Function at 0x1c2c1d0
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xb0
mov eax, dword [0x1cf3040]
xor eax, ebp
mov dword [esp + 0xa8], eax
mov bl, 1
push 0x1cf53d0
call fcn.01c7a870
add esp, 4
test al, al
je 0x1c2c7af
call fcn.01c29140
mov eax, dword [0x1cf8bf8]
cmp dword [eax], 0
je 0x1c2c7af
mov edx, dword [ebp + 8]
xor eax, eax
dec eax
lea ecx, [esp + 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
call fcn.01c30540
pxor xmm0, xmm0
lea ebx, [esp + 0x70]
movq qword [ebx], xmm0
mov dword [ebx + 8], 0
xor esi, esi
push ebx
push 6
call fcn.01c37b20
add esp, 8
mov ecx, 0
test al, al
je 0x1c2c284
push 0xc
call fcn.01c9515a
add esp, 4
mov ecx, eax
mov esi, eax
add esi, 0xc
cmp byte [esp + 0x7b], 0
jns 0x1c2c47e
push dword [esp + 0x74]
push dword [esp + 0x74]
mov edi, ecx
call fcn.01c24b90
mov ecx, edi
mov dword [esp + 4], ecx
cmp byte [esp + 0x7b], 0
jns 0x1c2c29b
push dword [esp + 0x70]
call fcn.01c95155
add esp, 4
pxor xmm0, xmm0
movq qword [esp + 8], xmm0
mov dword [esp + 0x10], 0
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
je 0x1c2c576
pcmpeqd xmm0, xmm0
lea edi, [esp + 0x30]
movdqa xmmword [edi + 0x20], xmm0
movdqa xmmword [edi + 0x10], xmm0
movdqa xmmword [edi], xmm0
push 0x2b9
push str....._base_files_file_util_win.cc
push str.GetSecureSystemTemp
push ebx
call fcn.01c7f230
add esp, 0x10
xor eax, eax
mov ecx, edi
push eax
xor edi, edi
push ebx
call fcn.01c7f260
lea eax, [esp + 0x20]
mov dword [eax + 8], edi
pxor xmm0, xmm0
movq qword [eax], xmm0
push eax
push 0x65
call fcn.01c37b20
add esp, 8
test al, al
je 0x1c2c3f9
pxor xmm0, xmm0
movq qword [esp + 0x70], xmm0
mov dword [esp + 0x78], 0
push ebx
push 0xa
push 0x1ce7104
call fcn.01c84f90
add esp, 0xc
movzx eax, byte [esp + 0x7b]
test al, al
jns 0x1c2c34b
mov eax, dword [esp + 0x74]
mov ebx, dword [esp + 0x70]
lea edx, [esp + 0x60]
lea ecx, [esp + 0x20]
push eax
push ebx
push edx
call fcn.01c89e50
cmp byte [esp + 0x7b], 0
jns 0x1c2c36e
push dword [esp + 0x70]
call fcn.01c95155
add esp, 4
cmp byte [esp + 0x2b], 0
jns 0x1c2c381
push dword [esp + 0x20]
call fcn.01c95155
add esp, 4
mov eax, dword [esp + 0x68]
mov dword [esp + 0x28], eax
movq xmm0, qword [esp + 0x60]
movq qword [esp + 0x20], xmm0
pcmpeqd xmm0, xmm0
lea ebx, [esp + 0x70]
movdqa xmmword [ebx + 0x20], xmm0
movdqa xmmword [ebx + 0x10], xmm0
movdqa xmmword [ebx], xmm0
push 0x20b
push str....._base_files_file_util_win.cc
push str.PathExists
lea edi, [esp + 0x6c]
push edi
call fcn.01c7f230
add esp, 0x10
mov ecx, ebx
push 0
push edi
call fcn.01c7f260
cmp byte [esp + 0x2b], 0
lea eax, [esp + 0x20]
jns 0x1c2c3e0
mov eax, dword [esp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, eax
mov ecx, ebx
call fcn.01c823e0
cmp edi, 0xffffffff
jne 0x1c2c5a7
cmp byte [esp + 0x2b], 0
jns 0x1c2c40c
push dword [esp + 0x20]
call fcn.01c95155
add esp, 4
lea eax, [esp + 0x20]
pxor xmm0, xmm0
movq qword [esp + 0x20], xmm0
mov dword [esp + 0x28], 0
push eax
push 0x6a
call fcn.01c37b20
add esp, 8
test al, al
je 0x1c2c4b5
pcmpeqd xmm0, xmm0
lea ebx, [esp + 0x70]
movdqa xmmword [ebx + 0x20], xmm0
movdqa xmmword [ebx + 0x10], xmm0
movdqa xmmword [ebx], xmm0
lea edi, [esp + 0x60]
push 0x20b
push str....._base_files_file_util_win.cc
push str.PathExists
push edi
call fcn.01c7f230
add esp, 0x10
mov ecx, ebx
push 0
push edi
call fcn.01c7f260
cmp byte [esp + 0x2b], 0
js 0x1c2c498
lea eax, [esp + 0x20]
jmp 0x1c2c49c
mov eax, dword [esp + 0x78]
mov dword [ecx + 8], eax
movq xmm0, qword [esp + 0x70]
mov dword [esp + 4], ecx
movq qword [ecx], xmm0
jmp 0x1c2c29b
mov eax, dword [esp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, eax
mov ecx, ebx
call fcn.01c823e0
cmp edi, 0xffffffff
jne 0x1c2c57f
cmp byte [esp + 0x2b], 0
jns 0x1c2c4c8
push dword [esp + 0x20]
call fcn.01c95155
add esp, 4
lea eax, [esp + 0x20]
pxor xmm0, xmm0
movq qword [esp + 0x20], xmm0
mov dword [esp + 0x28], 0
push eax
push 0x67
call fcn.01c37b20
add esp, 8
test al, al
je 0x1c2c55a
pcmpeqd xmm0, xmm0
lea ebx, [esp + 0x70]
movdqa xmmword [ebx + 0x20], xmm0
movdqa xmmword [ebx + 0x10], xmm0
movdqa xmmword [ebx], xmm0
lea edi, [esp + 0x60]
push 0x20b
push str....._base_files_file_util_win.cc
push str.PathExists
push edi
call fcn.01c7f230
add esp, 0x10
mov ecx, ebx
push 0
push edi
call fcn.01c7f260
cmp byte [esp + 0x2b], 0
lea eax, [esp + 0x20]
jns 0x1c2c538
mov eax, dword [esp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov edi, eax
mov ecx, ebx
call fcn.01c823e0
cmp edi, 0xffffffff
je 0x1c2c55a
lea ecx, [esp + 0x20]
call fcn.01c4a690
test al, al
jne 0x1c2c5b8
cmp byte [esp + 0x2b], 0
jns 0x1c2c56d
push dword [esp + 0x20]
call fcn.01c95155
add esp, 4
lea ecx, [esp + 0x30]
call fcn.01c823e0
mov edi, dword [esp + 4]
jmp 0x1c2c6ee
lea ecx, [esp + 0x20]
call fcn.01c4a690
test al, al
jne 0x1c2c5b8
jmp 0x1c2c4b5
mov eax, dword [esp + 0x28]
mov dword [esp + 0x10], eax
movq xmm0, qword [esp + 0x20]
movq qword [esp + 8], xmm0
jmp 0x1c2c5f0
lea ecx, [esp + 0x20]
call fcn.01c4a690
test al, al
je 0x1c2c3f9
cmp byte [esp + 0x13], 0
movzx eax, byte [esp + 0x2b]
js 0x1c2c8c9
test al, al
jns 0x1c2c591
lea ecx, [esp + 8]
push dword [esp + 0x24]
push dword [esp + 0x24]
call fcn.01c27280
cmp byte [esp + 0x2b], 0
jns 0x1c2c5f0
push dword [esp + 0x20]
call fcn.01c95155
add esp, 4
lea ecx, [esp + 0x30]
call fcn.01c823e0
mov eax, esi
mov edx, dword [esp + 4]
sub eax, edx
sar eax, 2
imul edi, eax, 0xaaaaaaab
lea ecx, [edi + 1]
cmp ecx, 0x15555556
jae 0x1c2c8e9
lea eax, [edi + edi]
cmp eax, ecx
cmova ecx, eax
cmp edi, 0xaaaaaaa
mov eax, 0x15555555
cmovb eax, ecx
test eax, eax
je 0x1c2c6a7
cmp eax, 0x15555556
jae 0x1c2c8ef
shl eax, 2
lea eax, [eax + eax*2]
push eax
call fcn.01c9515a
add esp, 4
mov edx, dword [esp + 4]
lea ecx, [edi + edi*2]
lea ebx, [eax + ecx*4]
cmp byte [esp + 0x13], 0
jns 0x1c2c6ab
mov ecx, ebx
push dword [esp + 0xc]
push dword [esp + 0xc]
call fcn.01c24b90
mov edx, dword [esp + 4]
mov edi, ebx
cmp esi, edx
je 0x1c2c6dc
pxor xmm0, xmm0
mov eax, esi
mov edi, ebx
mov ecx, dword [eax - 4]
mov dword [edi - 4], ecx
movsd xmm1, qword [eax - 0xc]
movsd qword [edi - 0xc], xmm1
movq qword [eax - 0xc], xmm0
mov dword [eax - 4], 0
add eax, 0xfffffff4
add edi, 0xfffffff4
cmp eax, edx
jne 0x1c2c67f
jmp 0x1c2c6d4
