Function at 0x1004dfa
Capabilities:
Check if file exists
Get common file path
Get disk information
Get file attributes
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x104
push ebx
push esi
push edi
push 0
mov esi, 0x1001404
push 0
push esi
call fcn.01003fef
mov edi, eax
lea eax, [edi + 1]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ebx, eax
xor eax, eax
cmp ebx, eax
jne 0x1004e4c
push eax
push 0x10
push eax
push eax
push 0x4b5
push eax
call fcn.01003e44
call fcn.010058e9
mov dword [0x100b704], eax
xor eax, eax
jmp 0x10050c9
push edi
push ebx
push esi
call fcn.01003fef
test eax, eax
jne 0x1004e7b
push eax
push 0x10
push eax
push eax
push 0x4b1
push eax
call fcn.01003e44
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [0x100b704], 0x80070714
jmp 0x1004e45
push 0x10013e4
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
push 1
test eax, eax
pop edi
jne 0x1004e94
mov dword [0x100b6d0], edi
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov al, byte [0x100abbe]
test al, al
je 0x1004edf
cmp al, 0x5c
jne 0x1004eb6
cmp byte [0x100abbf], al
jne 0x1004eb6
xor esi, esi
xor eax, eax
jmp 0x1004eba
mov eax, edi
xor esi, esi
push eax
push esi
push 0x100abbe
call fcn.01004cfc
test eax, eax
jne 0x1004f31
push esi
push 0x10
push esi
push esi
push 0x4be
push esi
call fcn.01003e44
jmp 0x1004e45
xor esi, esi
cmp dword [0x100aaa4], esi
jne 0x10050a8
cmp dword [0x100b6d0], esi
jne 0x10050a8
mov esi, 0x100ae84
push esi
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x1004f38
push 3
push edi
push esi
call fcn.01004cfc
test eax, eax
jne 0x1004f31
push esi
call fcn.0100238a
test eax, eax
jne 0x1004f38
push edi
push edi
push esi
call fcn.01004cfc
test eax, eax
je 0x1004f38
mov eax, edi
jmp 0x10050c9
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x104]
push 0x10014e0
push eax
call edi
cmp byte [ebp - 0x104], 0x5a
jg 0x1005074
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
mov ebx, eax
cmp ebx, 6
je 0x1004f72
cmp ebx, 3
jne 0x1004f84
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x1004fb2
cmp ebx, 2
jne 0x1004fea
cmp byte [ebp - 0x104], 0x41
je 0x1004fea
cmp byte [ebp - 0x104], 0x42
je 0x1004fea
lea eax, [ebp - 0x104]
push eax
call fcn.01005ed3
test eax, eax
je 0x1004fea
cmp eax, 0x19000
jb 0x1004fea
xor ebx, ebx
lea eax, [ebp - 0x104]
push ebx
push 3
push eax
call fcn.0100516d
test eax, eax
jne 0x1004ff5
lea eax, [ebp - 0x104]
push eax
call fcn.0100238a
test eax, eax
jne 0x1004fea
push ebx
lea eax, [ebp - 0x104]
push 1
push eax
call fcn.0100516d
test eax, eax
jne 0x1004ff5
inc byte [ebp - 0x104]
jmp 0x1004f4c
lea eax, [ebp - 0x104]
push eax
call fcn.0100238a
test eax, eax
je 0x1005017
lea eax, [ebp - 0x104]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea eax, [ebp - 0x104]
push 0x10014d0
push eax
call fcn.01005c38
lea eax, [ebp - 0x104]
push eax
call fcn.01002367
test eax, eax
jne 0x1005049
inc byte [ebp - 0x104]
and byte [ebp - 0x101], al
jmp 0x1004f4c
lea eax, [ebp - 0x104]
push 2
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp - 0x104]
push eax
push esi
call edi
push ebx
push 1
push esi
call fcn.01004cfc
test eax, eax
jne 0x10050a3
jmp 0x1004f4c
lea eax, [ebp - 0x104]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push 4
lea eax, [ebp - 0x104]
push 3
push eax
call fcn.0100516d
test eax, eax
je 0x1004e45
jmp 0x1004f3e
push 1
pop eax
jmp 0x10050c9
push esi
push esi
push 0x1002dfb
push esi
push 0x7d2
push dword [0x100b6dc]
call fcn.01005b16
xor ecx, ecx
cmp eax, esi
setne cl
mov eax, ecx
pop edi
pop esi
pop ebx
leave
ret