Function at 0x414d65
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43949f
mov eax, dword fs:[0]
push eax
sub esp, 0x374
mov eax, dword [0x4444c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x30c], ecx
push 0
push 0x26
lea eax, [ebp - 0x128]
push eax
call fcn.0041aee6
add esp, 0xc
and dword [ebp - 4], 0
push 0x43bb20
lea ecx, [ebp - 0x160]
call fcn.00408e1f
mov byte [ebp - 4], 1
push 0x43bb1c
lea ecx, [ebp - 0x144]
call fcn.00408e1f
mov byte [ebp - 4], 2
push 0x43b782
lea ecx, [ebp - 0x17c]
call fcn.00408211
mov byte [ebp - 4], 3
mov dword [ebp - 0x310], 0x43ba58
mov eax, dword [ebp - 0x310]
add eax, 2
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x310]
mov ax, word [eax]
mov word [ebp - 0x316], ax
add dword [ebp - 0x310], 2
cmp word [ebp - 0x316], 0
jne 0x414e02
mov eax, dword [ebp - 0x310]
sub eax, dword [ebp - 0x314]
sar eax, 1
mov dword [ebp - 0x31c], eax
push dword [ebp - 0x31c]
push 0x43ba58
push 2
push 1
lea ecx, [ebp - 0x128]
call fcn.004169d7
mov dword [ebp - 0x320], 0x43ba2c
mov eax, dword [ebp - 0x320]
add eax, 2
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x320]
mov ax, word [eax]
mov word [ebp - 0x326], ax
add dword [ebp - 0x320], 2
cmp word [ebp - 0x326], 0
jne 0x414e6a
mov eax, dword [ebp - 0x320]
sub eax, dword [ebp - 0x324]
sar eax, 1
mov dword [ebp - 0x32c], eax
push dword [ebp - 0x32c]
push 0x43ba2c
lea ecx, [ebp - 0x128]
call fcn.004073b3
mov dword [ebp - 0x330], str.BigNoxVMMgr.exe
mov eax, dword [ebp - 0x330]
add eax, 2
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x330]
mov ax, word [eax]
mov word [ebp - 0x336], ax
add dword [ebp - 0x330], 2
cmp word [ebp - 0x336], 0
jne 0x414ece
mov eax, dword [ebp - 0x330]
sub eax, dword [ebp - 0x334]
sar eax, 1
mov dword [ebp - 0x33c], eax
push dword [ebp - 0x33c]
push str.BigNoxVMMgr.exe
lea ecx, [ebp - 0x128]
call fcn.004073b3
mov dword [ebp - 0x340], 0x43cba4
mov eax, dword [ebp - 0x340]
add eax, 2
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x340]
mov ax, word [eax]
mov word [ebp - 0x346], ax
add dword [ebp - 0x340], 2
cmp word [ebp - 0x346], 0
jne 0x414f32
mov eax, dword [ebp - 0x340]
sub eax, dword [ebp - 0x344]
sar eax, 1
mov dword [ebp - 0x34c], eax
push dword [ebp - 0x34c]
push 0x43cba4
lea ecx, [ebp - 0x144]
call fcn.004073b3
lea ecx, [ebp - 0x128]
call fcn.00416ddb
mov dword [ebp - 0x2c4], eax
push dword [ebp - 0x2c4]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4150a5
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x160]
call fcn.00407683
mov dword [ebp - 0x350], 0x43bb20
mov eax, dword [ebp - 0x350]
add eax, 2
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x350]
mov ax, word [eax]
mov word [ebp - 0x356], ax
add dword [ebp - 0x350], 2
cmp word [ebp - 0x356], 0
jne 0x414fd5
mov eax, dword [ebp - 0x350]
sub eax, dword [ebp - 0x354]
sar eax, 1
mov dword [ebp - 0x35c], eax
push dword [ebp - 0x35c]
push 0x43bb20
lea ecx, [ebp - 0x160]
call fcn.004073b3
push 0x2710
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x160]
call fcn.00407683
mov dword [ebp - 0x2c8], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x298], esp
push dword [ebp - 0x2c8]
call fcn.00416670
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x30c]
call fcn.0040d183
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x2d8], eax
mov byte [ebp - 4], 4
push dword [ebp - 0x2d8]
lea ecx, [ebp - 0x17c]
call fcn.00406f0c
mov byte [ebp - 4], 5
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402ad2
mov byte [ebp - 4], 3
xor eax, eax
cmp dword [ebp - 0x16c], 0
sete al
movzx eax, al
test eax, eax
je 0x4151ae
push str.DoInstall.cpp
lea ecx, [ebp - 0x64]
call fcn.00408211
mov byte [ebp - 4], 6
push str.bignoxvmmgr.exe_isnt_exist
lea eax, [ebp - 0x48]
push eax
call fcn.00419558
pop ecx
pop ecx
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x368], eax
mov byte [ebp - 4], 7
push 1
push dword [ebp - 0x368]
push 3
push 0x78d
lea eax, [ebp - 0x64]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 8
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00402ad2
mov byte [ebp - 4], 6
mov byte [ebp - 4], 9
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00402ad2
mov byte [ebp - 4], 3
mov byte [ebp - 0x299], 1
mov byte [ebp - 4], 0xa
push 0
push 1
lea ecx, [ebp - 0x17c]
call fcn.00402ad2
mov byte [ebp - 4], 2
mov byte [ebp - 4], 0xb
push 0
push 1
lea ecx, [ebp - 0x144]
call fcn.004050af
mov byte [ebp - 4], 1
mov byte [ebp - 4], 0xc
push 0
push 1
lea ecx, [ebp - 0x160]
call fcn.004050af
mov byte [ebp - 4], 0
mov dword [ebp - 4], 0xd
push 0
push 1
lea ecx, [ebp - 0x128]
call fcn.004050af
or dword [ebp - 4], 0xffffffff
mov al, byte [ebp - 0x299]
jmp 0x41550a
push str.DoInstall.cpp
lea ecx, [ebp - 0x9c]
call fcn.00408211
mov byte [ebp - 4], 0xe
push str.devices_has_already_installed_
lea eax, [ebp - 0x80]
push eax
call fcn.00419558
pop ecx
pop ecx
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x370], eax
mov byte [ebp - 4], 0xf
push 1
push dword [ebp - 0x370]
push 3
push 0x792
lea eax, [ebp - 0x9c]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 0x10
push 0
push 1
lea ecx, [ebp - 0x80]
call fcn.00402ad2
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 0x11
push 0
push 1
lea ecx, [ebp - 0x9c]
call fcn.00402ad2
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x17c]
call fcn.004169b1
mov dword [ebp - 0x2f4], eax
push str.5.2.36
push dword [ebp - 0x2f4]
call fcn.0041d920
pop ecx
pop ecx
test eax, eax
je 0x4153f0
push str.DoInstall.cpp
lea ecx, [ebp - 0xd4]
call fcn.00408211
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x17c]
call fcn.004169b1
mov dword [ebp - 0x304], eax
push dword [ebp - 0x304]
push str.vbox_v_is__s
lea eax, [ebp - 0xb8]
push eax
call fcn.00419558
add esp, 0xc
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x378], eax
mov byte [ebp - 4], 0x13
push 1
push dword [ebp - 0x378]
push 3
push 0x795
lea eax, [ebp - 0xd4]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 0x14
push 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.00402ad2
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0x15
push 0
push 1
lea ecx, [ebp - 0xd4]
call fcn.00402ad2
mov byte [ebp - 4], 3
push 0x114
push 0
lea eax, [ebp - 0x294]
push eax
call fcn.0041d130
add esp, 0xc
mov dword [ebp - 0x294], 0x114
lea eax, [ebp - 0x294]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov ecx, dword [ebp - 0x30c]
call fcn.00414792
test eax, eax
jne 0x41539d
mov byte [ebp - 0x29a], 0
mov byte [ebp - 4], 0x16
push 0
push 1
lea ecx, [ebp - 0x17c]
call fcn.00402ad2
mov byte [ebp - 4], 2
mov byte [ebp - 4], 0x17
push 0
push 1
lea ecx, [ebp - 0x144]
call fcn.004050af
mov byte [ebp - 4], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x160]
call fcn.00404d88
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00404d88
mov al, byte [ebp - 0x29a]
jmp 0x41550a
mov byte [ebp - 0x29b], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x17c]
call fcn.00402765
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x144]
call fcn.00404d88
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x160]
call fcn.00404d88
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00404d88
mov al, byte [ebp - 0x29b]
jmp 0x41550a
push str.DoInstall.cpp
lea ecx, [ebp - 0x10c]
call fcn.00408211
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x17c]
call fcn.004169b1
mov dword [ebp - 0x308], eax
push dword [ebp - 0x308]
push str.vbox_v_is__s
lea eax, [ebp - 0xf0]
push eax
call fcn.00419558
add esp, 0xc
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x380], eax
mov byte [ebp - 4], 0x19
push 1
push dword [ebp - 0x380]
push 3
push 0x7aa
lea eax, [ebp - 0x10c]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xf0]
call fcn.00402765
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10c]
call fcn.00402765
mov byte [ebp - 0x29c], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x17c]
call fcn.00402765
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x144]
call fcn.00404d88
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x160]
call fcn.00404d88
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.00404d88
mov al, byte [ebp - 0x29c]
jmp 0x41550a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041c438
leave
ret