 0x543738
mov ecx, dword [ebp - 0x13b0]
test ecx, ecx
je 0x543738
xor eax, eax
mov dword [ebp - 0x1044], eax
cmp dword [ecx], eax
jbe 0x54371e
xor edx, edx
mov dword [ebp - 0x13a8], edx
nop
cmp dword [edx + ecx + 0xc], 0x80040103
movq xmm0, qword [edx + ecx + 4]
movq qword [ebp - 0x13cc], xmm0
jne 0x543706
push dword [ebp - 0x1028]
call fcn.00541650
push dword [ebp - 0x1018]
mov esi, eax
mov dword [ebp - 0x13c0], esi
call fcn.00541650
add esp, 8
mov edi, eax
test esi, esi
je 0x5436e7
test edi, edi
je 0x5436de
mov eax, dword [ebp - 0x13a4]
lea ecx, [ebp - 0x1040]
push 0
mov dword [ebp - 0x1028], esi
mov dword [ebp - 0x1030], 0x3704001e
mov dword [ebp - 0x1020], 0x3001001e
mov dword [ebp - 0x1018], edi
mov esi, dword [eax]
push ecx
push 3
push eax
mov esi, dword [esi + 0x20]
mov ecx, esi
call dword [0x5b1854]
call esi
mov esi, dword [ebp - 0x13c0]
push esi
call fcn.0040a1b5
add esp, 4
test edi, edi
je 0x5436f4
push edi
call fcn.0040a1b5
add esp, 4
mov edx, dword [ebp - 0x13a8]
mov eax, dword [ebp - 0x1044]
mov ecx, dword [ebp - 0x13b0]
inc eax
add edx, 0xc
mov dword [ebp - 0x1044], eax
mov dword [ebp - 0x13a8], edx
cmp eax, dword [ecx]
jb 0x543650
mov eax, dword [ebp - 0x13b8]
push ecx
mov eax, dword [eax + 0xac]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x5b1854]
call esi
mov ecx, dword [ebp - 0x13a4]
mov dword [ebp - 0x13ac], 0
test ecx, ecx
je 0x5439a7
mov esi, dword [ecx]
lea eax, [ebp - 0x13ac]
push eax
push 3
push 1
mov esi, dword [esi + 0x1c]
push 0x600470
push 0x37010102
push ecx
mov ecx, esi
call dword [0x5b1854]
call esi
test eax, eax
js 0x5439a1
cmp dword [ebp - 0x13ac], 0
je 0x5439a1
push 0x40
lea eax, [ebp - 0x10ec]
push 0
push eax
call fcn.0056aed0
add esp, 0xc
lea eax, [ebp - 0x105c]
cmp dword [ebp - 0x1048], 8
lea ecx, [ebp - 0x10ec]
cmovae eax, dword [ebp - 0x105c]
push 0
push 0
push 0
push 0
push eax
call fcn.004a6d80
lea ecx, [ebp - 0x10ec]
mov byte [ebp - 4], 0x10
call fcn.004abf10
test al, al
je 0x5438f8
lea eax, [ebp - 0x10ec]
push eax
lea ecx, [ebp - 0x10ac]
call fcn.004ac0a0
test al, al
je 0x5438f8
push 0x1000
xor edi, edi
lea eax, [ebp - 0x1010]
push edi
push eax
call fcn.0056aed0
add esp, 0xc
mov dword [ebp - 0x1044], edi
lea eax, [ebp - 0x1044]
push edi
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
push dword [ebp - 0x10ec]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x5438fd
nop dword [eax + eax]
mov ecx, dword [ebp - 0x1044]
test ecx, ecx
je 0x5438fd
lea esi, [ebp - 0x1010]
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp - 0x13ac]
lea edx, [ebp - 0x13a8]
push edx
mov dword [ebp - 0x13a8], 0
push ecx
mov edi, dword [eax]
push esi
push eax
mov edi, dword [edi + 0x10]
mov ecx, edi
call dword [0x5b1854]
call edi
mov edx, dword [ebp - 0x13a8]
mov edi, eax
test edx, edx
je 0x5438f1
mov ecx, dword [ebp - 0x1044]
cmp edx, ecx
ja 0x5438f1
test edi, edi
js 0x5438fd
sub ecx, edx
add esi, edx
mov dword [ebp - 0x1044], ecx
test ecx, ecx
jne 0x543860
push 0x1000
push ecx
lea eax, [ebp - 0x1010]
push eax
call fcn.0056aed0
add esp, 0xc
