Function at 0x1007248
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ebx
push esi
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x40]
cmp eax, 1
push edi
jl 0x10074b7
cmp eax, 0x64
jg 0x10074b7
mov eax, dword [esi + 0x3c]
xor edi, edi
cmp eax, edi
jle 0x10074ac
cmp eax, 0xa
jg 0x10074ac
mov eax, dword [esi + 0x38]
cmp eax, edi
jne 0x1007297
cmp dword [esi + 4], edi
je 0x10074c8
push 0x6a
push 0x73
jmp 0x10074c2
cmp dword [esi + 0x2c], edi
je 0x10072c9
push eax
push edi
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
cmp eax, edi
jne 0x10072c2
cmp dword [esi + 4], edi
je 0x10074c8
push 0x6a
push 0xb3
jmp 0x10074c2
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [esi + 0x34], edi
je 0x10072e8
xor eax, eax
cmp ax, word [esi + 0x44]
jne 0x10072e8
cmp dword [esi + 4], edi
je 0x10074c8
push 0x6a
push 0x71
jmp 0x10074c2
lea eax, [esi + 0x24c]
xor ecx, ecx
cmp cx, word [eax]
je 0x1007359
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x1007339
cmp dword [esi + 4], edi
je 0x1007313
push 0x6a
push 0xb9
push edi
call fcn.010064b6
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, edi
jne 0x1007324
mov eax, 0x54f
cmp eax, edi
jle 0x10074cd
and eax, 0xffff
or eax, 0x80070000
jmp 0x10074cd
test al, 0x10
jne 0x1007359
cmp dword [esi + 4], edi
je 0x100734f
push 0x6a
push 0xb9
push edi
call fcn.010064b6
mov eax, 0x8007010b
jmp 0x10074cd
lea ebx, [esi + 0x44]
xor eax, eax
cmp ax, word [ebx]
je 0x10074a8
push ebx
call fcn.01006ff6
cmp eax, 2
jne 0x100738e
cmp dword [esi + 4], edi
je 0x1007384
push 0x6a
push 0xb0
push edi
call fcn.010064b6
mov eax, 0x80070005
jmp 0x10074cd
cmp eax, edi
je 0x10073ab
cmp dword [esi + 4], edi
je 0x10073a1
push 0x6a
push 0x71
push edi
call fcn.010064b6
mov eax, 0x80004005
jmp 0x10074cd
push ebx
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
mov dword [ebp + 8], eax
cmp dword [esi + 0x14], edi
je 0x1007449
cmp dword [esi + 0x18], edi
jne 0x1007437
cmp dword [esi + 0x24], edi
jne 0x1007437
cmp dword [esi + 0x1c], edi
jne 0x1007437
mov ebx, dword [sym.imp.msvcrt.dll__wcsicmp]
push 0x1001bc4
push eax
call ebx
pop ecx
pop ecx
test eax, eax
je 0x100741a
push 0x1001bac
push dword [ebp + 8]
call ebx
pop ecx
pop ecx
test eax, eax
je 0x100741a
push 0x1001bb8
push dword [ebp + 8]
call ebx
pop ecx
pop ecx
test eax, eax
je 0x10074a8
cmp dword [esi + 4], edi
je 0x10074c8
push 0x6a
push 0xb6
jmp 0x10074c2
cmp dword [esi], edi
je 0x10074a8
cmp dword [esi + 4], edi
je 0x10074c8
push 0x6a
push 0xb5
jmp 0x10074c2
cmp dword [esi + 4], edi
je 0x10074c8
push 0x6a
push 0xb4
jmp 0x10074c2
mov ebx, dword [sym.imp.msvcrt.dll__wcsicmp]
push 0x1001bc4
push eax
call ebx
pop ecx
pop ecx
test eax, eax
je 0x100749a
push 0x1001bb8
push dword [ebp + 8]
call ebx
pop ecx
pop ecx
test eax, eax
je 0x100749a
push 0x1001bac
push dword [ebp + 8]
call ebx
pop ecx
pop ecx
test eax, eax
je 0x100749a
cmp dword [esi + 0x18], edi
jne 0x10074a8
cmp dword [esi + 0x1c], edi
jne 0x10074a8
cmp dword [esi + 0x20], edi
jne 0x10074a8
cmp dword [esi + 4], edi
je 0x10074c8
push 0x6a
push 0xb8
jmp 0x10074c2
cmp dword [esi + 4], edi
je 0x10074c8
push 0x6a
push 0xb7
jmp 0x10074c2
xor eax, eax
jmp 0x10074cd
cmp dword [esi + 4], edi
je 0x10074c8
push 0x6a
push 0x65
jmp 0x10074c2
xor edi, edi
cmp dword [esi + 4], edi
je 0x10074c8
push 0x6a
push 0x72
push edi
call fcn.010064b6
mov eax, 0x80070057
pop edi
pop esi
pop ebx
pop ebp
ret 4