Function at 0x1001320
Capabilities:
Check if file exists

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x35c
mov eax, dword [0x1004018]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x340]
mov dword [ebp - 0x34c], eax
lea ecx, [ebp - 0x60]
mov dword [ebp - 8], ecx
mov dword [ebp - 4], 0x4c
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x350], 0
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0x344], 0
push 0x10011cc
push 0
call dword [sym.imp.msvcrt.dll_setlocale]
add esp, 8
push 2
push 0
push 0x10011b0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov dword [0x1004068], eax
push 2
push 0
push 0x1001194
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov dword [0x1004064], eax
cmp dword [0x1004068], 0
je 0x10013c8
cmp dword [0x1004064], 0
jne 0x10013d9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x348], eax
jmp 0x1001b53
call fcn.01003280
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
je 0x10013f2
jmp 0x1001b53
push 0x100406c
push 0x1001184
push 0
push 0
push 0
push 1
call dword [sym.imp.AUTHZ.dll_AuthzInitializeResourceManager]
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0
jne 0x100142a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x348], eax
jmp 0x1001b53
mov edx, dword [ebp + 8]
mov dword [ebp - 0x35c], edx
cmp dword [ebp - 0x35c], 1
je 0x1001457
cmp dword [ebp - 0x35c], 2
je 0x1001470
cmp dword [ebp - 0x35c], 3
je 0x10015b7
jmp 0x1001af7
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.01002050
mov dword [ebp - 0x348], eax
jmp 0x1001b53
push 0x100117c
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x1001530
push 0
push 0
lea eax, [ebp - 0x344]
push eax
push 0x400
push 0x4000ad03
mov ecx, dword [0x1004068]
push ecx
push 0x900
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
cmp dword [ebp - 0x344], 0
je 0x10014df
mov edx, dword [ebp - 0x344]
push edx
push 0x1001174
call dword [sym.imp.msvcrt.dll_wprintf]
add esp, 8
mov eax, dword [ebp - 0x344]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x2e0], 0
jmp 0x10014fa
mov ecx, dword [ebp - 0x2e0]
add ecx, 1
mov dword [ebp - 0x2e0], ecx
cmp dword [ebp - 0x2e0], 8
ja 0x1001521
mov edx, dword [ebp - 0x2e0]
mov eax, dword [edx*4 + 0x1004040]
push eax
push 0x100116c
call dword [sym.imp.msvcrt.dll_wprintf]
add esp, 8
jmp 0x10014eb
mov dword [ebp - 0x348], 0
jmp 0x10015b2
push 0x1001164
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x1001556
call fcn.010027e0
mov dword [ebp - 0x348], eax
jmp 0x10015b2
push 0
push 0
lea eax, [ebp - 0x344]
push eax
push 0x400
push 0x4000ad02
mov ecx, dword [0x1004068]
push ecx
push 0x900
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
cmp dword [ebp - 0x344], 0
je 0x10015a8
mov edx, dword [ebp - 0x344]
push edx
push 0x1001174
call dword [sym.imp.msvcrt.dll_wprintf]
add esp, 8
mov eax, dword [ebp - 0x344]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x348], 0x57
jmp 0x1001b53
push 0x100115c
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x1001617
push 0x1001158
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 8]
push ecx
call dword [sym.imp.msvcrt.dll__wfopen]
add esp, 8
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0
jne 0x1001600
mov dword [ebp - 0x348], 0x52
jmp 0x1001612
mov edx, dword [ebp - 0x2dc]
push edx
call fcn.01002050
mov dword [ebp - 0x348], eax
jmp 0x1001af5
push 0x1001150
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x1001805
push 0x100114c
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
push eax
call dword [sym.imp.msvcrt.dll__wfopen]
add esp, 8
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0
jne 0x1001667
mov dword [ebp - 0x348], 2
jmp 0x1001800
lea ecx, [ebp - 0x2e8]
push ecx
lea edx, [ebp - 0x350]
push edx
mov eax, dword [ebp - 0x2dc]
push eax
call fcn.01002930
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
je 0x1001695
jmp 0x1001b53
call fcn.010027e0
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x2e0], 0
jmp 0x10016bb
mov ecx, dword [ebp - 0x2e0]
add ecx, 1
mov dword [ebp - 0x2e0], ecx
mov edx, dword [ebp - 0x2e0]
cmp edx, dword [ebp - 0x350]
jae 0x1001800
lea eax, [ebp - 0x2e4]
push eax
mov ecx, dword [ebp - 0x2e0]
imul ecx, ecx, 0x274
add ecx, dword [ebp - 0x2e8]
push ecx
call fcn.01002620
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
je 0x1001700
jmp 0x1001b53
mov dword [ebp - 4], 0x4c
push 0x4c
push 0
mov edx, dword [ebp - 8]
push edx
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 4]
push eax
mov ecx, dword [ebp - 8]
push ecx
push 0
push 0
mov edx, dword [ebp - 0x2e4]
push edx
push 0
call dword [sym.imp.AUTHZ.dll_AuthziQueryAuditPolicy]
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0
jne 0x100175b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 2
je 0x100175b
jmp 0x1001b53
push 0x4c
push 0
mov eax, dword [ebp - 0x34c]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x34c]
push ecx
mov edx, dword [ebp - 0x2e0]
imul edx, edx, 0x274
mov eax, dword [ebp - 0x2e8]
lea ecx, [eax + edx + 0x224]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.010030c0
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
je 0x10017ac
jmp 0x1001b53
mov eax, dword [ebp - 0x34c]
push eax
push 0
mov ecx, dword [ebp - 0x2e4]
push ecx
push 0
call dword [sym.imp.AUTHZ.dll_AuthziSetAuditPolicy]
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0
jne 0x10017e4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x348], eax
jmp 0x1001b53
mov edx, dword [ebp - 0x2e4]
push edx
call dword [sym.imp.AUTHZ.dll_AuthzFreeContext]
mov dword [ebp - 0x2e4], 0
jmp 0x10016ac
jmp 0x1001af5
push 0x1001144
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x100186d
push 0x100113c
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x100186d
push 0x1001134
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x100186d
push 0x100112c
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x1001a45
push 0x1001144
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x1001892
mov dword [ebp - 0x354], 1
jmp 0x10018ff
push 0x100113c
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x10018b7
mov dword [ebp - 0x354], 4
jmp 0x10018ff
push 0x1001134
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x10018dc
mov dword [ebp - 0x354], 2
jmp 0x10018ff
push 0x100112c
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x10018ff
mov dword [ebp - 0x354], 8
push 0x274
push 0
lea ecx, [ebp - 0x2d8]
push ecx
call sub.msvcrt.dll_memset
add esp, 0xc
lea edx, [ebp - 0x2d8]
push edx
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 0x354]
push edx
call fcn.01002f10
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
je 0x1001943
jmp 0x1001b53
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x2d8]
push ecx
call fcn.01002620
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
je 0x100196a
jmp 0x1001b53
push 0x4c
push 0
mov edx, dword [ebp - 8]
push edx
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 4]
push eax
mov ecx, dword [ebp - 8]
push ecx
push 0
push 0
mov edx, dword [ebp - 0x2e4]
push edx
push 0
call dword [sym.imp.AUTHZ.dll_AuthziQueryAuditPolicy]
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0
jne 0x10019ca
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 2
jne 0x10019c5
mov dword [ebp - 0x348], 0
jmp 0x10019ca
jmp 0x1001b53
push 0x4c
push 0
mov eax, dword [ebp - 0x34c]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov ecx, dword [ebp - 0x34c]
push ecx
lea edx, [ebp - 0xb4]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.010030c0
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
je 0x1001a08
jmp 0x1001b53
mov ecx, dword [ebp - 0x34c]
push ecx
push 0
mov edx, dword [ebp - 0x2e4]
push edx
push 0
call dword [sym.imp.AUTHZ.dll_AuthziSetAuditPolicy]
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0
jne 0x1001a40
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x348], eax
jmp 0x1001b53
jmp 0x1001af5
push 0x1001124
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x1001a99
lea edx, [ebp - 0x2e4]
push edx
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 8]
push ecx
call fcn.01002620
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
je 0x1001a85
jmp 0x1001b53
mov edx, dword [ebp - 0x2e4]
push edx
call fcn.01002790
mov dword [ebp - 0x348], eax
jmp 0x1001af5
push 0
push 0
lea eax, [ebp - 0x344]
push eax
push 0x400
push 0x4000ad02
mov ecx, dword [0x1004068]
push ecx
push 0x900
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
cmp dword [ebp - 0x344], 0
je 0x1001aeb
mov edx, dword [ebp - 0x344]
push edx
push 0x1001174
call dword [sym.imp.msvcrt.dll_wprintf]
add esp, 8
mov eax, dword [ebp - 0x344]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x348], 0x57
jmp 0x1001b53
push 0
push 0
lea ecx, [ebp - 0x344]
push ecx
push 0x400
push 0x4000ad02
mov edx, dword [0x1004068]
push edx
push 0x900
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
cmp dword [ebp - 0x344], 0
je 0x1001b49
mov eax, dword [ebp - 0x344]
push eax
push 0x1001174
call dword [sym.imp.msvcrt.dll_wprintf]
add esp, 8
mov ecx, dword [ebp - 0x344]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x348], 0x57
cmp dword [0x100406c], 0
je 0x1001b6f
mov edx, dword [0x100406c]
push edx
call dword [sym.imp.AUTHZ.dll_AuthzFreeResourceManager]
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2e4], 0
je 0x1001b8b
mov eax, dword [ebp - 0x2e4]
push eax
call dword [sym.imp.AUTHZ.dll_AuthzFreeContext]
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2e8], 0
je 0x1001ba1
mov ecx, dword [ebp - 0x2e8]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x348], 0
je 0x1001c1a
mov dword [ebp - 0x358], 0
push 0
push 0
lea edx, [ebp - 0x358]
push edx
push 0x400
mov eax, dword [ebp - 0x348]
push eax
push 0
push 0x1100
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
cmp dword [ebp - 0x358], 0
je 0x1001c05
mov ecx, dword [ebp - 0x358]
push ecx
push 0x1001174
call dword [sym.imp.msvcrt.dll_wprintf]
add esp, 8
mov edx, dword [ebp - 0x358]
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x1001c1a
mov eax, dword [ebp - 0x348]
push eax
push 0x100111c
call dword [sym.imp.msvcrt.dll_wprintf]
add esp, 8
mov eax, dword [ebp - 0x348]
mov ecx, dword [ebp - 0xc]
call fcn.0100345b
mov esp, ebp
pop ebp
ret