lea eax, [ebp - 0x1044]
push 0
push eax
push 0x1000
lea eax, [ebp - 0x1010]
push eax
push dword [ebp - 0x10ec]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x543840
jmp 0x5438fd
mov edi, 0x8004000d
jmp 0x5438fd
mov edi, 0x8004000c
mov eax, dword [ebp - 0x13ac]
push 0
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x20]
mov ecx, esi
call dword [0x5b1854]
call esi
mov eax, dword [ebp - 0x13ac]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x5b1854]
call esi
mov dword [ebp - 0x13ac], 0
mov eax, dword [ebp - 0x10e8]
mov byte [ebp - 4], 0x11
test eax, eax
je 0x543965
cmp eax, 0xffffffff
je 0x543965
call fcn.00413e80
push dword [ebp - 0x10e8]
call fcn.00415030
add esp, 4
mov dword [ebp - 0x10e8], 0
mov eax, dword [ebp - 0x10ec]
mov byte [ebp - 4], 0x12
test eax, eax
je 0x543995
cmp eax, 0xffffffff
je 0x543995
call fcn.00413e80
push dword [ebp - 0x10ec]
call fcn.00415030
add esp, 4
mov dword [ebp - 0x10ec], 0
mov ecx, dword [ebp - 0x13a4]
mov byte [ebp - 4], 6
jmp 0x5439ac
mov ecx, dword [ebp - 0x13a4]
mov edi, 0x80004005
test ecx, ecx
je 0x5439d8
mov eax, dword [ecx]
push 0
push ecx
mov esi, dword [eax + 0x10]
mov ecx, esi
call dword [0x5b1854]
call esi
mov eax, dword [ebp - 0x13a4]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x5b1854]
call esi
mov eax, dword [ebp - 0x10a8]
mov byte [ebp - 4], 0x13
test eax, eax
je 0x543a08
cmp eax, 0xffffffff
je 0x543a08
call fcn.00413e80
push dword [ebp - 0x10a8]
call fcn.00415030
add esp, 4
mov dword [ebp - 0x10a8], 0
mov eax, dword [ebp - 0x10ac]
mov byte [ebp - 4], 0x14
test eax, eax
je 0x543a38
cmp eax, 0xffffffff
je 0x543a38
call fcn.00413e80
push dword [ebp - 0x10ac]
call fcn.00415030
add esp, 4
mov dword [ebp - 0x10ac], 0
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x1048]
cmp eax, 8
jb 0x543a5a
inc eax
push eax
push dword [ebp - 0x105c]
lea ecx, [ebp - 0x105c]
call fcn.0040a5e0
mov eax, dword [ebp - 0x13bc]
mov edx, 0x7ffffffe
inc eax
mov byte [ebp - 4], 0
mov dword [ebp - 0x13bc], eax
cmp eax, dword [ebp - 0x13b4]
jb 0x543220
mov esi, dword [ebp - 0x1068]
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x543b51
mov eax, dword [ebp - 0x1064]
mov dword [ebp - 0x13b4], eax
cmp esi, eax
je 0x543b01
mov ecx, dword [esi + 0x14]
cmp ecx, 8
jb 0x543ae7
mov eax, dword [esi]
lea ecx, [ecx*2 + 2]
mov dword [ebp - 4], 0x16
cmp ecx, 0x1000
jb 0x543ad7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x543b6e
mov eax, edx
push ecx
push eax
call fcn.0040a1a2
mov eax, dword [ebp - 0x13b4]
add esp, 8
xor ecx, ecx
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], cx
add esi, 0x18
cmp esi, eax
jne 0x543aa1
mov ecx, dword [ebp - 0x1060]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x1068]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
mov dword [ebp - 4], 0x17
cmp ecx, 0x1000
jb 0x543b47
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x543b6e
push ecx
push esi
call fcn.0040a1a2
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call int.004016cd
mov esp, ebp
pop ebp
ret
call fcn.0056e2db
int3