Function at 0x1001cb4f
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100be3b7
mov eax, dword fs:[0]
push eax
mov eax, 0x1254
call fcn.1008c2a0
mov eax, dword [0x1010c070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x53
pop eax
push 0x4f
mov word [ebp - 0x428], ax
xor esi, esi
pop eax
push 0x46
mov word [ebp - 0x426], ax
pop eax
push 0x54
pop ebx
push 0x57
mov word [ebp - 0x424], ax
pop eax
push 0x41
mov word [ebp - 0x420], ax
pop eax
push 0x52
pop edi
push 0x45
mov word [ebp - 0x41e], ax
pop eax
push 0x5c
pop ecx
push 0x65
mov word [ebp - 0x41a], ax
pop eax
push 0x6e
pop edx
push 0x63
mov word [ebp - 0x414], ax
pop eax
push 0x65
mov word [ebp - 0x410], ax
pop eax
push 0x74
mov word [ebp - 0x40e], ax
pop eax
push 0x51
mov word [ebp - 0x40a], ax
pop eax
push 0x50
mov word [ebp - 0x406], ax
mov word [ebp - 0x404], ax
pop eax
push 0x43
mov word [ebp - 0x402], ax
pop eax
push 0x4d
mov word [ebp - 0x400], ax
pop eax
push 0x67
mov word [ebp - 0x3fe], ax
pop eax
push 0x72
mov word [ebp - 0x3fc], ax
pop eax
push 0x1da
mov word [ebp - 0x3fa], ax
lea eax, [ebp - 0x3f8]
push esi
push eax
mov word [ebp - 0x422], bx
mov word [ebp - 0x41c], di
mov word [ebp - 0x418], cx
mov word [ebp - 0x416], bx
mov word [ebp - 0x412], dx
mov word [ebp - 0x40c], dx
mov word [ebp - 0x408], cx
call fcn.1008e420
push 0x5c
pop ecx
push 0x51
mov word [ebp - 0x840], cx
pop ecx
push 0x50
mov word [ebp - 0x83e], cx
mov word [ebp - 0x83c], cx
pop ecx
mov word [ebp - 0x83a], cx
push 0x43
pop eax
push 0x74
mov word [ebp - 0x838], ax
pop eax
push 0x70
mov word [ebp - 0x834], ax
pop eax
push 0x2e
mov word [ebp - 0x832], ax
pop eax
push 0x65
pop ecx
push 0x78
mov word [ebp - 0x830], ax
pop eax
push 0x1f2
mov word [ebp - 0x82c], ax
lea eax, [ebp - 0x828]
push esi
push eax
mov word [ebp - 0x836], di
mov word [ebp - 0x82e], cx
mov word [ebp - 0x82a], cx
call fcn.1008e420
push 0x5c
pop eax
push 0x51
pop edi
push 0x50
mov word [ebp - 0x634], ax
pop eax
push 0x43
mov word [ebp - 0x62e], ax
pop eax
push 0x72
mov word [ebp - 0x62c], ax
pop eax
push 0x61
mov word [ebp - 0x62a], bx
pop ebx
push 0x79
mov word [ebp - 0x628], ax
pop eax
push 0x2e
mov word [ebp - 0x624], ax
pop eax
push 0x65
pop ecx
push 0x78
mov word [ebp - 0x622], ax
pop eax
push 0x1f0
mov word [ebp - 0x61e], ax
lea eax, [ebp - 0x61a]
push esi
push eax
mov word [ebp - 0x632], di
mov word [ebp - 0x630], di
mov word [ebp - 0x626], bx
mov word [ebp - 0x620], cx
mov word [ebp - 0x61c], cx
call fcn.1008e420
push 0x5c
pop eax
push 0x4d
pop edx
push 0x55
mov word [ebp - 0x21a], di
pop edi
push 0x70
pop ecx
push 0x64
mov word [ebp - 0x21c], ax
pop eax
push 0x74
mov word [ebp - 0x214], cx
mov word [ebp - 0x218], dx
mov word [ebp - 0x216], di
mov word [ebp - 0x212], ax
mov word [ebp - 0x210], bx
pop ecx
push 0x65
mov word [ebp - 0x20e], cx
pop ecx
push 0x5c
mov word [ebp - 0x20c], cx
pop ecx
push 0x51
mov word [ebp - 0x20a], cx
pop ecx
push 0x50
mov word [ebp - 0x208], cx
mov word [ebp - 0x206], cx
pop ecx
push 0x43
mov word [ebp - 0x204], cx
pop ecx
push 0x67
mov word [ebp - 0x200], dx
pop edx
push 0x72
mov word [ebp - 0x1fe], dx
pop edx
push 0x70
mov word [ebp - 0x202], cx
pop ecx
push 0x74
mov word [ebp - 0x1f6], ax
pop eax
push 0x65
mov word [ebp - 0x1f8], cx
pop ecx
push 0x2e
mov word [ebp - 0x1f2], ax
pop eax
push 0x78
mov word [ebp - 0x1f4], bx
pop ebx
push 0x1d4
mov word [ebp - 0x1ee], ax
lea eax, [ebp - 0x1e6]
push esi
push eax
mov word [ebp - 0x1fc], dx
mov word [ebp - 0x1fa], di
mov word [ebp - 0x1f0], cx
mov word [ebp - 0x1ec], cx
mov word [ebp - 0x1ea], bx
mov word [ebp - 0x1e8], cx
call fcn.1008e420
push 0x5c
pop eax
push 0x6e
pop ecx
push 0x69
mov word [ebp - 0xa4c], ax
pop eax
push 0x73
mov word [ebp - 0xa46], ax
pop eax
push 0x74
mov word [ebp - 0xa42], ax
pop eax
push 0x2e
mov word [ebp - 0xa40], ax
pop eax
push 0x65
mov word [ebp - 0xa3e], ax
pop eax
mov word [ebp - 0xa3a], bx
xor ebx, ebx
push 0x1f4
mov word [ebp - 0xa3c], ax
mov word [ebp - 0xa38], ax
lea eax, [ebp - 0xa36]
push ebx
push eax
mov word [ebp - 0xa4a], di
mov word [ebp - 0xa48], cx
mov word [ebp - 0xa44], cx
call fcn.1008e420
push 0x804
lea eax, [ebp - 0x1250]
push ebx
push eax
call fcn.1008e420
add esp, 0x48
lea eax, [ebp - 0x1250]
lea ecx, [ebp - 0x428]
push eax
call fcn.1001c8f8
pop ecx
test eax, eax
je 0x1001d12e
lea ecx, [ebp - 0x1250]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x1001cf39
sub ecx, edx
sar ecx, 1
je 0x1001d12e
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea eax, [ebp - 0x1250]
xor esi, esi
push eax
inc esi
call edi
test eax, eax
je 0x1001d12e
push 3
pop esi
lea eax, [ebp - 0x1250]
mov dword [ebp - 0x1260], ebx
push eax
lea ecx, [ebp - 0x1260]
call fcn.1000563a
lea ecx, [ebp - 0x840]
mov dword [ebp - 4], ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x1001cf8f
sub ecx, edx
lea eax, [ebp - 0x840]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1260]
call fcn.10003981
push dword [ebp - 0x1260]
call edi
test eax, eax
mov dword [ebp - 0x125c], ebx
mov ecx, 0x103
lea eax, [ebp - 0x1250]
cmovne esi, ecx
lea ecx, [ebp - 0x125c]
push eax
call fcn.1000563a
lea ecx, [ebp - 0x634]
mov byte [ebp - 4], 1
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x1001cfe8
sub ecx, edx
lea eax, [ebp - 0x634]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x125c]
call fcn.10003981
push dword [ebp - 0x125c]
call edi
test eax, eax
je 0x1001d01c
or esi, 0x200
lea eax, [ebp - 0x1250]
mov dword [ebp - 0x1258], ebx
push eax
lea ecx, [ebp - 0x1258]
call fcn.1000563a
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 2
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x1001d041
sub ecx, edx
lea eax, [ebp - 0x21c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1258]
call fcn.10003981
push dword [ebp - 0x1258]
call edi
test eax, eax
je 0x1001d075
or esi, 0x400
lea eax, [ebp - 0x1250]
mov dword [ebp - 0x1254], ebx
push eax
lea ecx, [ebp - 0x1254]
call fcn.1000563a
lea ecx, [ebp - 0xa4c]
mov byte [ebp - 4], 3
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x1001d09a
sub ecx, edx
lea eax, [ebp - 0xa4c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1254]
call fcn.10003981
push dword [ebp - 0x1254]
call edi
test eax, eax
je 0x1001d0ce
or esi, 0x800
mov ecx, str.9e837779447dca52c794c7bfe409d287
call fcn.1001ca17
test eax, eax
je 0x1001d0e2
or esi, 0x10000
mov ecx, str.afa7e40c8810995c805cc00ed8cd1eea
call fcn.1001ca17
test eax, eax
je 0x1001d0f6
or esi, 0x20000
mov ecx, dword [ebp - 0x1254]
lea ecx, [ecx - 0x10]
call fcn.100018e3
mov ecx, dword [ebp - 0x1258]
lea ecx, [ecx - 0x10]
call fcn.100018e3
mov ecx, dword [ebp - 0x125c]
add ecx, 0xfffffff0
call fcn.100018e3
mov ecx, dword [ebp - 0x1260]
add ecx, 0xfffffff0
call fcn.100018e3
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1008aeea
mov esp, ebp
pop ebp
ret