Function at 0x11cf1e30
Capabilities:
Check if file exists

Disassembly:
push 0xffffffffffffffff
push 0x11fa3760
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x850
push ebx
push ebp
push esi
mov dword [esp + 0x20], ecx
push edi
push 0xffffffffffffffdd
lea ecx, [esp + 0x2c]
call fcn.11e15fa0
xor ebp, ebp
mov ecx, 0x1212b5c0
push ebp
push ebp
push ebp
mov dword [esp + 0x874], ebp
call fcn.11d60760
test eax, eax
jne 0x11cf205a
mov ecx, 0x1212b5c0
call fcn.11d86270
mov ebx, dword [esp + 0x874]
test eax, eax
je 0x11cf1f3e
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x52]
mov word [esp + 0x50], bp
rep stosd dword es:[edi], eax
push ebx
lea ecx, [esp + 0x20]
stosw word es:[edi], ax
call fcn.11e7e980
mov eax, dword [eax]
lea ecx, [esp + 0x50]
push 0x104
push ecx
push eax
mov byte [esp + 0x874], 1
call fcn.11dbcbf0
add esp, 0xc
lea ecx, [esp + 0x1c]
mov byte [esp + 0x868], 0
call fcn.11e7f280
lea edx, [esp + 0x50]
push ebp
push edx
mov ecx, 0x1212b5c0
call fcn.11d7c540
test eax, eax
je 0x11cf1f3e
cmp dword [0x12133f80], ebp
je 0x11cf1f1b
lea eax, [esp + 0x50]
push eax
push 0x29da
push str._CSafeDoc::OnFindFirstFileExA__Line:_d__OnFindFirstFileA__s__is_Forbid.
push str.SafeDisk
push 8
call fcn.11ca5810
add esp, 0x14
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [esp + 0x28]
mov dword [esp + 0x868], 0xffffffff
call fcn.11e15fd0
xor eax, eax
jmp 0x11cf2b91
lea ecx, [esp + 0x28]
call fcn.11e16060
mov esi, dword [esp + 0x870]
lea eax, [esp + 0x20]
push eax
mov dword [esp + 0x14], ebp
mov ecx, dword [esi + 0x20]
mov edx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x18], edx
lea ecx, [esp + 0x28]
lea edx, [esp + 0x14]
push ecx
push edx
push edi
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebp
call fcn.11e15b00
mov eax, dword [esp + 0x34]
add esp, 0x10
cmp eax, ebp
je 0x11cf1fe1
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x20]
mov dword [esi + 0x1c], ecx
mov ecx, dword [esp + 0x888]
mov dword [esi + 0x24], edx
mov edx, dword [esp + 0x884]
push ecx
mov ecx, dword [esp + 0x884]
mov ebp, dword [esi + 0xc]
push edx
mov edx, dword [esp + 0x884]
push ecx
mov ecx, dword [esp + 0x884]
push edx
push ecx
push ebx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
mov dword [esi + 0xc], ebp
jmp 0x11cf203c
mov edi, dword [esi + 0x18]
cmp edi, ebp
je 0x11cf203c
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esp + 0x888]
mov edx, dword [esp + 0x884]
mov eax, dword [esp + 0x880]
push ecx
mov ecx, dword [esp + 0x880]
push edx
mov edx, dword [esp + 0x880]
push eax
push ecx
push edx
push ebx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cf203c
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov esi, dword [esi + 0x14]
lea ecx, [esp + 0x28]
mov dword [esp + 0x868], 0xffffffff
call fcn.11e15fd0
mov eax, esi
jmp 0x11cf2b91
push 2
lea ecx, [esp + 0x3c]
call fcn.11e15fa0
mov ecx, 0x1212b5c0
mov byte [esp + 0x868], 2
call fcn.11d86270
test eax, eax
je 0x11cf216d
