Function at 0x1004b8a
Capabilities:
Check if file exists
Get common file path
Get disk information
Get disk size
Get file attributes
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
push ebx
push esi
push edi
push 0
mov esi, 0x10013cc
push 0
push esi
call fcn.01003d7d
mov edi, eax
lea eax, [edi + 1]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ebx, eax
xor eax, eax
cmp ebx, eax
jne 0x1004bdc
push eax
push 0x10
push eax
push eax
push 0x4b5
push eax
call fcn.01003c23
call fcn.010056b9
mov dword [0x100b704], eax
xor eax, eax
jmp 0x1004e6c
push edi
push ebx
push esi
call fcn.01003d7d
test eax, eax
jne 0x1004c0b
push eax
push 0x10
push eax
push eax
push 0x4b1
push eax
call fcn.01003c23
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [0x100b704], 0x80070714
jmp 0x1004bd5
push 0x10013ac
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
push 1
test eax, eax
pop edi
jne 0x1004c24
mov dword [0x100b6d0], edi
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov al, byte [0x100abbe]
test al, al
je 0x1004c6f
cmp al, 0x5c
jne 0x1004c46
cmp byte [0x100abbf], al
jne 0x1004c46
xor esi, esi
xor eax, eax
jmp 0x1004c4a
mov eax, edi
xor esi, esi
push eax
push esi
push 0x100abbe
call fcn.01004a8c
test eax, eax
jne 0x1004cc1
push esi
push 0x10
push esi
push esi
push 0x4be
push esi
call fcn.01003c23
jmp 0x1004bd5
xor eax, eax
cmp dword [0x100aaa4], eax
jne 0x1004e54
cmp dword [0x100b6d0], eax
jne 0x1004e54
mov esi, 0x100ae84
push esi
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x1004cc8
push 3
push edi
push esi
call fcn.01004a8c
test eax, eax
jne 0x1004cc1
push esi
call fcn.01002245
test eax, eax
jne 0x1004cc8
push edi
push edi
push esi
call fcn.01004a8c
test eax, eax
je 0x1004cc8
mov eax, edi
jmp 0x1004e6c
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x114]
push 0x10014a8
push eax
call edi
cmp byte [ebp - 0x114], 0x5a
jg 0x1004e20
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
mov ebx, eax
cmp ebx, 6
je 0x1004d02
cmp ebx, 3
jne 0x1004d14
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x1004d5e
cmp ebx, 2
jne 0x1004d96
cmp byte [ebp - 0x114], 0x41
je 0x1004d96
cmp byte [ebp - 0x114], 0x42
je 0x1004d96
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceA]
test eax, eax
je 0x1004d96
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 0xc]
imul eax, dword [ebp - 4]
cmp eax, 0x5f5e100
jb 0x1004d96
xor ebx, ebx
lea eax, [ebp - 0x114]
push ebx
push 3
push eax
call fcn.01004f10
test eax, eax
jne 0x1004da1
lea eax, [ebp - 0x114]
push eax
call fcn.01002245
test eax, eax
jne 0x1004d96
push ebx
lea eax, [ebp - 0x114]
push 1
push eax
call fcn.01004f10
test eax, eax
jne 0x1004da1
inc byte [ebp - 0x114]
jmp 0x1004cdc
lea eax, [ebp - 0x114]
push eax
call fcn.01002245
test eax, eax
je 0x1004dc3
lea eax, [ebp - 0x114]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea eax, [ebp - 0x114]
push 0x1001498
push eax
call fcn.010059ea
lea eax, [ebp - 0x114]
push eax
call fcn.01002222
test eax, eax
jne 0x1004df5
inc byte [ebp - 0x114]
and byte [ebp - 0x111], al
jmp 0x1004cdc
lea eax, [ebp - 0x114]
push 2
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [ebp - 0x114]
push eax
push esi
call edi
push ebx
push 1
push esi
call fcn.01004a8c
test eax, eax
jne 0x1004e4f
jmp 0x1004cdc
lea eax, [ebp - 0x114]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push 4
lea eax, [ebp - 0x114]
push 3
push eax
call fcn.01004f10
test eax, eax
je 0x1004bd5
jmp 0x1004cce
push 1
pop eax
jmp 0x1004e6c
push eax
push eax
push 0x1002c72
push eax
push 0x7d2
push dword [0x100b6dc]
call fcn.010058e6
pop edi
pop esi
pop ebx
leave
ret