Function at 0x100e5b80
Capabilities:
Check if file exists
Create process on windows
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1034a237
mov eax, dword fs:[0]
push eax
sub esp, 0x154
mov eax, dword [0x1040706c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x160], ebx
mov edi, dword [ebp + 8]
lea edx, [ebp - 0x158]
push edx
mov ecx, dword [edi + 0x108]
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, eax
mov dword [ebp - 4], 0
call fcn.100fcd90
push eax
lea ecx, [ebp - 0x15c]
call fcn.100c89b0
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 2
call fcn.100fcb40
mov eax, dword [ebp - 0x15c]
test eax, eax
je 0x100e6167
mov edx, str.dlgclose
mov ecx, eax
nop dword [eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x100e5c36
test si, si
je 0x100e5c32
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x100e5c36
add ecx, 4
add edx, 4
test si, si
jne 0x100e5c10
xor ecx, ecx
jmp 0x100e5c3b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x100e5c4e
push 1
push ecx
mov ecx, ebx
call fcn.1013cef0
jmp 0x100e6161
mov edx, str.softdel
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x100e5c7b
test si, si
je 0x100e5c77
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x100e5c7b
add ecx, 4
add edx, 4
test si, si
jne 0x100e5c55
xor ecx, ecx
jmp 0x100e5c80
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x100e5ca7
mov ecx, dword [edi + 0x108]
mov eax, dword [ecx]
call dword [eax + 0xf0]
push eax
lea ecx, [ebp - 0xd4]
call fcn.100fc910
mov byte [ebp - 4], 3
jmp 0x100e6106
mov edx, str.btnclearrecord
mov ecx, eax
nop
mov si, word [ecx]
cmp si, word [edx]
jne 0x100e5cd6
test si, si
je 0x100e5cd2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x100e5cd6
add ecx, 4
add edx, 4
test si, si
jne 0x100e5cb0
xor ecx, ecx
jmp 0x100e5cdb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x100e5d7f
mov ebx, dword [ebx + 0x794]
mov byte [ebp - 4], 4
lea ecx, [ebx + 0xc]
mov esi, dword [ebx + 0xc]
push dword [esi + 4]
call fcn.100d83f0
mov eax, dword [ebx + 0xc]
push ecx
mov dword [eax + 4], esi
mov eax, dword [ebx + 0xc]
mov dword [eax], esi
mov eax, dword [ebx + 0xc]
mov byte [ebp - 4], 2
mov dword [eax + 8], esi
mov dword [ebx + 0x10], 0
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
call fcn.10002780
mov eax, dword [ebx]
lea ecx, [ebp - 0x40]
add esp, 4
mov dword [ebx + 4], eax
call fcn.100c1ba0
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 8
jb 0x100e5d3e
mov eax, dword [eax]
push 0
push str..xs
push eax
call fcn.1019fdfe
add esp, 0xc
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x40]
call fcn.100028d0
mov esi, dword [ebp - 0x160]
mov ecx, dword [esi + 0x798]
add ecx, 0x568
mov eax, dword [ecx]
call dword [eax + 0x20]
push 1
mov ecx, esi
call fcn.100e7040
jmp 0x100e6161
mov edx, str.btnopenfolder
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x100e5dac
test si, si
je 0x100e5da8
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x100e5dac
add ecx, 4
add edx, 4
test si, si
jne 0x100e5d86
xor ecx, ecx
jmp 0x100e5db1
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x100e5e17
lea eax, [ebp - 0x28]
push eax
call fcn.100b5850
mov ecx, eax
call fcn.100c0600
mov byte [ebp - 4], 6
cmp dword [ebp - 0x18], 0
jbe 0x100e5e0a
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x100e5e0a
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push 5
cmovae eax, dword [ebp - 0x28]
mov ecx, ebx
push 0
push 0
push eax
push str.explore
call fcn.100fd6d0
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x28]
call fcn.100028d0
jmp 0x100e6161
mov edx, str.taskdeletedl
mov ecx, eax
nop
mov si, word [ecx]
cmp si, word [edx]
jne 0x100e5e46
test si, si
je 0x100e5e42
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x100e5e46
add ecx, 4
add edx, 4
test si, si
jne 0x100e5e20
xor ecx, ecx
jmp 0x100e5e4b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x100e60e8
mov edx, str.waitdeltask
