Function at 0x1002a3e8
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push 0x3c
mov eax, 0x10025199
call fcn.10024485
mov dword [ebp - 0x20], ecx
xor eax, eax
xor ebx, ebx
inc eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], eax
mov eax, dword [0x100450a0]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ebx
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 4], ebx
mov byte [ebp - 0xd], bl
mov byte [ebp - 0xe], bl
mov dword [ebp - 0x14], ebx
test esi, esi
je 0x1002a432
movzx eax, word [esi]
neg eax
sbb eax, eax
and esi, eax
mov dword [ebp + 8], esi
test edi, edi
je 0x1002a43f
movzx eax, word [edi]
neg eax
sbb eax, eax
and edi, eax
test esi, esi
jne 0x1002a474
test edi, edi
jne 0x1002a474
mov ecx, 0x1000ad48
push ecx
call fcn.1001f0c3
mov esi, dword [ebp - 0x20]
mov ecx, esi
push eax
call fcn.1001ec60
push esi
lea ecx, [esi + 8]
call fcn.1001efe0
push esi
lea ecx, [esi + 0x10]
call fcn.1001efe0
jmp 0x1002a86d
lea eax, [ecx + 8]
mov ecx, edi
push edi
mov dword [ebp - 0x38], eax
call fcn.1001f0c3
mov ecx, dword [ebp - 0x38]
push eax
call fcn.1001ec60
push edi
push esi
push 0x1000b54c
push 9
pop eax
push eax
push 0x1000b580
call sym.IEShims.dll_IEShims_Uninitialize
add esp, 0x14
test esi, esi
jne 0x1002a6a4
push 0x208
call dword [sym.imp.msvcrt.dll_malloc]
mov dword [ebp - 0x18], eax
pop ecx
test eax, eax
je 0x1002a838
movzx ecx, word [edi]
mov esi, edi
mov edx, ecx
mov dword [ebp - 0x14], esi
push 0x22
mov dword [ebp - 0x28], edx
mov eax, edi
pop edx
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x2c], ebx
cmp cx, dx
jne 0x1002a5b2
lea ecx, [edi + 2]
mov dword [ebp - 0x34], ebx
movzx eax, word [ecx]
mov dword [ebp - 0x24], ecx
test ax, ax
jmp 0x1002a510
cmp ax, dx
je 0x1002a5a1
add ecx, 2
mov dword [ebp - 0x14], ecx
movzx eax, word [ecx]
mov esi, eax
test ax, ax
mov dword [ebp - 0x28], esi
mov esi, ecx
mov dword [ebp - 0x1c], ecx
jne 0x1002a4f4
mov edx, dword [ebp - 0x24]
movzx eax, word [esi]
mov dword [ebp - 0x28], eax
xor eax, eax
mov word [esi], ax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x18]
push 0x104
push 0x10005ac0
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_SearchPathW]
add eax, eax
mov dword [ebp - 0x3c], eax
je 0x1002a571
cmp eax, 0x208
jae 0x1002a562
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1002a55c
test al, 0x10
jne 0x1002a571
mov eax, dword [ebp - 0x3c]
add eax, 2
test eax, eax
je 0x1002a571
cmp eax, 0x208
jb 0x1002a5fc
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
mov word [esi], cx
cmp word [eax], bx
je 0x1002a615
cmp dword [ebp - 0x34], 0
je 0x1002a615
add eax, 2
mov byte [ebp - 0xd], 1
mov dword [ebp - 0x1c], eax
mov esi, eax
mov dword [ebp - 0x14], eax
movzx ecx, word [eax]
jmp 0x1002a5b5
mov esi, ecx
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x14], esi
jmp 0x1002a515
mov ecx, dword [ebp - 0x28]
mov edx, edi
mov dword [ebp - 0x24], edx
test cx, cx
je 0x1002a518
movzx ecx, cx
push 0x20
pop esi
cmp cx, si
je 0x1002a5f2
push 9
pop esi
cmp cx, si
je 0x1002a5f2
add eax, 2
mov esi, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], esi
movzx eax, word [eax]
mov ecx, eax
test ax, ax
mov eax, esi
jne 0x1002a5c6
jmp 0x1002a518
mov esi, eax
mov dword [ebp - 0x14], esi
jmp 0x1002a518
mov eax, dword [ebp - 0x14]
sub esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
sar esi, 1
add esi, dword [ebp - 0x2c]
mov word [eax], cx
mov ecx, dword [ebp - 0x18]
jmp 0x1002a748
cmp dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], ebx
jne 0x1002a674
mov dword [ebp - 0x24], edi
mov ecx, edi
test edi, edi
je 0x1002a63b
push 0x1000b5ec
push edi
