Function at 0x100026f7
Capabilities:
Check if file exists
Get common file path

Disassembly:
mov eax, 0x1000b9ea
call fcn.1000b5d0
sub esp, 0x434
push ebx
mov edx, 0x81
push edi
xor ebx, ebx
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x43e]
mov word [ebp - 0x440], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x236]
mov word [ebp - 0x238], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x440]
push eax
push ebx
push ebx
push 0x1a
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
cmp word [ebp - 0x440], bx
je 0x10002841
lea eax, [ebp - 0x440]
push str.360seextensionsExtDoctor360Doctor.exe
push eax
lea eax, [ebp - 0x238]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x238]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x10002841
mov al, byte [ebp - 0xd]
push esi
push ebx
lea ecx, [ebp - 0x20]
mov byte [ebp - 0x20], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov esi, dword [sym.imp.MSVCRT.dll_wcslen]
mov edi, 0x10011208
push edi
call esi
pop ecx
push eax
push edi
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
mov al, byte [ebp - 0xd]
push ebx
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], ebx
mov byte [ebp - 0x30], al
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
lea eax, [ebp - 0x238]
push eax
call esi
pop ecx
push eax
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVCP60.dll_public:_class_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int______thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::assign_unsigned_short_int_const___unsigned_int_]
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.100085f6
pop ecx
mov byte [ebp - 4], bl
pop ecx
push 1
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov eax, dword [ebp - 0x1c]
pop esi
cmp eax, ebx
jne 0x1000280e
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
push str.2.0.0.1002
push eax
call fcn.1000871e
pop ecx
test eax, eax
pop ecx
jne 0x10002832
lea eax, [ebp - 0x238]
push str.360doctor.dat
push eax
call fcn.100083aa
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov ecx, dword [ebp - 0xc]
pop edi
pop ebx
mov dword fs:[0], ecx
leave
ret