Function at 0x100bfdb2
Capabilities:
Check if file exists

Disassembly:
test byte [0x100bfdaf], 0x70
jne 0x100bfdb0
cmp dword [eax], ebx
mov ecx, esp
arpl word [edi - 0x7e], si
sbb al, 0xcc
or ch, dl
cmp al, 0xc0
sub eax, 0x618cc37f
shr byte [esi + 0x4c], 1
outsb dx, byte [esi]
jecxz 0x100bfde7
push 0xb
jge 0x100bfdc7
salc
sbb al, 0x49
popfd
ret
push ebp
mov ebp, esp
in al, dx
sub esp, 0x38
pushfd
test byte [0x100bfddb], 0x3d
jne 0x100bfddc
out 0x6e, al
stc
xchg edx, eax
movsd dword es:[edi], dword [esi]
mov byte [edi + 0x13f03256], ch
int 0x7a
dec ebp
mov ecx, 0xbf444601
push ss
lahf
xchg dword [ebx], edx
int1
jno 0x100bfdb4
popfd
mov eax, dword [0x10170c30]
xor eax, ebp
pushfd
test byte [0x100bfe43], 0x2f
inc ebx
dec byte [ebx]
adc byte [edi], ch
jne 0x100bfe44
insd dword es:[edi], dx
push ds
lahf
adc dword [ebx], edi
push 0xc1e9cb9a
sbb dl, dl
and byte [eax], ch
add ah, ch
ja 0x100bfd88
aam 0xe7
jno 0x100bfdee
mov esp, 0x95068553
mov ch, 0xf0
sahf
add eax, 0x7339fb8d
mov cl, byte [ecx + ecx*8 + 0x5d]
dec esp
leave
pop ebp
jo 0x100bfe12
shr dword [ecx + 0xb], 1
pop ds
adc eax, 0xe9358b53
push ebp
popal
fsubr dword [ebx - 0x24]
mov edx, 0xbf5a365c
adc ch, byte [ecx - 0xd65db66]
fmul dword [edx + 0x45]
lcall 0x454a, 0xd8f29a24
adc al, 0x32
add byte [esi - 0x697d075a], bh
sbb byte [0xefa0712d], 0xaa
rcr ebx, 1
popfd
mov dword [ebp - 4], eax
cmp dword [0x10172220], 0
pushfd
test byte [0x100bff45], 0xc0
jne 0x100bff46
add byte [eax], al
add byte [edx + 0x5f], cl
dec edx
pop edi
dec ecx
aam 0x34
sub dword [0x4da7a53], ebp
jbe 0x100bfdec
xchg ebx, eax
shr byte [eax + 0x3b85d806], cl
mov ds, word [ecx - 0x49]
test dword [edx - 0x4d71a162], eax
jl 0x100bfe2c
push esp
add al, 0xef
loop 0x100bfe5e
inc ecx
add ebp, ebp
pop edx
inc edi
out dx, eax
sub edx, dword [edi]
push ds
loopne 0x100bfebb
cli
dec ebx
das
fchs
int 0x6c
cmp bl, bh
test dword [eax], 0x56c362ef
mov dl, 0x1a
cmpsb byte [esi], byte es:[edi]
add dword [esp + ecx*2 - 0x6e93898e], eax
sbb bl, dl
fcmove st(0), st(5)
inc ebp
int 0x26
inc ebp
aas
lodsd eax, dword [esi]
sbb byte [ebp - 0x640a1547], dl
inc edi
or dh, ah
ficomp dword [ebx]
popal
loop 0x100bfea7
jmp 0x100bfe5a
popfd
mov ebp, 0x38ff81a
adc dword [ebx], 0xffffffb1
or byte [ebp - 0x14], bl
push ds
into
xor al, 0x13
mov dl, 0x43
fdivr qword [ebp - 0x44bb0343]
fcom dword [edx + 0x722898a2]
sbb al, 0xa5
clc
je 0x100bfea8
and eax, 0xc9532fee
xchg edi, eax
mov edi, 0x524d30fd
mov ah, 0x85
xchg ebx, eax
and ch, 0x15
cli
push es
mov al, byte [0x4a0edf22]
cmp byte [ecx - 0x482e54a2], ch
push 0xfffffffffffffffc
nop
push cs
mov dh, 0x7e
test dword [edi*8 + 0x7cc69544], esi
inc ecx
out 0x3e, eax
in al, 0x36
jle 0x100bff53
jecxz 0x100bfead
fprem
adc eax, 0x40267e8d
xor esp, dword [edx - 6]
cdq
adc ecx, esp
salc
adc al, 0xde
adc al, 0xf3
mov ch, byte [ebx + 0x46ae08cd]
pop ebx
push esp
daa
xchg dword [ebx - 0x4cc48309], ebx
test al, 0xd
or byte [esi + ebp*2 + 0x1dd84999], bl
mov esp, 0x8dc20aed
dec ecx
je 0x100bfece
cdq
dec ecx
fcomp dword [0xc20aedbc]
lea ecx, [ecx + 0x74]
mov byte [ebp - 0x3fccf882], bl
popfd
jle 0x100bff50
xor eax, eax
jmp 0x100c00da
lea eax, [ebp - 0x38]
push str.wuauserv_mux
push eax
call fcn.1011f120
pop ecx
pop ecx
lea eax, [ebp - 0x38]
push eax
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenEventA]
pushfd
test byte [0x100bffb8], 0x52
jne 0x100c00b9
sub ah, byte [edx - 0x75]
neg esp
lodsd eax, dword [esi]
pop ss
loop 0x100bffc6
cmpsd dword [esi], dword es:[edi]
push eax
pop ecx
outsd dx, dword [esi]
xchg ecx, eax
inc ebp
stosb byte es:[edi], al
push eax
fisttp word [esp + esi*8 + 0x78]
sahf
push ss
mov al, byte [0x8939b534]
je 0x100bff3a
clc
loopne 0x100c0014
cmp byte [edi], bh
call 0xdfd994f7
add ebx, dword [edi + 0x1fc7a43d]
test dword [esp - 0x92192b9], 0xf98258e6
inc esi
xor dword [edx + ebp + 0x5a], 0xffffff9c
pop ecx
sbb ebp, dword [eax - 0x53]
out 0xad, al
sub al, 0x65
add eax, dword [ecx - 0x533c3cf5]
add eax, dword gs:[ecx - 0x533c3cf5]
cwde
inc edx
push esi
mul dword [edi + 0x6e7059e0]
and ecx, dword [edx]
aas
xor esi, 0x1fb804
scasd eax, dword es:[edi]
rol dword [edi - 0x5cd03dae], 0x76
pop ebx
insd dword es:[edi], dx
dec esi
pop esp
xchg ecx, eax
push ebp
rcr byte [eax + 0x4ec5f69], 1
add dword [0xbc27e2b], edi
mov eax, dword [0x49a2ceca]
cmp al, 0x49
daa
inc ecx
invalid
div dword [eax + ecx*4 - 0x6a3b05d7]
cli
imul ecx, dword [esi + 0xf], 0x75
imul eax, dword [esi - 0x55d4417f], 0xffffffa4
sub dword [edx], 0x2ff89aa9
xchg dword [edi + ebp*4 + 0x5183cc0], esp
and al, 0xb7
xchg esp, eax
mov ch, cl
mov dh, 0x7f
mov eax, dword [0xeac1a48d]
jl 0x100c00a3
insb byte es:[edi], dx
arpl word [eax], si
mov al, 0x25
lea edi, [edi]
dec ebp
call 0x5ff39ed4
out 0x6f, al
dec edx
dec edx
pop edi
inc ebx
in al, 0xb7
jbe 0x100c0042
dec esi
sub eax, 0xa7f43ac6
enter 0x269d, 0xffffffffffffffb7
jle 0x100c00bb
jecxz 0x100c007c
out 0x58, al
mov esp, 0xb1aa4250
rol byte [edi], cl
test byte [ecx - 0x52], 0xba
dec edi
and dl, cl
scasd eax, dword es:[edi]
xor bl, byte [ebp - 0x76705817]
jne 0x100c00da
jmp 0x85959028
sub al, 0x9d
dec ebp
stosd dword es:[edi], eax
mov eax, dword [0xd0f657a2]
and al, bl
mov cl, 0xda
fdivr dword [eax + 0x60]
or eax, 0xf1e3949e
pop esp
mov edi, 0x4e8096e6
sub eax, dword [edx]
shl byte [ebx - 0x34e75756], 0x59
sbb bl, cl
pop ecx
xlatb
or dword [eax + 0x56], ebx
or eax, 0xba139b8
test byte [ebp - 4], 0x35
call dword [ebx - 0x32aa4ce7]
popfd
test eax, eax
jne 0x100c00d0
sal byte [ebp + 0x12], 0xff
adc eax, sym.imp.KERNEL32.dll_GetLastError
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor ecx, ecx
cmp eax, 2
setne cl
mov eax, ecx
jmp 0x100c00da
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1011e48a
leave
ret