Function at 0x41ec2d
Capabilities:
Check if file exists
Get common file path
Get disk information
Get file attributes
Get file size

Disassembly:
mov eax, 0x452954
call fcn.00432d7c
sub esp, 0x640
push ebx
xor ebx, ebx
cmp dword [ebp + 8], ebx
push esi
push edi
je 0x41f263
test byte [0x482198], 1
mov edi, 0x482168
jne 0x41ec88
mov al, byte [ebp + 0xb]
or byte [0x482198], 1
mov byte [0x482168], al
mov al, byte [ebp + 0xb]
mov ecx, edi
mov byte [0x482169], al
mov byte [0x482170], bl
call fcn.0042195c
push 0x41f274
call fcn.00430cad
pop ecx
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x28]
mov dword [0x4822a4], 0x482168
mov byte [ebp - 0x28], al
call fcn.004017f0
push dword [ebp + 8]
call fcn.00432d00
pop ecx
push eax
lea ecx, [ebp - 0x28]
push dword [ebp + 8]
call fcn.00405170
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 4], ebx
call fcn.004212ea
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x28]
call fcn.004017f0
mov esi, dword [ebp - 0x14]
cmp esi, dword [0x48216c]
je 0x41ed47
test byte [esi + 0x58], 1
je 0x41ecf2
inc dword [esi + 0x40]
push 1
pop eax
jmp 0x41f265
mov eax, dword [esi + 0x38]
cmp eax, ebx
je 0x41ecfe
cmp eax, 0xffffffff
jne 0x41ed39
call fcn.004166db
push ebx
push ebx
test eax, eax
push 3
push ebx
je 0x41ed10
push 3
jmp 0x41ed12
push 7
push SysReAllocStringLen
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x10], eax
je 0x41ed71
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x38], eax
mov eax, dword [ebp - 0x14]
lea esi, [eax + 0x1c]
jmp 0x41edf6
mov eax, dword [esi + 0x38]
add esi, 0x1c
mov dword [ebp - 0x10], eax
jmp 0x41edf6
call fcn.004166db
push ebx
push ebx
test eax, eax
push 3
push ebx
je 0x41ed59
push 3
jmp 0x41ed5b
push 7
push SysReAllocStringLen
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x10], eax
jne 0x41ed92
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 8]
push str.CreateFile__s__fails_with__d_n
push 0x471d20
call fcn.00415dff
add esp, 0x10
jmp 0x41ecea
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x28], al
call fcn.004017f0
push dword [ebp + 8]
call fcn.00432d00
pop ecx
push eax
lea ecx, [ebp - 0x28]
push dword [ebp + 8]
call fcn.00405170
lea eax, [ebp - 0x28]
mov ecx, edi
push eax
mov dword [ebp - 4], 1
call fcn.00420a0d
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.004017f0
mov eax, dword [ebp - 0x10]
push dword [ebp + 8]
mov dword [esi + 0x3c], ebx
mov dword [esi + 0x1c], eax
call fcn.00432d00
pop ecx
push eax
lea ecx, [esi + 0x2c]
push dword [ebp + 8]
call fcn.00405170
mov eax, dword [esi + 0x3c]
cmp eax, ebx
jne 0x41ee82
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
mov dword [esi + 0x3c], eax
je 0x41ee8f
push eax
push dword [ebp + 8]
push str._s_has_fa_x
push 0x20
push 0x471d20
call fcn.00401200
add esp, 0x14
test byte [esi + 0x3c], 1
jne 0x41ee8f
push 0x88
lea eax, [ebp - 0x1e8]
push ebx
push eax
call fcn.00433dd0
add esp, 0xc
lea eax, [ebp - 0x1e8]
mov byte [ebp - 0x1e8], 0x88
push 0x41
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_OpenFile]
cmp eax, 0xffffffff
je 0x41ee6a
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 5
je 0x41ee7c
cmp eax, 0x1779
jne 0x41ee8f
or dword [esi + 0x3c], 1
jmp 0x41ee8f
cmp eax, 0xffffffff
je 0x41ee8f
test al, 1
jne 0x41ef7a
mov eax, dword [esi + 0x20]
cmp eax, 5
je 0x41ef7a
cmp eax, ebx
jne 0x41eec6
push dword [ebp + 8]
lea eax, [ebp - 0x264]
push eax
call fcn.00433ce0
pop ecx
lea eax, [ebp - 0x264]
pop ecx
mov byte [ebp - 0x261], bl
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
mov dword [esi + 0x20], eax
cmp byte [0x4821a0], bl
mov edi, 0x4821a0
jne 0x41eedf
push 0x104
push edi
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
cmp dword [esi + 8], ebx
je 0x41ef09
cmp dword [esi + 0x1c], 0xffffffff
je 0x41ef09
cmp byte [0x4821a0], bl
je 0x41ef09
push edi
call fcn.00432d00
push eax
push dword [ebp + 8]
push edi
call fcn.00431ac8
add esp, 0x10
test eax, eax
jne 0x41ef7a
lea eax, [ebp - 0x30]
push eax
push ebx
push ebx
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetFileTime]
push ebx
mov edi, eax
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp dword [0x482178], ebx
mov dword [ebp - 0x18], eax
jne 0x41ef3f
push dword [ebp - 0x10]
or dword [esi + 0x1c], 0xffffffff
mov dword [esi + 0x24], ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, ebx
