Function at 0x1000735b
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1003cd46
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1f0
push ebx
push esi
push edi
xor ebx, ebx
push 0xff
lea eax, [esp + 0xfd]
push ebx
push eax
mov edi, ecx
mov byte [esp + 0x104], bl
call fcn.10010900
add esp, 0xc
add edi, 0x414c
push 0x74
pop eax
push 0x61
pop ecx
push 0x69
mov word [esp + 0x42], ax
pop eax
push 0x6c
mov word [esp + 0x54], ax
pop eax
push 0x63
mov word [esp + 0x56], ax
pop eax
push 0x64
pop esi
push 0x2e
mov word [esp + 0x5c], ax
pop eax
push 0x5c
pop edx
push 0x62
mov word [esp + 0x5a], ax
xor eax, eax
mov word [esp + 0x62], ax
pop eax
push 0x65
mov word [esp + 0x46], ax
pop eax
push 0x79
mov word [esp + 0x4c], ax
pop eax
push 0x44
mov word [esp + 0x58], ax
pop eax
push 0x73
mov word [esp + 0x3e], ax
pop eax
push 0x6c
mov word [esp + 0x4a], ax
pop eax
mov word [esp + 0x5a], ax
xor eax, eax
push 7
mov word [esp + 0x50], si
mov word [esp + 0x60], si
pop esi
mov word [esp + 0xb0], ax
lea eax, [esp + 0x38]
mov word [esp + 0x3c], cx
mov word [esp + 0x40], cx
mov word [esp + 0x4e], cx
mov word [esp + 0x44], cx
push eax
lea ecx, [esp + 0xb4]
mov dword [esp + 0x64], ebx
mov byte [edi], bl
mov word [esp + 0x4e], dx
mov word [esp + 0x3c], dx
mov dword [esp + 0xc8], esi
mov dword [esp + 0xc4], ebx
call fcn.100092a6
mov dword [esp + 0x204], ebx
xor eax, eax
mov dword [esp + 0xdc], esi
mov dword [esp + 0xd8], ebx
mov word [esp + 0xc8], ax
push 0x1004e6b8
lea ecx, [esp + 0xcc]
call fcn.100092a6
lea eax, [esp + 0xb0]
push eax
lea edx, [esp + 0xcc]
lea ecx, [esp + 0x68]
mov byte [esp + 0x208], 1
call fcn.1000a1bd
pop ecx
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [esp + 0xd0]
call fcn.10009482
push ebx
push esi
lea ecx, [esp + 0xb8]
mov byte [esp + 0x20c], 4
call fcn.10009482
cmp dword [esp + 0x78], 8
lea eax, [esp + 0x64]
cmovae eax, dword [esp + 0x64]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1000764f
push 0x6c
pop eax
push 0x76
mov word [esp + 0x2e], ax
pop eax
push 0x73
mov word [esp + 0x36], ax
pop eax
push 0x65
mov word [esp + 0x22], ax
pop eax
push 0x62
mov word [esp + 0x24], ax
pop eax
push 0x5c
mov word [esp + 0x1e], ax
pop eax
push 0x2e
pop ecx
push 0x61
mov word [esp + 0x32], cx
pop ecx
push 0x69
pop edx
push 0x74
mov word [esp + 0x2c], dx
pop edx
push 0x64
mov word [esp + 0x14], ax
mov word [esp + 0x26], ax
mov word [esp + 0x1a], dx
pop edx
push 0x63
pop eax
mov word [esp + 0x30], ax
xor eax, eax
push 0x79
mov word [esp + 0x3a], ax
pop eax
mov word [esp + 0x2c], ax
push 0x44
pop eax
mov word [esp + 0x12], ax
xor eax, eax
mov word [esp + 0x94], ax
lea eax, [esp + 0x10]
mov word [esp + 0x18], cx
mov word [esp + 0x1c], cx
mov word [esp + 0x14], cx
mov word [esp + 0x26], cx
push eax
lea ecx, [esp + 0x98]
mov word [esp + 0x38], dx
mov word [esp + 0x28], dx
mov dword [esp + 0xac], 7
mov dword [esp + 0xa8], ebx
call fcn.100092a6
mov byte [esp + 0x204], 5
xor eax, eax
push 0x1004e6b8
lea ecx, [esp + 0x80]
mov dword [esp + 0x94], 7
mov dword [esp + 0x90], ebx
mov word [esp + 0x80], ax
call fcn.100092a6
lea eax, [esp + 0x94]
push eax
lea edx, [esp + 0x80]
lea ecx, [esp + 0xe4]
mov byte [esp + 0x208], 6
call fcn.1000a1bd
pop ecx
push eax
lea ecx, [esp + 0x68]
call fcn.10008b78
push ebx
push esi
lea ecx, [esp + 0xe8]
call fcn.10009482
push ebx
push esi
lea ecx, [esp + 0x84]
call fcn.10009482
push ebx
push esi
lea ecx, [esp + 0x9c]
mov byte [esp + 0x20c], 4
call fcn.10009482
cmp dword [esp + 0x78], 8
lea ecx, [esp + 0x64]
cmovae ecx, dword [esp + 0x64]
push ecx
push 0x80
push 3
push ecx
push esi
mov edx, 0x80000000
call fcn.1000b4cc
mov esi, eax
add esp, 0x14
cmp esi, 0xffffffff
je 0x100076cb
push ebx
lea eax, [esp + 0x64]
push eax
push pe_nt_image_headers32
lea eax, [esp + 0x104]
push eax
push esi
call dword [0x1006ca44]
mov ecx, esi
call fcn.1000b40a
lea eax, [esp + 0xac]
push eax
lea eax, [esp + 0x11f]
push 0x1004594c
push eax
call fcn.1000fd40
add esp, 0xc
test eax, eax
je 0x100076cb
push 0xffffffffffffffff
push eax
push 0x10
push edi
call fcn.1000fe2b
add esp, 0x10
push ebx
push 1
lea ecx, [esp + 0x6c]
call fcn.10009482
mov ecx, dword [esp + 0x1fc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret