Function at 0x428140
Capabilities:
Check if file exists
Get disk information

Disassembly:
push 0xffffffffffffffff
push 0x4585f0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
mov ebx, dword [esp + 0x30]
push ebp
push esi
mov esi, dword [ebx]
push edi
mov dword [esp + 0x10], ecx
mov edx, dword [esi - 8]
test edx, edx
je 0x428556
cmp edx, 0x80
jg 0x428556
mov di, word [esi + 2]
cmp di, 0x3a
jne 0x428192
cmp word [esi + 4], 0x5c
jne 0x428556
xor ecx, ecx
test edx, edx
jle 0x4281f8
mov ax, word [esi + ecx*2]
cmp ax, 0x3a
jne 0x4281ad
cmp ecx, 1
jne 0x428556
jmp 0x4281f3
cmp ax, 0x2a
je 0x428556
cmp ax, 0x3f
je 0x428556
cmp ax, 0x22
je 0x428556
cmp ax, 0x3c
je 0x428556
cmp ax, 0x3e
je 0x428556
cmp ax, 0x7c
je 0x428556
cmp ax, 0x2f
je 0x428556
inc ecx
cmp ecx, edx
jl 0x428198
cmp edx, 4
jge 0x428210
cmp edx, 1
jle 0x428556
cmp di, 0x3a
jne 0x428556
cmp edx, 2
jl 0x42821f
cmp di, 0x3a
jne 0x428556
cmp edx, 1
jle 0x428253
mov eax, dword [0x463544]
mov ecx, dword [0x463548]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov ax, word [esi]
lea edx, [esp + 0x18]
push edx
mov word [esp + 0x1c], ax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
jne 0x428556
mov al, byte [esp + 0x3c]
push 0xc
mov byte [esp + 0x24], al
call fcn.00442bba
mov dword [eax], eax
mov dword [eax + 4], eax
add esp, 4
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 0
mov eax, dword [ebx]
mov dword [esp + 0x34], 0
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x428412
mov eax, dword [ebx]
push ecx
mov dword [esp + 0x18], esp
mov esi, esp
mov ecx, dword [eax - 0xc]
test ecx, ecx
jl 0x4282ad
mov dword [esi], eax
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
jmp 0x4282fa
mov ecx, dword [0x463058]
mov dword [esi], ecx
mov ebp, dword [ebx]
test ebp, ebp
jne 0x4282bf
xor edi, edi
jmp 0x4282c8
push ebp
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
push edi
mov ecx, esi
call fcn.00407470
test eax, eax
je 0x4282fa
mov eax, dword [esi]
lea ebx, [edi + edi]
push ebx
lea edx, [edi + edi + 2]
push ebp
push edx
push eax
call fcn.00402e50
mov ecx, dword [esi]
add esp, 0x10
mov dword [ecx - 8], edi
mov edx, dword [esi]
mov word [edx + ebx], 0
mov ebx, dword [esp + 0x40]
lea ecx, [esp + 0x24]
call fcn.00405610
test eax, eax
je 0x4284b4
cmp eax, 0x50
je 0x428412
cmp eax, 0xb7
je 0x428412
cmp eax, 5
jne 0x42839b
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 1
mov dword [esp + 0x40], eax
call fcn.00406520
lea edx, [esp + 0x3c]
push eax
push edx
call fcn.00407980
add esp, 8
test al, al
jne 0x428545
mov eax, dword [esp + 0x3c]
mov eax, dword [eax + 4]
mov eax, dword [eax + 8]
push eax
call fcn.00407f00
mov ecx, dword [esp + 0x40]
add esp, 4
lea eax, [esp + 0x10]
mov edx, dword [ecx + 4]
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x40], edx
call fcn.00406520
lea ecx, [esp + 0x3c]
push eax
push ecx
call fcn.00407980
add esp, 8
test al, al
je 0x428358
jmp 0x428545
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 2
mov dword [esp + 0x40], edx
call fcn.00406520
lea ecx, [esp + 0x3c]
push eax
push ecx
call fcn.00407980
add esp, 8
test al, al
jne 0x428545
mov edx, dword [esp + 0x3c]
mov eax, dword [edx + 4]
mov eax, dword [eax + 8]
push eax
call fcn.00407f00
mov eax, dword [esp + 0x40]
add esp, 4
lea edx, [esp + 0x10]
mov ecx, dword [eax + 4]
push edx
mov dword [esp + 0x40], ecx
lea ecx, [esp + 0x24]
call fcn.00406520
push eax
lea eax, [esp + 0x40]
push eax
call fcn.00407980
add esp, 8
test al, al
je 0x4283cf
jmp 0x428545
mov ecx, dword [esp + 0x10]
push ebx
call fcn.00428610
test eax, eax
jne 0x4284b4
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0x14]
mov dword [esp + 0x3c], ecx
push edx
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 3
call fcn.00406ab0
mov eax, dword [eax]
lea ecx, [esp + 0x3c]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x10]
push eax
push ecx
call fcn.00407980
add esp, 8
test al, al
jne 0x428545
mov edx, dword [esp + 0x3c]
mov eax, dword [edx + 4]
mov eax, dword [eax + 8]
push eax
call fcn.00407f00
add esp, 4
lea eax, [esp + 0x18]
lea ecx, [esp + 0x3c]
push 0
push eax
call fcn.00406530
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x24]
call fcn.00406ab0
mov eax, dword [eax]
lea edx, [esp + 0x10]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x3c]
push edx
push eax
call fcn.00407980
add esp, 8
test al, al
je 0x428462
jmp 0x428545
mov eax, dword [0x469cb8]
mov ecx, dword [ebx]
shl eax, 0x14
cdq
push edx
push eax
push ecx
call fcn.0042a2a0
add esp, 0xc
test eax, eax
jne 0x42855d
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0x14]
mov dword [esp + 0x3c], ecx
push edx
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 4
call fcn.00406520
push eax
lea eax, [esp + 0x40]
push eax
call fcn.00407980
add esp, 8
test al, al
jne 0x428545
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx + 4]
mov eax, dword [eax + 8]
push eax
call fcn.00407f00
add esp, 4
lea edx, [esp + 0x18]
lea ecx, [esp + 0x3c]
push 0
push edx
call fcn.00406530
lea eax, [esp + 0x14]
lea ecx, [esp + 0x20]
push eax
call fcn.00406520
lea ecx, [esp + 0x3c]
push eax
push ecx
call fcn.00407980
add esp, 8
test al, al
je 0x428502
lea ecx, [esp + 0x20]
mov dword [esp + 0x34], 0xffffffff
call fcn.004064b0
xor eax, eax
jmp 0x4285ec
lea edx, [esp + 0x3c]
lea ecx, [esp + 0x20]
push edx
mov dword [esp + 0x38], 5
call fcn.00406510
lea eax, [esp + 0x14]
lea ecx, [esp + 0x20]
push eax
call fcn.00406520
lea ecx, [esp + 0x3c]
push eax
push ecx
call fcn.00407980
add esp, 8
test al, al
jne 0x4285d6
mov edx, dword [esp + 0x3c]
mov eax, dword [edx + 4]
mov eax, dword [eax + 8]
push eax
call fcn.00407f00
add esp, 4
lea eax, [esp + 0x18]
lea ecx, [esp + 0x3c]
push 0
push eax
call fcn.00406530
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x24]
call fcn.00406520
lea edx, [esp + 0x3c]
push eax
push edx
call fcn.00407980
add esp, 8
test al, al
je 0x428593
lea ecx, [esp + 0x20]
mov dword [esp + 0x34], 0xffffffff
call fcn.004064b0
mov eax, 1
mov ecx, dword [esp + 0x2c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x28
ret 4