Function at 0x1000b850
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1454
call fcn.1002df80
mov eax, dword [0x10079214]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
mov edi, ecx
cmp dword [edi + 0xc], 0
je 0x1000b884
mov eax, 1
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1002deb9
mov esp, ebp
pop ebp
ret
push ebx
push esi
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call fcn.10031950
add esp, 0xc
lea eax, [ebp - 0x20c]
push 0x104
push eax
push dword [0x1007a4a8]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x20c]
push eax
call esi
lea eax, [ebp - 0x20c]
push eax
call esi
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call fcn.10031950
mov esi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0x20c]
add esp, 0xc
push str.ComputerZ_CN.exe
push eax
lea eax, [ebp - 0x414]
push eax
call esi
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea eax, [ebp - 0x414]
push eax
call ebx
test eax, eax
je 0x1000b946
push 5
push str.HpSvc
mov ecx, edi
call fcn.1000a650
push 0x1b
push str.Hardware_Protection_Service
lea ecx, [edi + 4]
call fcn.1000a650
push 0x1f
push 0x1005bdb0
lea ecx, [edi + 8]
call fcn.1000a650
mov eax, 0x4c4b
jmp 0x1000bcae
push 0x208
lea eax, [ebp - 0x61c]
push 0
push eax
call fcn.10031950
add esp, 0xc
lea eax, [ebp - 0x20c]
push str.360wpapp.exe
push eax
lea eax, [ebp - 0x61c]
push eax
call esi
lea eax, [ebp - 0x61c]
push eax
call ebx
test eax, eax
je 0x1000b9b4
push 5
push str.WpSvc
mov ecx, edi
call fcn.1000a650
push 0x1c
push str.WallPaper_Protection_Service
lea ecx, [edi + 4]
call fcn.1000a650
push 0x1c
push 0x1005be54
lea ecx, [edi + 8]
call fcn.1000a650
mov eax, 0x5033
jmp 0x1000bcae
push 0x208
lea eax, [ebp - 0x824]
push 0
push eax
call fcn.10031950
add esp, 0xc
lea eax, [ebp - 0x20c]
push str.LdsLite.exe
push eax
lea eax, [ebp - 0x824]
push eax
call esi
lea eax, [ebp - 0x824]
push eax
call ebx
test eax, eax
je 0x1000ba22
push 5
push str.TmSvc
mov ecx, edi
call fcn.1000a650
push 0x1e
push str.Temperature_Monitoring_Service
lea ecx, [edi + 4]
call fcn.1000a650
push 0x1c
push 0x1005bef4
lea ecx, [edi + 8]
call fcn.1000a650
mov eax, 0x541b
jmp 0x1000bcae
push 0x208
lea eax, [ebp - 0xa2c]
push 0
push eax
call fcn.10031950
add esp, 0xc
lea eax, [ebp - 0x20c]
push str.LDSGameHallLDSGameHall.exe
push eax
lea eax, [ebp - 0xa2c]
push eax
call esi
lea eax, [ebp - 0xa2c]
push eax
call ebx
test eax, eax
je 0x1000ba90
push 5
push str.SpSvc
mov ecx, edi
call fcn.1000a650
push 0x19
push str.System_Protection_Service
lea ecx, [edi + 4]
call fcn.1000a650
push 0x20
push 0x1005bfa8
lea ecx, [edi + 8]
call fcn.1000a650
mov eax, 0x515f
jmp 0x1000bcae
push 0x208
lea eax, [ebp - 0xc34]
push 0
push eax
call fcn.10031950
add esp, 0xc
lea eax, [ebp - 0x20c]
push str.CouponTray.exe
push eax
lea eax, [ebp - 0xc34]
push eax
call esi
lea eax, [ebp - 0xc34]
push eax
call ebx
test eax, eax
je 0x1000bafe
push 5
push str.CmSvc
mov ecx, edi
call fcn.1000a650
push 0x14
push str.CouponMaster_Service
lea ecx, [edi + 4]
call fcn.1000a650
push 0x27
push 0x1005c048
lea ecx, [edi + 8]
call fcn.1000a650
mov eax, 0x592f
jmp 0x1000bcae
push 0x208
lea eax, [ebp - 0xe3c]
push 0
push eax
call fcn.10031950
add esp, 0xc
lea eax, [ebp - 0x20c]
push str.UtilsApkMagicEmuTool.exe
push eax
lea eax, [ebp - 0xe3c]
push eax
call esi
lea eax, [ebp - 0xe3c]
push eax
call ebx
test eax, eax
je 0x1000bb6c
push 8
push str.AndSpSvc
mov ecx, edi
call fcn.1000a650
push 0x1e
push str.Android_Package_Helper_Service
lea ecx, [edi + 4]
call fcn.1000a650
push 0x29
push 0x1005c120
lea ecx, [edi + 8]
call fcn.1000a650
mov eax, 0x5d17
jmp 0x1000bcae
push 0x208
lea eax, [ebp - 0x1044]
push 0
push eax
call fcn.10031950
add esp, 0xc
lea eax, [ebp - 0x20c]
push str.NovelTray.exe
push eax
lea eax, [ebp - 0x1044]
push eax
call esi
lea eax, [ebp - 0x1044]
push eax
call ebx
test eax, eax
je 0x1000bbda
push 0xa
push str.MYNovelSvc
mov ecx, edi
call fcn.1000a650
push 0x19
push str.Novel_Synchronize_Service
lea ecx, [edi + 4]
call fcn.1000a650
push 0x2e
push str.dk_rg
lea ecx, [edi + 8]
call fcn.1000a650
mov eax, 0x60ff
jmp 0x1000bcae
push 0x208
lea eax, [ebp - 0x124c]
push 0
push eax
call fcn.10031950
add esp, 0xc
lea eax, [ebp - 0x20c]
push str.HaloTray.exe
push eax
lea eax, [ebp - 0x124c]
push eax
call esi
lea eax, [ebp - 0x124c]
push eax
call ebx
test eax, eax
je 0x1000bc45
push 0xa
push str.DesktopSvc
mov ecx, edi
call fcn.1000a650
push 0x22
push str.Desktop_Arrangement_Helper_Service
lea ecx, [edi + 4]
call fcn.1000a650
push 0x1b
push 0x1005c2c0
lea ecx, [edi + 8]
call fcn.1000a650
mov eax, 0x64e7
jmp 0x1000bcae
push 0x208
lea eax, [ebp - 0x1454]
push 0
push eax
call fcn.10031950
add esp, 0xc
lea eax, [ebp - 0x20c]
push str.YxhGamebox.exe
push eax
lea eax, [ebp - 0x1454]
push eax
call esi
lea eax, [ebp - 0x1454]
push eax
call ebx
test eax, eax
je 0x1000bccf
push 0xa
push str.YxhGameSvc
mov ecx, edi
call fcn.1000a650
push 0x1b
push str.Yxh_Game_Protection_Service
lea ecx, [edi + 4]
call fcn.1000a650
push 0x57
push str.sS_R
lea ecx, [edi + 8]
call fcn.1000a650
mov eax, 0x68cf
pop esi
mov word [edi + 0x10], ax
mov eax, 1
pop ebx
mov dword [edi + 0xc], 1
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1002deb9
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
pop esi
pop ebx
xor ecx, ebp
pop edi
call fcn.1002deb9
mov esp, ebp
pop ebp
ret