Function at 0x41d030
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ddf4a
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x67432c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2c], ecx
call fcn.00452603
test al, al
je 0x41d082
cwde
sub byte [ebx], al
invalid
mov eax, dword [0x679464]
test eax, eax
jne 0x41d0bd
push 0x15c
call fcn.0046d56f
add esp, 4
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x41d0af
mov ecx, eax
call fcn.00443b90
jmp 0x41d0b1
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x679464], eax
mov ecx, eax
call fcn.00471d44
mov edx, eax
mov dword [ebp - 0x14], 7
xor eax, eax
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
cmp word [edx], ax
jne 0x41d0e3
xor ecx, ecx
jmp 0x41d0ff
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41d0f0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00402ad0
push 0xc
push str.WnConfig.exe
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 1
call fcn.00405da0
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41d34c
call fcn.00452465
test al, al
je 0x41d154
cmp cl, byte [esi + edx*2 - 8]
pop ss
fstp qword [esi + ebx*4 - 9]
dec edi
int 0x49
pop eax
pop edi
stosd dword es:[edi], eax
xor ch, byte [ebx + 0x34fd0e8]
add byte [eax + eax*8 + 0x62871b74], al
cmp edx, dword [edi - 0x5bf11b8a]
call fcn.00452129
test al, al
je 0x41d178
xchg dword [edx + 0x3b], esp
xchg edi, eax
jbe 0x41d147
push cs
movsb byte es:[edi], byte [esi]
pop ebx
out 0x2c, al
movsb byte es:[edi], byte [esi]
les esp, [eax + 0x797e92df]
insb byte es:[edi], dx
shl dword [eax + 0x24b06984], cl
sub al, 0x11
call fcn.00452129
test al, al
je 0x41d19c
cmp ebx, edx
mov ds, word [ecx - 0x4f49f839]
pop ds
sbb byte [ebx - 0x6507ed4b], al
popal
into
mov bh, 0x9e
rol dword [edx - 0x747725a], 0xda
cmp eax, 0x87d83
cmp dword [ebp + 8], 0
je 0x41d318
call fcn.0045205a
test al, al
je 0x41d1cf
test eax, 0x639f62cd
mov ebp, 0x10982465
cld
wait
inc ecx
or dword [ebp + 0x4de9c2b1], esp
test al, 0xad
cmp bh, byte [edi - 0x154c1c0e]
inc ebp
push ss
adc dword [ecx], esi
arpl ax, bp
sbb edx, dword [ebx + 3]
add byte [eax + eax*8 + 0x26641c74], al
add dword [esi - 0x3abb56b7], ebp
call fcn.004524ef
test al, al
je 0x41d1f4
add dword es:[esi - 0x3abb56b7], ebp
aad 0x7c
jb 0x41d1ee
cmp al, 0xc8
out dx, eax
pop ebx
and byte [esi + 0x7e], dl
cmp eax, 0x8cd10924
wait
loopne 0x41d242
or ecx, edx
mov word [ebx + 0x7d834ee0], ds
or al, 0
cmp dword [ebp + 0xc], 0
jne 0x41d2a6
call fcn.0045216e
add eax, dword [eax]
test al, al
je 0x41d218
loop 0x41d237
aam 0x79
stosb byte es:[edi], al
mov esi, 0xdf2745b4
cmp byte [eax - 0x3accf966], bh
jo 0x41d201
call fcn.004520e4
test al, al
je 0x41d237
invalid
invalid
mov ebx, dword [ebp - 0x2c]
mov ecx, ebx
call fcn.0041d6f0
test eax, eax
je 0x41d2b0
sal byte [ebx + ebp*2 - 0x18], 0x60
push edx
add eax, dword [eax]
call fcn.004524aa
test al, al
je 0x41d25e
dec eax
wait
xlatb
lahf
push ds
xchg bl, bl
cdq
push 0x46980e3a
arpl di, ax
push edx
call fcn.004521f8
test al, al
je 0x41d27e
cmp esi, dword [ecx + 0x62]
push 0xffffffffffffffd4
and ah, 0x78
jecxz 0x41d2eb
rcl byte [ebx + eax*8 - 0x2e], 0xa1
invalid
call fcn.004520e4
test al, al
je 0x41d2a6
adc al, 0xd5
wait
test dword [edi + eax*2 - 0x2b186c17], esi
mov gs, word [ebx - 0x67a9070c]
pop edx
ja 0x41d253
pop ds
stc
or al, 0xd7
xor al, 0x98
test dword [ebx], 0x8b5e031a
pop ebp
aam 0x8b
retf
mov ebx, dword [ebp - 0x2c]
mov ecx, ebx
call fcn.0041c7b0
cmp dword [ebp + 0x10], 0
je 0x41d2de
call fcn.0045205a
test al, al
je 0x41d344
invalid
mov ecx, ebx
call fcn.0041d380
test eax, eax
je 0x41d34c
call fcn.004521f8
dec edi
add eax, dword [eax]
test al, al
je 0x41d314
scasb al, byte es:[edi]
fsubr dword [edi + 7]
iretd
mov ecx, ebx
jmp 0x41d347
call fcn.00452603
test al, al
je 0x41d33c
daa
sbb eax, 0xab7e1ba
dec ecx
mov es, word [eax]
sbb byte [ebp + 0x2c804d19], cl
mov ch, 0x50
and edi, esp
mov bh, byte [eax]
ret
mov ecx, dword [ebp - 0x2c]
call fcn.0041c7b0
mov ecx, dword [ebp - 0x2c]
call fcn.0041ba80
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x41d361
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00402c20
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046d81d
mov esp, ebp
pop ebp
ret 0xc