call dword [sym.imp.msvcrt.dll_wcsspn]
pop ecx
pop ecx
lea ecx, [edi + eax*2]
mov dword [ebp - 0x24], ecx
movzx eax, word [ecx]
mov esi, ecx
mov dword [ebp - 0x14], esi
test ax, ax
je 0x1002a67f
mov edx, eax
push 0x20
pop eax
cmp dx, ax
je 0x1002a66c
push 9
pop eax
cmp dx, ax
je 0x1002a66c
add esi, 2
mov dword [ebp - 0x14], esi
movzx eax, word [esi]
mov edx, eax
test ax, ax
jne 0x1002a64a
jmp 0x1002a67f
movzx eax, dx
mov dword [ebp - 0x28], eax
jmp 0x1002a67a
lea ecx, [edi + 2]
mov dword [ebp - 0x24], ecx
xor eax, eax
mov word [esi], ax
push ecx
call fcn.1001f0c3
push eax
lea ecx, [ebp - 0x48]
call fcn.1001ec60
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x48]
mov word [esi], ax
sub esi, dword [ebp - 0x24]
sar esi, 1
add esi, dword [ebp - 0x2c]
jmp 0x1002a748
test edi, edi
je 0x1002a72d
cmp word [edi], bx
je 0x1002a72d
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
cmp ax, bx
jne 0x1002a6b4
sub esi, ecx
sar esi, 1
push esi
push edi
push dword [ebp + 8]
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x1002a6ea
movzx eax, word [edi + esi*2]
test ax, ax
je 0x1002a745
push eax
call dword [sym.imp.msvcrt.dll_iswspace]
pop ecx
test eax, eax
jne 0x1002a745
push 0x22
pop eax
cmp word [edi], ax
jne 0x1002a729
push esi
lea eax, [edi + 2]
push eax
push dword [ebp + 8]
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x1002a729
push 0x22
pop eax
cmp word [edi + esi*2 + 2], ax
jne 0x1002a729
add esi, 2
movzx eax, word [edi + esi*2]
test ax, ax
je 0x1002a745
push eax
call dword [sym.imp.msvcrt.dll_iswspace]
pop ecx
test eax, eax
jne 0x1002a745
mov esi, ebx
jmp 0x1002a745
mov edi, esi
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
cmp ax, bx
jne 0x1002a732
sub esi, ecx
mov byte [ebp - 0xe], 1
sar esi, 1
mov ecx, dword [ebp + 8]
push ecx
call fcn.1001f0c3
mov ecx, dword [ebp - 0x20]
push eax
call fcn.1001ec60
lea ecx, [edi + esi*2]
mov esi, dword [ebp - 0x20]
push ecx
call fcn.1001f0c3
push eax
lea ecx, [esi + 0x10]
call fcn.1001ec60
lea ecx, [esi + 0x10]
call fcn.1002b5df
cmp byte [ebp - 0xe], 0
jne 0x1002a79a
cmp byte [ebp - 0xd], 0
je 0x1002a787
mov esi, dword [ebp - 0x14]
test esi, esi
jne 0x1002a79d
mov ecx, dword [ebp - 0x20]
push dword [ebp - 0x38]
lea ecx, [ecx + 0x20]
call fcn.1001efe0
jmp 0x1002a832
mov esi, dword [ebp - 0x14]
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x1002a7a2
sub ecx, edx
sar ecx, 1
lea eax, [ecx + 3]
mov dword [ebp - 0x2c], eax
add eax, eax
push eax
call dword [sym.imp.msvcrt.dll_malloc]
mov dword [ebp - 0x3c], eax
pop ecx
test eax, eax
je 0x1002a835
mov edx, dword [ebp - 0x2c]
mov ecx, eax
push 0x1000652c
call fcn.1002a8cf
cmp byte [ebp - 0xd], 0
je 0x1002a7e5
movzx ebx, word [esi]
xor eax, eax
mov word [esi], ax
mov edx, dword [ebp - 0x2c]
push edi
mov edi, dword [ebp - 0x3c]
mov ecx, edi
call fcn.1002a87f
mov edx, dword [ebp - 0x2c]
mov ecx, edi
push 0x1000652c
call fcn.1002a87f
cmp byte [ebp - 0xd], 0
je 0x1002a816
mov edx, dword [ebp - 0x2c]
mov ecx, edi
push esi
mov word [esi], bx
call fcn.1002a87f
push edi
mov ecx, edi
call fcn.1001f0c3
mov ecx, dword [ebp - 0x20]
push eax
lea ecx, [ecx + 0x20]
call fcn.1001ec60
push edi
call dword [sym.imp.msvcrt.dll_free]
pop ecx
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.msvcrt.dll_free]
mov eax, dword [ebp - 0x20]
mov edx, 0x1000b580
push dword [eax + 8]
push dword [eax]
push 0x1000b588
push 9
pop ecx
push ecx
push edx
call sym.IEShims.dll_IEShims_Uninitialize
push dword [eax + 0x10]
push 0x1000b5bc
push ecx
push edx
call sym.IEShims.dll_IEShims_Uninitialize
add esp, 0x28
lea ecx, [ebp - 0x48]
call fcn.1001ef70
mov eax, ebx
call fcn.10024453
ret 8