Function at 0x1000c390
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100512d6
mov eax, dword fs:[0]
push eax
sub esp, 0x240
mov eax, dword [0x1006e098]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
push 0x74
push 0x78
push 0x74
push 0x67
push 0x6e
push 0x69
push 0x70
push 0x69
push 0x61
push 0x48
push 0x74
push 0x63
push 0x65
push 0x6e
push 0x6e
push 0x6f
push 0x43
push 0x65
push 0x64
push 0x69
push 0x54
push 0x64
push 0x6e
push 0x41
push 0x72
push 0x65
push 0x76
push 0x69
push 0x52
push 0x67
push 0x6e
push 0x69
push 0x72
push 0x70
push 0x53
lea eax, [ebp - 0x230]
push str._c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c._c_c_c
push eax
call fcn.10003820
add esp, 0x94
cmp dword [ebx + 0x18], 8
lea esi, [ebx + 4]
mov dword [ebp - 4], 0
mov eax, esi
mov dword [esi + 0x10], 0
jb 0x1000c437
mov eax, dword [esi]
xor ecx, ecx
push 1
mov word [eax], cx
mov ecx, esi
push 0x10056da4
call fcn.10002650
push 1
push 0x10056da8
mov ecx, esi
call fcn.10002650
push 1
push 0x100566bc
mov ecx, esi
call fcn.10002650
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push dword [ebp - 0x220]
cmovae eax, dword [ebp - 0x230]
mov ecx, esi
push eax
call fcn.10002650
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x1000c492
mov eax, dword [esi]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1000c561
push 0x208
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.1002e2b0
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push 0x1c
lea eax, [ebp - 0x24c]
push eax
push 0x1000be00
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
neg eax
sbb eax, eax
and eax, dword [ebp - 0x248]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
cmp dword [esi + 0x14], 8
mov eax, esi
mov dword [esi + 0x10], 0
jb 0x1000c505
mov eax, dword [esi]
xor ecx, ecx
mov word [eax], cx
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1000c513
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
mov ecx, esi
call fcn.10002650
push 1
push 0x100566bc
mov ecx, esi
call fcn.10002650
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push dword [ebp - 0x220]
cmovae eax, dword [ebp - 0x230]
mov ecx, esi
push eax
call fcn.10002650
cmp dword [esi + 0x14], 8
jb 0x1000c569
mov esi, dword [esi]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp dword [ebx + 0x30], 8
lea eax, [ebx + 0x1c]
mov dword [ebx + 0x2c], 0
jb 0x1000c583
mov eax, dword [ebx + 0x1c]
xor ecx, ecx
push 1
mov word [eax], cx
lea ecx, [ebx + 0x1c]
push 0x10056da4
call fcn.10002650
push 1
push 0x10056da8
lea ecx, [ebx + 0x1c]
call fcn.10002650
push 1
push 0x100566bc
lea ecx, [ebx + 0x1c]
call fcn.10002650
push 0x67
push 0x6f
push 0x67
push 0x6f
push 0x6c
push 0x74
push 0x6e
push 0x65
push 0x74
push 0x6e
push 0x6f
push 0x43
push 0x70
push 0x74
push 0x74
push 0x48
push 0x77
push 0x6f
push 0x68
push 0x53
push 0x6f
push 0x4e
lea eax, [ebp - 0x248]
push str._c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c_c._c_c_c
push eax
call fcn.10003820
add esp, 0x60
cmp dword [ebp - 0x234], 8
lea eax, [ebp - 0x248]
push dword [ebp - 0x238]
cmovae eax, dword [ebp - 0x248]
lea ecx, [ebx + 0x1c]
push eax
mov byte [ebp - 4], 1
call fcn.10002650
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x1000c658
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c64e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c6af
push edx
push ecx
call fcn.10016b0e
add esp, 8
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x1000c694
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1000c68a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000c6b4
push edx
push ecx
call fcn.10016b0e
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100170cd
mov esp, ebp
pop ebp
ret
call fcn.100323d9
call fcn.100323d9
int3