xor eax, eax
jmp 0x1c2c651
mov eax, dword [esp + 0x10]
mov dword [ebx + 8], eax
movq xmm0, qword [esp + 8]
movq qword [ebx], xmm0
jmp 0x1c2c671
push dword [esi - 0xc]
call fcn.01c95155
mov edx, dword [esp + 8]
add esp, 4
add esi, 0xfffffff4
cmp esi, edx
je 0x1c2c6dc
cmp byte [esi - 1], 0
js 0x1c2c6be
jmp 0x1c2c6cd
add ebx, 0xc
test edx, edx
je 0x1c2c6ec
push edx
call fcn.01c95155
add esp, 4
mov esi, ebx
cmp edi, esi
mov dword [esp + 4], edi
jne 0x1c2c714
mov bl, 1
jmp 0x1c2c76e
push dword [esp + 0x70]
call fcn.01c95155
add esp, 4
add edi, 0xc
cmp edi, esi
sete al
or al, bl
cmp al, 1
je 0x1c2c767
xor eax, eax
dec eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
lea ebx, [esp + 0x70]
mov ecx, ebx
mov edx, edi
call fcn.01c30540
mov ecx, ebx
push 0
lea eax, [esp + 0x18]
push eax
call fcn.01c36940
mov ebx, eax
cmp byte [esp + 0x7b], 0
js 0x1c2c6fa
jmp 0x1c2c706
push dword [esi - 0xc]
call fcn.01c95155
mov edi, dword [esp + 8]
add esp, 4
add esi, 0xfffffff4
cmp esi, edi
je 0x1c2c78d
cmp byte [esi - 1], 0
js 0x1c2c749
jmp 0x1c2c758
xor bl, 1
mov edi, dword [esp + 4]
cmp byte [esp + 0x13], 0
jns 0x1c2c785
push dword [esp + 8]
call fcn.01c95155
mov edi, dword [esp + 8]
add esp, 4
test edi, edi
je 0x1c2c796
cmp edi, esi
jne 0x1c2c75f
push edi
call fcn.01c95155
add esp, 4
cmp byte [esp + 0x1f], 0
jns 0x1c2c7a9
push dword [esp + 0x14]
call fcn.01c95155
add esp, 4
test bl, bl
je 0x1c2c7c7
xor ebx, ebx
mov ecx, dword [esp + 0xa8]
xor ecx, ebp
call fcn.01c98173
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
pcmpeqd xmm0, xmm0
lea esi, [esp + 0x70]
movdqa xmmword [esi], xmm0
push 0xc
call fcn.01c9515a
add esp, 4
lea edi, [esp + 0x30]
mov dword [edi], eax
lea ecx, [eax + 0xc]
mov dword [edi + 8], ecx
mov dword [eax], 0x440057
mov dword [eax + 4], 0
mov byte [eax + 0xb], 2
mov dword [edi + 4], ecx
push edi
push esi
call fcn.01c720f0
add esp, 8
mov esi, dword [edi]
test esi, esi
je 0x1c2c844
mov edi, dword [esp + 0x34]
mov eax, esi
cmp edi, esi
jne 0x1c2c82b
jmp 0x1c2c837
push dword [edi - 0xc]
call fcn.01c95155
add esp, 4
add edi, 0xfffffff4
cmp edi, esi
je 0x1c2c833
cmp byte [edi - 1], 0
jns 0x1c2c824
jmp 0x1c2c819
mov eax, dword [esp + 0x30]
mov dword [esp + 0x34], esi
push eax
call fcn.01c95155
add esp, 4
cmp byte [esp + 0x7c], 0
je 0x1c2c8ec
sub esp, 0x10
movdqa xmm0, xmmword [0x1ce45c0]
movdqu xmmword [esp], xmm0
lea esi, [esp + 0x80]
mov ecx, dword [ebp + 8]
mov edx, esi
call fcn.01c36230
add esp, 0x10
mov ebx, eax
cmp byte [esi + 0xc], 0
je 0x1c2c7af
mov esi, dword [esp + 0x70]
test esi, esi
je 0x1c2c7af
mov edi, dword [esp + 0x74]
mov eax, esi
cmp edi, esi
jne 0x1c2c8aa
jmp 0x1c2c8b7
mov dword [edi - 8], eax
push eax
call fcn.01c95155
add esp, 4
add edi, 0xfffffff4
cmp edi, esi
je 0x1c2c8b3
mov eax, dword [edi - 0xc]
test eax, eax
jne 0x1c2c897
jmp 0x1c2c8a3
mov eax, dword [esp + 0x70]
mov dword [esp + 0x74], esi
push eax
call fcn.01c95155
add esp, 4
jmp 0x1c2c7af
test al, al
cmovs eax, dword [esp + 0x24]
lea edx, [esp + 0x20]
cmovs edx, dword [esp + 0x20]
lea ecx, [esp + 8]
push eax
push edx
call fcn.01c27320
jmp 0x1c2c5dd
int3
int3
int3