Function at 0x41b1b8
Capabilities:
Check if file exists
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov eax, dword [0x5cd9c4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
mov dword [ebp - 0x5c], eax
lea ebx, [ecx + 0x537a]
mov eax, dword [ebp + 0xc]
xor edi, edi
mov dword [ebp - 0x54], eax
xor esi, esi
mov eax, dword [ebp + 0x10]
inc edi
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x58], eax
test ebx, ebx
je 0x41b238
push ebx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41b238
push esi
push 0x80
push 4
push esi
push edi
push 0x80000000
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x41b238
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push edi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x41b238
push 1
cmp ebx, 0x500000
pop eax
cmovb esi, eax
xor edi, edi
test esi, esi
je 0x41b3f9
push 4
push 0x1000
push 0x500000
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov edi, eax
test edi, edi
je 0x41b3f9
push str._____________________________7d9114302a0cb6___r_n
call fcn.00524dd0
mov esi, 0x500000
mov ebx, eax
push esi
push 0
push edi
mov dword [ebp - 0x4c], ebx
call fcn.00520800
mov ecx, esi
add esp, 0x10
sub ecx, ebx
mov ebx, dword [ebp - 0x54]
mov dword [ebp - 0x48], ecx
test ebx, ebx
je 0x41b29c
push ebx
call fcn.00524c40
inc eax
pop ecx
cmp eax, 0x3fffffff
jle 0x41b2a0
xor eax, eax
jmp 0x41b2b6
lea esi, [eax + eax]
mov eax, esi
call fcn.0051dc40
mov eax, esp
push 3
push esi
push ebx
push eax
call fcn.00417f5c
mov esi, dword [ebp - 0x50]
mov ecx, esi
push 0
push eax
push 0x55e688
lea eax, [ebp - 0x48]
push eax
push edi
call fcn.0041a8aa
mov ebx, dword [ebp - 0x48]
mov eax, edi
add ebx, edi
sub eax, ebx
sub eax, dword [ebp - 0x4c]
add eax, 0x500000
mov dword [ebp - 0x48], eax
lea eax, [esi + 0x66b4]
mov dword [ebp - 0x54], eax
test eax, eax
je 0x41b2fd
push eax
call fcn.00524c40
inc eax
pop ecx
cmp eax, 0x3fffffff
jle 0x41b301
xor eax, eax
jmp 0x41b31c
lea esi, [eax + eax]
mov eax, esi
call fcn.0051dc40
mov eax, esp
push 3
push esi
push dword [ebp - 0x54]
push eax
call fcn.00417f5c
mov esi, dword [ebp - 0x50]
push 0
push eax
push 0x5570b8
lea eax, [ebp - 0x48]
mov ecx, esi
push eax
push ebx
call fcn.0041a8aa
add ebx, dword [ebp - 0x48]
mov eax, edi
sub eax, ebx
sub eax, dword [ebp - 0x4c]
add eax, 0x500000
mov dword [ebp - 0x48], eax
lea eax, [esi + 0x537a]
test eax, eax
je 0x41b35b
push eax
call fcn.00524c40
inc eax
pop ecx
cmp eax, 0x3fffffff
jle 0x41b35f
xor eax, eax
jmp 0x41b37e
lea esi, [eax + eax]
mov eax, esi
call fcn.0051dc40
mov eax, esp
push 3
push esi
mov esi, dword [ebp - 0x50]
lea ecx, [esi + 0x537a]
push ecx
push eax
call fcn.00417f5c
push 1
push eax
push 0x55e690
lea eax, [ebp - 0x48]
mov ecx, esi
push eax
push ebx
call fcn.0041a8aa
add ebx, dword [ebp - 0x48]
lea eax, [ebp - 0x44]
push 0x40
push 0
push eax
call fcn.00520800
add esp, 0xc
lea eax, [ebp - 0x44]
mov ecx, esi
push dword [ebp - 0x58]
push 0x40
push eax
call fcn.0041c0ca
mov eax, edi
mov ecx, esi
sub eax, ebx
sub eax, dword [ebp - 0x4c]
add eax, 0x500000
push 0
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x44]
push eax
push str.cverify
lea eax, [ebp - 0x48]
push eax
push ebx
call fcn.0041a8aa
mov esi, dword [ebp - 0x4c]
add ebx, dword [ebp - 0x48]
push esi
push str._____________________________7d9114302a0cb6___r_n
push ebx
call fcn.0051fd00
mov eax, dword [ebp - 0x5c]
sub ebx, edi
add esp, 0xc
add ebx, esi
mov dword [eax], ebx
mov eax, edi
lea esp, [ebp - 0x68]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0051d360
leave
ret 0xc