Function at 0x412ca0
Capabilities:
Check if file exists
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x43e501
mov eax, dword fs:[0]
push eax
mov eax, 0x8124
call fcn.00427010
mov eax, dword [0x44fb64]
xor eax, esp
mov dword [esp + 0x8120], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x44fb64]
xor eax, esp
push eax
lea eax, [esp + 0x8138]
mov dword fs:[0], eax
mov eax, dword [esp + 0x8148]
mov esi, ecx
xor edi, edi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], edi
call fcn.004133f1
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x412d10
push 0x80004005
call fcn.00409d60
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov dword [esp + 0x8140], edi
call fcn.004133f1
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x412d41
push 0x80004005
call fcn.00409d60
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
mov byte [esp + 0x8140], 1
call fcn.004133f1
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x412d73
push 0x80004005
call fcn.00409d60
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
push 0x103
lea ecx, [esp + 0x35]
mov byte [esp + 0x8144], 2
push edi
push ecx
mov dword [esp + 0x24], edi
mov byte [esp + 0x3c], 0
call fcn.00424c40
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
add esp, 0xc
lea ecx, [ecx]
push 0x447a7c
push esi
call fcn.00422167
mov ebp, eax
add esp, 8
test ebp, ebp
jne 0x4130a6
call ebx
mov esi, eax
inc edi
cmp esi, 2
je 0x412de8
cmp edi, 0x12c
jg 0x412de8
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [esp + 0x2c]
jmp 0x412db0
mov ebx, dword [esp + 0x2c]
push esi
push ebx
lea edx, [esp + 0x1c]
push str.CompressFile_SrcFile__s__Fail__d_
push edx
call fcn.00409670
mov eax, dword [esp + 0x24]
add esp, 0x10
push 0
push eax
push 0x453d09
call fcn.0040d390
push 0
push 0
lea ecx, [esp + 0x20]
push ecx
push 0x400
push esi
push 0
push 0x1100
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
push str.LdWaterMarkHook
push ebx
call fcn.00422c00
add esp, 8
test eax, eax
jne 0x412e8a
push str.LdPrintMonitor
push ebx
call fcn.00422c00
add esp, 8
test eax, eax
jne 0x412e8a
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x2c]
push 0x447a9c
push eax
call fcn.00409670
push ebx
lea ecx, [esp + 0x2c]
push 0x447a9c
push ecx
call fcn.00409670
mov edx, dword [esp + 0x30]
push edx
push ebx
push str.Open__s_Failed_.__s_
lea eax, [esp + 0x38]
push eax
jmp 0x41307d
push 0x208
lea ecx, [esp + 0x34]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [esp + 0x30]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x412ea3
sub eax, edx
add eax, 0xffffffff
js 0x412ebe
mov cl, 0x5c
cmp byte [esp + eax + 0x30], cl
je 0x412ebe
sub eax, 1
jns 0x412eb3
lea edi, [esp + 0x30]
mov byte [esp + eax + 0x30], 0
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x412ec8
mov dx, word [0x4478d8]
push str.LdWaterMarkHook32.dll
push ebx
mov word [edi], dx
call fcn.00422c00
add esp, 8
test eax, eax
je 0x412f35
lea eax, [esp + 0x30]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x412ef1
mov ecx, dword [str.LdWaterMarkHook32.dll]
mov edx, dword [0x448fb4]
mov dword [eax], ecx
mov ecx, dword [0x448fb8]
mov dword [eax + 4], edx
mov edx, dword [0x448fbc]
mov dword [eax + 8], ecx
mov ecx, dword [0x448fc0]
mov dword [eax + 0xc], edx
mov dx, word [0x448fc4]
mov dword [eax + 0x10], ecx
mov word [eax + 0x14], dx
jmp 0x413045
push str.LdWaterMarkHook64.dll
push ebx
call fcn.00422c00
add esp, 8
test eax, eax
je 0x412f94
lea eax, [esp + 0x30]
dec eax
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x412f50
mov ecx, dword [str.LdWaterMarkHook64.dll]
mov edx, dword [0x448fcc]
mov dword [eax], ecx
mov ecx, dword [0x448fd0]
mov dword [eax + 4], edx
mov edx, dword [0x448fd4]
