Function at 0x1003b1e0
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008f0f0
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x100ab080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x98], eax
mov dword [ebp - 4], 0
cmp dword [esi + 0x10], 0
je 0x1003b74b
cmp dword [esi + 0x14], 7
mov eax, esi
jbe 0x1003b233
mov eax, dword [esi]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1003b74b
cmp dword [esi + 0x14], 7
mov ecx, esi
jbe 0x1003b24c
mov ecx, dword [esi]
call fcn.10025f10
test eax, eax
je 0x1003b74b
cmp dword [ebp + 0x28], 7
lea eax, [ebp + 0x14]
mov edi, dword [ebp + 0x24]
xorps xmm0, xmm0
cmova eax, dword [ebp + 0x14]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x94], eax
movups xmmword [ebp - 0x28], xmm0
cmp edi, 0x7ffffffe
ja 0x1003b7a9
cmp edi, 7
ja 0x1003b2a6
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], 7
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x28], xmm0
jmp 0x1003b302
mov eax, edi
or eax, 7
cmp eax, 0x7ffffffe
jbe 0x1003b2b9
mov eax, 0x7ffffffe
jmp 0x1003b2c3
mov ecx, 0xa
cmp eax, ecx
cmovb eax, ecx
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.10003d30
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0x14], ecx
lea ecx, [edi*2 + 2]
push ecx
push dword [ebp - 0x94]
mov dword [ebp - 0x28], eax
push eax
mov dword [ebp - 0x18], edi
call fcn.10068280
mov edi, dword [ebp - 0x18]
add esp, 0x14
mov byte [ebp - 4], 1
test edi, edi
jne 0x1003b3cd
mov edx, esi
lea ecx, [ebp - 0x88]
call fcn.100234e0
mov edi, eax
lea eax, [ebp - 0x28]
cmp eax, edi
je 0x1003b390
mov ecx, dword [ebp - 0x14]
cmp ecx, 7
jbe 0x1003b35e
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1003b354
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b7ae
push ecx
push edx
call fcn.100666c9
add esp, 8
mov dword [ebp - 0x18], 0
xor eax, eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 7
mov word [edi], ax
mov ecx, dword [ebp - 0x74]
cmp ecx, 7
jbe 0x1003b3cd
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1003b3c3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b7ae
push ecx
push edx
call fcn.100666c9
add esp, 8
mov ecx, dword [esi + 0x10]
xor eax, eax
xorps xmm0, xmm0
mov word [ebp - 0xaa], ax
mov word [ebp - 0xbc], ax
mov eax, 0x7ffffffe
sub eax, ecx
movlpd qword [ebp - 0xe8], xmm0
movlpd qword [ebp - 0xe0], xmm0
movlpd qword [ebp - 0xd8], xmm0
movlpd qword [ebp - 0xd0], xmm0
movlpd qword [ebp - 0xc8], xmm0
movlpd qword [ebp - 0xba], xmm0
movlpd qword [ebp - 0xb2], xmm0
mov dword [ebp - 0xec], 0x44
mov dword [ebp - 0xc0], 1
cmp eax, 1
jb 0x1003b7b3
cmp dword [esi + 0x14], 7
jbe 0x1003b447
mov esi, dword [esi]
push ecx
push esi
push 1
push 0x1009b8fc
push ecx
push dword [ebp - 0x98]
lea ecx, [ebp - 0x88]
call fcn.100269b0
push 1
push 0x1009b8fc
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 2
call fcn.1001d490
mov dword [ebp - 0x60], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x5c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x60], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 1
push 0x1009aca8
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 3
call fcn.1001d490
mov dword [ebp - 0x48], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x44], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x58], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x48], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov eax, dword [ebp - 0x98]
mov ecx, eax
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 7
jbe 0x1003b511
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x58]
call fcn.1001d490
mov dword [ebp - 0x30], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0x2c], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov ecx, dword [ebp - 0x44]
cmp ecx, 7
jbe 0x1003b590
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1003b586
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b7b8
push ecx
push edx
call fcn.100666c9
add esp, 8
mov ecx, dword [ebp - 0x5c]
xor eax, eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
cmp ecx, 7
jbe 0x1003b5de
mov edx, dword [ebp - 0x70]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1003b5d4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b7b8
push ecx
push edx
call fcn.100666c9
add esp, 8
mov ecx, dword [ebp - 0x74]
xor eax, eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
cmp ecx, 7
jbe 0x1003b62f
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1003b625
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b7b8
push ecx
push edx
call fcn.100666c9
add esp, 8
cmp dword [ebp - 0x18], 0
jne 0x1003b639
xor ecx, ecx
jmp 0x1003b644
cmp dword [ebp - 0x14], 7
lea ecx, [ebp - 0x28]
cmova ecx, dword [ebp - 0x28]
cmp dword [ebp - 0x2c], 7
lea edx, [ebp - 0xa8]
push edx
lea edx, [ebp - 0xec]
push edx
push ecx
push 0
push 0x8000000
push 0
push 0
lea eax, [ebp - 0x40]
cmova eax, dword [ebp - 0x40]
push 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov edi, eax
test edi, edi
je 0x1003b6a6
cmp byte [ebp + 0x2c], 0
je 0x1003b68e
push 0xffffffffffffffff
push dword [ebp - 0xa8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0xa4]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0xa8]
call esi
test edi, edi
mov ecx, dword [ebp - 0x2c]
setne byte [ebp - 0x89]
cmp ecx, 7
jbe 0x1003b6e7
mov edx, dword [ebp - 0x40]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1003b6dd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b7bd
push ecx
push edx
call fcn.100666c9
add esp, 8
mov ecx, dword [ebp - 0x14]
xor eax, eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
cmp ecx, 7
jbe 0x1003b735
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1003b72b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b7bd
push ecx
push edx
call fcn.100666c9
add esp, 8
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
jmp 0x1003b752
mov byte [ebp - 0x89], 0
mov ecx, dword [ebp + 0x28]
cmp ecx, 7
jbe 0x1003b788
mov edx, dword [ebp + 0x14]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1003b77e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003b7bd
push ecx
push edx
call fcn.100666c9
add esp, 8
mov al, byte [ebp - 0x89]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1006636c
mov esp, ebp
pop ebp
ret
call fcn.10002b90
call fcn.10070c0f
call fcn.10002b90
call fcn.10070c0f
call fcn.10070c0f
int3