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x52]
mov word [esp + 0x50], bp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [esp + 0x874]
lea ecx, [esp + 0x14]
push eax
call fcn.11e7e980
mov eax, dword [eax]
lea ecx, [esp + 0x50]
push 0x104
push ecx
push eax
mov byte [esp + 0x874], 3
call fcn.11dbcbf0
add esp, 0xc
lea ecx, [esp + 0x14]
mov byte [esp + 0x868], 2
call fcn.11e7f280
lea edx, [esp + 0x50]
push edx
call fcn.11df9a50
add esp, 4
test eax, eax
je 0x11cf2101
cmp dword [0x12133f80], ebp
je 0x11cf2138
lea eax, [esp + 0x50]
push eax
push 0x29f8
push str._CSafeDoc::OnFindFirstFileExA__Line:_d_Forbid_ExistFile__s_
push str.SafeDisk
jmp 0x11cf212e
lea ecx, [esp + 0x50]
push ecx
call fcn.11cbba30
add esp, 4
test eax, eax
je 0x11cf216d
cmp dword [0x12133f80], ebp
je 0x11cf2138
lea edx, [esp + 0x50]
push edx
push 0x2a02
push str._CSafeDoc::OnFindFirstFileExA__Line:_d_Forbid_ExistFile__s_
push str.NetWorkShareFolder
push 8
call fcn.11ca5810
add esp, 0x14
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [esp + 0x38]
mov byte [esp + 0x868], 0
call fcn.11e15fd0
lea ecx, [esp + 0x28]
mov dword [esp + 0x868], 0xffffffff
call fcn.11e15fd0
or eax, 0xffffffff
jmp 0x11cf2b91
push 0x12124510
lea ecx, [esp + 0x1c]
call fcn.11e795d0
lea ecx, [esp + 0x28]
mov byte [esp + 0x868], 4
call fcn.11e16060
mov esi, dword [esp + 0x870]
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x20], eax
mov edi, dword [esi + 0x1c]
mov ebp, dword [esi + 0x20]
mov ebx, dword [esi + 0x24]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x20]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
push edi
call fcn.11e15b00
mov eax, dword [esp + 0x30]
add esp, 0x10
test eax, eax
je 0x11cf23e3
mov ecx, dword [esi + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x1c]
mov dword [esi + 0x1c], edx
mov edx, dword [esp + 0x888]
mov dword [esi + 0x24], ecx
mov ecx, dword [esp + 0x884]
push edx
mov edx, dword [esp + 0x884]
push ecx
mov ecx, dword [esp + 0x884]
push edx
mov edx, dword [esp + 0x884]
push ecx
mov ecx, dword [esp + 0x884]
push edx
push ecx
push esi
mov dword [esi + 0x20], eax
call eax
mov edx, dword [esp + 0x14]
mov dword [esi + 0x20], ebp
mov dword [esi + 0x1c], edi
mov dword [esi + 0x24], ebx
mov dword [esi + 0xc], edx
xor ebp, ebp
mov ebx, dword [esp + 0x874]
mov edi, dword [esi + 0x14]
lea ecx, [esp + 0x28]
mov dword [esp + 0x10], edi
call fcn.11e16040
mov ecx, 0x1212b5c0
call fcn.11d8c8b0
test eax, eax
jne 0x11cf2546
cmp edi, 0xffffffff
jne 0x11cf2546
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x11cf2508
cmp byte [ebx], 0
je 0x11cf2508
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x52]
mov word [esp + 0x50], bp
rep stosd dword es:[edi], eax
push ebx
lea ecx, [esp + 0x18]
stosw word es:[edi], ax
call fcn.11e7e980
mov eax, dword [eax]
lea edx, [esp + 0x50]
push 0x104
push edx
push eax
mov byte [esp + 0x874], 5
call fcn.11dbcbf0
add esp, 0xc
lea ecx, [esp + 0x14]
mov byte [esp + 0x868], 4
call fcn.11e7f280
cmp word [esp + 0x50], bp
je 0x11cf2508
mov ecx, 0x1212b5c0
call fcn.11d71190
test eax, eax
je 0x11cf2508
push ebp
push ebp
lea eax, [esp + 0x58]
push ebp
push eax
mov ecx, 0x1212b5c0
call fcn.11d70510
test eax, eax
je 0x11cf2508
push 0xffffffffffffffdd
lea ecx, [esp + 0x48]
call fcn.11e15fa0
lea ecx, [esp + 0x50]
push ebp
push ecx
mov ecx, dword [esp + 0x2c]
mov byte [esp + 0x870], 6
call fcn.11d0c7d0
lea ecx, [esp + 0x44]
mov edi, eax
mov byte [esp + 0x868], 4
call fcn.11e15fd0
cmp edi, ebp
je 0x11cf2508
push ebx
lea ecx, [esp + 0x1c]
call fcn.11e7a160
push 0x120519ac
lea ecx, [esp + 0x1c]
call fcn.11e7ab10
mov edx, dword [esi + 0x24]
mov edi, dword [esi + 0x1c]
mov ebx, dword [esi + 0x20]
lea eax, [esp + 0x10]
mov dword [esp + 0x14], edx
lea ecx, [esp + 0x1c]
push eax
lea edx, [esp + 0x24]
push ecx
push edx
push edi
mov dword [esp + 0x30], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x20], ebp
call fcn.11e15b00
mov eax, dword [esp + 0x2c]
add esp, 0x10
cmp eax, ebp
je 0x11cf2454
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x10]
mov dword [esi + 0x1c], ecx
mov ecx, dword [esp + 0x888]
mov dword [esi + 0x24], edx
mov edx, dword [esp + 0x884]
push ecx
mov ecx, dword [esp + 0x884]
mov ebp, dword [esi + 0xc]
push edx
mov edx, dword [esp + 0x884]
push ecx
mov ecx, dword [esp + 0x884]
push edx
mov edx, dword [esp + 0x28]
push ecx
push edx
push esi
mov dword [esi + 0x20], eax
call eax
mov eax, dword [esp + 0x14]
mov dword [esi + 0x1c], edi
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], eax
mov dword [esi + 0xc], ebp
jmp 0x11cf24b3
mov edi, dword [esi + 0x18]
xor ebp, ebp
cmp edi, ebp
je 0x11cf222b
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [esp + 0x888]
mov ecx, dword [esp + 0x884]
mov edx, dword [esp + 0x880]
mov ebx, dword [esp + 0x874]
push eax
mov eax, dword [esp + 0x880]
push ecx
mov ecx, dword [esp + 0x880]
push edx
push eax
push ecx
push ebx
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cf2232
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
jmp 0x11cf2232
mov edi, dword [esi + 0x18]
cmp edi, ebp
je 0x11cf24b3
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [esp + 0x888]
mov edx, dword [esp + 0x884]
mov eax, dword [esp + 0x880]
push ecx
mov ecx, dword [esp + 0x880]
push edx
mov edx, dword [esp + 0x880]
push eax
mov eax, dword [esp + 0x24]
push ecx
push edx
push eax
call edi
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 8]
test eax, 0x800000
je 0x11cf24b3
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x14]
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
je 0x11cf2508
mov ebx, dword [esp + 0x87c]
mov ecx, 0x41
xor eax, eax
push 0x5c
lea ebp, [ebx + 0x2c]
mov edi, ebp
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x878]
push edi
call fcn.11e682b0
add esp, 8
test eax, eax
push 0x103
je 0x11cf24fc
inc eax
push eax
push ebp
call fcn.11e68160
add esp, 0xc
jmp 0x11cf2557
push edi
push ebp
call fcn.11e68160
add esp, 0xc
jmp 0x11cf2557
lea ecx, [esp + 0x18]
mov byte [esp + 0x868], 2
call fcn.11e79f00
lea ecx, [esp + 0x38]
mov byte [esp + 0x868], 0
call fcn.11e15fd0
lea ecx, [esp + 0x28]
mov dword [esp + 0x868], 0xffffffff
call fcn.11e15fd0
or eax, 0xffffffff
jmp 0x11cf2b91
push ebx
lea ecx, [esp + 0x1c]
call fcn.11e7a160
mov ebx, dword [esp + 0x87c]
mov edx, dword [esp + 0x18]
mov eax, dword [edx - 8]
test eax, eax
je 0x11cf2b57
cmp eax, 0x104
jge 0x11cf2b57
xor ebp, ebp
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x25a]
mov word [esp + 0x258], bp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
cmp dword [edx - 8], ebp
jle 0x11cf260c
mov ecx, 0xff
xor eax, eax
lea edi, [esp + 0x462]
mov word [esp + 0x460], bp
rep stosd dword es:[edi], eax
push edx
lea ecx, [esp + 0x18]
stosw word es:[edi], ax
call fcn.11e7e980
mov eax, dword [eax]
lea ecx, [esp + 0x460]
push 0x200
push ecx
push eax
mov byte [esp + 0x874], 7
call fcn.11dbcbf0
add esp, 0xc
lea ecx, [esp + 0x14]
mov byte [esp + 0x868], 4
call fcn.11e7f280
lea edx, [esp + 0x258]
push 0x103
lea eax, [esp + 0x464]
push edx
push eax
call fcn.11dbd340
add esp, 0xc
test eax, eax
je 0x11cf2b57
lea ecx, [esp + 0x258]
push ecx
call fcn.11e67d05
mov edx, eax
add esp, 4
cmp edx, ebp
je 0x11cf2bac
or ebp, 0xffffffff
lea edi, [ebx + 0x2c]
mov ecx, ebp
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, edx
cmp ecx, 0x104
jae 0x11cf2baf
cmp word [esp + edx*2 + 0x256], 0x5c
je 0x11cf2663
lea edx, [esp + 0x258]
push 0x12022ca0
push edx
call fcn.11e67470
add esp, 8
mov ecx, 0x1212b5c0
call fcn.11d713d0
test eax, eax
jne 0x11cf269f
lea ecx, [esp + 0x18]
mov byte [esp + 0x868], 2
call fcn.11e79f00
lea ecx, [esp + 0x38]
mov byte [esp + 0x868], 0
call fcn.11e15fd0
mov dword [esp + 0x868], ebp
jmp 0x11cf2b84
test ebx, ebx
jne 0x11cf26d0
lea ecx, [esp + 0x18]
mov byte [esp + 0x868], 2
call fcn.11e79f00
lea ecx, [esp + 0x38]
mov byte [esp + 0x868], bl
call fcn.11e15fd0
mov dword [esp + 0x868], ebp
jmp 0x11cf2b84
mov ecx, 0x1212b5c0
call fcn.11d8a240
test eax, eax
je 0x11cf2865
mov ebx, dword [esp + 0x24]
push 1
lea ecx, [esp + 0x48]
lea eax, [ebx + 0xc]
push eax
call fcn.11e8c590
push 0x12119948
lea ecx, [esp + 0x20]
mov byte [esp + 0x86c], 8
call fcn.11e7eae0
mov ebp, dword [esp + 0x10]
lea edi, [ebx + 0x34]
shr ebp, 4
mov eax, ebp
xor edx, edx
div dword [edi + 4]
mov eax, dword [edi]
mov byte [esp + 0x868], 9
test eax, eax
je 0x11cf2740
mov eax, dword [eax + edx*4]
test eax, eax
je 0x11cf2740
mov ecx, dword [esp + 0x10]
cmp dword [eax + 8], ecx
je 0x11cf278a
mov eax, dword [eax]
test eax, eax
jne 0x11cf2735
lea ecx, [esp + 0x258]
push ecx
lea ecx, [esp + 0x24]
call fcn.11e7eae0
mov dword [esp + 0x14], eax
mov ecx, dword [edi + 4]
mov eax, ebp
xor edx, edx
mov byte [esp + 0x868], 0xa
div ecx
mov ebp, edx
mov edx, dword [edi]
test edx, edx
je 0x11cf27f7
mov eax, dword [edx + ebp*4]
test eax, eax
je 0x11cf27f3
