Function at 0x101bff0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
mov eax, 0x1033d5c
call fcn.01027604
sub esp, 0x268
mov eax, dword [0x10360ac]
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push edi
xor ebx, ebx
push ebx
push 0x1392
push dword [0x1036f74]
mov dword [ebp - 0x10], eax
call esi
mov edi, dword [sym.imp.USER32.dll_EnableWindow]
push eax
call edi
push ebx
push 0x1394
push dword [0x1036f74]
call esi
push eax
call edi
push ebx
push 0x13c2
push dword [0x1036f74]
call esi
push eax
call edi
push ebx
push 0x1404
push dword [0x1036f74]
call esi
push eax
call edi
lea ecx, [ebp - 0xa8]
call fcn.0100ca41
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 4], ebx
call fcn.0100ca41
lea ecx, [ebp - 0x140]
call fcn.0100ca41
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 2
call fcn.01016ee5
test eax, eax
mov ebx, dword [sym.imp.USER32.dll_ShowWindow]
jl 0x101c20a
push 0x10050f8
lea ecx, [ebp - 0x1d8]
call fcn.0100c744
push 0
push 0
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0xa8]
call fcn.01015af0
call fcn.0101f34e
test eax, eax
jne 0x101c0f3
call fcn.0101f3a6
test eax, eax
jne 0x101c0f3
call fcn.0101f2f6
test eax, eax
lea ecx, [ebp - 0x140]
je 0x101c0ec
push 0x1005198
jmp 0x101c0fe
push 0x1005180
jmp 0x101c0fe
push 0x1005164
lea ecx, [ebp - 0x140]
call fcn.0100c70c
push 0x1005160
lea ecx, [ebp - 0xa8]
call fcn.0100c744
push 0
push 0
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0xa8]
call fcn.01015af0
push dword [ebp - 0x9c]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x101c1d4
call fcn.0101f34e
test eax, eax
jne 0x101c154
call fcn.0101f3a6
test eax, eax
je 0x101c20a
lea ecx, [ebp - 0xa8]
call fcn.01016ee5
test eax, eax
jl 0x101c20a
push 0x10050f8
lea ecx, [ebp - 0x1d8]
call fcn.0100c70c
push 0
push 0
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0xa8]
call fcn.01015af0
push 0x1005160
lea ecx, [ebp - 0xa8]
call fcn.0100c744
push 0x1004f14
lea ecx, [ebp - 0x140]
call fcn.0100c70c
push 0
push 0
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0xa8]
call fcn.01015af0
push dword [ebp - 0x9c]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x101c20a
push 5
push 0x1392
push dword [0x1036f74]
call esi
push eax
call ebx
push 1
push 0x1392
push dword [0x1036f74]
call esi
push eax
call edi
push 5
push 0x13c1
push dword [0x1036f74]
call esi
push eax
call ebx
lea ecx, [ebp - 0xa8]
call fcn.01016ee5
test eax, eax
jl 0x101c389
push 0x10050f8
lea ecx, [ebp - 0x1d8]
call fcn.0100c70c
push 0
push 0
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0xa8]
call fcn.01015af0
call fcn.0101f34e
test eax, eax
jne 0x101c272
call fcn.0101f3a6
test eax, eax
jne 0x101c272
call fcn.0101f2f6
test eax, eax
lea ecx, [ebp - 0x140]
je 0x101c26b
push 0x1005198
jmp 0x101c27d
push 0x1005180
jmp 0x101c27d
push 0x1005164
lea ecx, [ebp - 0x140]
call fcn.0100c70c
push 0x1005160
lea ecx, [ebp - 0xa8]
call fcn.0100c744
push 0
push 0
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0xa8]
call fcn.01015af0
push dword [ebp - 0x9c]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x101c353
call fcn.0101f34e
test eax, eax
jne 0x101c2d3
call fcn.0101f3a6
test eax, eax
je 0x101c389
lea ecx, [ebp - 0xa8]
call fcn.01016ee5
test eax, eax
jl 0x101c389
push 0x10050f8
lea ecx, [ebp - 0x1d8]
call fcn.0100c70c
push 0
push 0
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0xa8]
call fcn.01015af0
push 0x1005160
lea ecx, [ebp - 0xa8]
call fcn.0100c744
push 0x1005010
lea ecx, [ebp - 0x140]
call fcn.0100c70c
push 0
push 0
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0xa8]
call fcn.01015af0
push dword [ebp - 0x9c]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x101c389
push 5
push 0x1394
push dword [0x1036f74]
call esi
push eax
call ebx
push 1
push 0x1394
push dword [0x1036f74]
call esi
push eax
call edi
push 5
push 0x13ff
push dword [0x1036f74]
call esi
push eax
call ebx
lea ecx, [ebp - 0x270]
call fcn.0100ca41
lea eax, [ebp - 0x274]
push eax
push 0x20019
push 0
push 0x1005110
push 0x80000002
mov byte [ebp - 4], 3
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x101c428
push 0x104
push 0x1005104
push dword [ebp - 0x274]
lea ecx, [ebp - 0x270]
call fcn.0101bf69
push dword [ebp - 0x264]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x101c41c
push 5
push 0x13c2
push dword [0x1036f74]
call esi
push eax
call ebx
push 1
push 0x13c2
push dword [0x1036f74]
call esi
push eax
call edi
push 5
push 0x13c3
push dword [0x1036f74]
call esi
push eax
call ebx
push dword [ebp - 0x274]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [0x1036f68], 0
je 0x101c470
call fcn.0101f209
test eax, eax
jne 0x101c470
push 5
push 0x1404
push dword [0x1036f74]
call esi
push eax
call ebx
push 1
push 0x1404
push dword [0x1036f74]
call esi
push eax
call edi
push 5
push 0x13df
push dword [0x1036f74]
call esi
push eax
call ebx
mov esi, 0x1001c4c
lea ecx, [ebp - 0x270]
mov dword [ebp - 0x270], esi
call fcn.0100b71f
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x140], esi
call fcn.0100b71f
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 0x1d8], esi
call fcn.0100b71f
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xa8], esi
call fcn.0100b71f
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
xor eax, eax
pop ebx
call fcn.0102699e
leave
ret