je 0x41f263
cmp dword [ebp - 0x18], 0xffffffff
je 0x41f263
mov eax, dword [ebp - 0x14]
cmp eax, dword [0x48216c]
je 0x41ef82
lea ecx, [ebp - 0x30]
add eax, 0x1c
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
cmp eax, 0xffffffff
je 0x41ef82
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [eax + 0x24]
jne 0x41ef82
inc dword [esi + 0x24]
jmp 0x41ecea
inc dword [esi + 0x28]
push 0x46a580
push dword [ebp + 8]
call fcn.004343be
pop ecx
cmp eax, ebx
pop ecx
mov dword [ebp - 0x10], eax
jne 0x41efbe
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp + 8]
push str.Cannot__tfopen__s___last_error_d
push 0x20
push 0x471d20
call fcn.00401200
add esp, 0x14
jmp 0x41ecea
mov dl, byte [0x471b14]
mov ecx, 0xf9
xor eax, eax
lea edi, [ebp - 0x64b]
mov byte [ebp - 0x64c], dl
push 0x3e
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x15f]
mov byte [ebp - 0x160], dl
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov eax, dword [ebp - 0x18]
lea ecx, [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x30]
mov dword [esi], eax
mov eax, dword [ebp - 0x2c]
mov dword [esi + 4], eax
mov dword [ebp + 8], ecx
call fcn.00420ece
push dword [ebp - 0x10]
lea eax, [ebp - 0x64c]
mov byte [ebp - 0x64c], bl
push 0x3e8
push eax
call fcn.004342dd
lea eax, [ebp - 0x64c]
push 0x46a574
push eax
call fcn.00431767
add esp, 0x14
cmp eax, ebx
je 0x41f24a
push eax
call fcn.0041e4ed
mov esi, eax
pop ecx
cmp byte [esi], 0x5b
jne 0x41f091
mov edi, 0x46a570
push edi
push esi
call fcn.00432085
pop ecx
cmp eax, esi
pop ecx
jbe 0x41f091
push edi
push esi
call fcn.00432085
push esi
mov byte [eax], bl
call fcn.00431247
push eax
call fcn.0041e4ed
push 0xfa
push eax
lea eax, [ebp - 0x160]
push eax
call fcn.004311ad
add esp, 0x1c
jmp 0x41f24a
cmp byte [ebp - 0x160], bl
je 0x41f24a
mov edi, 0x466ed4
push edi
push esi
call fcn.00432085
pop ecx
test eax, eax
pop ecx
je 0x41f24a
cmp byte [esi], 0x3b
je 0x41f24a
push edi
push esi
call fcn.00431767
push 0x4689a8
push ebx
call fcn.00431767
push esi
mov edi, eax
call fcn.0041e4ed
add esp, 0x14
cmp edi, ebx
mov esi, eax
je 0x41f113
push edi
call fcn.0041e4ed
mov edi, eax
pop ecx
cmp byte [edi], 0x22
jne 0x41f10f
push edi
call fcn.00432d00
cmp byte [eax + edi - 1], 0x22
pop ecx
jne 0x41f10f
push edi
call fcn.00431247
mov edi, eax
push edi
call fcn.00432d00
pop ecx
mov byte [eax + edi - 1], bl
pop ecx
cmp edi, ebx
jne 0x41f118
mov edi, 0x471b14
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x60]
mov byte [ebp - 0x60], al
call fcn.004017f0
push esi
call fcn.00432d00
pop ecx
push eax
push esi
lea ecx, [ebp - 0x60]
call fcn.00405170
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 2
mov byte [ebp - 0x28], al
call fcn.004017f0
lea eax, [ebp - 0x160]
push eax
call fcn.00432d00
pop ecx
push eax
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x28]
call fcn.00405170
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 3
call fcn.00420999
mov ecx, eax
add ecx, 0xc
call fcn.00419e94
push edi
mov dword [ebp - 0x18], eax
call fcn.00432d00
pop ecx
mov ecx, dword [ebp - 0x18]
push eax
push edi
call fcn.00405170
push 1
lea ecx, [ebp - 0x28]
pop edi
mov byte [ebp - 4], 2
push edi
call fcn.004017f0
or dword [ebp - 4], 0xffffffff
push edi
lea ecx, [ebp - 0x60]
call fcn.004017f0
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x50]
mov byte [ebp - 0x50], al
call fcn.004017f0
push esi
call fcn.00432d00
pop ecx
push eax
push esi
lea ecx, [ebp - 0x50]
call fcn.00405170
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 4
mov byte [ebp - 0x40], al
call fcn.004017f0
lea eax, [ebp - 0x160]
push eax
call fcn.00432d00
pop ecx
push eax
lea eax, [ebp - 0x160]
lea ecx, [ebp - 0x40]
push eax
call fcn.00405170
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 5
call fcn.00420999
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x50]
push edx
push ecx
lea ecx, [ebp - 0x64]
push ecx
mov ecx, eax
call fcn.00405490
push edi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 4
call fcn.004017f0
or dword [ebp - 4], 0xffffffff
push edi
lea ecx, [ebp - 0x50]
call fcn.004017f0
mov eax, dword [ebp - 0x10]
test byte [eax + 0xc], 0x10
je 0x41f00c
push eax
call fcn.0043219c
pop ecx
jmp 0x41ecea
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret