Function at 0x40ea70
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a0b0e
mov eax, dword fs:[0]
push eax
sub esp, 0x11c
mov eax, dword [0x62b0b8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.0040e930
test eax, eax
je 0x40eac0
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
cmp edx, fcn.00401460
je 0x40eac0
mov ecx, eax
call edx
test al, al
jne 0x40f0b0
push 9
xor eax, eax
mov dword [ebp - 0xa4], 7
push str.WMini.exe
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xa8], 0
mov word [ebp - 0xb8], ax
call fcn.00401a60
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x70]
push 8
xor eax, eax
mov dword [ebp - 0x5c], 7
push str.WTip.exe
mov dword [ebp - 0x60], 0
mov word [ebp - 0x70], ax
call fcn.00401a60
mov byte [ebp - 4], 1
cmp dword [ebp - 0xa8], 0
je 0x40f069
cmp dword [ebp - 0x60], 0
je 0x40f069
call fcn.00402640
mov ecx, eax
call fcn.00438e68
test al, al
jne 0x40f069
call fcn.00402640
mov ecx, eax
call fcn.00438d86
test al, al
jne 0x40f069
push 0
call fcn.00448781
add esp, 4
mov edi, eax
push 1
push str.8b9aa
push str.Setting
call fcn.00402640
mov ecx, eax
call fcn.00437dc5
test eax, eax
jne 0x40ec17
call fcn.00402640
mov ecx, eax
call fcn.00438e39
test al, al
jne 0x40ec17
push 0
push str.d4686
push str.Setting
call fcn.00402640
mov ecx, eax
call fcn.00437dc5
mov esi, eax
cmp esi, 0x64
jg 0x40ec17
push 0
push str.6e4a0
push str.Setting
call fcn.00402640
mov ecx, eax
call fcn.00437dc5
mov ecx, edi
sub ecx, eax
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x708
jl 0x40ebfb
lea eax, [esi + 1]
push eax
push str.d4686
push str.Setting
call fcn.00402640
mov ecx, eax
call fcn.004396e4
push edi
push str.6e4a0
push str.Setting
call fcn.00402640
mov ecx, eax
call fcn.004396e4
jmp 0x40f069
xor eax, eax
mov dword [ebp - 0x74], 7
mov dword [ebp - 0x78], 0
mov word [ebp - 0x88], ax
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], eax
mov word [ebp - 0x40], ax
push eax
push str.d3617
push str.Setting
mov byte [ebp - 4], 3
mov byte [ebp - 0x119], al
call fcn.00402640
mov ecx, eax
call fcn.00437dc5
mov ebx, eax
lea ecx, [ebp - 0x88]
test bl, 1
jne 0x40ec82
push str.WMini.exe
mov byte [ebp - 0x119], 1
call fcn.00401a10
push 0x6209ec
jmp 0x40ec91
push str.WTip.exe
call fcn.00401a10
push 0x6209f4
lea ecx, [ebp - 0x40]
call fcn.00401a10
call fcn.00402640
mov ecx, eax
call fcn.00437c76
push eax
lea ecx, [ebp - 0x118]
call fcn.00401870
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x118]
call fcn.00405600
lea ecx, [ebx + 1]
xor eax, eax
cmp ecx, 0x3e8
cmovl eax, ecx
push eax
push str.d3617
push str.Setting
call fcn.00402640
mov ecx, eax
call fcn.004396e4
cmp dword [ebp - 0x78], 0
je 0x40f04b
call fcn.0043aa34
test al, al
je 0x40ed1f
in al, dx
scasd eax, dword es:[edi]
aad 0xec
jns 0x40ed5c
xor ebp, dword [ebx - 0x27ae50c7]
xor esp, ebp
cmp ch, byte [edi - 0x7f]
pop ss
xchg dword [ecx + 0x18], ecx
add al, 0x1f
popfd
les ecx, [esi + 0x39]
les ecx, [ebp - 0x877b]
call dword [eax - 0x73]
dec ebp
test al, 0xe8
bound edi, qword [ebx]
invalid
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x58]
call fcn.00402890
mov byte [ebp - 4], 5
lea eax, [ebp - 0x58]
cmp dword [ebp - 0x44], 8
cmovae eax, dword [ebp - 0x58]
push eax
call int.004253b6
add esp, 4
test eax, eax
jne 0x40f043
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x28]
call fcn.00402890
mov byte [ebp - 4], 6
inc esi
inc ebp
cld
push es
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40edc1
cmp dword [ebp - 0x2c], 8
lea esi, [ebp - 0x40]
lea edi, [ebp - 0x28]
cmovae esi, dword [ebp - 0x40]
cmp dword [ebp - 0x14], 8
cmovae edi, dword [ebp - 0x28]
call fcn.00402640
cmp byte [eax + 5], 0
je 0x40eda9
push 1
push esi
push edi
call fcn.00425bd4
add esp, 0xc
movzx eax, al
jmp 0x40edb9
push 0
push 0
push 0
push esi
push edi
call fcn.004258a2
add esp, 0x14
test eax, eax
jne 0x40f03b
push str.05165217412215271951670712255259
lea ecx, [ebp - 0xe8]
call fcn.00401940
cmp byte [ebp - 0x119], 0
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 7
je 0x40edeb
push str.05165217412215271951670712255259
jmp 0x40edf0
push str.11073711366150254156461426514560
call fcn.004070d0
cmp dword [ebp - 0xd4], 0x10
lea eax, [ebp - 0xe8]
cmovae eax, dword [ebp - 0xe8]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00422a6c
add esp, 8
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0
push 0x620a44
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 9
call fcn.00401940
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x100]
cmp dword [ebp - 0xec], 0x10
lea ecx, [ebp - 0xa0]
cmovae eax, dword [ebp - 0x100]
push eax
call fcn.00401940
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00420d67
add esp, 0xc
lea ecx, [ebp - 0xa0]
call fcn.004018d0
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 9
call fcn.004018d0
mov esi, dword [ebp - 0x128]
mov eax, dword [ebp - 0x124]
cmp esi, eax
je 0x40f01a
nop
cmp dword [esi + 0x14], 0x10
jb 0x40eeca
mov eax, dword [esi]
jmp 0x40eecc
mov eax, esi
push eax
lea ecx, [ebp - 0xd0]
call fcn.00401940
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.004250cb
add esp, 8
lea ecx, [ebp - 0x58]
push eax
call fcn.00405290
lea ecx, [ebp - 0xa0]
call fcn.00401830
cmp dword [ebp - 0x44], 8
lea eax, [ebp - 0x58]
cmovae eax, dword [ebp - 0x58]
push eax
call int.004253b6
add esp, 4
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xd0]
call fcn.004018d0
mov eax, dword [ebp - 0x124]
add esi, 0x18
cmp esi, eax
jne 0x40eec0
mov esi, dword [ebp - 0x128]
cmp esi, eax
je 0x40f01a
cmp dword [esi + 0x14], 0x10
jb 0x40ef4e
mov eax, dword [esi]
jmp 0x40ef50
mov eax, esi
push eax
lea ecx, [ebp - 0xa0]
call fcn.00401940
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0xd0]
push eax
call fcn.004250cb
add esp, 8
lea ecx, [ebp - 0x58]
push eax
call fcn.00405290
lea ecx, [ebp - 0xd0]
call fcn.00401830
call fcn.00402640
mov ecx, eax
call fcn.00437c76
push eax
lea ecx, [ebp - 0x28]
call fcn.00401a10
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x28]
call fcn.00405600
cmp dword [ebp - 0x2c], 8
lea edi, [ebp - 0x40]
lea ebx, [ebp - 0x28]
cmovae edi, dword [ebp - 0x40]
cmp dword [ebp - 0x14], 8
cmovae ebx, dword [ebp - 0x28]
call fcn.00402640
cmp byte [eax + 5], 0
je 0x40efe1
push 1
push edi
push ebx
call fcn.00425bd4
add esp, 0xc
movzx eax, al
jmp 0x40eff1
push 0
push 0
push 0
push edi
push ebx
call fcn.004258a2
add esp, 0x14
lea ecx, [ebp - 0xa0]
test eax, eax
jne 0x40f015
mov byte [ebp - 4], 9
call fcn.004018d0
add esi, 0x18
cmp esi, dword [ebp - 0x124]
jne 0x40ef44
jmp 0x40f01a
call fcn.004018d0
lea ecx, [ebp - 0x128]
call fcn.00408f20
lea ecx, [ebp - 0x100]
call fcn.004018d0
lea ecx, [ebp - 0xe8]
call fcn.004018d0
lea ecx, [ebp - 0x28]
call fcn.00401830
lea ecx, [ebp - 0x58]
call fcn.00401830
lea ecx, [ebp - 0x118]
call fcn.00401830
lea ecx, [ebp - 0x40]
call fcn.00401830
lea ecx, [ebp - 0x88]
call fcn.00401830
mov eax, dword [ebp - 0x5c]
cmp eax, 8
jb 0x40f07e
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.00401f40
xor eax, eax
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x60], 0
cmp eax, 8
jb 0x40f0b0
inc eax
lea ecx, [ebp - 0xb8]
push eax
push dword [ebp - 0xb8]
call fcn.00401f40
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00433ee3
mov esp, ebp
pop ebp
ret 4