Function at 0x10002169
Capabilities:
Get file attributes

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
mov esi, dword [sym.imp.KERNEL32.dll_ResetEvent]
push edi
xor ebx, ebx
push ebx
call esi
test eax, eax
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
je 0x10002188
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov ebp, dword [esp + 0x20]
lea eax, [esp + 0x14]
push eax
push ebp
push dword [esp + 0x2c]
call fcn.10001aaa
mov eax, dword [esp + 0x24]
mov ebx, eax
mov ecx, eax
shr ecx, 8
shl ebx, 0x18
or ebx, ecx
mov ecx, eax
and ecx, 0xff00
and ebx, 0xff00ff00
shl ecx, 8
or ebx, ecx
shr eax, 0x18
or ebx, eax
push ebp
push ebx
push ebp
call fcn.10001dd9
mov ebp, eax
mov eax, dword [esp + 0x2c]
mov ecx, eax
shl ecx, 0x18
mov edx, eax
shr edx, 8
or ecx, edx
mov edx, eax
and ecx, 0xff00ff00
and edx, 0xff00
shl edx, 8
or ecx, edx
shr eax, 0x18
or ecx, eax
xor ebp, ecx
mov ecx, dword [esp + 0x38]
lea eax, [ecx + 8]
push eax
push ebp
push ecx
mov dword [esp + 0x34], eax
call fcn.10001dd9
add dword [esp + 0x34], 8
add esp, 0x24
push 0
xor ebx, eax
call esi
test eax, eax
je 0x10002232
push 0
call edi
push 0
call edi
push 0
call esi
push 0
call edi
push 0
call esi
push 0
call edi
push 0
call esi
push dword [esp + 0x10]
push ebx
push dword [esp + 0x28]
call fcn.10001dd9
add dword [esp + 0x1c], 8
push dword [esp + 0x1c]
xor ebp, eax
push ebp
push dword [esp + 0x34]
call fcn.10001dd9
add dword [esp + 0x28], 8
add esp, 0x18
push 0
xor ebx, eax
call esi
test eax, eax
je 0x10002283
push 0
call edi
push 0
call edi
push 0
call esi
push 0
call edi
push 0
call esi
push 0
call edi
push 0
call esi
push dword [esp + 0x10]
push ebx
push dword [esp + 0x28]
call fcn.10001dd9
add dword [esp + 0x1c], 8
push dword [esp + 0x1c]
xor ebp, eax
push ebp
push dword [esp + 0x34]
call fcn.10001dd9
add dword [esp + 0x28], 8
add esp, 0x18
push 0
xor ebx, eax
call esi
test eax, eax
je 0x100022d4
push 0
call edi
push 0
call edi
push 0
call esi
push 0
call edi
push 0
call esi
push 0
call edi
push 0
call esi
push dword [esp + 0x10]
push ebx
push dword [esp + 0x28]
call fcn.10001dd9
add dword [esp + 0x1c], 8
push dword [esp + 0x1c]
xor ebp, eax
push ebp
push dword [esp + 0x34]
call fcn.10001dd9
add dword [esp + 0x28], 8
add esp, 0x18
push 0
xor ebx, eax
call esi
test eax, eax
je 0x10002325
push 0
call edi
push 0
call edi
push 0
call esi
push 0
call edi
push 0
call esi
push 0
call edi
push 0
call esi
push dword [esp + 0x10]
push ebx
push dword [esp + 0x28]
call fcn.10001dd9
add dword [esp + 0x1c], 8
push dword [esp + 0x1c]
xor ebp, eax
push ebp
push dword [esp + 0x34]
call fcn.10001dd9
add dword [esp + 0x28], 8
add esp, 0x18
push 0
xor ebx, eax
call esi
test eax, eax
je 0x10002376
push 0
call edi
push 0
call edi
push 0
call esi
push 0
call edi
push 0
call esi
push 0
call edi
push 0
call esi
push dword [esp + 0x10]
push ebx
push dword [esp + 0x28]
call fcn.10001dd9
add dword [esp + 0x1c], 8
push dword [esp + 0x1c]
xor ebp, eax
push ebp
push dword [esp + 0x34]
call fcn.10001dd9
add dword [esp + 0x28], 8
push dword [esp + 0x28]
xor ebx, eax
push ebx
push dword [esp + 0x40]
call fcn.10001dd9
add dword [esp + 0x34], 8
push dword [esp + 0x34]
xor ebp, eax
push ebp
push dword [esp + 0x4c]
call fcn.10001dd9
add dword [esp + 0x40], 8
add esp, 0x30
push 0
xor ebx, eax
call esi
test eax, eax
je 0x100023f1
push 0
call edi
push 0
call edi
push 0
call esi
push 0
call edi
push 0
call esi
push 0
call edi
push 0
call esi
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x20]
push esi
push ebx
push edi
call fcn.10001dd9
add esi, 8
xor ebp, eax
push esi
push ebp
push edi
call fcn.10001dd9
xor ebx, eax
push dword [esp + 0x3c]
mov edx, ebp
shl edx, 0x18
mov eax, ebp
shr eax, 8
or edx, eax
mov eax, 0xff00
mov esi, ebp
and esi, eax
mov ecx, 0xff00ff00
and edx, ecx
shl esi, 8
or edx, esi
shr ebp, 0x18
or edx, ebp
mov dword [esp + 0x34], edx
mov edx, ebx
shl edx, 0x18
mov esi, ebx
shr esi, 8
or edx, esi
and edx, ecx
mov ecx, ebx
and ecx, eax
shl ecx, 8
or edx, ecx
shr ebx, 0x18
lea eax, [esp + 0x30]
or edx, ebx
push edi
push eax
mov dword [esp + 0x38], edx
call fcn.10001c13
add esp, 0x24
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret