Function at 0x402776
Capabilities:
Check if file exists
Enumerate files on windows
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1d0
mov dword [ebp - 0x8c], 0
push str.Reading_configuration_file__.WIZ_
push 0x40e7c0
call fcn.00403b6c
add esp, 8
push 0x40e7c0
mov eax, dword [0x40ee80]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
call fcn.00402010
lea ecx, [ebp - 0x1d0]
push ecx
push str..wiz
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x402800
lea edx, [ebp - 0x1a4]
push edx
push 0x40d7a8
push 0x40eaa0
call fcn.00403b6c
add esp, 0xc
lea eax, [ebp - 0x1d0]
push eax
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0x40eaa0
call section..text
add esp, 4
test eax, eax
jne 0x40282c
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
push str.Configuration_file__.WIZ__could_not_be_located._Aborting.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
jmp 0x402fbb
push 0
push 0x80
push 0x40ebc0
push 0x40d7ac
push 0x40d7b0
call fcn.004014b5
add esp, 0x14
call fcn.00401260
push 0x40ebc0
push str.Reading_configuration_file___s_
push 0x40e7c0
call fcn.00403b6c
add esp, 0xc
push 0x40e7c0
mov eax, dword [0x40ee80]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
call fcn.00402010
push 0x40ebc0
call section..text
add esp, 4
test eax, eax
jne 0x4028c4
push 0x40ebc0
push str.Configuration_file___s__could_not_be_located._Aborting.
push 0x40e7c0
call fcn.00403b6c
add esp, 0xc
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
push 0x40e7c0
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00401260
xor eax, eax
jmp 0x402fbb
push 0
push 0x80
push 0x40e8e0
push 0x40d7d8
push 0x40d7dc
call fcn.004014b5
add esp, 0x14
push 0
push 0x80
push 0x40e740
push 0x40d7e4
push str.HEADER
call fcn.004014b5
add esp, 0x14
push 0
push 0x80
lea ecx, [ebp - 0x88]
push ecx
push 0x40d7f0
push 0x40d7f4
call fcn.004014b5
add esp, 0x14
push 0x40d800
lea edx, [ebp - 0x88]
push edx
call fcn.00403dad
add esp, 8
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x402957
mov eax, dword [ebp - 0x90]
push eax
push 0x40ea00
call fcn.00403b6c
add esp, 8
push 0
push 0x80
lea ecx, [ebp - 0x88]
push ecx
push str.RESEXE
push 0x40d80c
call fcn.004014b5
add esp, 0x14
push 0x40d818
lea edx, [ebp - 0x88]
push edx
call fcn.00403dad
add esp, 8
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x4029ae
mov eax, dword [ebp - 0x90]
push eax
push 0x40ee00
call fcn.00403b6c
add esp, 8
push 0
push 0x80
lea ecx, [ebp - 0x88]
push ecx
push 0x40d81c
push str.PRECHECK
call fcn.004014b5
add esp, 0x14
push 0x40d82c
lea edx, [ebp - 0x88]
push edx
call fcn.00403dad
add esp, 8
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x402a05
mov eax, dword [ebp - 0x90]
push eax
push 0x40e980
call fcn.00403b6c
add esp, 8
push 0x40ee00
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x402a4c
push 0x40ee00
push str.Resource_Utility___s__could_not_be_located._Aborting.
push 0x40e7c0
call fcn.00403b6c
add esp, 0xc
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
push 0x40e7c0
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00401260
xor eax, eax
jmp 0x402fbb
push 0x40e740
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x402a93
push 0x40e740
push str.Resource_file___s__could_not_be_located._Aborting.
push 0x40e7c0
call fcn.00403b6c
add esp, 0xc
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
push 0x40e7c0
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00401260
xor eax, eax
jmp 0x402fbb
push 0x40ee00
call fcn.004031e7
add esp, 4
test eax, eax
jne 0x402adb
push 0x40ee00
push str.An_error_occured_during_decompression_of_file___s_._Skipping.
push 0x40e7c0
call fcn.00403b6c
add esp, 0xc
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
push 0x40e7c0
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00401260
xor eax, eax
jmp 0x402fbb
push 0x40ea00
call fcn.004031e7
add esp, 4
test eax, eax
jne 0x402b23
push 0x40ea00
push str.An_error_occured_during_decompression_of_file___s_._Skipping.
push 0x40e7c0
call fcn.00403b6c
add esp, 0xc
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
push 0x40e7c0
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00401260
xor eax, eax
jmp 0x402fbb
push 0x40e980
call fcn.004031e7
add esp, 4
test eax, eax
jne 0x402b6b
push 0x40e980
push str.An_error_occured_during_decompression_of_file___s_._Skipping.
