Function at 0x10069a30
Capabilities:
Check if file exists
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1014b111
mov eax, dword fs:[0]
push eax
sub esp, 0x268
mov eax, dword [0x1019646c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.10017640
mov ecx, eax
test ecx, ecx
je 0x1006a45c
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x258], eax
xorps xmm0, xmm0
mov dword [ebp - 0x234], 0
movq qword [ebp - 0x23c], xmm0
mov dword [ebp - 4], 0
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
lea eax, [ebp - 0x258]
mov byte [ebp - 4], 1
push eax
call fcn.10069820
mov edi, dword [ebp - 0x258]
add esp, 4
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
or ebx, 0xffffffff
test eax, eax
jne 0x10069ae3
xor esi, esi
jmp 0x1006a417
xorps xmm0, xmm0
mov dword [ebp - 0x228], 0
movq qword [ebp - 0x230], xmm0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 0
movq qword [ebp - 0x224], xmm0
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0
mov byte [ebp - 4], 3
call fcn.10017640
mov ecx, eax
test ecx, ecx
je 0x1006a466
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x254], eax
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 4
call fcn.1006d0f0
lea ecx, [ebp - 0x224]
call fcn.1006d0f0
lea ecx, [ebp - 0x24d]
call fcn.10063370
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.10018c20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 5
call fcn.10018af0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10069bd4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x274]
push eax
call fcn.1006cdc0
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 6
jb 0x10069bfb
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10154bd0
push eax
call fcn.10039060
mov edx, dword [ebp - 0x260]
add esp, 0xc
mov byte [ebp - 4], 4
cmp edx, 0x10
jb 0x10069c4e
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10069c44
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a470
push edx
push ecx
call fcn.100f5c1c
add esp, 8
push ecx
mov ecx, esp
push 0x10154eac
call fcn.10012770
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.100668b0
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10060d30
lea ecx, [ebp - 0x230]
call fcn.1006d0f0
lea ecx, [ebp - 0x224]
call fcn.1006d0f0
lea ecx, [ebp - 0x24d]
call fcn.100641f0
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.10018c20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 7
call fcn.10018af0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10069cff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x274]
push eax
call fcn.1006cdc0
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 8
jb 0x10069d26
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10154bd0
push eax
call fcn.10039060
mov edx, dword [ebp - 0x260]
add esp, 0xc
mov byte [ebp - 4], 4
cmp edx, 0x10
jb 0x10069d79
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10069d6f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a475
push edx
push ecx
call fcn.100f5c1c
add esp, 8
push ecx
mov ecx, esp
push 0x10154eac
call fcn.10012770
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.100668b0
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10060d30
lea ecx, [ebp - 0x230]
call fcn.1006d0f0
lea ecx, [ebp - 0x224]
call fcn.1006d0f0
lea ecx, [ebp - 0x24d]
call fcn.10063e70
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.10018c20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 9
call fcn.10018af0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10069e2a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x274]
push eax
call fcn.1006cdc0
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0xa
jb 0x10069e51
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10154bd0
push eax
call fcn.10039060
mov edx, dword [ebp - 0x260]
add esp, 0xc
mov byte [ebp - 4], 4
cmp edx, 0x10
jb 0x10069ea4
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10069e9a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a47a
push edx
push ecx
call fcn.100f5c1c
add esp, 8
push ecx
mov ecx, esp
push 0x10154eac
call fcn.10012770
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.100668b0
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10060d30
lea ecx, [ebp - 0x230]
call fcn.1006d0f0
lea ecx, [ebp - 0x224]
call fcn.1006d0f0
lea ecx, [ebp - 0x24d]
call fcn.10062ef0
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.10018c20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0xb
call fcn.10018af0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10069f55
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x274]
push eax
call fcn.1006cdc0
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0xc
jb 0x10069f7c
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10154bd0
push eax
call fcn.10039060
mov edx, dword [ebp - 0x260]
add esp, 0xc
mov byte [ebp - 4], 4
cmp edx, 0x10
jb 0x10069fcf
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10069fc5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a47f
push edx
push ecx
call fcn.100f5c1c
add esp, 8
push ecx
mov ecx, esp
push 0x10154eac
call fcn.10012770
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.100668b0
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10060d30
lea ecx, [ebp - 0x230]
call fcn.1006d0f0
lea ecx, [ebp - 0x224]
call fcn.1006d0f0
push 0
push 0x1a
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x218]
mov dword [ebp - 0x25c], 0
push eax
lea ecx, [ebp - 0x25c]
call fcn.10012770
lea ecx, [ebp - 0x24d]
mov byte [ebp - 4], 0xd
call fcn.10065010
push eax
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.10018c20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0xe
call fcn.10018af0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 0xd
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1006a0b3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x274]
push eax
call fcn.1006cdc0
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0xf
jb 0x1006a0da
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10154bd0
push eax
call fcn.10039060
mov edx, dword [ebp - 0x260]
add esp, 0xc
mov byte [ebp - 4], 0xd
cmp edx, 0x10
jb 0x1006a12d
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006a123
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a484
push edx
push ecx
call fcn.100f5c1c
add esp, 8
push ecx
mov ecx, esp
push 0x10154eac
call fcn.10012770
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.100668b0
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10060d30
lea ecx, [ebp - 0x230]
call fcn.1006d0f0
lea ecx, [ebp - 0x224]
call fcn.1006d0f0
lea ecx, [ebp - 0x24d]
call fcn.100643d0
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.10018c20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x10
call fcn.10018af0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 0xd
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1006a1de
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x254]
lea eax, [ebp - 0x274]
push 0
push 0xffffffffffffffff
push 0xfde9
push esi
push eax
call fcn.1006cdc0
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x11
jb 0x1006a206
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10154bd0
push eax
call fcn.10039060
mov edx, dword [ebp - 0x260]
add esp, 0xc
mov byte [ebp - 4], 0xd
cmp edx, 0x10
jb 0x1006a259
mov ecx, dword [ebp - 0x274]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006a24f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006a489
push edx
push ecx
call fcn.100f5c1c
add esp, 8
push ecx
mov ecx, esp
push 0x10154eac
call fcn.10012770
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.100668b0
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10060d30
xor ecx, ecx
mov dword [ebp - 0x240], 0
xorps xmm0, xmm0
mov dword [ebp - 0x240], ecx
movq qword [ebp - 0x248], xmm0
mov dword [ebp - 0x248], ecx
mov dword [ebp - 0x244], ecx
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x23c]
sar eax, 2
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x24c], ecx
test eax, eax
je 0x1006a3b4
xor ebx, ebx
xor edi, edi
xor esi, esi
lea eax, [ebp - 0x248]
push eax
push ebx
push ecx
call fcn.10016ac0
mov eax, dword [ebp - 0x248]
add esp, 0xc
mov dword [ebp - 0x244], eax
mov ebx, 0x10154eac
lea eax, [ebp - 0x248]
push eax
mov eax, dword [ebp - 0x23c]
sub esp, 0x18
mov eax, dword [eax + esi*4]
test eax, eax
mov dword [ebp - 0x24c], esp
cmovne ebx, eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x24c]
xor edx, edx
push eax
push ebx
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], dx
call fcn.10017b50
call fcn.1006d170
mov ebx, dword [ebp - 0x244]
mov eax, 0x2aaaaaab
mov ecx, ebx
inc esi
sub ecx, dword [ebp - 0x248]
add esp, 0x1c
imul ecx
mov ecx, dword [ebp - 0x248]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
add edi, eax
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x23c]
sar eax, 2
cmp esi, eax
jb 0x1006a2f1
mov esi, dword [ebp - 0x254]
or ebx, 0xffffffff
mov dword [ebp - 0x24c], edi
mov edi, dword [ebp - 0x258]
lea ecx, [ebp - 0x248]
call fcn.10061260
mov edx, dword [ebp - 0x25c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1006a3e0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x1006a3fb
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x224]
call fcn.1001eae0
lea ecx, [ebp - 0x230]
call fcn.1001eae0
mov esi, dword [ebp - 0x24c]
lea ecx, [ebp - 0x23c]
call fcn.1001eae0
mov dword [ebp - 4], 0xffffffff
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x1006a43e
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100f5f8d
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.10013b40
push 0x80004005
call fcn.10013b40
call fcn.10119a73
call fcn.10119a73
call fcn.10119a73
call fcn.10119a73
call fcn.10119a73
call fcn.10119a73
int3