Function at 0x100d1c18
Capabilities:
Check if file exists

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x25c
mov eax, dword [0x1010e2b0]
xor eax, esp
mov dword [esp + 0x258], eax
push ebx
push esi
mov esi, edx
push edi
test esi, esi
jne 0x100d1ced
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ecx, dword [0x1010e2c0]
or edi, 0xffffffff
mov esi, eax
cmp ecx, edi
je 0x100d1d84
call fcn.10029fa0
mov ebx, eax
test ebx, ebx
je 0x100d1d7e
cmp ebx, edi
jne 0x100d1cc6
push esi
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
mov eax, 0x1010eac0
mov dword [eax], 0x16
call sym.ucrtbase.dll__invalid_parameter_noinfo
mov eax, edi
jmp 0x100d205a
xor edx, edx
call fcn.10032a89
push 0
call sym.ucrtbase.dll__free_base
pop ecx
jmp 0x100d1c6d
mov edx, ebx
call fcn.10032a89
test eax, eax
jne 0x100d1cb7
mov ecx, dword [0x1010e2c0]
xor edx, edx
call fcn.10032a89
push ebx
jmp 0x100d1c94
mov ecx, ebx
call fcn.10031ad6
push 0
call sym.ucrtbase.dll__free_base
pop ecx
test ebx, ebx
je 0x100d1c6d
mov ecx, dword [0x1010e2c4]
call fcn.10029fa0
imul eax, eax, 0x364
push esi
add ebx, eax
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
test ebx, ebx
je 0x100d1c74
lea eax, [ebx + 0x10]
jmp 0x100d1c79
test ecx, ecx
je 0x100d1c41
xor edx, edx
lea eax, [esp + 0x10]
push edx
push edx
push edx
push eax
push edx
push ecx
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_FindFirstFileExW]
mov ebx, eax
or edi, 0xffffffff
cmp ebx, edi
jne 0x100d1fea
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 2
jb 0x100d1d3a
cmp eax, 3
jbe 0x100d1e81
cmp eax, 8
je 0x100d1db6
cmp eax, 0x12
je 0x100d1e81
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ecx, dword [0x1010e2c0]
mov esi, eax
cmp ecx, edi
je 0x100d1f52
call fcn.10029fa0
mov ebx, eax
test ebx, ebx
je 0x100d1f4c
cmp ebx, edi
jne 0x100d1fb8
push esi
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
mov eax, 0x1010eac0
mov dword [eax], 0x16
jmp 0x100d1c84
mov ecx, dword [0x1010e2c0]
mov edx, edi
call fcn.10032a89
test eax, eax
je 0x100d1c6d
push 0x364
push 2
call sym.ucrtbase.dll__calloc_base
pop ecx
mov ebx, eax
pop ecx
mov ecx, dword [0x1010e2c0]
test ebx, ebx
je 0x100d1c8b
jmp 0x100d1c9c
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ecx, dword [0x1010e2c0]
mov esi, eax
cmp ecx, edi
je 0x100d1df4
call fcn.10029fa0
mov ebx, eax
test ebx, ebx
je 0x100d1dee
cmp ebx, edi
jne 0x100d1e53
push esi
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
mov eax, 0x1010eac0
mov dword [eax], 0xc
jmp 0x100d1c84
mov ecx, dword [0x1010e2c0]
mov edx, edi
call fcn.10032a89
test eax, eax
je 0x100d1dd7
push 0x364
push 2
call sym.ucrtbase.dll__calloc_base
pop ecx
mov ebx, eax
pop ecx
mov ecx, dword [0x1010e2c0]
test ebx, ebx
jne 0x100d1e29
xor edx, edx
call fcn.10032a89
push ebx
call sym.ucrtbase.dll__free_base
pop ecx
jmp 0x100d1dd7
mov edx, ebx
call fcn.10032a89
test eax, eax
jne 0x100d1e44
mov ecx, dword [0x1010e2c0]
xor edx, edx
call fcn.10032a89
push ebx
jmp 0x100d1e21
mov ecx, ebx
call fcn.10031ad6
push 0
call sym.ucrtbase.dll__free_base
pop ecx
test ebx, ebx
je 0x100d1dd7
mov ecx, dword [0x1010e2c4]
call fcn.10029fa0
imul eax, eax, 0x364
push esi
add ebx, eax
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
test ebx, ebx
je 0x100d1dde
lea eax, [ebx + 0x10]
jmp 0x100d1de3
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ecx, dword [0x1010e2c0]
mov esi, eax
cmp ecx, edi
je 0x100d1ebf
call fcn.10029fa0
mov ebx, eax
test ebx, ebx
je 0x100d1eb9
cmp ebx, edi
jne 0x100d1f1e
push esi
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
mov eax, 0x1010eac0
mov dword [eax], 2
jmp 0x100d1c84
mov ecx, dword [0x1010e2c0]
mov edx, edi
call fcn.10032a89
test eax, eax
je 0x100d1ea2
push 0x364
push 2
call sym.ucrtbase.dll__calloc_base
pop ecx
mov ebx, eax
pop ecx
mov ecx, dword [0x1010e2c0]
test ebx, ebx
jne 0x100d1ef4
xor edx, edx
call fcn.10032a89
push ebx
call sym.ucrtbase.dll__free_base
pop ecx
jmp 0x100d1ea2
mov edx, ebx
call fcn.10032a89
test eax, eax
jne 0x100d1f0f
mov ecx, dword [0x1010e2c0]
xor edx, edx
call fcn.10032a89
push ebx
jmp 0x100d1eec
mov ecx, ebx
call fcn.10031ad6
push 0
call sym.ucrtbase.dll__free_base
pop ecx
test ebx, ebx
je 0x100d1ea2
mov ecx, dword [0x1010e2c4]
call fcn.10029fa0
imul eax, eax, 0x364
push esi
add ebx, eax
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
test ebx, ebx
je 0x100d1ea9
lea eax, [ebx + 0x10]
jmp 0x100d1eae
mov ecx, dword [0x1010e2c0]
mov edx, edi
call fcn.10032a89
test eax, eax
je 0x100d1d67
push 0x364
push 2
call sym.ucrtbase.dll__calloc_base
pop ecx
mov ebx, eax
pop ecx
mov ecx, dword [0x1010e2c0]
test ebx, ebx
jne 0x100d1f8e
xor edx, edx
call fcn.10032a89
push ebx
call sym.ucrtbase.dll__free_base
pop ecx
jmp 0x100d1d67
mov edx, ebx
call fcn.10032a89
test eax, eax
jne 0x100d1fa9
mov ecx, dword [0x1010e2c0]
xor edx, edx
call fcn.10032a89
push ebx
jmp 0x100d1f83
mov ecx, ebx
call fcn.10031ad6
push 0
call sym.ucrtbase.dll__free_base
pop ecx
test ebx, ebx
je 0x100d1d67
mov ecx, dword [0x1010e2c4]
call fcn.10029fa0
imul eax, eax, 0x364
push esi
add ebx, eax
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
test ebx, ebx
je 0x100d1d6e
lea eax, [ebx + 0x10]
jmp 0x100d1d73
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x14]
add eax, 0xffffff80
neg eax
sbb eax, eax
and eax, dword [esp + 0x10]
mov dword [esi], eax
call fcn.100d3621
lea ecx, [esp + 0x1c]
mov dword [esi + 4], eax
call fcn.100d3621
lea ecx, [esp + 0x24]
mov dword [esi + 8], eax
call fcn.100d3621
mov ecx, dword [esp + 0x2c]
mov dword [esi + 0xc], eax
xor eax, eax
add eax, dword [esp + 0x30]
push 0
pop edi
mov dword [esi + 0x10], eax
adc ecx, edi
lea eax, [esp + 0x3c]
mov dword [esi + 0x14], ecx
push eax
lea eax, [esi + 0x18]
push 0x104
push eax
call sym.ucrtbase.dll_wcscpy_s
add esp, 0xc
test eax, eax
je 0x100d2058
push edi
push edi
push edi
push edi
push edi
call sym.ucrtbase.dll__invoke_watson
mov eax, ebx
mov ecx, dword [esp + 0x264]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1005cc20
mov esp, ebp
pop ebp
ret