Function at 0x411170
Capabilities:
Contain obfuscated stackstrings
Get common file path
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x43cb1c
mov eax, dword fs:[0]
push eax
sub esp, 0x240
mov eax, dword [0x4c3740]
xor eax, esp
mov dword [esp + 0x238], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4c3740]
xor eax, esp
push eax
lea eax, [esp + 0x254]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x264]
xor ebx, ebx
push 0x1ff
lea eax, [esp + 0x51]
push ebx
push eax
mov byte [esp + 0x58], bl
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x200
lea ecx, [esp + 0x50]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea ecx, [esp + 0x20]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_void_]
lea edx, [esp + 0x4c]
push edx
lea ecx, [esp + 0x24]
mov dword [esp + 0x260], ebx
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char______thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::operator_char_const__]
cmp dword [esp + 0x34], ebx
lea ecx, [esp + 0x20]
jne 0x41121d
mov dword [esp + 0x25c], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
xor al, al
jmp 0x41130c
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x40], 0x5c
mov byte [esp + 0x41], 0x77
mov byte [esp + 0x42], 0x69
mov byte [esp + 0x43], 0x6e
mov byte [esp + 0x44], 0x73
mov byte [esp + 0x45], 0x65
mov byte [esp + 0x46], 0x76
mov byte [esp + 0x47], 0x72
mov byte [esp + 0x48], 0x2e
mov byte [esp + 0x49], 0x64
mov byte [esp + 0x4a], 0x61
mov byte [esp + 0x4b], 0x74
mov byte [esp + 0x4c], bl
call dword [0x43e254]
push ebx
push 1
sub esp, 0x1c
lea edx, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
lea ecx, [esp + 0x40]
call fcn.00415a00
cmp al, bl
je 0x4112d1
push 0x52
push ebp
mov dword [esp + 0x20], ebx
xor edi, edi
call dword [sym.imp.KERNEL32.dll_IsBadWritePtr]
test eax, eax
mov esi, dword [esp + 0x1c]
jne 0x4112c6
push ebx
push ebx
push ebx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x4112c6
push ebx
lea eax, [esp + 0x1c]
push eax
push 0x52
push ebp
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x4112ea
cmp esi, ebx
je 0x4112d1
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x20]
mov dword [esp + 0x25c], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
xor al, al
jmp 0x41130c
cmp esi, ebx
je 0x4112f5
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x20]
mov dword [esp + 0x25c], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov al, 1
mov ecx, dword [esp + 0x254]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x238]
xor ecx, esp
call fcn.00437634
add esp, 0x24c
ret 4