Function at 0x10006191
Capabilities:
Get file attributes

Disassembly:
mov eax, 0x10065286
call fcn.10064c08
sub esp, 0x3c
cmp byte [ebp + 0x10], 0
push ebx
push esi
push edi
mov edi, edx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2c], edi
mov byte [ebp - 0x14], cl
je 0x10006360
mov dword [ebp - 0x24], 0x46bb
cmp dword [ebp - 0x24], 0x4a13
jle 0x1000625e
push 0x1411
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MonitorFromWindow]
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x20], ebx
inc esi
mov edi, ebx
mov dword [ebp - 0x1c], 0x1e13
mov dword [ebp - 0x18], edi
xor eax, eax
mov dword [ebp + 0x10], eax
xor ebx, ebx
mov dword [ebp - 0x28], edi
and edi, eax
mov eax, edi
lea ecx, [ebp - 0x44]
xor eax, ebx
cdq
push edx
push eax
call fcn.10001301
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10006215
mov eax, dword [eax]
push eax
call fcn.1004c2d0
pop ecx
push 0
push esi
lea ecx, [ebp - 0x44]
call fcn.1000168f
inc ebx
cmp ebx, 0x3fbf
jl 0x100061fc
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp - 0x18]
inc eax
mov dword [ebp + 0x10], eax
cmp eax, 0x6735
jl 0x100061f5
dec edi
dec dword [ebp - 0x1c]
mov dword [ebp - 0x18], edi
jne 0x100061f0
mov ebx, dword [ebp - 0x20]
inc ebx
mov dword [ebp - 0x20], ebx
cmp ebx, 0x14d7
jl 0x100061e4
mov edi, dword [ebp - 0x2c]
jmp 0x10006261
xor esi, esi
inc esi
cmp dword [ebp - 0x24], 0x44b1
jge 0x10006275
push str.lacspoa_lrzwv_akacjxn_epp_draag_xmktsvzd_gbiyqv_jzcids_gwcitfjv
call fcn.1004c2d0
pop ecx
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 0x38], 0
je 0x1000633c
mov dword [ebp - 0x24], 0x7af8
cmp dword [ebp - 0x24], 0x7dda
jle 0x100062d6
xor edi, edi
xor esi, esi
mov dword [ebp + 0x10], esi
mov ebx, esi
mov esi, 0x3dbf
mov eax, ebx
mov ecx, 0x10081dd8
or eax, edi
cdq
push edx
push eax
call fcn.1000c947
dec ebx
dec esi
jne 0x100062a1
mov esi, dword [ebp + 0x10]
inc esi
mov dword [ebp + 0x10], esi
cmp esi, 0x189e
jl 0x1000629a
inc edi
cmp edi, 0x4c5d
jl 0x10006295
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 4], 2
cmp dword [ebp - 0x24], 0x794e
jge 0x100062f5
mov edx, str.lokihw_qioomubp_xprnjri_xqenaqtv_watvrzq_rrff_hlv_oohhm_sha
mov ecx, 0x10081dd8
call fcn.1000fdbf
mov eax, dword [ebp + 0x20]
mov edx, dword [ebp + 0x30]
mov ecx, dword [ebp + 0x2c]
push dword [eax]
mov eax, dword [ebp + 0x28]
mov edx, dword [edx]
mov ecx, dword [ecx]
push dword [eax]
mov eax, dword [ebp + 0x18]
movzx eax, byte [eax]
push eax
mov eax, dword [ebp + 8]
push dword [eax]
call fcn.100035b0
add esp, 0x10
jmp 0x100063d1
mov dword [edi], 0
cmp dword [edi], esi
jge 0x100063d1
mov edx, dword [ebp + 0xc]
mov ecx, dword [edi]
mov eax, dword [edx]
mov dword [eax + ecx*4], 0x88b92280
inc dword [edi]
cmp dword [edi], esi
jl 0x1000634d
jmp 0x100063d1
test cl, cl
je 0x100063c2
mov ecx, dword [ebp + 0x3c]
cmp dword [ecx], 0
je 0x100063ab
mov edx, dword [ebp + 0x1c]
cmp dword [edx], 0
je 0x100063ab
mov eax, dword [edx]
xor esi, esi
mov eax, dword [edx]
inc esi
mov eax, dword [ecx]
mov edi, dword [ebp + 0x34]
mov ecx, dword [ebp + 0x40]
mov eax, dword [edi]
mov eax, dword [edx]
mov dword [ecx], eax
mov eax, dword [ecx]
xor ecx, ecx
cmp eax, esi
setg cl
imul eax, ecx, 0x39f5
test eax, eax
je 0x100063a5
cmp dword [edx], 0
je 0x100063a5
mov eax, esi
jmp 0x100063a7
xor eax, eax
cmp eax, dword [edi]
jle 0x100063ad
xor esi, esi
mov eax, dword [ebp + 0x14]
xor ecx, ecx
cmp esi, 0xaa2d34ca
setne cl
mov eax, dword [eax]
mov dword [eax + 0xc], ecx
jmp 0x100063d1
mov eax, dword [ebp + 0x24]
cmp byte [eax], 0
je 0x100063d1
xor cl, cl
call fcn.10003642
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret