Function at 0x10005760
Capabilities:
Check if file exists
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x1003afd4
mov eax, dword fs:[0]
push eax
sub esp, 0x244
mov eax, dword [0x1004c258]
xor eax, esp
mov dword [esp + 0x240], eax
push ebp
push esi
push edi
mov eax, dword [0x1004c258]
xor eax, esp
push eax
lea eax, [esp + 0x254]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x264]
push 0
push 0x1003e39e
lea ecx, [esp + 0xc8]
mov dword [esp + 0x60], 0
mov dword [esp + 0xdc], 0xf
mov dword [esp + 0xd8], 0
mov byte [esp + 0xc8], 0
call fcn.100094d0
mov dword [esp + 0x25c], 0
mov dword [esp + 0x74], 0xf
mov dword [esp + 0x70], 0
mov byte [esp + 0x60], 0
xor eax, eax
mov byte [esp + 0x25c], 1
mov dword [esp + 0x8c], 7
mov dword [esp + 0x88], 0
mov word [esp + 0x78], ax
cmp word [0x1006c688], ax
jne 0x1000582c
xor ecx, ecx
jmp 0x10005843
mov ecx, 0x1006c688
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10005834
sub ecx, edx
sar ecx, 1
push ecx
push 0x1006c688
lea ecx, [esp + 0x80]
call fcn.100096f0
push str.Databasemain.cvd
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x98]
push eax
mov byte [esp + 0x268], 2
call fcn.100013b0
add esp, 0xc
cmp dword [esp + 0x8c], 8
mov byte [esp + 0x25c], 4
jb 0x10005895
push dword [esp + 0x78]
call fcn.1000cef3
add esp, 4
xor eax, eax
cmp dword [esp + 0xa4], 8
mov word [esp + 0x78], ax
lea eax, [esp + 0x90]
cmovae eax, dword [esp + 0x90]
push eax
mov dword [esp + 0x90], 7
mov dword [esp + 0x8c], 0
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x100059d5
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], eax
mov word [esp + 0x28], ax
cmp word [0x1006c688], ax
jne 0x100058f6
xor ecx, ecx
jmp 0x1000590f
mov ecx, 0x1006c688
lea edx, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10005900
sub ecx, edx
sar ecx, 1
push ecx
push 0x1006c688
lea ecx, [esp + 0x30]
call fcn.100096f0
push str.Databasemain.cld
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x268], 5
call fcn.100013b0
mov esi, eax
lea eax, [esp + 0x9c]
add esp, 0xc
cmp eax, esi
je 0x10005990
cmp dword [esp + 0xa4], 8
jb 0x10005963
push dword [esp + 0x90]
call fcn.1000cef3
add esp, 4
xor eax, eax
push esi
lea ecx, [esp + 0x94]
mov dword [esp + 0xa8], 7
mov dword [esp + 0xa4], 0
mov word [esp + 0x94], ax
call fcn.10008420
cmp dword [esp + 0x24], 8
jb 0x100059a3
push dword [esp + 0x10]
call fcn.1000cef3
add esp, 4
xor eax, eax
cmp dword [esp + 0x3c], 8
mov dword [esp + 0x24], 7
mov dword [esp + 0x20], 0
mov word [esp + 0x10], ax
mov byte [esp + 0x25c], 4
jb 0x100059d5
push dword [esp + 0x28]
call fcn.1000cef3
add esp, 4
cmp dword [esp + 0xa4], 8
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
push 0x80
push 3
push 0
push 1
lea eax, [esp + 0xa4]
cmovae eax, dword [esp + 0xa4]
push 0x80000000
push eax
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x10005b41
push 0
lea eax, [esp + 0xdc]
push eax
push pe_nt_image_headers32
lea eax, [esp + 0x15c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x177]
push 0x1003eaac
push eax
call fcn.1000db9c
mov edi, eax
add esp, 0xc
test edi, edi
je 0x10005b3b
push 0x1003eb0c
lea ecx, [esp + 0x44]
call fcn.10001bf0
mov esi, eax
push edi
lea ecx, [esp + 0x2c]
mov byte [esp + 0x260], 6
call fcn.10001bf0
push esi
push eax
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x268], 7
call fcn.10001070
mov esi, eax
lea eax, [esp + 0x6c]
add esp, 0xc
cmp eax, esi
je 0x10005ad0
cmp dword [esp + 0x74], 0x10
jb 0x10005ab1
push dword [esp + 0x60]
call fcn.1000cef3
add esp, 4
push esi
lea ecx, [esp + 0x64]
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], 0
mov byte [esp + 0x64], 0
call fcn.100083c0
cmp dword [esp + 0x24], 0x10
jb 0x10005ae3
push dword [esp + 0x10]
call fcn.1000cef3
add esp, 4
cmp dword [esp + 0x3c], 0x10
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
jb 0x10005b0b
push dword [esp + 0x28]
call fcn.1000cef3
add esp, 4
cmp dword [esp + 0x54], 0x10
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
mov byte [esp + 0x25c], 4
jb 0x10005b3b
push dword [esp + 0x40]
call fcn.1000cef3
add esp, 4
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileW]
xor eax, eax
mov dword [esp + 0x3c], 7
mov dword [esp + 0x38], 0
mov word [esp + 0x28], ax
cmp word [0x1006c688], ax
jne 0x10005b65
xor ecx, ecx
jmp 0x10005b7f
mov ecx, 0x1006c688
lea edx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10005b70
sub ecx, edx
sar ecx, 1
push ecx
push 0x1006c688
lea ecx, [esp + 0x30]
call fcn.100096f0
push str.Databasedaily.cld
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0xb0]
push eax
mov byte [esp + 0x268], 8
call fcn.100013b0
add esp, 0xc
cmp dword [esp + 0x3c], 8
mov byte [esp + 0x25c], 0xa
jb 0x10005bcb
push dword [esp + 0x28]
call fcn.1000cef3
add esp, 4
xor eax, eax
cmp dword [esp + 0xbc], 8
mov word [esp + 0x28], ax
lea eax, [esp + 0xa8]
cmovae eax, dword [esp + 0xa8]
push eax
mov dword [esp + 0x40], 7
mov dword [esp + 0x3c], 0
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x10005d0f
mov dword [esp + 0x8c], 7
mov dword [esp + 0x88], eax
mov word [esp + 0x78], ax
cmp word [0x1006c688], ax
jne 0x10005c2c
xor ecx, ecx
jmp 0x10005c43
mov ecx, 0x1006c688
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10005c34
sub ecx, edx
sar ecx, 1
push ecx
push 0x1006c688
lea ecx, [esp + 0x80]
call fcn.100096f0
push str.Databasedaily.cvd
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x268], 0xb
call fcn.100013b0
mov esi, eax
lea eax, [esp + 0xb4]
add esp, 0xc
cmp eax, esi
je 0x10005cc7
cmp dword [esp + 0xbc], 8
jb 0x10005c9a
push dword [esp + 0xa8]
call fcn.1000cef3
add esp, 4
xor eax, eax
push esi
lea ecx, [esp + 0xac]
mov dword [esp + 0xc0], 7
mov dword [esp + 0xbc], 0
mov word [esp + 0xac], ax
call fcn.10008420
cmp dword [esp + 0x24], 8
jb 0x10005cda
push dword [esp + 0x10]
call fcn.1000cef3
add esp, 4
xor eax, eax
cmp dword [esp + 0x8c], 8
mov dword [esp + 0x24], 7
mov dword [esp + 0x20], 0
mov word [esp + 0x10], ax
mov byte [esp + 0x25c], 0xa
jb 0x10005d0f
push dword [esp + 0x78]
call fcn.1000cef3
add esp, 4
cmp dword [esp + 0xbc], 8
push 0
push 0x80
push 3
push 0
push 1
lea eax, [esp + 0xbc]
cmovae eax, dword [esp + 0xbc]
push 0x80000000
push eax
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x10005f5c
push 0
lea eax, [esp + 0xdc]
push eax
push pe_nt_image_headers32
lea eax, [esp + 0x15c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x177]
push 0x1003eaac
push eax
call fcn.1000db9c
add esp, 0xc
test eax, eax
je 0x10005e2a
push eax
lea ecx, [esp + 0x44]
call fcn.10001bf0
push eax
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x268], 0xc
call fcn.10001180
mov edi, eax
lea eax, [esp + 0x6c]
add esp, 0xc
cmp eax, edi
je 0x10005de7
cmp dword [esp + 0x74], 0x10
jb 0x10005dc8
push dword [esp + 0x60]
call fcn.1000cef3
add esp, 4
push edi
lea ecx, [esp + 0x64]
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], 0
mov byte [esp + 0x64], 0
call fcn.100083c0
cmp dword [esp + 0x24], 0x10
jb 0x10005dfa
push dword [esp + 0x10]
call fcn.1000cef3
add esp, 4
cmp dword [esp + 0x54], 0x10
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
mov byte [esp + 0x25c], 0xa
jb 0x10005e2a
push dword [esp + 0x40]
call fcn.1000cef3
add esp, 4
lea eax, [esp + 0xdc]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
test eax, eax
je 0x10005f55
push 0x3f
lea eax, [esp + 0x115]
push 0
push eax
mov byte [esp + 0x11c], 0
call fcn.10010030
add esp, 0xc
lea eax, [esp + 0x78]
push eax
lea eax, [esp + 0xf4]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
movzx eax, word [esp + 0x78]
sub eax, 0x7d0
push eax
movzx eax, word [esp + 0x82]
push eax
movzx eax, word [esp + 0x82]
push eax
push str._02d__02d__02d
lea eax, [esp + 0x120]
push 0x40
push eax
call fcn.10008350
push 0x1003eb20
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x60]
push eax
call fcn.100012c0
lea ecx, [esp + 0x134]
push ecx
push eax
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x28c], 0xd
call fcn.100010e0
mov edi, eax
lea eax, [esp + 0x90]
add esp, 0x30
cmp eax, edi
je 0x10005f12
cmp dword [esp + 0x74], 0x10
jb 0x10005ef3
push dword [esp + 0x60]
call fcn.1000cef3
add esp, 4
push edi
lea ecx, [esp + 0x64]
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], 0
mov byte [esp + 0x64], 0
call fcn.100083c0
cmp dword [esp + 0x24], 0x10
jb 0x10005f25
push dword [esp + 0x10]
call fcn.1000cef3
add esp, 4
cmp dword [esp + 0x54], 0x10
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
mov byte [esp + 0x25c], 0xa
jb 0x10005f55
push dword [esp + 0x40]
call fcn.1000cef3
add esp, 4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0xc4]
push eax
lea eax, [esp + 0x48]
push eax
call fcn.10001200
mov esi, eax
lea eax, [esp + 0xcc]
add esp, 0xc
cmp eax, esi
je 0x10005fc7
cmp dword [esp + 0xd4], 0x10
jb 0x10005f9c
push dword [esp + 0xc0]
call fcn.1000cef3
add esp, 4
push esi
lea ecx, [esp + 0xc4]
mov dword [esp + 0xd8], 0xf
mov dword [esp + 0xd4], 0
mov byte [esp + 0xc4], 0
call fcn.100083c0
cmp dword [esp + 0x54], 0x10
jb 0x10005fda
push dword [esp + 0x40]
call fcn.1000cef3
add esp, 4
cmp dword [esp + 0xd4], 0x10
lea eax, [esp + 0xc0]
cmovae eax, dword [esp + 0xc0]
push eax
push ebp
call fcn.1000bfb0
add esp, 8
cmp dword [esp + 0xbc], 8
jb 0x10006014
push dword [esp + 0xa8]
call fcn.1000cef3
add esp, 4
xor eax, eax
cmp dword [esp + 0xa4], 8
mov dword [esp + 0xbc], 7
mov dword [esp + 0xb8], 0
mov word [esp + 0xa8], ax
jb 0x1000604d
push dword [esp + 0x90]
call fcn.1000cef3
add esp, 4
xor eax, eax
cmp dword [esp + 0x74], 0x10
mov dword [esp + 0xa4], 7
mov dword [esp + 0xa0], 0
mov word [esp + 0x90], ax
jb 0x10006080
push dword [esp + 0x60]
call fcn.1000cef3
add esp, 4
cmp dword [esp + 0xd4], 0x10
mov dword [esp + 0x74], 0xf
mov dword [esp + 0x70], 0
mov byte [esp + 0x60], 0
jb 0x100060ae
push dword [esp + 0xc0]
call fcn.1000cef3
add esp, 4
mov eax, ebp
mov ecx, dword [esp + 0x254]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x240]
xor ecx, esp
call fcn.1000f4a5
add esp, 0x250
ret 4