Function at 0x409b50
Capabilities:
Check if file exists

Disassembly:
push 0xffffffffffffffff
push 0x41aad1
mov eax, dword fs:[0]
push eax
sub esp, 0x644
mov eax, dword [0x4243c8]
xor eax, esp
mov dword [esp + 0x640], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4243c8]
xor eax, esp
push eax
lea eax, [esp + 0x658]
mov dword fs:[0], eax
mov eax, dword [esp + 0x66c]
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ebp, ecx
mov ecx, dword [esp + 0x670]
xor ebx, ebx
mov byte [ebp + 0x10], bl
mov edx, dword [ebp + 0x14]
push edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call edi
mov dword [ebp + 0x14], ebx
mov dword [esp + 0x14], ebx
cmp byte [esp + 0x674], bl
mov dword [esp + 0x660], ebx
je 0x409c47
push 0x410
push str.ACB3FAA1_462D_475C_AC34_B1BD33673C0D
lea ecx, [esp + 0x28]
call fcn.00408290
lea ecx, [esp + 0x20]
mov byte [esp + 0x660], 1
call fcn.004077a0
mov esi, eax
cmp esi, ebx
je 0x409c11
push ebx
call edi
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp eax, ebx
mov dword [esp + 0x14], eax
jne 0x409c11
push 0x8007000e
call fcn.00401030
lea ecx, [esp + 0x20]
mov byte [esp + 0x660], bl
call fcn.00407fe0
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x41c8c8
call edi
push eax
push 0x41c8c8
lea ecx, [esp + 0x1c]
call fcn.004099c0
cmp eax, ebx
jge 0x409c8e
push eax
call fcn.00401030
push 0x616
lea eax, [esp + 0x42]
push ebx
push eax
mov word [esp + 0x48], bx
call fcn.0040b3b0
lea ecx, [esp + 0x48]
push 0x30c
push ecx
call fcn.00408020
add esp, 0x14
push ebx
call edi
lea edx, [esp + 0x3c]
push edx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
cmp eax, ebx
mov dword [esp + 0x14], eax
jne 0x409c21
push 0x8007000e
call fcn.00401030
mov eax, dword [esp + 0x668]
add eax, 0xffffffff
cmp eax, 6
ja case.0x409ca1.2
jmp dword [eax*4 + 0x409e74]
push str.Config
call edi
push eax
push str.Config
lea ecx, [esp + 0x1c]
call fcn.004099c0
cmp eax, ebx
jge 0x409cff
push eax
call fcn.00401030
push str.Settings
call edi
push eax
push str.Settings
lea ecx, [esp + 0x1c]
call fcn.004099c0
cmp eax, ebx
jge 0x409ce8
push eax
call fcn.00401030
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x409cff
cmp word [eax], bx
je 0x409cff
push eax
lea ecx, [esp + 0x18]
call fcn.00409a90
mov esi, dword [esp + 0x14]
push esi
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x409dfe
push str..dat
call edi
push eax
push str..dat
lea ecx, [esp + 0x1c]
call fcn.004099c0
cmp eax, ebx
jge 0x409d88
push eax
call fcn.00401030
push str.DLPSettings
call edi
push eax
push str.DLPSettings
lea ecx, [esp + 0x1c]
call fcn.004099c0
cmp eax, ebx
jge 0x409ce8
push eax
call fcn.00401030
push str.System
call edi
push eax
push str.System
lea ecx, [esp + 0x1c]
call fcn.004099c0
cmp eax, ebx
jge 0x409cff
push eax
call fcn.00401030
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
xor esi, esi
mov dword [esp + 0x14], esi
jmp 0x409d03
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x409da1
push eax
mov ecx, ebp
call fcn.0040a3d0
mov esi, dword [esp + 0x14]
mov byte [ebp + 0x10], al
jmp 0x409dfe
call dword [0x42430c]
mov esi, dword [esp + 0x14]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x409dfe
push esi
lea ecx, [esp + 0x24]
call fcn.00407da0
lea ecx, [esp + 0x20]
mov byte [esp + 0x660], 2
call fcn.00407560
test al, al
je 0x409dee
push esi
mov ecx, ebp
call fcn.0040a410
cmp eax, ebx
setge cl
mov byte [ebp + 0x10], cl
lea ecx, [esp + 0x20]
call fcn.004075b0
lea ecx, [esp + 0x20]
mov byte [esp + 0x660], bl
call fcn.00407f60
cmp byte [ebp + 0x10], bl
je 0x409e3d
mov eax, dword [ebp + 0x14]
cmp eax, esi
je 0x409e3d
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp esi, ebx
jne 0x409e19
xor eax, eax
jmp 0x409e28
push esi
call dword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
push eax
push esi
call dword [sym.imp.OLEAUT32.dll_DllRegisterServer]
cmp esi, ebx
mov dword [ebp + 0x14], eax
je 0x409e3d
cmp eax, ebx
jne 0x409e3d
push 0x8007000e
call fcn.00401030
mov bl, byte [ebp + 0x10]
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov al, bl
mov ecx, dword [esp + 0x658]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x640]
xor ecx, esp
call fcn.0040b399
add esp, 0x650
ret 0x10