Function at 0x40ead0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a2f5e
mov eax, dword fs:[0]
push eax
sub esp, 0x11c
mov eax, dword [0x62e10c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.0040e990
test eax, eax
je 0x40eb20
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
cmp edx, fcn.004014c0
je 0x40eb20
mov ecx, eax
call edx
test al, al
jne 0x40f110
push 9
xor eax, eax
mov dword [ebp - 0xa4], 7
push str.WMini.exe
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xa8], 0
mov word [ebp - 0xb8], ax
call fcn.00401ac0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x70]
push 8
xor eax, eax
mov dword [ebp - 0x5c], 7
push str.WTip.exe
mov dword [ebp - 0x60], 0
mov word [ebp - 0x70], ax
call fcn.00401ac0
mov byte [ebp - 4], 1
cmp dword [ebp - 0xa8], 0
je 0x40f0c9
cmp dword [ebp - 0x60], 0
je 0x40f0c9
call fcn.004026a0
mov ecx, eax
call fcn.0043b713
test al, al
jne 0x40f0c9
call fcn.004026a0
mov ecx, eax
call fcn.0043b631
test al, al
jne 0x40f0c9
push 0
call fcn.00449e5c
add esp, 4
mov edi, eax
push 1
push str.8b9aa
push str.Setting
call fcn.004026a0
mov ecx, eax
call fcn.0043a66e
test eax, eax
jne 0x40ec77
call fcn.004026a0
mov ecx, eax
call fcn.0043b6e4
test al, al
jne 0x40ec77
push 0
push str.d4686
push str.Setting
call fcn.004026a0
mov ecx, eax
call fcn.0043a66e
mov esi, eax
cmp esi, 0x64
jg 0x40ec77
push 0
push str.6e4a0
push str.Setting
call fcn.004026a0
mov ecx, eax
call fcn.0043a66e
mov ecx, edi
sub ecx, eax
mov eax, ecx
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x708
jl 0x40ec5b
lea eax, [esi + 1]
push eax
push str.d4686
push str.Setting
call fcn.004026a0
mov ecx, eax
call fcn.0043c038
push edi
push str.6e4a0
push str.Setting
call fcn.004026a0
mov ecx, eax
call fcn.0043c038
jmp 0x40f0c9
xor eax, eax
mov dword [ebp - 0x74], 7
mov dword [ebp - 0x78], 0
mov word [ebp - 0x88], ax
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], eax
mov word [ebp - 0x40], ax
push eax
push str.d3617
push str.Setting
mov byte [ebp - 4], 3
mov byte [ebp - 0x119], al
call fcn.004026a0
mov ecx, eax
call fcn.0043a66e
mov ebx, eax
lea ecx, [ebp - 0x88]
test bl, 1
jne 0x40ece2
push str.WMini.exe
mov byte [ebp - 0x119], 1
call fcn.00401a70
push 0x6236d4
jmp 0x40ecf1
push str.WTip.exe
call fcn.00401a70
push 0x6236dc
lea ecx, [ebp - 0x40]
call fcn.00401a70
call fcn.004026a0
mov ecx, eax
call fcn.0043a51f
push eax
lea ecx, [ebp - 0x118]
call fcn.004018d0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x118]
call fcn.00405660
lea ecx, [ebx + 1]
xor eax, eax
cmp ecx, 0x3e8
cmovl eax, ecx
push eax
push str.d3617
push str.Setting
call fcn.004026a0
mov ecx, eax
call fcn.0043c038
cmp dword [ebp - 0x78], 0
je 0x40f0ab
call fcn.00425045
test al, al
je 0x40ed7f
inc ebp
into
sbb byte [edi - 0x8a11c7d], 0x33
aaa
hlt
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x58]
call fcn.004028f0
mov byte [ebp - 4], 5
lea eax, [ebp - 0x58]
cmp dword [ebp - 0x44], 8
cmovae eax, dword [ebp - 0x58]
push eax
call fcn.0042a2b3
add esp, 4
test eax, eax
jne 0x40f0a3
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x28]
call fcn.004028f0
mov byte [ebp - 4], 6
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40ee21
cmp dword [ebp - 0x2c], 8
lea esi, [ebp - 0x40]
lea edi, [ebp - 0x28]
cmovae esi, dword [ebp - 0x40]
cmp dword [ebp - 0x14], 8
cmovae edi, dword [ebp - 0x28]
call fcn.004026a0
cmp byte [eax + 5], 0
je 0x40ee09
push 1
push esi
push edi
call fcn.004291c8
add esp, 0xc
movzx eax, al
jmp 0x40ee19
push 0
push 0
push 0
