Function at 0x10069930
Capabilities:
Check if file exists
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10155e11
mov eax, dword fs:[0]
push eax
sub esp, 0x268
mov eax, dword [0x101a154c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.10017d20
mov ecx, eax
test ecx, ecx
je 0x1006a35c
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x258], eax
xorps xmm0, xmm0
mov dword [ebp - 0x234], 0
movq qword [ebp - 0x23c], xmm0
mov dword [ebp - 4], 0
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
lea eax, [ebp - 0x258]
mov byte [ebp - 4], 1
push eax
call fcn.10069720
mov edi, dword [ebp - 0x258]
add esp, 4
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
or ebx, 0xffffffff
test eax, eax
jne 0x100699e3
xor esi, esi
jmp 0x1006a317
xorps xmm0, xmm0
mov dword [ebp - 0x228], 0
movq qword [ebp - 0x230], xmm0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 0
movq qword [ebp - 0x224], xmm0
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0
mov byte [ebp - 4], 3
call fcn.10017d20
mov ecx, eax
test ecx, ecx
je 0x1006a366
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x254], eax
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 4
call fcn.1006cfb0
lea ecx, [ebp - 0x224]
call fcn.1006cfb0
lea ecx, [ebp - 0x24d]
call fcn.10063240
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.100191f0
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 5
call fcn.100190c0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10069ad4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x274]
push eax
call fcn.1006cc80
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 6
jb 0x10069afb
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x1015fbf0
push eax
call fcn.100395a0
mov edx, dword [ebp - 0x260]
add esp, 0xc
mov byte [ebp - 4], 4
cmp edx, 0x10
jb 0x10069b4e
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10069b44
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a370
push edx
push ecx
call fcn.100f8c70
add esp, 8
push ecx
mov ecx, esp
push 0x1015fecc
call fcn.10012f50
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.100667b0
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10060c00
lea ecx, [ebp - 0x230]
call fcn.1006cfb0
lea ecx, [ebp - 0x224]
call fcn.1006cfb0
lea ecx, [ebp - 0x24d]
call fcn.100640c0
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.100191f0
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 7
call fcn.100190c0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10069bff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x274]
push eax
call fcn.1006cc80
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 8
jb 0x10069c26
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x1015fbf0
push eax
call fcn.100395a0
mov edx, dword [ebp - 0x260]
add esp, 0xc
mov byte [ebp - 4], 4
cmp edx, 0x10
jb 0x10069c79
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10069c6f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a375
push edx
push ecx
call fcn.100f8c70
add esp, 8
push ecx
mov ecx, esp
push 0x1015fecc
call fcn.10012f50
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.100667b0
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10060c00
lea ecx, [ebp - 0x230]
call fcn.1006cfb0
lea ecx, [ebp - 0x224]
call fcn.1006cfb0
lea ecx, [ebp - 0x24d]
call fcn.10063d40
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.100191f0
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 9
call fcn.100190c0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10069d2a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x274]
push eax
call fcn.1006cc80
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0xa
jb 0x10069d51
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x1015fbf0
push eax
call fcn.100395a0
mov edx, dword [ebp - 0x260]
add esp, 0xc
mov byte [ebp - 4], 4
cmp edx, 0x10
jb 0x10069da4
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10069d9a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a37a
push edx
push ecx
call fcn.100f8c70
add esp, 8
push ecx
mov ecx, esp
push 0x1015fecc
call fcn.10012f50
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.100667b0
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10060c00
lea ecx, [ebp - 0x230]
call fcn.1006cfb0
lea ecx, [ebp - 0x224]
call fcn.1006cfb0
lea ecx, [ebp - 0x24d]
call fcn.10062dc0
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.100191f0
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0xb
call fcn.100190c0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10069e55
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x274]
push eax
call fcn.1006cc80
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0xc
jb 0x10069e7c
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x1015fbf0
push eax
call fcn.100395a0
mov edx, dword [ebp - 0x260]
add esp, 0xc
mov byte [ebp - 4], 4
cmp edx, 0x10
jb 0x10069ecf
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10069ec5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a37f
push edx
push ecx
call fcn.100f8c70
add esp, 8
push ecx
mov ecx, esp
push 0x1015fecc
call fcn.10012f50
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.100667b0
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10060c00
lea ecx, [ebp - 0x230]
call fcn.1006cfb0
lea ecx, [ebp - 0x224]
call fcn.1006cfb0
push 0
push 0x1a
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x218]
mov dword [ebp - 0x25c], 0
push eax
lea ecx, [ebp - 0x25c]
call fcn.10012f50
lea ecx, [ebp - 0x24d]
mov byte [ebp - 4], 0xd
call fcn.10064ee0
push eax
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.100191f0
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0xe
call fcn.100190c0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 0xd
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10069fb3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x274]
push eax
call fcn.1006cc80
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0xf
jb 0x10069fda
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x1015fbf0
push eax
call fcn.100395a0
mov edx, dword [ebp - 0x260]
add esp, 0xc
mov byte [ebp - 4], 0xd
cmp edx, 0x10
jb 0x1006a02d
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006a023
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a384
push edx
push ecx
call fcn.100f8c70
add esp, 8
push ecx
mov ecx, esp
push 0x1015fecc
call fcn.10012f50
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.100667b0
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10060c00
lea ecx, [ebp - 0x230]
call fcn.1006cfb0
lea ecx, [ebp - 0x224]
call fcn.1006cfb0
lea ecx, [ebp - 0x24d]
call fcn.100642a0
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.100191f0
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x10
call fcn.100190c0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 0xd
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1006a0de
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x254]
lea eax, [ebp - 0x274]
push 0
push 0xffffffffffffffff
push 0xfde9
push esi
push eax
call fcn.1006cc80
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x11
jb 0x1006a106
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x1015fbf0
push eax
call fcn.100395a0
mov edx, dword [ebp - 0x260]
add esp, 0xc
mov byte [ebp - 4], 0xd
cmp edx, 0x10
jb 0x1006a159
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006a14f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a389
push edx
push ecx
call fcn.100f8c70
add esp, 8
push ecx
mov ecx, esp
push 0x1015fecc
call fcn.10012f50
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.100667b0
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10060c00
xor ecx, ecx
mov dword [ebp - 0x240], 0
xorps xmm0, xmm0
mov dword [ebp - 0x240], ecx
movq qword [ebp - 0x248], xmm0
mov dword [ebp - 0x248], ecx
mov dword [ebp - 0x244], ecx
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x23c]
sar eax, 2
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x24c], ecx
test eax, eax
je 0x1006a2b4
xor ebx, ebx
xor edi, edi
xor esi, esi
lea eax, [ebp - 0x248]
push eax
push ebx
push ecx
call fcn.100171a0
mov eax, dword [ebp - 0x248]
add esp, 0xc
mov dword [ebp - 0x244], eax
mov ebx, 0x1015fecc
lea eax, [ebp - 0x248]
push eax
mov eax, dword [ebp - 0x23c]
sub esp, 0x18
mov eax, dword [eax + esi*4]
test eax, eax
mov dword [ebp - 0x24c], esp
cmovne ebx, eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x24c]
xor edx, edx
push eax
push ebx
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], dx
call fcn.10018230
call fcn.1006d030
mov ebx, dword [ebp - 0x244]
mov eax, 0x2aaaaaab
mov ecx, ebx
inc esi
sub ecx, dword [ebp - 0x248]
add esp, 0x1c
imul ecx
mov ecx, dword [ebp - 0x248]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
add edi, eax
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x23c]
sar eax, 2
cmp esi, eax
jb 0x1006a1f1
mov esi, dword [ebp - 0x254]
or ebx, 0xffffffff
mov dword [ebp - 0x24c], edi
mov edi, dword [ebp - 0x258]
lea ecx, [ebp - 0x248]
call fcn.10061130
mov edx, dword [ebp - 0x25c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1006a2e0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x1006a2fb
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x224]
call fcn.1001f0d0
lea ecx, [ebp - 0x230]
call fcn.1001f0d0
mov esi, dword [ebp - 0x24c]
lea ecx, [ebp - 0x23c]
call fcn.1001f0d0
mov dword [ebp - 4], 0xffffffff
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x1006a33e
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100f8fe1
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.100142b0
push 0x80004005
call fcn.100142b0
call fcn.10124793
call fcn.10124793
call fcn.10124793
call fcn.10124793
call fcn.10124793
call fcn.10124793
int3