Function at 0x10020dcd
Capabilities:
Get file attributes

Disassembly:
mov eax, 0x100646fe
call fcn.10063758
sub esp, 0x4c
push ebx
push esi
push edi
mov eax, edx
mov dword [ebp - 0x10], esp
xor esi, esi
mov dword [ebp - 0x28], eax
cmp byte [ebp + 0x38], 0
mov dword [ebp - 0x30], ecx
je 0x10020f56
mov dword [ebp - 0x14], 0x3b53
cmp dword [ebp - 0x14], 0x3d53
jle 0x10020e4b
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, esi
mov ebx, esi
lea eax, [ebx + edi]
cdq
lea ecx, [ebp - 0x58]
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10020e27
mov eax, dword [eax]
push eax
call fcn.1004b9e4
pop ecx
push esi
push 1
lea ecx, [ebp - 0x58]
call fcn.10002062
inc ebx
cmp ebx, 0x24da
jl 0x10020e0f
inc edi
cmp edi, 0x62d5
jl 0x10020e0d
cmp dword [ebp - 0x14], 0x3a88
jge 0x10020e5f
push str.cfda_depqy_cso_etmzw_evtr_exrd_fobsbo_uujie_nmbpyvx_yagaib
call fcn.1004b9e4
pop ecx
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 0x2c], 0
je 0x10020f4b
mov dword [ebp - 0x18], 0x18ba
cmp dword [ebp - 0x18], 0x1c1c
jle 0x10020eba
mov edi, esi
mov ebx, esi
mov dword [ebp - 0x14], 0x18b3
mov dword [ebp - 0x2c], esi
mov ecx, esi
mov eax, ebx
sar eax, cl
mov ecx, 0x10080d98
cdq
push edx
push eax
call fcn.10001b47
inc esi
cmp esi, 0x4640
jl 0x10020e8b
add ebx, edi
dec dword [ebp - 0x14]
push 0
pop esi
jne 0x10020e88
inc edi
cmp edi, 0x7b34
jl 0x10020e7f
mov dword [ebp - 4], 2
cmp dword [ebp - 0x18], 0x17c5
jge 0x10020ed9
mov edx, str.ict_dvlgdesur_zvdt_vowpy_vkqunnlgx_iwtun_nhf_fhpb_qnfuflgv_kwr_apguwufid_ezy
mov ecx, 0x10080d98
call fcn.10003a21
or dword [ebp - 4], 0xffffffff
mov edi, dword [ebp + 0x10]
mov dword [edi], esi
cmp dword [edi], 1
jge 0x10020f18
mov esi, dword [ebp - 0x30]
push ecx
push ecx
push esi
push 0x375c
push 0x6e55
push 0x664a
push edi
push 0x5caf
mov edx, 0x4841
xor cl, cl
call fcn.1001e976
add esp, 0x20
inc dword [edi]
cmp dword [edi], 1
jl 0x10020eea
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x18]
mov dword [eax], 0x81c4edd6
jmp 0x10020f18
mov dword [ebp - 0x2c], 0x38a3
cmp dword [ebp - 0x2c], 0x3978
jle 0x10020fc2
mov dword [ebp - 0x20], esi
mov ebx, esi
mov dword [ebp - 0x1c], 0x5f93
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0x46c5
mov edi, esi
mov esi, dword [ebp - 0x18]
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x10080d98
cdq
push edx
push eax
call fcn.10001b47
inc edi
cmp edi, 0x1422
jl 0x10020f81
inc esi
dec dword [ebp - 0x14]
push 0
mov dword [ebp - 0x18], esi
pop esi
jne 0x10020f7c
mov edi, dword [ebp - 0x20]
add ebx, edi
dec dword [ebp - 0x1c]
jne 0x10020f72
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x13eb
jl 0x10020f69
mov eax, dword [ebp - 0x28]
cmp byte [ebp + 0x1c], 0
je 0x1002108e
mov edi, dword [ebp + 0x24]
mov dword [edi], esi
cmp dword [edi], 1
jg 0x100210f4
mov ebx, dword [ebp + 0x30]
mov dword [ebp + 0x38], 0x8fc558ba
mov dword [ebp - 0x34], 0x1940c9ba
mov dword [ebp + 0x38], 1
cmp dword [ebp + 0x38], esi
jl 0x10021064
push edi
push esi
push ebx
push 0x38e0
lea eax, [ebp - 0x24]
mov dword [ebp - 0x24], 0xfffffffb
push eax
push 0x67c0
lea eax, [ebp + 0x38]
mov dl, 1
push eax
push dword [ebp + 0x28]
mov ecx, 0x926
push 0x6560
push esi
call fcn.1001e221
push 0x2b66
push esi
push 0x6b74
push 0x7ed4
push 0x58ca
push 0x5bdd
push 0x41c2
push 0x1bea
lea eax, [ebp - 0x34]
mov dl, 1
push eax
push 1
lea ecx, [ebp - 0x24]
call fcn.1001e221
add esp, 0x50
dec dword [ebp + 0x38]
jns 0x10020ff7
mov dword [ebx], esi
jmp 0x1002107c
push edi
push dword [ebp + 0x28]
mov edx, 0x55e5
xor cl, cl
call fcn.10020b0a
inc dword [ebx]
pop ecx
pop ecx
cmp dword [ebx], 1
jle 0x10021068
inc dword [edi]
cmp dword [edi], 1
jle 0x10020fdd
jmp 0x100210f4
mov edi, dword [ebp + 8]
mov dword [edi], esi
jmp 0x100210ef
push esi
push ecx
push 0x7cc7
push 0x6622
push 1
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x40], 0xd5b6062c
push ecx
push ecx
push 0x2817
push 0x6c0a
push dword [ebp + 0x14]
mov dword [ebp - 0x3c], 0x7c0ce695
mov ecx, 0x7043
push 1
push 0x4393
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x38], 0x6de21e52
push eax
call fcn.1001f677
mov eax, dword [ebp - 0x28]
add esp, 0x3c
inc dword [edi]
cmp dword [edi], 1
jge 0x10021095
mov dword [ebp - 4], 4
cmp dword [ebp - 0x2c], 0x34f9
jge 0x10020f18
mov edx, str.cbqhu_egrvudcjm_rrqvszjf_huv_swu_wmgriiny_icat_jmnpza_mxajy_wqnxbgaq_epnf_ttsr_klktgg
mov ecx, 0x10080d98
call fcn.10003a21
jmp 0x10020f18