Function at 0x41d5de
Capabilities:
Get common file path
Get file size
Read file on windows

Disassembly:
push 0x268
mov eax, 0x4572ae
call fcn.00436c63
mov edi, ecx
or dword [ebp - 0x254], 0xffffffff
xor ebx, ebx
mov dword [ebp - 4], ebx
mov eax, edi
cmp dword [edi + 0x14], 8
mov dword [edi + 0x10], ebx
jb 0x41d608
mov eax, dword [edi]
xor ecx, ecx
push 0x20a
mov word [eax], cx
lea eax, [ebp - 0x220]
push ebx
push eax
call fcn.00438580
add esp, 0xc
lea eax, [ebp - 0x220]
push eax
push ebx
push ebx
push 0x1c
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jns 0x41d640
lfence
jmp 0x41d8d5
xor eax, eax
mov dword [ebp - 0x240], ebx
push 7
pop esi
mov word [ebp - 0x250], ax
lea ecx, [ebp - 0x250]
lea eax, [ebp - 0x220]
mov dword [ebp - 0x23c], esi
push eax
call fcn.00407cbb
push str.NVIDIA_accounts
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 1
call fcn.00407d34
cmp dword [ebp - 0x23c], 8
lea eax, [ebp - 0x250]
push ebx
cmovae eax, dword [ebp - 0x250]
push 0x2000000
push 3
push ebx
push esi
push SysReAllocString
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
mov dword [ebp - 0x254], esi
cmp esi, 0xffffffff
jne 0x41d6da
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
lea ecx, [ebp - 0x250]
call fcn.00407c3e
movzx eax, si
or eax, 0x80070000
test esi, esi
cmovle eax, esi
jmp 0x41d8d5
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x25c], ebx
push eax
push esi
mov dword [ebp - 0x258], ebx
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
cmp eax, 1
jne 0x41d87c
mov eax, dword [ebp - 0x25c]
or eax, dword [ebp - 0x258]
je 0x41d87c
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], 0xf
mov byte [ebp - 0x238], bl
push ebx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x238]
push dword [ebp - 0x25c]
call fcn.00405a0a
cmp dword [ebp - 0x224], 0x10
lea ecx, [ebp - 0x260]
push ebx
push ecx
push dword [ebp - 0x25c]
lea eax, [ebp - 0x238]
mov dword [ebp - 0x260], ebx
cmovae eax, dword [ebp - 0x238]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp eax, 1
jne 0x41d85d
mov eax, dword [ebp - 0x260]
cmp dword [ebp - 0x25c], eax
jne 0x41d85d
cmp dword [ebp - 0x258], ebx
jne 0x41d85d
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x26c], ebx
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x264], ebx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x26c]
push dword [ebp - 0x228]
call fcn.0041db03
mov eax, dword [ebp - 0x268]
lea ecx, [ebp - 0x238]
mov esi, dword [ebp - 0x26c]
sub eax, esi
cmp dword [ebp - 0x224], 0x10
mov edx, dword [ebp - 0x228]
cmovae ecx, dword [ebp - 0x238]
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x270], eax
lea eax, [ebp - 0x270]
push eax
push esi
call fcn.0041d49d
pop ecx
pop ecx
test eax, eax
jne 0x41d81d
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
jmp 0x41d82e
mov eax, dword [ebp - 0x274]
mov ecx, edi
shr eax, 1
push eax
push esi
call fcn.00407ce2
test esi, esi
je 0x41d843
mov eax, dword [ebp - 0x264]
sub eax, esi
push eax
push esi
call fcn.00409d69
pop ecx
pop ecx
lea ecx, [ebp - 0x238]
call fcn.00407dc4
lea ecx, [ebp - 0x250]
call fcn.00407c3e
mov eax, ebx
jmp 0x41d8d5
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x238]
mov esi, eax
call fcn.00407dc4
jmp 0x41d6bd
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x250]
call fcn.00407c3e
mov eax, 0x570
jmp 0x41d8d5
call fcn.00436bb0
ret