push 0x40e7c0
call fcn.00403b6c
add esp, 0xc
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
push 0x40e7c0
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00401260
xor eax, eax
jmp 0x402fbb
push 0x40d830
call fcn.0040131f
add esp, 4
test eax, eax
je 0x402be2
push 0
push 0x80
lea ecx, [ebp - 0x88]
push ecx
push str.COPY
call fcn.00401641
add esp, 0x10
test eax, eax
je 0x402be2
lea edx, [ebp - 0x88]
push edx
call fcn.004033af
add esp, 4
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x402bd3
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
push str.An_error_occured_during_memory_link._Aborting.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00401260
xor eax, eax
jmp 0x402fbb
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
or ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx], ecx
jmp 0x402b7c
push str.EXECUTE
call fcn.0040131f
add esp, 4
test eax, eax
je 0x402c58
push 0
push 0x80
lea eax, [ebp - 0x88]
push eax
push 0x40d848
call fcn.00401641
add esp, 0x10
test eax, eax
je 0x402c58
lea ecx, [ebp - 0x88]
push ecx
call fcn.004033af
add esp, 4
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x402c4a
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
push str.An_error_occured_during_memory_link._Aborting.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00401260
xor eax, eax
jmp 0x402fbb
mov edx, dword [ebp - 4]
mov eax, dword [edx]
or al, 0x10
mov ecx, dword [ebp - 4]
mov dword [ecx], eax
jmp 0x402bf3
push 0x40d84c
call fcn.0040131f
add esp, 4
test eax, eax
je 0x402ccf
push 0
push 0x80
lea edx, [ebp - 0x88]
push edx
push str.REMOVE
call fcn.00401641
add esp, 0x10
test eax, eax
je 0x402ccf
lea eax, [ebp - 0x88]
push eax
call fcn.004033af
add esp, 4
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x402cc0
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
push str.An_error_occured_during_memory_link._Aborting.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00401260
xor eax, eax
jmp 0x402fbb
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
or edx, 0x20
mov eax, dword [ebp - 4]
mov dword [eax], edx
jmp 0x402c69
call fcn.00401260
push 0x40e740
push str.Examining_resource_file.___s_
push 0x40e7c0
call fcn.00403b6c
add esp, 0xc
push 0x40e7c0
mov ecx, dword [0x40ee80]
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
call fcn.00402010
push 0x40ee00
push 0x40ece0
push 0x40d87c
push 0x40e7c0
call fcn.00403b6c
add esp, 0x10
push 0x40ea00
push 0x40e740
push str._s__s__WORK
lea edx, [ebp - 0x88]
push edx
call fcn.00403b6c
add esp, 0x10
push 0x40d890
lea eax, [ebp - 0x8c]
push eax
push 1
lea ecx, [ebp - 0x88]
push ecx
push 0x40e7c0
call fcn.00401906
add esp, 0x14
cmp eax, 0xffffffff
jne 0x402db2
mov edx, dword [ebp - 0x8c]
push edx
push 0x40d8a0
push str.Could_not_create_process___s___d_.__Aborting.
push 0x40e7c0
call fcn.00403b6c
add esp, 0x10
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
push 0x40e7c0
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
lea eax, [ebp - 0x88]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
jmp 0x402fbb
push 1
push 0x40d8ac
call fcn.00402046
add esp, 8
push 0x40d8bc
call section..text
add esp, 4
test eax, eax
je 0x402e49
push 0x40d8c8
call fcn.0040131f
add esp, 4
test eax, eax
je 0x402e35
push 0
push 0x80
lea ecx, [ebp - 0x88]
push ecx
push str.FILE
call fcn.00401641
add esp, 0x10
test eax, eax
je 0x402e35
lea edx, [ebp - 0x88]
push edx
call fcn.004033af
add esp, 4
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x402e26
call fcn.00401260
xor eax, eax
jmp 0x402fbb
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
or ecx, 2
mov edx, dword [ebp - 4]
mov dword [edx], ecx
jmp 0x402de3
call fcn.00401260
push 1
push str.update.lst
call fcn.00402046
add esp, 8
push 0x40ee00
push 0x40ece0
push str._s_s
push 0x40e7c0
call fcn.00403b6c
add esp, 0x10
push 0x40ea00
push str._s__DUMP
lea eax, [ebp - 0x88]
push eax
call fcn.00403b6c
add esp, 0xc
push 0x40d8f4
lea ecx, [ebp - 0x8c]
push ecx
push 1
lea edx, [ebp - 0x88]
push edx
push 0x40e7c0
call fcn.00401906
add esp, 0x14
cmp eax, 0xffffffff
jne 0x402ef4
mov eax, dword [ebp - 0x8c]
push eax
push 0x40d904
push str.Could_not_create_process___s___d_.__Aborting.
push 0x40e7c0
call fcn.00403b6c
add esp, 0x10
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
push 0x40e7c0
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
lea ecx, [ebp - 0x88]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
jmp 0x402fbb
push 1
push str._tmpexec.___
call fcn.00402046
add esp, 8
push 0x40d920
call section..text
add esp, 4
test eax, eax
je 0x402fa2
push 0x40d92c
call fcn.0040131f
add esp, 4
test eax, eax
je 0x402f8c
push 0
push 0x80
lea edx, [ebp - 0x88]
push edx
push str.ENTRY
call fcn.00401641
add esp, 0x10
test eax, eax
je 0x402f8c
lea eax, [ebp - 0x88]
push eax
call fcn.004033af
add esp, 4
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x402f7d
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
push str.An_error_occured_during_memory_link._Aborting.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00401260
xor eax, eax
jmp 0x402fbb
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
or edx, 8
mov eax, dword [ebp - 4]
mov dword [eax], edx
jmp 0x402f29
call fcn.00401260
push 1
push str.update.dmp
call fcn.00402046
add esp, 8
jmp 0x402fb6
push 0x30
push str.NovaLogic_Local_File_Update_Wizard_v1.0.10d
push str.Warning.__Could_not_open_cleanup_configuration_file.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
mov esp, ebp
pop ebp
ret