Function at 0x40e7d8
Capabilities:
Check if file exists
Get common file path
Get disk information
Get file attributes
Get file size

Disassembly:
mov eax, 0x42a428
call fcn.00414a8c
sub esp, 0x640
push ebx
xor ebx, ebx
cmp dword [ebp + 8], ebx
push esi
push edi
je 0x40ee0e
test byte [0x449888], 1
mov edi, 0x449858
jne 0x40e833
mov al, byte [ebp + 0xb]
or byte [0x449888], 1
mov byte [0x449858], al
mov al, byte [ebp + 0xb]
mov ecx, edi
mov byte [0x449859], al
mov byte [0x449860], bl
call fcn.00411083
push 0x40ee1f
call fcn.0041386b
pop ecx
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x28]
mov dword [0x449994], 0x449858
mov byte [ebp - 0x28], al
call fcn.00402110
push dword [ebp + 8]
call fcn.00414a10
pop ecx
push eax
lea ecx, [ebp - 0x28]
push dword [ebp + 8]
call fcn.00404540
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 4], ebx
call fcn.00410a11
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x28]
call fcn.00402110
mov esi, dword [ebp - 0x14]
cmp esi, dword [0x44985c]
je 0x40e8f2
test byte [esi + 0x58], 1
je 0x40e89d
inc dword [esi + 0x40]
push 1
pop eax
jmp 0x40ee10
mov eax, dword [esi + 0x38]
cmp eax, ebx
je 0x40e8a9
cmp eax, 0xffffffff
jne 0x40e8e4
call fcn.0040a1fd
push ebx
push ebx
test eax, eax
push 3
push ebx
je 0x40e8bb
push 3
jmp 0x40e8bd
push 7
push 0x80000000
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x10], eax
je 0x40e91c
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x38], eax
mov eax, dword [ebp - 0x14]
lea esi, [eax + 0x1c]
jmp 0x40e9a1
mov eax, dword [esi + 0x38]
add esi, 0x1c
mov dword [ebp - 0x10], eax
jmp 0x40e9a1
call fcn.0040a1fd
push ebx
push ebx
test eax, eax
push 3
push ebx
je 0x40e904
push 3
jmp 0x40e906
push 7
push 0x80000000
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x10], eax
jne 0x40e93d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 8]
push str.CreateFile__s__fails_with__d_n
push 0x4398a0
call fcn.004064e5
add esp, 0x10
jmp 0x40e895
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x28], al
call fcn.00402110
push dword [ebp + 8]
call fcn.00414a10
pop ecx
push eax
lea ecx, [ebp - 0x28]
push dword [ebp + 8]
call fcn.00404540
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
mov dword [ebp - 4], 1
call fcn.00410185
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.00402110
mov eax, dword [ebp - 0x10]
push dword [ebp + 8]
mov dword [esi + 0x3c], ebx
mov dword [esi + 0x1c], eax
call fcn.00414a10
pop ecx
push eax
lea ecx, [esi + 0x2c]
push dword [ebp + 8]
call fcn.00404540
mov eax, dword [esi + 0x3c]
cmp eax, ebx
jne 0x40ea2d
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
mov dword [esi + 0x3c], eax
je 0x40ea3a
push eax
push dword [ebp + 8]
push str._s_has_fa_x
push 0x20
push 0x4398a0
call fcn.004011e0
add esp, 0x14
test byte [esi + 0x3c], 1
jne 0x40ea3a
push 0x88
lea eax, [ebp - 0x1e8]
push ebx
push eax
call fcn.00415ae0
add esp, 0xc
lea eax, [ebp - 0x1e8]
mov byte [ebp - 0x1e8], 0x88
push 0x41
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_OpenFile]
cmp eax, 0xffffffff
je 0x40ea15
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
je 0x40ea27
cmp eax, 0x1779
jne 0x40ea3a
or dword [esi + 0x3c], 1
jmp 0x40ea3a
cmp eax, 0xffffffff
je 0x40ea3a
test al, 1
jne 0x40eb25
mov eax, dword [esi + 0x20]
cmp eax, 5
je 0x40eb25
cmp eax, ebx
jne 0x40ea71
push dword [ebp + 8]
lea eax, [ebp - 0x264]
push eax
call fcn.004159f0
pop ecx
lea eax, [ebp - 0x264]
pop ecx
mov byte [ebp - 0x261], bl
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
mov dword [esi + 0x20], eax
cmp byte [0x449890], bl
mov edi, 0x449890
jne 0x40ea8a
push 0x104
push edi
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
cmp dword [esi + 8], ebx
je 0x40eab4
cmp dword [esi + 0x1c], 0xffffffff
je 0x40eab4
cmp byte [0x449890], bl
je 0x40eab4
push edi
call fcn.00414a10
push eax
push dword [ebp + 8]
push edi
call fcn.00414648
add esp, 0x10
test eax, eax
jne 0x40eb25
lea eax, [ebp - 0x30]
push eax
push ebx
push ebx
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetFileTime]
push ebx
mov edi, eax
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp dword [0x449868], ebx
mov dword [ebp - 0x18], eax
jne 0x40eaea
push dword [ebp - 0x10]
or dword [esi + 0x1c], 0xffffffff
mov dword [esi + 0x24], ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, ebx
je 0x40ee0e
cmp dword [ebp - 0x18], 0xffffffff
je 0x40ee0e
mov eax, dword [ebp - 0x14]
cmp eax, dword [0x44985c]
je 0x40eb2d
lea ecx, [ebp - 0x30]
add eax, 0x1c
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
cmp eax, 0xffffffff
je 0x40eb2d
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [eax + 0x24]
jne 0x40eb2d
inc dword [esi + 0x24]
jmp 0x40e895
inc dword [esi + 0x28]
push 0x433f40
push dword [ebp + 8]
call fcn.004166b7
pop ecx
cmp eax, ebx
pop ecx
mov dword [ebp - 0x10], eax
jne 0x40eb69
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 8]
push str.Cannot__tfopen__s___last_error_d
push 0x20
push 0x4398a0
call fcn.004011e0
add esp, 0x14
jmp 0x40e895
mov dl, byte [0x439698]
mov ecx, 0xf9
xor eax, eax
lea edi, [ebp - 0x64b]
mov byte [ebp - 0x64c], dl
push 0x3e
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x15f]
mov byte [ebp - 0x160], dl
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov eax, dword [ebp - 0x18]
lea ecx, [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x30]
mov dword [esi], eax
mov eax, dword [ebp - 0x2c]
mov dword [esi + 4], eax
mov dword [ebp + 8], ecx
call fcn.00410646
push dword [ebp - 0x10]
lea eax, [ebp - 0x64c]
mov byte [ebp - 0x64c], bl
push 0x3e8
push eax
call fcn.004164be
lea eax, [ebp - 0x64c]
push 0x433f3c
push eax
call fcn.004142e7
add esp, 0x14
cmp eax, ebx
je 0x40edf5
push eax
call fcn.0040e769
mov esi, eax
pop ecx
cmp byte [esi], 0x5b
jne 0x40ec3c
mov edi, 0x433f38
push edi
push esi
call fcn.00415b38
pop ecx
cmp eax, esi
pop ecx
jbe 0x40ec3c
push edi
push esi
call fcn.00415b38
push esi
mov byte [eax], bl
call fcn.00413d6d
push eax
call fcn.0040e769
push 0xfa
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.00413cd3
add esp, 0x1c
jmp 0x40edf5
cmp byte [ebp - 0x160], bl
je 0x40edf5
mov edi, 0x433f44
push edi
push esi
call fcn.00415b38
pop ecx
test eax, eax
pop ecx
je 0x40edf5
cmp byte [esi], 0x3b
je 0x40edf5
push edi
push esi
call fcn.004142e7
push 0x432b90
push ebx
call fcn.004142e7
push esi
mov edi, eax
call fcn.0040e769
add esp, 0x14
cmp edi, ebx
mov esi, eax
je 0x40ecbe
push edi
call fcn.0040e769
mov edi, eax
pop ecx
cmp byte [edi], 0x22
jne 0x40ecba
push edi
call fcn.00414a10
cmp byte [eax + edi - 1], 0x22
pop ecx
jne 0x40ecba
push edi
call fcn.00413d6d
mov edi, eax
push edi
call fcn.00414a10
pop ecx
mov byte [eax + edi - 1], bl
pop ecx
cmp edi, ebx
jne 0x40ecc3
mov edi, 0x439698
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x60]
mov byte [ebp - 0x60], al
call fcn.00402110
push esi
call fcn.00414a10
pop ecx
push eax
push esi
lea ecx, [ebp - 0x60]
call fcn.00404540
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 2
mov byte [ebp - 0x28], al
call fcn.00402110
lea eax, [ebp - 0x160]
push eax
call fcn.00414a10
pop ecx
push eax
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x28]
call fcn.00404540
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 3
call fcn.00410111
mov ecx, eax
add ecx, 0xc
call fcn.004098d6
push edi
mov dword [ebp - 0x18], eax
call fcn.00414a10
pop ecx
mov ecx, dword [ebp - 0x18]
push eax
push edi
call fcn.00404540
push 1
lea ecx, [ebp - 0x28]
pop edi
mov byte [ebp - 4], 2
push edi
call fcn.00402110
or dword [ebp - 4], 0xffffffff
push edi
lea ecx, [ebp - 0x60]
call fcn.00402110
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x50]
mov byte [ebp - 0x50], al
call fcn.00402110
push esi
call fcn.00414a10
pop ecx
push eax
push esi
lea ecx, [ebp - 0x50]
call fcn.00404540
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 4
mov byte [ebp - 0x40], al
call fcn.00402110
lea eax, [ebp - 0x160]
push eax
call fcn.00414a10
pop ecx
push eax
lea eax, [ebp - 0x160]
lea ecx, [ebp - 0x40]
push eax
call fcn.00404540
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 5
call fcn.00410111
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x50]
push edx
push ecx
lea ecx, [ebp - 0x64]
push ecx
mov ecx, eax
call fcn.00404860
push edi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 4
call fcn.00402110
or dword [ebp - 4], 0xffffffff
push edi
lea ecx, [ebp - 0x50]
call fcn.00402110
mov eax, dword [ebp - 0x10]
test byte [eax + 0xc], 0x10
je 0x40ebb7
push eax
call fcn.00416609
pop ecx
jmp 0x40e895
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret