Function at 0x100252c0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1012ce08
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x48
push ebx
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x24], esi
mov eax, dword [0x1016e0e4]
xor edi, edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.10123e32
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 3
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [ebp - 0x4e]
mov edx, dword [ebp - 0x52]
mov eax, dword [ebp - 0x54]
and ecx, 0xffff
and edx, 0xffff
push ecx
and eax, 0xffff
push edx
push eax
lea ecx, [ebp - 0x14]
push str._04d__02d__02d.txt
push ecx
call fcn.1011e032
add esp, 0x14
lea edx, [esi + 4]
lea eax, [ebp - 0x20]
push edx
push esi
push eax
call fcn.1011ff52
lea ecx, [ebp - 0x14]
lea edx, [ebp - 0x1c]
push ecx
mov bl, 4
push eax
push edx
mov byte [ebp - 4], bl
call fcn.1011ff52
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call fcn.1011fe5a
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], bl
call fcn.1011fd13
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 3
call fcn.1011fd13
mov eax, dword [esi + 0x10]
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [ebp - 0x30]
call fcn.10125458
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 7
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x100253af
mov dword [esi + 0xc], edi
jmp 0x100253b6
mov dword [esi + 0xc], 1
mov ecx, dword [ebp - 0x14]
push edi
push 0xb042
push ecx
lea ecx, [ebp - 0x40]
call fcn.10123f44
cmp eax, edi
jne 0x10025425
mov ecx, dword [esi + 0x10]
mov edx, dword [ecx]
call dword [edx + 0x14]
mov byte [ebp - 4], 3
call fcn.10125496
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.10123e87
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.1011fd13
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.1011fd13
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call fcn.1011fd13
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp - 0x40]
push 2
push edi
lea ecx, [ebp - 0x40]
call dword [eax + 0x28]
cmp dword [esi + 0xc], edi
jne 0x1002544b
lea ecx, [ebp - 0x20]
push 2
push ecx
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x20], 0xfeff
call fcn.1012409b
mov edx, dword [ebp - 0x46]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x4a]
and edx, 0xffff
push edx
mov edx, dword [ebp - 0x4c]
and eax, 0xffff
and ecx, 0xffff
push eax
and edx, 0xffff
push ecx
push edx
lea eax, [ebp - 0x18]
push str._02d:_02d:_02d__03d_t
push eax
call fcn.1011e032
add esp, 0x18
lea ecx, [ebp + 8]
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x1c]
push ecx
push edx
push eax
call fcn.1011ff52
push 0x1016b768
lea ecx, [ebp - 0x20]
mov bl, 8
push eax
push ecx
mov byte [ebp - 4], bl
call fcn.1011ffb8
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 9
call fcn.1011fe5a
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], bl
call fcn.1011fd13
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 7
call fcn.1011fd13
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 8]
lea edx, [ecx + ecx]
lea ecx, [ebp - 0x40]
push edx
push eax
call fcn.1012409b
mov dword [ebp - 4], 3
call fcn.10125496
lea ecx, [ebp - 0x40]
call fcn.1012415f
mov ecx, dword [esi + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x14]
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 2
call fcn.10123e87
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.1011fd13
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.1011fd13
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call fcn.1011fd13
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4