push esi
push edi
call fcn.00428e96
add esp, 0x14
test eax, eax
jne 0x40f09b
push str.17639521265359691351040647102845
lea ecx, [ebp - 0xe8]
call fcn.004019a0
cmp byte [ebp - 0x119], 0
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 7
je 0x40ee4b
push str.17639521265359691351040647102845
jmp 0x40ee50
push str.49575601241828566943006067392507
call fcn.00407130
cmp dword [ebp - 0xd4], 0x10
lea eax, [ebp - 0xe8]
cmovae eax, dword [ebp - 0xe8]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00423ec9
add esp, 8
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0
push 0x62372c
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 9
call fcn.004019a0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x100]
cmp dword [ebp - 0xec], 0x10
lea ecx, [ebp - 0xa0]
cmovae eax, dword [ebp - 0x100]
push eax
call fcn.004019a0
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00428014
add esp, 0xc
lea ecx, [ebp - 0xa0]
call fcn.00401930
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 9
call fcn.00401930
mov esi, dword [ebp - 0x128]
mov eax, dword [ebp - 0x124]
cmp esi, eax
je 0x40f07a
nop
cmp dword [esi + 0x14], 0x10
jb 0x40ef2a
mov eax, dword [esi]
jmp 0x40ef2c
mov eax, esi
push eax
lea ecx, [ebp - 0xd0]
call fcn.004019a0
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0xa0]
push eax
call int.004281cb
add esp, 8
lea ecx, [ebp - 0x58]
push eax
call fcn.004052f0
lea ecx, [ebp - 0xa0]
call fcn.00401890
cmp dword [ebp - 0x44], 8
lea eax, [ebp - 0x58]
cmovae eax, dword [ebp - 0x58]
push eax
call fcn.0042a2b3
add esp, 4
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xd0]
call fcn.00401930
mov eax, dword [ebp - 0x124]
add esi, 0x18
cmp esi, eax
jne 0x40ef20
mov esi, dword [ebp - 0x128]
cmp esi, eax
je 0x40f07a
cmp dword [esi + 0x14], 0x10
jb 0x40efae
mov eax, dword [esi]
jmp 0x40efb0
mov eax, esi
push eax
lea ecx, [ebp - 0xa0]
call fcn.004019a0
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0xd0]
push eax
call int.004281cb
add esp, 8
lea ecx, [ebp - 0x58]
push eax
call fcn.004052f0
lea ecx, [ebp - 0xd0]
call fcn.00401890
call fcn.004026a0
mov ecx, eax
call fcn.0043a51f
push eax
lea ecx, [ebp - 0x28]
call fcn.00401a70
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x28]
call fcn.00405660
cmp dword [ebp - 0x2c], 8
lea edi, [ebp - 0x40]
lea ebx, [ebp - 0x28]
cmovae edi, dword [ebp - 0x40]
cmp dword [ebp - 0x14], 8
cmovae ebx, dword [ebp - 0x28]
call fcn.004026a0
cmp byte [eax + 5], 0
je 0x40f041
push 1
push edi
push ebx
call fcn.004291c8
add esp, 0xc
movzx eax, al
jmp 0x40f051
push 0
push 0
push 0
push edi
push ebx
call fcn.00428e96
add esp, 0x14
lea ecx, [ebp - 0xa0]
test eax, eax
jne 0x40f075
mov byte [ebp - 4], 9
call fcn.00401930
add esi, 0x18
cmp esi, dword [ebp - 0x124]
jne 0x40efa4
jmp 0x40f07a
call fcn.00401930
lea ecx, [ebp - 0x128]
call fcn.00408f80
lea ecx, [ebp - 0x100]
call fcn.00401930
lea ecx, [ebp - 0xe8]
call fcn.00401930
lea ecx, [ebp - 0x28]
call fcn.00401890
lea ecx, [ebp - 0x58]
call fcn.00401890
lea ecx, [ebp - 0x118]
call fcn.00401890
lea ecx, [ebp - 0x40]
call fcn.00401890
lea ecx, [ebp - 0x88]
call fcn.00401890
mov eax, dword [ebp - 0x5c]
cmp eax, 8
jb 0x40f0de
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.00401fa0
xor eax, eax
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x60], 0
cmp eax, 8
jb 0x40f110
inc eax
lea ecx, [ebp - 0xb8]
push eax
push dword [ebp - 0xb8]
call fcn.00401fa0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043671f
mov esp, ebp
pop ebp
ret 4