mov ecx, dword [esp + 0x10]
cmp dword [eax + 8], ecx
je 0x11cf27ef
mov eax, dword [eax]
test eax, eax
jne 0x11cf2779
jmp 0x11cf27f3
test eax, eax
je 0x11cf2740
add eax, 0xc
lea ecx, [esp + 0x1c]
push eax
call fcn.11e7f410
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf27cb
mov edx, dword [esp + 0x10]
mov eax, dword [0x12126854]
lea ecx, [esp + 0x258]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnFindFirstFileExA____08x____s__has_existed_in_map__n
push str.SafeFind
push 4
call fcn.11ca5810
add esp, 0x18
lea ecx, [esp + 0x1c]
mov byte [esp + 0x868], 8
call fcn.11e7f280
lea ecx, [esp + 0x44]
mov byte [esp + 0x868], 4
call fcn.11e8c5f0
jmp 0x11cf2869
test eax, eax
jne 0x11cf2821
test edx, edx
jne 0x11cf2804
mov eax, dword [edi + 4]
push 1
push eax
mov ecx, edi
call fcn.11d1c8f0
mov ecx, edi
call fcn.11d1c960
mov edx, dword [esp + 0x10]
mov dword [eax + 4], ebp
mov dword [eax + 8], edx
mov ecx, dword [edi]
mov edx, dword [ecx + ebp*4]
mov dword [eax], edx
mov ecx, dword [edi]
mov dword [ecx + ebp*4], eax
mov edx, dword [esp + 0x14]
lea ecx, [eax + 0xc]
push edx
call fcn.11e7f410
lea ecx, [esp + 0x20]
mov byte [esp + 0x868], 9
call fcn.11e7f280
mov eax, dword [0x12133f80]
test eax, eax
je 0x11cf27cb
mov edx, dword [esp + 0x10]
mov eax, dword [0x12126854]
lea ecx, [esp + 0x258]
push ecx
push edx
push eax
push str.__s__CSafeDoc::OnFindFirstFileExA____08x____s__add_to_map__n
jmp 0x11cf27bc
mov ebx, dword [esp + 0x24]
mov eax, dword [esp + 0x87c]
test byte [eax], 0x10
jne 0x11cf2b57
mov ecx, dword [eax + 0x1c]
xor edi, edi
cmp ecx, edi
ja 0x11cf2b57
add eax, 0x2c
lea ecx, [esp + 0x14]
push eax
call fcn.11e7e980
mov eax, dword [eax]
mov byte [esp + 0x868], 0xb
push eax
lea eax, [esp + 0x25c]
push eax
call fcn.11e67470
add esp, 8
lea ecx, [esp + 0x14]
mov byte [esp + 0x868], 4
call fcn.11e7f280
push 0x12119948
lea ecx, [esp + 0x38]
mov dword [esp + 0x20], edi
call fcn.11e7eae0
lea ecx, [ebx + 4]
push 1
push ecx
lea ecx, [esp + 0x4c]
mov byte [esp + 0x870], 0xc
mov dword [esp + 0x28], edi
call fcn.11e8c590
mov eax, dword [ebx + 0x18]
mov byte [esp + 0x868], 0xd
cmp eax, edi
jle 0x11cf29a1
xor ebp, ebp
mov edx, dword [ebx + 0x14]
lea ecx, [esp + 0x258]
push ecx
mov eax, dword [edx + ebp + 0x40]
push eax
call fcn.11e67d22
add esp, 8
test eax, eax
jne 0x11cf2928
mov edx, dword [ebx + 0x14]
mov eax, dword [edx + ebp + 0x20]
test eax, eax
je 0x11cf2935
mov eax, dword [ebx + 0x18]
inc edi
add ebp, 0x6c
cmp edi, eax
jl 0x11cf2901
jmp 0x11cf29a1
mov eax, dword [ebx + 0x14]
lea edi, [edi + edi*2]
mov ecx, 0x1212b5c0
lea edi, [edi + edi*8]
shl edi, 2
mov eax, dword [edi + eax + 0x40]
push eax
call fcn.11d923c0
test eax, eax
jne 0x11cf297d
push eax
mov ecx, 0x1212b5c0
call fcn.11d87b70
test eax, eax
je 0x11cf297d
mov ecx, 0x1212b5c0
call fcn.11d96a40
cmp eax, 4
jne 0x11cf297d
lea ecx, [esp + 0x34]
call fcn.11e7eff0
jmp 0x11cf29a1
mov ecx, dword [ebx + 0x14]
lea edx, [edi + ecx + 0x44]
lea ecx, [esp + 0x34]
push edx
call fcn.11e7f410
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x1c], 1
mov ecx, dword [edi + eax + 0x30]
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x44]
mov byte [esp + 0x868], 0xc
call fcn.11e8c5f0
mov eax, dword [esp + 0x1c]
xor ebx, ebx
cmp eax, ebx
je 0x11cf2a6f
mov edx, dword [esp + 0x34]
cmp dword [edx - 8], ebx
je 0x11cf2b46
mov esi, dword [esi + 0x18]
mov ecx, 0x4f
xor eax, eax
lea edi, [esp + 0x54]
mov dword [esp + 0x50], ebx
push edx
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x18]
call fcn.11e797a0
mov edx, dword [esp + 0x888]
mov ecx, dword [esp + 0x884]
mov eax, dword [eax]
push edx
mov edx, dword [esp + 0x884]
push ecx
push edx
mov edx, dword [esp + 0x884]
lea ecx, [esp + 0x5c]
mov byte [esp + 0x874], 0xe
push ecx
push edx
push eax
call esi
lea ecx, [esp + 0x14]
mov esi, eax
mov byte [esp + 0x868], 0xc
call fcn.11e79f00
cmp esi, 0xffffffff
je 0x11cf2a5c
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0x87c]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x70]
mov dword [eax], ecx
mov ecx, dword [esp + 0x6c]
mov dword [eax + 0x20], edx
mov dword [eax + 0x1c], ecx
jmp 0x11cf2b46
mov edx, dword [esp + 0x87c]
mov eax, dword [esp + 0x20]
mov dword [edx + 0x20], eax
jmp 0x11cf2b46
mov edi, dword [esp + 0x87c]
xor esi, esi
xor eax, eax
mov ecx, dword [edi + 0x1c]
mov edx, dword [edi + 0x20]
or ecx, esi
or eax, edx
push ecx
push eax
call fcn.11d94390
add esp, 8
test eax, eax
je 0x11cf2b46
lea eax, [esp + 0x258]
push ebx
push eax
mov ecx, 0x1212b5c0
call fcn.11d6cb30
test eax, eax
je 0x11cf2b46
lea ecx, [esp + 0x258]
push ecx
mov ecx, 0x1212b5c0
call fcn.11d923c0
test eax, eax
jne 0x11cf2ae5
push ebx
mov ecx, 0x1212b5c0
call fcn.11d87b70
test eax, eax
je 0x11cf2ae5
mov ecx, 0x1212b5c0
call fcn.11d96a40
cmp eax, 4
je 0x11cf2b46
push 0xffffffffffffffdd
lea ecx, [esp + 0x48]
call fcn.11e15fa0
lea edx, [esp + 0x24]
lea eax, [esp + 0x258]
push edx
mov byte [esp + 0x86c], 0xf
push eax
mov dword [esp + 0x2c], ebx
call fcn.11ee3a60
mov esi, eax
add esp, 8
cmp esi, ebx
jne 0x11cf2b2b
cmp dword [esp + 0x24], ebx
jne 0x11cf2b2b
push ebx
push ebx
call fcn.11ee1ad0
add esp, 8
test eax, eax
jne 0x11cf2b35
mov ecx, dword [esp + 0x24]
mov dword [edi + 0x20], esi
mov dword [edi + 0x1c], ecx
lea ecx, [esp + 0x44]
mov byte [esp + 0x868], 0xc
call fcn.11e15fd0
lea ecx, [esp + 0x34]
mov byte [esp + 0x868], 4
call fcn.11e7f280
lea ecx, [esp + 0x18]
mov byte [esp + 0x868], 2
call fcn.11e79f00
lea ecx, [esp + 0x38]
mov byte [esp + 0x868], 0
call fcn.11e15fd0
mov dword [esp + 0x868], 0xffffffff
lea ecx, [esp + 0x28]
call fcn.11e15fd0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x860]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x85c
ret 0x1c
or ebp, 0xffffffff
lea ecx, [esp + 0x18]
mov byte [esp + 0x868], 2
call fcn.11e79f00
lea ecx, [esp + 0x38]
mov byte [esp + 0x868], 0
call fcn.11e15fd0
mov dword [esp + 0x868], ebp
jmp 0x11cf2b84