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x100e5e86
test si, si
je 0x100e5e82
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x100e5e86
add ecx, 4
add edx, 4
test si, si
jne 0x100e5e60
xor ecx, ecx
jmp 0x100e5e8b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x100e60e8
mov edx, str.dlg_home_wnd
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x100e5ec6
test si, si
je 0x100e5ec2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x100e5ec6
add ecx, 4
add edx, 4
test si, si
jne 0x100e5ea0
xor ecx, ecx
jmp 0x100e5ecb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x100e5f21
push ecx
mov ecx, ebx
call fcn.100fd6d0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, [ebp - 0x50]
mov dword [ebp - 0x50], vtable.std::_Func_impl_no_alloc_class__lambda_c6a49fce90f02ff4160a653a20580520___void___.0
mov dword [ebp - 0x2c], eax
push 0
push 0
push eax
mov byte [ebp - 4], 8
call fcn.101a195c
add esp, 0xc
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x100e6161
mov edx, dword [ecx]
lea eax, [ebp - 0x50]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
jmp 0x100e6161
mov edx, str.taskretry
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x100e5f4e
test si, si
je 0x100e5f4a
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x100e5f4e
add ecx, 4
add edx, 4
test si, si
jne 0x100e5f28
xor ecx, ecx
jmp 0x100e5f53
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x100e6167
mov ecx, dword [edi + 0x108]
mov eax, dword [ecx]
call dword [eax + 0xf0]
push eax
lea ecx, [ebp - 0xd4]
call fcn.100fc910
push 0x3a8
sub esp, 0x18
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xd4]
mov esi, esp
call fcn.100fcd90
push eax
mov ecx, esi
call fcn.100026e0
lea eax, [ebp - 0x28]
push eax
call fcn.1019c48d
add esp, 0x20
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xb
mov ecx, dword [ebx + 0x794]
push eax
call fcn.100d80b0
mov edi, eax
test edi, edi
je 0x100e609c
mov ecx, dword [ebx + 0x798]
push dword [edi + 0xb4]
add ecx, 0x568
mov edx, dword [ecx]
call dword [edx + 0x18]
push 0x2a8
mov dword [edi + 0xb4], 0
call fcn.100f99e9
add esp, 4
mov dword [ebp - 0x160], eax
mov ecx, eax
call fcn.100cf2a0
push edi
mov ecx, eax
call fcn.100da9f0
mov esi, dword [ebx + 0x794]
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
call fcn.100d7aa0
test al, al
je 0x100e6028
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
call fcn.100d7ad0
mov esi, dword [ebx + 0x794]
sub esp, 0x18
mov ecx, esp
push 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x103d28b0
mov byte [ecx], 0
call fcn.10006700
push edi
lea eax, [ebp - 0x40]
mov ecx, esi
push eax
call fcn.100d72b0
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x100e608a
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100e6080
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100e61a4
push edx
push ecx
call fcn.100f99db
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x100e60d4
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100e60ca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100e61a9
push edx
push ecx
call fcn.100f99db
add esp, 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
jmp 0x100e6156
mov ecx, dword [edi + 0x108]
mov eax, dword [ecx]
call dword [eax + 0xf0]
push eax
lea ecx, [ebp - 0xd4]
call fcn.100fc910
mov byte [ebp - 4], 7
sub esp, 0x18
lea ecx, [ebp - 0xd4]
mov edi, esp
push 0x3a8
sub esp, 0x18
mov esi, esp
call fcn.100fcd90
push eax
mov ecx, esi
call fcn.100026e0
push edi
call fcn.1019c48d
add esp, 0x20
mov ecx, ebx
call fcn.100e6e00
mov ecx, dword [ebx + 0x798]
add ecx, 0x568
mov eax, dword [ecx]
call dword [eax + 0xc]
test eax, eax
jg 0x100e6156
push 1
mov ecx, ebx
call fcn.100e7040
lea ecx, [ebp - 0xd4]
call fcn.100fcb40
mov eax, dword [ebp - 0x15c]
lea edx, [eax - 0x10]
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100e6186
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100f99ca
mov esp, ebp
pop ebp
ret 4
call fcn.101d6583
call fcn.101d6583
int3