Function at 0x1100eff0
Capabilities:
Get file attributes
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x111ee600
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x11279148]
xor eax, esp
mov dword [esp + 0x60], eax
push ebx
push esi
push edi
mov eax, dword [0x11279148]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
mov esi, ecx
xor edi, edi
mov dword [esp + 0x14], edi
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
mov ebx, edx
lea edx, [esp + 0x54]
push edx
mov dword [esp + 0x14], ebx
call eax
mov cl, 1
lea edx, [esp + 0x18]
mov eax, esi
mov dword [esp + 0x80], edi
call fcn.1100e2b0
mov byte [esp + 0x80], 1
cmp dword [esi + 0x64], edi
je 0x1100f1b2
lea ecx, [esp + 0x34]
lea ebx, [edi + 1]
mov dword [esp + 0x14], ecx
jmp 0x1100f080
xor edx, edx
mov dword [esp + 0x48], 7
mov dword [esp + 0x44], edi
mov word [esp + 0x34], dx
push 0xffffffffffffffff
push edi
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x8c], 2
call fcn.11004d40
mov byte [esp + 0x80], 3
mov eax, dword [esi + 0x64]
cmp eax, edi
je 0x1100f18e
push 0xffffffffffffffff
push edi
lea edx, [esp + 0x3c]
lea ecx, [eax + 4]
push edx
call fcn.11004d40
mov eax, dword [esi + 0x40]
mov ecx, dword [esi + 0x64]
inc eax
mov dword [ecx + 0x20], eax
mov edx, dword [esi + 0x64]
mov dword [edx + 0x24], ebx
mov ecx, dword [esi + 0x64]
mov eax, dword [ecx]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xffffffffffffffff
call edx
test al, al
je 0x1100f199
mov edi, 8
mov byte [esp + 0x80], 1
cmp dword [esp + 0x48], edi
jb 0x1100f115
mov eax, dword [esp + 0x34]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esi + 0x64]
push 0xffffffffffffffff
add eax, 4
push 0
push eax
lea ecx, [esp + 0x24]
call fcn.11004d40
mov edx, dword [esp + 0x18]
cmp dword [esp + 0x2c], edi
jae 0x1100f137
lea edx, [esp + 0x18]
lea ecx, [esp + 0x34]
push 1
push ecx
call fcn.1100d0a0
add esp, 8
cmp dword [eax + 0x14], edi
jb 0x1100f14d
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ebx, eax
cmp dword [esp + 0x48], edi
jb 0x1100f16a
mov edx, dword [esp + 0x34]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
cmp ebx, 0xffffffff
je 0x1100f1b9
test bl, 0x10
mov eax, 0
sete al
lea eax, [eax + eax - 1]
test eax, eax
je 0x1100f1b9
mov ebx, 2
xor edi, edi
jmp 0x1100f080
push 0xd7
push esi
call fcn.1100ec60
cmp dword [esp + 0x48], 8
mov ecx, dword [esp + 0x34]
jae 0x1100f1a8
lea ecx, [esp + 0x34]
push 0xcd
call fcn.110014b0
mov edi, 8
jmp 0x1100f1bd
mov ebx, dword [esp + 0x10]
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
mov edx, dword [eax + 8]
call edx
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
mov eax, dword [esp + 0x18]
cmp dword [esp + 0x2c], edi
jae 0x1100f1df
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x58]
call fcn.11009b60
test eax, eax
jne 0x1100f24e
xor esi, esi
mov dword [ebx + 0x14], 7
mov dword [ebx + 0x10], esi
mov word [ebx], ax
push 0xffffffffffffffff
push esi
lea ecx, [esp + 0x20]
push ecx
mov ecx, ebx
mov byte [esp + 0x8c], 4
call fcn.11004d40
cmp dword [esp + 0x2c], edi
jb 0x1100f227
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor eax, eax
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], esi
mov word [esp + 0x18], ax
cmp dword [esp + 0x68], edi
jb 0x1100f30e
mov ecx, dword [esp + 0x54]
push ecx
jmp 0x1100f305
cmp dword [esi + 0x64], 0
jne 0x1100f285
mov edx, dword [esp + 0x18]
cmp dword [esp + 0x2c], edi
jae 0x1100f262
lea edx, [esp + 0x18]
call fcn.11010fa0
test eax, eax
je 0x1100f285
mov ecx, dword [esp + 0x18]
cmp dword [esp + 0x2c], edi
jae 0x1100f279
lea ecx, [esp + 0x18]
push 0
push 1
call fcn.11011260
add esp, 8
mov edx, dword [esp + 0x18]
cmp dword [esp + 0x2c], edi
jae 0x1100f293
lea edx, [esp + 0x18]
cmp dword [esp + 0x68], edi
mov edi, dword [esp + 0x54]
jae 0x1100f2a1
lea edi, [esp + 0x54]
call fcn.11011680
xor esi, esi
xor edx, edx
mov dword [ebx + 0x14], 7
mov dword [ebx + 0x10], esi
mov word [ebx], dx
push 0xffffffffffffffff
push esi
lea eax, [esp + 0x20]
push eax
mov ecx, ebx
mov byte [esp + 0x8c], 5
call fcn.11004d40
mov edi, 8
cmp dword [esp + 0x2c], edi
jb 0x1100f2e7
mov ecx, dword [esp + 0x18]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor edx, edx
mov dword [esp + 0x2c], 7
mov dword [esp + 0x28], esi
mov word [esp + 0x18], dx
cmp dword [esp + 0x68], edi
jb 0x1100f30e
mov eax, dword [esp + 0x54]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, ebx
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.111d9022
mov esp, ebp
pop ebp
ret