Function at 0x1006342
Capabilities:
Check if file exists
Get common file path
Get disk information
Get file attributes
Set file attributes

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x108
mov eax, dword [0x100c2c4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0
push 0
mov esi, 0x1001504
push esi
call fcn.0100312f
mov edi, eax
lea eax, [edi + 1]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ebx, eax
xor eax, eax
cmp ebx, eax
jne 0x10063a0
push eax
push 0x10
push eax
push eax
push 0x4b5
push eax
call fcn.010037d6
call fcn.010035be
mov dword [0x100d0c4], eax
xor eax, eax
jmp 0x1006619
push edi
push ebx
push esi
call fcn.0100312f
test eax, eax
jne 0x10063cf
push eax
push 0x10
push eax
push eax
push 0x4b1
push eax
call fcn.010037d6
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [0x100d0c4], 0x80070714
jmp 0x1006399
push 0x100143c
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x10063e9
mov dword [0x100daf0], 1
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov al, byte [0x100dffe]
test al, al
je 0x100643d
cmp al, 0x5c
jne 0x100640b
cmp byte [0x100dfff], al
jne 0x100640b
xor esi, esi
xor eax, eax
jmp 0x1006410
xor eax, eax
inc eax
xor esi, esi
push eax
push esi
push 0x100dffe
call fcn.010056a0
test eax, eax
je 0x1006428
xor eax, eax
inc eax
jmp 0x1006619
push esi
push 0x10
push esi
push esi
push 0x4be
push esi
call fcn.010037d6
jmp 0x1006399
xor eax, eax
cmp dword [0x100dee4], eax
jne 0x10065fb
cmp dword [0x100daf0], eax
jne 0x10065fb
mov esi, 0x100d2a4
push esi
mov edi, 0x104
push edi
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x100649a
push 3
xor ebx, ebx
inc ebx
push ebx
push esi
call fcn.010056a0
test eax, eax
je 0x1006484
mov eax, ebx
jmp 0x1006619
push esi
call fcn.01001e2b
test eax, eax
jne 0x100649a
push ebx
push ebx
push esi
call fcn.010056a0
test eax, eax
jne 0x100647d
push 0x1001544
push edi
lea eax, [ebp - 0x108]
push eax
call fcn.01001ede
jmp 0x10065c3
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
mov ebx, eax
cmp ebx, 6
je 0x10064c4
cmp ebx, 3
jne 0x10064d6
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x100650f
cmp ebx, 2
jne 0x1006504
cmp byte [ebp - 0x108], 0x41
je 0x1006504
cmp byte [ebp - 0x108], 0x42
je 0x1006504
lea eax, [ebp - 0x108]
push eax
call fcn.01007816
test eax, eax
je 0x1006504
cmp eax, 0x19000
jae 0x100650f
inc byte [ebp - 0x108]
jmp 0x10065c3
xor ebx, ebx
push ebx
push 3
lea eax, [ebp - 0x108]
push eax
call fcn.010040c8
test eax, eax
jne 0x1006547
lea eax, [ebp - 0x108]
push eax
call fcn.01001e2b
test eax, eax
jne 0x1006504
push ebx
push 1
lea eax, [ebp - 0x108]
push eax
call fcn.010040c8
test eax, eax
je 0x1006504
lea eax, [ebp - 0x108]
push eax
call fcn.01001e2b
test eax, eax
je 0x1006565
push edi
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push 0x1001534
push edi
lea eax, [ebp - 0x108]
push eax
call fcn.010074a0
lea eax, [ebp - 0x108]
push eax
call fcn.01001dff
test eax, eax
jne 0x1006595
inc byte [ebp - 0x108]
mov byte [ebp - 0x105], al
jmp 0x10065c3
push 2
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp - 0x108]
push eax
push edi
push esi
call fcn.01001ede
push ebx
push 1
push esi
call fcn.010056a0
test eax, eax
jne 0x1006420
cmp byte [ebp - 0x108], 0x5a
lea eax, [ebp - 0x108]
jle 0x10064b1
push edi
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push 4
push 3
lea eax, [ebp - 0x108]
push eax
call fcn.010040c8
test eax, eax
jne 0x100649a
jmp 0x1006399
push eax
push eax
push 0x1005a52
push eax
push 0x7d2
push dword [0x100db04]
call fcn.01004b3e
neg eax
sbb eax, eax
neg eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01006b2f
leave
ret