mov dword [eax + 8], ecx
mov ecx, dword [0x448fd8]
mov dword [eax + 0xc], edx
mov dx, word [0x448fdc]
mov dword [eax + 0x10], ecx
mov word [eax + 0x14], dx
jmp 0x413045
push str.LdPrintMonitor.dll
push ebx
call fcn.00422c00
add esp, 8
test eax, eax
je 0x412ff1
lea eax, [esp + 0x30]
dec eax
jmp 0x412fb0
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x412fb0
mov ecx, dword [str.LdPrintMonitor.dll]
mov edx, dword [0x448fe4]
mov dword [eax], ecx
mov ecx, dword [0x448fe8]
mov dword [eax + 4], edx
mov edx, dword [0x448fec]
mov dword [eax + 8], ecx
mov cx, word [0x448ff0]
mov dword [eax + 0xc], edx
mov dl, byte [0x448ff2]
mov word [eax + 0x10], cx
mov byte [eax + 0x12], dl
jmp 0x413045
push str.LdPrintMonitor64.dll
push ebx
call fcn.00422c00
add esp, 8
test eax, eax
je 0x413045
lea eax, [esp + 0x30]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x413008
mov ecx, dword [str.LdPrintMonitor64.dll]
mov edx, dword [0x448ff8]
mov dword [eax], ecx
mov ecx, dword [0x448ffc]
mov dword [eax + 4], edx
mov edx, dword [0x449000]
mov dword [eax + 8], ecx
mov ecx, dword [0x449004]
mov dword [eax + 0xc], edx
mov dl, byte [0x449008]
mov dword [eax + 0x10], ecx
mov byte [eax + 0x14], dl
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x2c]
push 0x447a9c
push ecx
call fcn.00409670
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x2c]
push 0x447a9c
push eax
call fcn.00409670
lea ecx, [esp + 0x48]
push ecx
push ebx
push str.Open__s_Failed_.__s_
lea edx, [esp + 0x38]
push edx
call fcn.00409670
mov eax, dword [esp + 0x3c]
add esp, 0x28
push 0
push eax
push 0x453d09
call fcn.0040d390
mov ecx, dword [esp + 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x4131cf
cmp edi, 5
jle 0x4130d0
push edi
push esi
lea edx, [esp + 0x1c]
push str.CompressFile_SrcFile__s__Time__d_
push edx
call fcn.00409670
mov eax, dword [esp + 0x24]
add esp, 0x10
push 0
push eax
push 0x453d09
call fcn.0040d390
xor esi, esi
mov ecx, dword [esp + 0x24]
push 0x447a60
push ecx
call fcn.004385c0
mov edi, eax
add esp, 8
test edi, edi
jne 0x41312d
inc esi
cmp esi, 0x12c
jg 0x4130fd
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4130d2
call ebx
mov edx, dword [esp + 0x24]
push eax
push edx
lea eax, [esp + 0x1c]
push str.CompressFile_DestFile__s__Fail__d_
push eax
call fcn.00409670
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 0
push ecx
push 0x453d09
call fcn.0040d390
jmp 0x4131b9
cmp esi, 5
jle 0x41315b
mov edx, dword [esp + 0x24]
push esi
push edx
lea eax, [esp + 0x1c]
push str.CompressFile_DestFile__s__Time__d_
push eax
call fcn.00409670
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 0
push ecx
push 0x453d09
call fcn.0040d390
push ebp
call fcn.004227eb
add esp, 4
test eax, eax
jne 0x4131b9
mov dword [esp + 0x20], 1
push ebp
push 0x8000
lea edx, [esp + 0x13c]
push 1
push edx
call fcn.00422af3
add esp, 0x10
test eax, eax
jle 0x4131b9
push eax
lea eax, [esp + 0x138]
push eax
push edi
call fcn.00438dc0
add esp, 0xc
test eax, eax
je 0x4131b1
push ebp
call fcn.004227eb
add esp, 4
test eax, eax
je 0x413170
jmp 0x4131b9
mov dword [esp + 0x20], 0
push ebp
call fcn.004221f5
add esp, 4
test edi, edi
je 0x4131cf
push edi
call fcn.00438fa0
add esp, 4
mov byte [esp + 0x8140], 1
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4131f7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x8140], 0
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41321f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x8140], 0xffffffff
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41324a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x8138]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x8120]
xor ecx, esp
call fcn.0042179d
add esp, 0x8130
ret