Function at 0x100db0b0
Capabilities:
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x210
mov eax, dword [0x102519c8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x10259518]
test al, 1
jne 0x100db0f0
or eax, 1
mov ecx, 0x10259514
push 0x10202940
mov dword [0x10259518], eax
call fcn.10002490
push 0x10200f30
call fcn.101c8090
add esp, 4
cmp dword [0x1025951c], 0
jne 0x100db44a
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x10258ea4
call edi
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x210]
push 0x10202940
call fcn.10002490
call fcn.10009c50
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
test eax, eax
je 0x100db20e
push 0x104
lea eax, [ebp - 0x20c]
push eax
push str._ProgramFiles___x86_Internet_Exploreriexplore.exe
call fcn.100da210
lea ecx, [ebp - 0x20c]
add esp, 0xc
lea edx, [ecx + 2]
jmp 0x100db170
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100db170
sub ecx, edx
lea eax, [ebp - 0x20c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x210]
call fcn.10003740
lea ecx, [ebp - 0x210]
call fcn.100032c0
lea eax, [ebp - 0x210]
push eax
call fcn.10092220
add esp, 4
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x100db1be
push esi
call edi
push 0xe
call fcn.10003680
add esp, 4
test eax, eax
je 0x100db1d7
lea ecx, [ebp - 0x20c]
push ecx
call eax
jmp 0x100db1e0
lea eax, [ebp - 0x20c]
push eax
call ebx
mov ebx, eax
test esi, esi
je 0x100db1ed
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp ebx, 0xffffffff
je 0x100db208
test bl, 0x10
jne 0x100db208
lea eax, [ebp - 0x210]
mov ecx, 0x10259514
push eax
call fcn.10002790
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov eax, dword [0x10259514]
cmp dword [eax - 0xc], 0
jne 0x100db414
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x104
lea eax, [ebp - 0x20c]
push eax
push str._ProgramFiles_Internet_Exploreriexplore.exe
call fcn.100da210
lea ecx, [ebp - 0x20c]
add esp, 0x18
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100db252
sub ecx, edx
lea eax, [ebp - 0x20c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x210]
call fcn.10003740
lea eax, [ebp - 0x210]
push eax
call fcn.10092220
add esp, 4
lea ecx, [ebp - 0x210]
call fcn.100032c0
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x100db2a0
push esi
call edi
push 0xe
call fcn.10003680
add esp, 4
test eax, eax
je 0x100db2b9
lea ecx, [ebp - 0x20c]
push ecx
call eax
jmp 0x100db2c2
lea eax, [ebp - 0x20c]
push eax
call ebx
mov ebx, eax
test esi, esi
je 0x100db2cf
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp ebx, 0xffffffff
je 0x100db2dd
test bl, 0x10
je 0x100db403
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x20019
push 0x208
lea eax, [ebp - 0x20c]
push eax
push 1
push str.ProgramFilesDir
push str.SOFTWAREMicrosoftWindowsCurrentVersion
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.10176900
add esp, 0x28
test eax, eax
je 0x100db414
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 2]
jmp 0x100db330
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100db330
sub ecx, edx
lea eax, [ebp - 0x20c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x210]
call fcn.10003740
push 0x10202944
lea ecx, [ebp - 0x210]
call fcn.100dea80
push 0x10202940
push 0x10209334
lea ecx, [ebp - 0x210]
call fcn.10003450
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call sub.msvcrt.dll_memset
push str.Internet_Exploreriexplore.exe
push dword [ebp - 0x210]
lea eax, [ebp - 0x20c]
push 0x102040c0
push 0x208
push eax
call fcn.100269c0
lea eax, [ebp - 0x20c]
push eax
call fcn.1000aa00
add esp, 0x24
test eax, eax
je 0x100db414
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100db3c7
sub ecx, edx
lea eax, [ebp - 0x20c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x210]
call fcn.10003740
lea ecx, [ebp - 0x210]
call fcn.100032c0
lea eax, [ebp - 0x210]
push eax
call fcn.10092220
add esp, 4
lea eax, [ebp - 0x210]
mov ecx, 0x10259514
push eax
call fcn.10002790
mov edx, dword [ebp - 0x210]
or eax, 0xffffffff
mov dword [0x1025951c], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
pop edi
pop esi
pop ebx
test eax, eax
jg 0x100db43f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x10258ea4
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 4]
mov eax, dword [0x10259514]
xor ecx, ebp
call fcn.101f99c6
mov esp, ebp
pop ebp
ret