Function at 0x1001c221
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push 0x50
mov eax, 0x10029892
call fcn.1002850f
mov ebx, ecx
mov esi, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [ebp + 0xc]
lea ecx, [ebp - 0x34]
call fcn.1001cc36
test eax, eax
js 0x1001c915
mov ecx, ebx
lea eax, [ebx + 4]
neg ecx
sbb ecx, ecx
and ecx, eax
push ecx
lea ecx, [ebp - 0x4c]
call fcn.1000e1c1
xor eax, eax
mov ecx, ebx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x48]
push eax
push esi
call fcn.1001cbae
mov edi, eax
test edi, edi
js 0x1001c8e3
mov ecx, dword [ebp - 0x48]
imul esi, dword [ecx + 0xc], 0xc
add esi, 0x10001aa0
mov ecx, dword [esi]
lea eax, [ecx - 1]
cmp eax, 0xf
ja case.default.0x1001c2ab
push 3
pop edx
jmp dword [eax*4 + 0x1001c91d]
movzx eax, word [ebp - 0x34]
dec eax
sub eax, 1
je case.0x1001c2ab.14
sub eax, 1
je case.0x1001c2ab.14
sub eax, 5
jne 0x1001c37e
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov edi, eax
test edi, edi
js 0x1001c8e3
mov ecx, dword [ebp - 0x48]
mov eax, dword [ecx + 8]
sub eax, 0x2706
je 0x1001c74b
sub eax, 1
je 0x1001c8e3
sub eax, 1
je 0x1001c8e3
sub eax, 1
je 0x1001c8e3
sub eax, 1
je 0x1001c8e3
sub eax, 1
je 0x1001c8e3
sub eax, 1
je 0x1001c8e3
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ecx]
shl eax, 4
add eax, dword [ebx + 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov edi, eax
test edi, edi
js 0x1001c8e3
mov eax, dword [ebp - 0x48]
xor edx, edx
inc edx
mov ecx, dword [eax]
mov eax, dword [ebx + 0x30]
mov dword [eax + ecx*4], edx
mov dword [ebx + 0x3c], edx
jmp 0x1001c8e3
cmp word [ebp - 0x34], 8
jne 0x1001c37e
cmp dword [ebp - 0x2c], 0
je 0x1001c37e
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x2c]
call dword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CLSIDFromString]
test eax, eax
jns case.0x1001c2ab.14
mov edi, 0x80070057
jmp 0x1001c8e3
cmp word [ebp - 0x34], 8
jne 0x1001c37e
mov eax, dword [ebp - 0x2c]
test eax, eax
je case.0x1001c2ab.14
xor ecx, ecx
cmp word [eax], cx
je case.0x1001c2ab.14
lea ecx, [ebp - 0x20]
push ecx
push eax
jmp 0x1001c370
cmp word [ebp - 0x34], 8
jne 0x1001c37e
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x1001c37e
xor ecx, ecx
cmp word [eax], cx
je 0x1001c37e
push eax
lea ecx, [ebp - 0x24]
call dword [sym.imp.MfcSubs.dll_public:_void___thiscall_CString::constructor_unsigned_short_int_const__]
mov byte [ebp - 4], 1
mov eax, dword [esi + 8]
test eax, eax
je 0x1001c3fe
push dword [eax]
lea ecx, [ebp - 0x24]
call dword [sym.imp.MfcSubs.dll_public:_int___thiscall_CString::FindOneOf_unsigned_short_int_const__const]
cmp eax, 0xffffffff
je 0x1001c3fe
xor eax, eax
lea ecx, [ebp - 0x24]
mov edi, 0x80070057
mov byte [ebp - 4], al
call dword [sym.imp.MfcSubs.dll_public:_void___thiscall_CString::destructor_void_]
jmp 0x1001c8e3
lea ecx, [ebp - 0x24]
call dword [sym.imp.MfcSubs.dll_public:_void___thiscall_CString::TrimLeft_void_]
lea ecx, [ebp - 0x24]
call dword [sym.imp.MfcSubs.dll_public:_void___thiscall_CString::TrimRight_void_]
mov ecx, dword [ebp - 0x24]
lea edx, [ebp - 0x44]
call fcn.10023a2e
mov edi, eax
lea ecx, [ebp - 0x24]
xor eax, eax
mov byte [ebp - 4], al
call dword [sym.imp.MfcSubs.dll_public:_void___thiscall_CString::destructor_void_]
jmp 0x1001c2da
movzx eax, word [ebp - 0x34]
dec eax
sub eax, 1
je 0x1001c44c
sub eax, 1
je 0x1001c487
sub eax, 5
je 0x1001c454
sub eax, edx
jne 0x1001c37e
xor eax, eax
cmp word [ebp - 0x2c], ax
jmp 0x1001c48c
mov ecx, dword [ebp - 0x2c]
call fcn.1001cc7c
test eax, eax
je 0x1001c473
push 3
pop eax
mov word [ebp - 0x44], ax
mov dword [ebp - 0x3c], 1
jmp 0x1001c2e2
call fcn.1001ccbe
test eax, eax
je 0x1001c4ed
push 3
pop eax
mov word [ebp - 0x44], ax
xor eax, eax
jmp 0x1001c493
xor eax, eax
cmp dword [ebp - 0x2c], eax
mov word [ebp - 0x44], dx
setne al
mov dword [ebp - 0x3c], eax
jmp 0x1001c2e2
movzx eax, word [ebp - 0x34]
dec eax
sub eax, 1
je 0x1001c4b3
sub eax, 1
je 0x1001c4f7
sub eax, 5
je 0x1001c4d1
sub eax, edx
jne 0x1001c4ed
cmp word [ebp - 0x2c], 0
mov ecx, 0x10005ddc
jne 0x1001c4c4
mov ecx, 0x10005de0
lea edx, [ebp - 0x44]
call fcn.10023a2e
jmp 0x1001c2d8
mov ecx, dword [ebp - 0x2c]
call fcn.1001cc7c
test eax, eax
je 0x1001c4e4
mov ecx, 0x10005ddc
jmp 0x1001c4c4
call fcn.1001ccbe
test eax, eax
jne 0x1001c4bf
mov edi, 0x80070057
jmp 0x1001c2da
cmp dword [ebp - 0x2c], 0
jmp 0x1001c4b8
cmp word [ebp - 0x34], 8
mov edi, 0x80070057
jne 0x1001c8e3
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x1001c8e3
xor edx, edx
mov ecx, edx
mov dword [ebp - 0x24], edx
cmp dword [esi + 4], edx
jle 0x1001c8e3
push eax
mov eax, dword [esi + 8]
push dword [eax + ecx*4]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x1001c550
mov ecx, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, dword [esi + 4]
jge 0x1001c8e3
mov eax, dword [ebp - 0x2c]
jmp 0x1001c528
mov ecx, dword [esi + 8]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ecx + eax*4]
jmp 0x1001c4c4
cmp word [ebp - 0x34], 8
mov edi, 0x80070057
jne 0x1001c8e3
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x1001c8e3
xor edx, edx
mov ecx, edx
mov dword [ebp - 0x24], edx
cmp dword [esi + 4], edx
jle 0x1001c8e3
push eax
mov eax, dword [esi + 8]
push dword [eax + ecx*4]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x1001c5b1
mov ecx, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, dword [esi + 4]
jge 0x1001c8e3
mov eax, dword [ebp - 0x2c]
jmp 0x1001c589
push 3
pop eax
mov word [ebp - 0x44], ax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
xor eax, eax
mov edi, eax
jmp 0x1001c2e2
xor eax, eax
push 8
mov word [ebp - 0x44], ax
pop eax
cmp ax, word [ebp - 0x34]
jne 0x1001c62f
xor eax, eax
mov ecx, eax
mov dword [ebp - 0x24], eax
cmp dword [esi + 4], eax
jbe 0x1001c631
mov eax, dword [esi + 8]
push dword [ebp - 0x2c]
push dword [eax + ecx*4]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x1001c605
mov ecx, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, dword [esi + 4]
jb 0x1001c5e2
jmp 0x1001c620
mov ecx, dword [esi + 8]
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ecx + eax*4]
call fcn.10023a2e
mov edi, eax
test edi, edi
js 0x1001c8e3
xor eax, eax
cmp ax, word [ebp - 0x44]
jne 0x1001c2e2
push 3
pop edx
xor eax, eax
push edx
push eax
lea eax, [ebp - 0x34]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
test eax, eax
js 0x1001c37e
mov edi, dword [ebp - 0x2c]
test edi, edi
js 0x1001c37e
mov eax, dword [esi + 4]
dec eax
cmp edi, eax
jg 0x1001c37e
mov ecx, dword [esi + 8]
mov ecx, dword [ecx + edi*4]
jmp 0x1001c4c4
movzx eax, word [ebp - 0x34]
dec eax
sub eax, 1
je 0x1001c6c4
sub eax, 1
je 0x1001c697
