Function at 0x41ebc0
Capabilities:
Check if file exists
Get file attributes
Set current directory

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
mov eax, 0x10074
call fcn.004a7170
push ebx
push esi
push edi
mov esi, ecx
mov edi, edx
xor ebx, ebx
mov byte [edi + 0x278], 1
mov word [edi + 0xae4], 0
cmp esi, ebx
jne 0x41ebf3
mov esi, dword [edi + 0xac8]
cmp dword [edi + 0xae0], ebx
jne 0x41ec38
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x41ec38
push esi
push str.Script_file_not_found:_n_s
mov esi, 0x8018
lea edi, [esp + 0x58]
call fcn.0047f1f0
fldz
fstp qword [esp]
mov eax, edi
push ebx
push ebx
push 0x10
push eax
call fcn.004840e0
add esp, 0x18
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp dword [0x4d95e8], ebx
jne 0x41ec4e
call fcn.0047c2a0
mov dword [0x4d95e8], eax
cmp eax, ebx
je 0x41ec9a
mov ecx, dword [0x4d95ec]
cmp dword [ecx + 8], 0x14
jae 0x41ec6c
call fcn.0047c2a0
mov ecx, dword [0x4d95ec]
mov dword [ecx + 0xc], eax
cmp eax, ebx
je 0x41ec9a
mov eax, dword [ecx + 4]
add dword [ecx + 8], 0xffffffec
lea edx, [eax + 0x14]
mov dword [0x4d95f0], eax
mov dword [ecx + 4], edx
cmp eax, ebx
je 0x41ec9a
mov dword [eax], vtable.Label.0
mov dword [eax + 4], 0x4af9bc
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
jmp 0x41ec9c
xor eax, eax
mov dword [edi + 0x638], eax
cmp eax, ebx
je 0x41eebf
cmp dword [edi + 0xae0], 2
mov eax, 0x4b6370
je 0x41ecba
mov eax, esi
mov ebx, dword [0x4d95cc]
push 0
push 0
push eax
lea eax, [esp + 0x54]
push eax
push edi
mov dword [esp + 0x5c], 0
call fcn.0041f060
mov esi, eax
cmp esi, 3
jne 0x41ecef
push ebx
mov ebx, dword [esp + 0x4c]
push ebx
push edi
call fcn.0041f450
mov esi, eax
jmp 0x41ecf3
mov ebx, dword [esp + 0x48]
test ebx, ebx
je 0x41ed01
mov edx, dword [ebx]
mov eax, dword [edx]
push 1
mov ecx, ebx
call eax
cmp esi, 1
jne 0x41eebf
push 0
push 0
push 0
push 0x68
push edi
call fcn.00425d20
test eax, eax
je 0x41eebf
mov ecx, dword [edi + 4]
mov dword [ecx + 0xc], esi
mov eax, dword [edi]
mov ebx, edi
call fcn.0042d700
test eax, eax
je 0x41eebf
mov eax, dword [edi]
mov esi, edi
call fcn.0042d7f0
cmp dword [edi + 8], 0
je 0x41ed5b
mov eax, dword [edi]
mov edx, dword [edi + 0xc]
mov dword [edx + 0x14], eax
mov ecx, dword [edi]
mov edx, dword [edi + 0xc]
mov dword [ecx + 0x10], edx
mov eax, dword [edi + 8]
mov dword [edi], eax
xor eax, eax
mov dword [esp + 0x48], eax
cmp dword [edi + 0x1c], eax
jle 0x41eda0
mov ecx, dword [edi + 0x18]
mov ebx, dword [ecx + eax*4]
cmp byte [ebx + 0x3d], 0
jne 0x41ed96
test byte [ebx + 0x3c], 4
jne 0x41ed96
mov eax, dword [ebx + 0x1c]
push ebx
lea esi, [ebx + 0x28]
push edi
call fcn.0043a8c0
mov eax, dword [ebx + 0x20]
push ebx
lea esi, [ebx + 0x30]
push edi
call fcn.0043a8c0
mov eax, dword [esp + 0x48]
inc eax
mov dword [esp + 0x48], eax
cmp eax, dword [edi + 0x1c]
jl 0x41ed66
cmp dword [edi + 0x264], 0
je 0x41edd0
mov ebx, edi
call fcn.0042ae20
test eax, eax
je 0x41eebf
mov eax, dword [edi + 0x264]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov dword [edi + 0x264], 0
cmp dword [0x4d87f0], 0
je 0x41eddf
push edi
call fcn.0043a970
mov ecx, dword [edi + 0xaec]
test ecx, ecx
je 0x41edfa
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x4d8eb0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push 0
push 0
push 0
push 0x68
mov esi, 1
add dword [edi + 0x274], esi
push edi
call fcn.00425d20
test eax, eax
je 0x41eebf
push 0
push 0
push 0
push 0x68
push edi
call fcn.00425d20
test eax, eax
je 0x41eebf
mov edx, dword [edi + 4]
mov eax, dword [edx + 0x10]
mov dword [eax + 0xc], esi
mov ecx, dword [edi + 4]
mov dword [ecx + 0xc], esi
mov edx, dword [edi + 0x638]
mov eax, dword [edi + 4]
push 0
push 0
mov dword [edx + 8], eax
mov ecx, dword [edi]
push 0
push ecx
mov ecx, edi
call fcn.0042d850
test eax, eax
je 0x41eebf
mov eax, dword [edi]
push edi
call fcn.0042dc70
test eax, eax
je 0x41eebf
push 3
push 0
push 0x4b6374
mov ecx, edi
call fcn.0042ccf0
mov dword [0x4d8ea8], eax
test eax, eax
je 0x41eebf
push esi
push 0
push 0xffffffffffffffff
push 0x4af9cc
push eax
call fcn.004824a0
lea edx, [esp + 0x48]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov eax, dword [esp + 0x48]
call fcn.00419af0
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov esp, ebp
pop ebp
ret