Function at 0xf019682
Capabilities:
Get common file path
Read file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x1018
call fcn.0f01c300
mov eax, dword [0xf062038]
push ebx
xor ebx, ebx
cmp word [ebp + 0x10], 0x10
push esi
mov dword [ebp - 4], eax
push edi
mov dword [ebp - 0x1018], ebx
ja 0xf0199fc
cmp word [ebp + 0xc], 8
jne 0xf0199fc
mov esi, 0x1000
push esi
lea eax, [ebp - 0x1004]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
cmp eax, ebx
je 0xf0199fc
lea ecx, [eax + 9]
cmp ecx, esi
ja 0xf0199fc
push 9
lea eax, [ebp + eax - 0x1004]
push 0xf002410
push eax
call fcn.0f01cfc0
add esp, 0xc
push ebx
push ebx
push 3
push ebx
push 1
push 0x80000000
lea eax, [ebp - 0x1004]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
mov dword [ebp - 0x1008], esi
je 0xf0199fc
push ebx
lea eax, [ebp - 0x1010]
push eax
push 0x17
lea eax, [ebp - 0x1004]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0xf0199f5
cmp dword [ebp - 0x1010], 0x17
jne 0xf0199f5
push 2
pop ecx
mov edi, 0xf002404
lea esi, [ebp - 0x1004]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
je 0xf019784
push 2
pop ecx
mov edi, 0xf0023f8
lea esi, [ebp - 0x1004]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0xf0199ed
mov dword [ebp - 0x1018], 1
mov eax, dword [ebp - 0xff1]
mov esi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
push ebx
push ebx
push eax
push dword [ebp - 0x1008]
mov dword [ebp - 0x100c], eax
call esi
cmp eax, 0xffffffff
je 0xf0199ed
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
lea eax, [ebp - 0x1010]
push eax
push 2
lea eax, [ebp - 0x1004]
push eax
push dword [ebp - 0x1008]
call edi
test eax, eax
je 0xf0199ed
cmp dword [ebp - 0x1010], 2
jne 0xf0199ed
movzx eax, word [ebp - 0x1004]
add dword [ebp - 0x100c], 2
cmp eax, ebx
mov dword [ebp - 0x1014], eax
jbe 0xf01986e
push ebx
lea eax, [ebp - 0x1010]
push eax
push 0x1c
lea eax, [ebp - 0x1004]
push eax
push dword [ebp - 0x1008]
call edi
test eax, eax
je 0xf01986e
cmp dword [ebp - 0x1010], 0x1c
jne 0xf01986e
movzx eax, word [ebp - 0xff4]
cmp eax, dword [ebp + 8]
je 0xf01986e
cmp dword [ebp - 0x1014], 1
jbe 0xf019866
cmp dword [ebp - 0x1018], ebx
mov eax, dword [ebp - 0x1002]
jne 0xf019847
add dword [ebp - 0x100c], eax
jmp 0xf01984d
mov dword [ebp - 0x100c], eax
push ebx
push ebx
push dword [ebp - 0x100c]
push dword [ebp - 0x1008]
call esi
cmp eax, 0xffffffff
je 0xf0199ed
dec dword [ebp - 0x1014]
jne 0xf0197f6
cmp dword [ebp - 0x1014], ebx
je 0xf0199ed
cmp dword [ebp - 0x1018], ebx
mov eax, dword [ebp - 0xfec]
jne 0xf019890
add dword [ebp - 0x100c], eax
jmp 0xf019896
mov dword [ebp - 0x100c], eax
push ebx
push ebx
push dword [ebp - 0x100c]
push dword [ebp - 0x1008]
call esi
cmp eax, 0xffffffff
je 0xf0199ed
push ebx
lea eax, [ebp - 0x1010]
push eax
push 6
lea eax, [ebp - 0x1004]
push eax
push dword [ebp - 0x1008]
call edi
test eax, eax
je 0xf0199ed
cmp dword [ebp - 0x1010], 6
jne 0xf0199ed
movzx eax, word [ebp - 0x1002]
cmp eax, ebx
mov dword [ebp - 0x1014], eax
je 0xf0199fc
push ebx
lea eax, [ebp - 0x1010]
push eax
push 6
lea eax, [ebp - 0x1004]
push eax
push dword [ebp - 0x1008]
call edi
test eax, eax
je 0xf0199a2
cmp dword [ebp - 0x1010], 6
jne 0xf0199a2
movzx ax, byte [ebp - 0x1004]
cmp ax, word [ebp + 0x10]
jne 0xf019937
cmp byte [ebp - 0x1003], 8
je 0xf01996a
movzx eax, word [ebp - 0x1000]
movzx ecx, byte [ebp - 0x1004]
imul eax, ecx
push 1
push ebx
push eax
push dword [ebp - 0x1008]
call esi
cmp eax, 0xffffffff
je 0xf0199ed
dec dword [ebp - 0x1014]
jne 0xf0198f2
jmp 0xf0199fc
movzx eax, word [ebp - 0x1000]
movzx esi, word [ebp + 0x10]
imul esi, eax
push ebx
mov dword [ebp - 0x100c], eax
lea eax, [ebp - 0x1010]
push eax
push esi
lea eax, [ebp - 0x1004]
push eax
push dword [ebp - 0x1008]
call edi
test eax, eax
je 0xf0199ed
cmp dword [ebp - 0x1010], esi
jne 0xf0199ed
cmp dword [ebp - 0x1014], ebx
je 0xf0199fc
cmp dword [ebp - 0x100c], ebx
mov dword [ebp - 0x1018], 0xa0000
lea edi, [ebp - 0x1004]
jbe 0xf0199e8
movzx esi, word [ebp + 0x10]
mov ebx, dword [ebp - 0x100c]
push esi
push edi
push dword [ebp - 0x1018]
call fcn.0f01cfc0
add dword [ebp - 0x1018], 0x20
add esp, 0xc
add edi, esi
dec ebx
jne 0xf0199cc
xor eax, eax
inc eax
jmp 0xf0199fe
push dword [ebp - 0x1008]
jmp 0xf0199f6
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.0f01b9b9
leave
ret 0xc