Function at 0x48d080
Capabilities:
Check if file exists
Create directory
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x828
mov eax, dword [0x6f36d4]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
push edi
mov edi, ecx
mov dword [ebp - 0x824], 0
push dword [edi + 0x4c]
call esi
test eax, eax
jne 0x48d0bb
push eax
push dword [edi + 0x4c]
push eax
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
push dword [edi + 0x4c]
call esi
test eax, eax
je 0x48d41d
cmp dword [edi + 0x40], 8
lea ecx, [edi + 0x2c]
jb 0x48d0d4
mov ecx, dword [edi + 0x2c]
push ebx
push 0x676228
push ecx
call fcn.006046e2
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x48d41c
push ebx
mov dword [ebp - 0x824], 1
call fcn.00605efd
add esp, 4
test eax, eax
jne 0x48d116
push ebx
push 1
push 2
push 0x676230
call fcn.006062b0
add esp, 0x10
cmp dword [edi + 0x44], 0
je 0x48d1d9
lea eax, [ebp - 0x814]
mov dword [edi + 0x44], 0
xorps xmm0, xmm0
push eax
movups xmmword [ebp - 0x814], xmm0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x800
lea eax, [ebp - 0x804]
push 0
push eax
call fcn.005d9d70
movzx eax, word [ebp - 0x808]
add esp, 0xc
push eax
movzx eax, word [ebp - 0x80a]
push eax
movzx eax, word [ebp - 0x80c]
push eax
movzx eax, word [ebp - 0x80e]
push eax
movzx eax, word [ebp - 0x812]
push eax
movzx eax, word [ebp - 0x814]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str._r_n_Start_Log___06d:_06d_:__04d__02d__02d__02d:_02d:_02d__n
lea eax, [ebp - 0x804]
push 0x400
push eax
call fcn.0048d540
lea ecx, [ebp - 0x804]
add esp, 0x2c
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x48d1b4
sub ecx, edx
sar ecx, 1
push ebx
push 1
lea eax, [ecx + ecx]
push eax
lea eax, [ebp - 0x804]
push eax
call fcn.006062b0
add esp, 0x10
mov eax, dword [edi + 0x24]
xor esi, esi
sub eax, dword [edi + 0x20]
sar eax, 2
mov dword [ebp - 0x81c], eax
test eax, eax
jle 0x48d211
nop
mov eax, dword [edi + 0x20]
push ebx
push 1
mov ecx, dword [eax + esi*4]
mov eax, dword [ecx - 0xc]
add eax, eax
push eax
push ecx
call fcn.006062b0
inc esi
add esp, 0x10
cmp esi, dword [ebp - 0x81c]
jl 0x48d1f0
push ebx
call fcn.00604f75
push ebx
call fcn.00605efd
push ebx
mov esi, eax
call fcn.0060490a
mov eax, dword [edi + 0x48]
add esp, 0xc
test eax, eax
jle 0x48d41c
cmp esi, eax
jl 0x48d41c
mov eax, esi
cdq
sub eax, edx
mov edx, 2
mov ebx, eax
mov eax, 0x19000
sar ebx, 1
cmp ebx, eax
cmovg ebx, eax
xor ecx, ecx
shr ebx, 1
lea eax, [ebx + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0055d73c
mov ecx, eax
add esp, 4
mov dword [ebp - 0x81c], ecx
test ecx, ecx
je 0x48d41c
lea eax, [ebx + ebx]
mov dword [ebp - 0x820], eax
add eax, 2
push eax
push 0
push ecx
call fcn.005d9d70
lea ebx, [edi + 0x2c]
mov byte [ebp - 0x815], 0
add esp, 0xc
mov eax, ebx
cmp dword [ebx + 0x14], 8
jb 0x48d2a8
mov eax, dword [ebx]
push 0x6762f8
push eax
call fcn.006046e2
add esp, 8
mov dword [ebp - 0x828], eax
test eax, eax
je 0x48d2fc
sub esi, dword [ebp - 0x820]
push 0
push esi
push eax
call fcn.006056bb
mov esi, dword [ebp - 0x828]
push esi
push 1
push dword [ebp - 0x820]
push dword [ebp - 0x81c]
call fcn.006051e2
cmp eax, 1
push esi
sete byte [ebp - 0x815]
call fcn.0060490a
add esp, 0x20
cmp dword [ebx + 0x14], 8
jb 0x48d304
mov ebx, dword [ebx]
push 0x676300
push ebx
call fcn.006046e2
mov esi, eax
add esp, 8
test esi, esi
je 0x48d40e
push esi
push 1
push 2
push 0x676230
call fcn.006062b0
add esp, 0x10
lea eax, [ebp - 0x814]
xorps xmm0, xmm0
movups xmmword [ebp - 0x814], xmm0
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x800
lea eax, [ebp - 0x804]
push 0
push eax
call fcn.005d9d70
movzx eax, word [ebp - 0x808]
add esp, 0xc
push eax
movzx eax, word [ebp - 0x80a]
push eax
movzx eax, word [ebp - 0x80c]
push eax
movzx eax, word [ebp - 0x80e]
push eax
movzx eax, word [ebp - 0x812]
push eax
movzx eax, word [ebp - 0x814]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push str._r_n_Truncate_Log___06d:_06d_:__04d__02d__02d__02d:_02d:_02d__n
lea eax, [ebp - 0x804]
push 0x400
push eax
call fcn.0048d540
lea ecx, [ebp - 0x804]
add esp, 0x2c
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x48d3c0
sub ecx, edx
sar ecx, 1
push esi
push 1
lea eax, [ecx + ecx]
push eax
lea eax, [ebp - 0x804]
push eax
call fcn.006062b0
add esp, 0x10
cmp byte [ebp - 0x815], 0
je 0x48d405
push esi
push 1
push dword [ebp - 0x820]
push dword [ebp - 0x81c]
call fcn.006062b0
add esp, 0x10
push esi
call fcn.0060490a
add esp, 4
push dword [ebp - 0x81c]
call fcn.0055d745
add esp, 4
pop ebx
lea ecx, [edi + 0x20]
call fcn.0048d710
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x824]
xor ecx, ebp
pop edi
pop esi
call fcn.0055d6c3
mov esp, ebp
pop ebp
ret