Function at 0x41cff0
Capabilities:
Check if file exists

Disassembly:
dec eax
sti
invalid
mov dword [0], ecx
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e0eaa
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x678390]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2c], ecx
call fcn.00453cc9
test al, al
je 0x41d042
bnd jp 0x41cfd0
jecxz 0x41cfac
or ah, byte [0x35b6f447]
jecxz 0x41d06a
fistp qword [edx + 0x12]
mov edi, 0x5d279905
test byte [0xa170a1e3], ch
in al, 0xd4
add byte [di + 0x75c0], al
xor ch, byte [eax + 0x5c]
add dword [eax], eax
add al, ch
or dword [eax + 0x4c48300], esi
mov eax, dword [0x67d4e4]
test eax, eax
jne 0x41d07d
push 0x15c
call fcn.0047045e
add esp, 4
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x41d06f
mov ecx, eax
call fcn.00444f40
jmp 0x41d071
jle 0x41d06e
add bl, ch
add dh, byte [ebx]
rol bh, 0x45
cld
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x67d4e4], eax
mov ecx, eax
call fcn.00474b54
mov edx, eax
mov dword [ebp - 0x14], 7
xor eax, eax
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
cmp word [edx], ax
jne 0x41d0a3
xor ecx, ecx
jmp 0x41d0bf
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41d0b0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00402b90
push 0xc
push str.WnConfig.exe
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 1
call fcn.00405d30
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41d30c
call fcn.00453b2b
test al, al
je 0x41d114
mov esi, 0x8146990f
xchg byte [ebp + 0x4c], dh
imul ebp, dword [ecx + 0x7b514866], 0xc399f373
call fcn.004537ef
test al, al
je 0x41d138
cmp al, 0x91
adc dword [ecx], esi
jns 0x41d11d
push ds
sub byte [edi + 0x6d], cl
dec esp
in al, dx
dec esp
adc dword [ecx + ecx - 0x25], ebp
pop es
xchg ecx, eax
mov bh, 0x6b
cmp byte [esi - 0x52], ah
jp 0x41d159
call fcn.004537ef
test al, al
je 0x41d15c
cmp esi, dword [edi - 0x27]
shr dword [ebx], cl
pop esi
aas
loope 0x41d196
rcr dword [edx - 0x1b], 1
in eax, dx
outsd dx, dword [esi]
add eax, 0x78b2d856
cmpsd dword [esi], dword es:[edi]
invalid
inc eax
mov bl, 0x42
cmp dword [ebp + 8], 0
je 0x41d2d8
call fcn.00453720
test al, al
je 0x41d18f
lodsd eax, dword [esi]
adc al, byte fs:[eax + 0x12]
iretd
mov ebx, 0x521cf7e1
cdq
shr byte [ebx - 0xbf3440d], cl
call fcn.00453bb5
test al, al
je 0x41d1b4
mov ebp, 0x5a402f66
test eax, 0x67870719
xor esi, dword [edx - 0x60cadcfa]
ror ah, 0x12
mov al, 0x30
wait
scasb al, byte es:[edi]
mov ecx, 0xc0b2f8d0
cmp dword [ebp + 0xc], 0
jne 0x41d266
call fcn.00453834
test al, al
je 0x41d1d8
cmp al, 0x36
scasb al, byte es:[edi]
push esi
pushfd
cmp al, 0xa7
popal
cmp dword [eax + 0x73092f87], esp
jnp 0x41d183
pushfd
call fcn.004537aa
test al, al
je 0x41d1f7
test al, 0xfb
into
jno 0x41d207
sbb eax, 0x1154502
mov dword [0x8be82c48], eax
dec dx
mov cl, 1
xor ecx, esp
invalid
mov ebx, dword [ebp - 0x2c]
mov ecx, ebx
call fcn.0041d6b0
test eax, eax
je 0x41d270
call fcn.00453b70
test al, al
je 0x41d21e
imul eax, dword [ebx], 0x74c08400
adc byte [edx + 0x3c1d6f9], bl
or eax, 0xe99e3037
sbb ecx, dword [ebp - 0x42]
lcall 0x370d, 0x3c1d6f9
xor byte [esi - 0x41b2e417], bl
lcall 0x366, 0x9be8eb6b
add byte [eax + eax*8 - 0x53c2e88c], al
mov edi, 0xedc140fd
adc eax, 0x59d7d98
cmpsd dword [esi], dword es:[edi]
dec ebx
test byte [ebp - 0x182f5b4b], ch
call fcn.004538be
test al, al
je 0x41d23e
cmp eax, 0x40fdbfac
shr ebp, 0x15
cwde
jge 0x41d1cf
add eax, 0xad844ba7
mov ch, 0xa4
shl bh, 1
movsd dword es:[edi], dword [esi]
lodsb al, byte [esi]
push 0xffffffffffffffe8
add eax, dword gs:[bx + si]
call fcn.004537aa
test al, al
je 0x41d266
or byte [eax - 0x20], ah
cmpsb byte [esi], byte es:[edi]
pop es
invalid
inc ebp
mov ah, 0
mov al, 0x32
cmp eax, 0x7f4106fd
pop edx
ljmp 0xd45d
mov ebx, dword [ebp - 0x2c]
mov ecx, ebx
call fcn.0041c770
cmp dword [ebp + 0x10], 0
je 0x41d29e
call fcn.00453720
test al, al
je 0x41d304
cmpsb byte [esi], byte es:[edi]
adc dword [ecx - 0x1e1744d2], 0x21
ror cl, 1
dec edx
mov dh, 0xc3
das
pop ss
push edx
xor dl, byte [esi + 0x37]
xor esi, dword [edi + 0x4f4a08cf]
jmp 0x41d304
mov ecx, ebx
call fcn.0041d340
test eax, eax
je 0x41d30c
call fcn.004538be
test al, al
je 0x41d2d4
arpl word [ebp + 0x50], dx
jge 0x41d305
in eax, 0xf0
test byte [edi + 0x27], ah
jmp 0x41d257
mov ecx, ebx
jmp 0x41d307
call fcn.00453cc9
test al, al
je 0x41d2fc
jecxz 0x41d2e7
invalid
aaa
inc esp
mov ebp, 0x8553374
mov dl, 0x3a
aam 0xe7
cmp byte [esi + 0x6b], 0x5a
salc
salc
in eax, dx
push edi
cld
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
call fcn.0041c770
mov ecx, dword [ebp - 0x2c]
dec ebp
aam 0xe8
xor al, 0xe7
invalid
call fcn.0041ba40
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x41d321
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00402ce0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0047070c
mov esp, ebp
pop ebp
ret 0xc