Function at 0x10001ee0
Capabilities:
Check if file exists
Get file attributes
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100091b0
mov eax, dword fs:[0]
push eax
sub esp, 0x2f0
mov eax, dword [0x1000e008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
lea esi, [edi + 4]
test esi, esi
jne 0x10001f20
lea eax, [esi + 0x11]
jmp 0x10002221
cmp dword [edi + 0x418], 0
jne 0x10001f33
mov eax, 0x10
jmp 0x10002221
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x10001f51
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [edi], eax
mov eax, 2
jmp 0x10002221
test dword [edi + 0x424], 0x100
je 0x10001f73
mov ebx, dword [edi + 0x428]
test ebx, ebx
jne 0x10001faa
mov ecx, edi
call fcn.100025d0
jmp 0x10002221
push dword [edi + 0x418]
xor eax, eax
cmp dword [edi + 0x420], eax
push 0
sete al
lea eax, [eax*2 + 0x1438]
push eax
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
test ebx, ebx
jne 0x10001faa
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [edi], eax
lea eax, [ebx + 0x12]
jmp 0x10002221
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x21c], 0
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetHandleInformation]
test eax, eax
je 0x10002214
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_K32GetModuleBaseNameW]
neg eax
lea ecx, [ebp - 0x218]
push 0xb8
sbb eax, eax
and eax, ecx
mov dword [edi + 0x414], eax
lea eax, [ebp - 0x2f0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push esi
lea ecx, [ebp - 0x2f0]
call fcn.10004d60
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x2f0]
mov eax, dword [ebp - 0x2f0]
mov eax, dword [eax + 4]
cmp dword [ebp + eax - 0x2e4], 0
je 0x10002063
mov dword [ebp - 4], 0xffffffff
call fcn.10003f00
mov eax, 0x20000001
mov dword [edi], eax
mov eax, 0x13
jmp 0x10002221
lea eax, [ebp - 0x238]
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::fpos_struct__Mbstatet____thiscall_std::basic_istream_char__struct_std::char_traits_char__::tellg_void_]
mov ecx, dword [ebp - 0x230]
add ecx, dword [ebp - 0x238]
mov eax, dword [ebp - 0x22c]
adc eax, dword [ebp - 0x234]
test eax, eax
jg 0x100020b9
jl 0x10002096
cmp ecx, 0x1000
jae 0x100020b9
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 4], 0xffffffff
call fcn.10003f00
mov eax, 0x20000002
mov dword [edi], eax
mov eax, 0x13
jmp 0x10002221
push 0x1000
call fcn.10008294
add esp, 4
lea ecx, [ebp - 0x2f0]
mov esi, eax
mov dword [ebp - 0x2f8], esi
push 0
push 0
push 0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::seekg_long_long___int64___int_]
push 0
push 0x1000
push esi
lea ecx, [ebp - 0x2f0]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______thiscall_std::basic_istream_char__struct_std::char_traits_char__::read_char___long_long___int64__]
lea ecx, [ebp - 0x2e0]
call fcn.100050f0
test eax, eax
jne 0x1000211c
mov eax, dword [ebp - 0x2f0]
lea ecx, [ebp - 0x2f0]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov eax, dword [esi + 0x3c]
push dword [ebp - 0x2f8]
add eax, esi
movzx esi, word [esi]
mov ecx, dword [eax]
movzx eax, word [eax + 4]
mov dword [ebp - 0x2f4], ecx
mov dword [ebp - 0x2fc], eax
call fcn.1000829d
mov eax, 0x5a4d
add esp, 4
cmp si, ax
jne 0x100021f4
cmp dword [ebp - 0x2f4], 0x4550
jne 0x100021f4
mov eax, 0x14c
cmp word [ebp - 0x2fc], ax
jne 0x100021f4
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 4], 0xffffffff
call fcn.10003f00
lea eax, [ebp - 0x2f8]
mov dword [ebp - 0x2f4], 0
push eax
lea eax, [ebp - 0x2f4]
mov dword [ebp - 0x2f8], 0
push eax
push dword [edi + 0x424]
mov edx, ebx
lea ecx, [edi + 4]
push dword [edi + 0x420]
push dword [edi + 0x41c]
call fcn.10002240
add esp, 0x14
mov esi, eax
test dword [edi + 0x424], 0x100
jne 0x100021dc
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x2f4]
mov eax, esi
mov dword [edi], ecx
mov ecx, dword [ebp - 0x2f8]
mov dword [edi + 0x42c], ecx
jmp 0x10002221
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 4], 0xffffffff
call fcn.10003f00
mov eax, 0x20000003
mov dword [edi], eax
mov eax, 0x13
jmp 0x10002221
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [edi], eax
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10008286
mov esp, ebp
pop ebp
ret 4