sub eax, 5
jne 0x1001c37e
push edx
push eax
lea eax, [ebp - 0x34]
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov edi, eax
test edi, edi
js 0x1001c37e
mov ecx, dword [esi + 8]
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ecx]
jl 0x1001c6b2
cmp eax, dword [ecx + 4]
jg 0x1001c6b2
cmp dword [esi], 0xd
jne 0x1001c6ff
test dword [ecx + 8], eax
je 0x1001c6ff
jmp 0x1001c6fa
cmp dword [esi], 0xa
jne 0x1001c37e
test eax, eax
je 0x1001c6ff
jmp 0x1001c37e
mov eax, dword [esi + 8]
mov esi, dword [ebp - 0x2c]
movsx edx, si
cmp edx, dword [eax]
jl 0x1001c6d6
cmp edx, dword [eax + 4]
jle 0x1001c6e8
cmp ecx, 0xa
jne 0x1001c37e
test si, si
jne 0x1001c37e
cmp ecx, 0xd
jne case.0x1001c2ab.14
test dword [eax + 8], edx
je case.0x1001c2ab.14
mov edi, 0x80070057
test edi, edi
js 0x1001c8e3
jmp case.0x1001c2ab.14
cmp word [ebp - 0x34], 8
jne 0x1001c37e
mov eax, dword [ebp - 0x2c]
test eax, eax
je case.0x1001c2ab.14
xor ecx, ecx
cmp word [eax], cx
je case.0x1001c2ab.14
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1001c741
test al, 0x10
jne case.0x1001c2ab.14
mov edi, 0x80070003
jmp 0x1001c8e3
push dword [ebp - 0x3c]
push 0x10005de0
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
mov ecx, ebx
test eax, eax
jne 0x1001c7ee
push 0x10005e6c
push 0x10005e70
call fcn.1001cb38
mov edi, eax
test edi, edi
js 0x1001c8e3
push 0x10005e90
push 0x10005ea0
mov ecx, ebx
call fcn.1001cb38
mov edi, eax
test edi, edi
js 0x1001c8e3
mov esi, 0x10005de0
mov ecx, ebx
push esi
push 0x10005eb8
call fcn.1001cb38
mov edi, eax
test edi, edi
js 0x1001c8e3
push esi
push 0x10005ee4
mov ecx, ebx
call fcn.1001cb38
mov edi, eax
test edi, edi
js 0x1001c8e3
push esi
push 0x10005f00
mov ecx, ebx
call fcn.1001cb38
mov edi, eax
test edi, edi
js 0x1001c8e3
push esi
push 0x10005f20
jmp 0x1001c8be
push 0x10005f40
push 0x10005e70
call fcn.1001cb38
mov edi, eax
test edi, edi
js 0x1001c8e3
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [ebx]
push 0x10005ea0
mov edi, dword [eax + 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov dword [ebp - 0x24], esi
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 2
push eax
push esi
push ebx
mov ecx, edi
call dword [0x10030308]
call edi
mov edi, eax
push 3
pop eax
push esi
mov byte [ebp - 4], al
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
xor eax, eax
mov byte [ebp - 4], al
test edi, edi
js 0x1001c8e3
push 0x10005e90
push dword [ebp - 0x54]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
mov esi, eax
lea eax, [ebp - 0x5c]
pop ecx
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test esi, esi
jne 0x1001c88d
push 0x10005f44
push 0x10005ea0
mov ecx, ebx
call fcn.1001cb38
mov edi, eax
test edi, edi
js 0x1001c8e3
mov esi, 0x10005ddc
mov ecx, ebx
push esi
push 0x10005eb8
call fcn.1001cb38
mov edi, eax
test edi, edi
js 0x1001c8e3
push esi
push 0x10005ee4
mov ecx, ebx
call fcn.1001cb38
mov edi, eax
test edi, edi
js 0x1001c8e3
push esi
push 0x10005f00
mov ecx, ebx
call fcn.1001cb38
mov edi, eax
jmp 0x1001c8e3
push 0x5d5
mov edi, 0x8000ffff
mov edx, 0x10005e48
push edi
mov ecx, 0x10005e10
call int.1002475d
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x1001c913
add eax, 4
mov dword [ebp - 4], 4
push eax
call dword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
mov eax, edi
call fcn.100284c1
ret 0x14