Function at 0x40c3e0
Capabilities:
Check if file exists
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b338b
mov eax, dword fs:[0]
push eax
mov eax, 0x1c80
call fcn.004b14f0
mov eax, dword [0x5603e8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x1c88], ecx
mov dword [ebp - 0x1c8c], eax
call fcn.0043c7f0
cmp eax, 1
je 0x40c9b8
test ebx, ebx
je 0x40c9d5
cmp word [ebx], 0
je 0x40c9d5
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x41e]
push edx
mov word [ebp - 0x420], cx
call sub.MSVCR100.dll_memset
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0xa36]
push ecx
mov word [ebp - 0xa38], ax
call sub.MSVCR100.dll_memset
xor edx, edx
push 0x40e
push edx
lea eax, [ebp - 0x145e]
push eax
mov word [ebp - 0x1460], dx
call sub.MSVCR100.dll_memset
xor ecx, ecx
push 0x40e
push ecx
lea edx, [ebp - 0x82e]
push edx
mov word [ebp - 0x830], cx
call sub.MSVCR100.dll_memset
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x216]
push ecx
mov word [ebp - 0x218], ax
call sub.MSVCR100.dll_memset
xor edx, edx
push 0x40e
push edx
lea eax, [ebp - 0x186e]
push eax
mov word [ebp - 0x1870], dx
call sub.MSVCR100.dll_memset
add esp, 0x48
xor ecx, ecx
push 0x40e
push ecx
lea edx, [ebp - 0x1c7e]
push edx
mov word [ebp - 0x1c80], cx
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0
call fcn.00438260
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
movzx eax, al
neg eax
sbb eax, eax
and eax, 0xfffffff7
add eax, 0x19
push eax
lea ecx, [ebp - 0xa38]
push ecx
push 0
call esi
test eax, eax
je 0x40c59c
push 0
call fcn.00438260
movzx edx, al
neg edx
sbb edx, edx
and edx, 0xffffffeb
add edx, 0x17
push edx
lea eax, [ebp - 0x830]
push eax
push 0
call esi
test eax, eax
je 0x40c59c
call fcn.00438260
test al, al
je 0x40c5a6
push 0
push 0x10
lea ecx, [ebp - 0x420]
push ecx
push 0
call esi
test eax, eax
je 0x40c59c
push 0
push 2
lea edx, [ebp - 0x1460]
push edx
push 0
call esi
test eax, eax
je 0x40c59c
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.004082b0
add esp, 8
test eax, eax
jne 0x40c614
mov eax, 0x80004005
jmp 0x40c9da
lea ecx, [ebp - 0x1c81]
call fcn.004331f0
push 0
push 0x10
lea ecx, [ebp - 0x420]
push ecx
push 0
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x40c9bc
push 0
push 2
lea edx, [ebp - 0x1460]
push edx
push 0
call esi
test eax, eax
je 0x40c9bc
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.004082b0
add esp, 8
test eax, eax
je 0x40c9bc
lea ecx, [ebp - 0x1c81]
mov dword [ebp - 4], 0xffffffff
call fcn.00433280
lea edi, [ebp - 0x420]
add edi, 0xfffffffe
lea ecx, [ecx]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x40c620
mov esi, dword [0x4c7780]
mov dword [edi], esi
lea edi, [ebp - 0x1460]
add edi, 0xfffffffe
lea ecx, [ecx]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x40c640
mov dword [edi], esi
lea edi, [ebp - 0xa38]
add edi, 0xfffffffe
jmp 0x40c660
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x40c660
mov dword [edi], esi
mov ecx, 0x4c79ac
lea eax, [ebp - 0x830]
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40c6a6
test dx, dx
je 0x40c6a2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40c6a6
add eax, 4
add ecx, 4
test dx, dx
jne 0x40c680
xor eax, eax
jmp 0x40c6ab
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40c6ce
lea edi, [ebp - 0x830]
add edi, 0xfffffffe
jmp 0x40c6c0
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x40c6c0
mov dword [edi], esi
mov esi, dword [sym.imp.MSVCR100.dll__wcsicmp]
push str.startmenu
push ebx
call esi
add esp, 8
test eax, eax
jne 0x40c951
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0xe46]
push edx
mov word [ebp - 0xe48], cx
call sub.MSVCR100.dll_memset
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x104e]
push ecx
mov word [ebp - 0x1050], ax
call sub.MSVCR100.dll_memset
mov esi, dword [sym.imp.MSVCR100.dll_wcsncpy]
push 0x104
lea edx, [ebp - 0x1460]
push edx
lea eax, [ebp - 0xe48]
push eax
call esi
add esp, 0x24
mov ecx, 0x4c79ac
lea eax, [ebp - 0x830]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x40c76c
test dx, dx
je 0x40c768
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x40c76c
add eax, 4
add ecx, 4
test dx, dx
jne 0x40c746
xor eax, eax
jmp 0x40c771
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x40c91f
push 0x104
lea ecx, [ebp - 0x830]
push ecx
lea edx, [ebp - 0x1050]
push edx
call esi
add esp, 0xc
push 0x104
lea eax, [ebp - 0x1c80]
push eax
push 1
push 0
push 2
call fcn.0043baf0
test eax, eax
js 0x40c8f2
xor eax, eax
jmp 0x40c7c0
movzx ecx, word [ebp + eax - 0x1c80]
mov word [ebp + eax - 0x1870], cx
add eax, 2
test cx, cx
jne 0x40c7c0
lea ecx, [ebp - 0x1870]
push 0x5c
push ecx
call dword [sym.imp.MSVCR100.dll_wcsrchr]
xor edx, edx
lea edi, [ebp - 0x1870]
add esp, 8
mov word [eax], dx
add edi, 0xfffffffe
jmp 0x40c800
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x40c800
mov eax, dword [ebp - 0x1c8c]
mov ecx, 0xa
mov esi, str.utilityinstall.ini
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
test eax, eax
je 0x40c857
cmp word [eax], dx
je 0x40c857
mov edx, eax
jmp 0x40c830
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x40c830
lea edi, [ebp - 0x830]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x40c846
jmp 0x40c8e2
lea eax, [ebp - 0x1870]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x40c8f2
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0xc3e]
push edx
mov word [ebp - 0xc40], cx
call sub.MSVCR100.dll_memset
add esp, 0xc
lea eax, [ebp - 0x1870]
push eax
push 0x104
lea ecx, [ebp - 0xc40]
push ecx
push 0x4c79ac
push str.startmenudir
push str.installinfo
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0xc40]
mov edx, eax
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x40c8c0
lea edi, [ebp - 0x830]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x40c8d6
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0x1c88]
push 1
lea edx, [ebp - 0x830]
push edx
mov ecx, esi
call fcn.004076f0
lea eax, [ebp - 0x830]
push eax
lea ecx, [ebp - 0x1050]
push ecx
mov ecx, esi
call fcn.0040c270
jmp 0x40c925
mov esi, dword [ebp - 0x1c88]
push 1
lea edx, [ebp - 0x1460]
push edx
mov ecx, esi
call fcn.004076f0
lea eax, [ebp - 0x1460]
push eax
lea ecx, [ebp - 0xe48]
push ecx
mov ecx, esi
call fcn.0040c270
xor eax, eax
jmp 0x40c9da
push 0x4c8924
push ebx
call esi
add esp, 8
test eax, eax
jne 0x40c992
push str.MicrosoftInternet_ExplorerQuick_Launch_
lea edx, [ebp - 0x218]
push 0x104
push edx
call dword [sym.imp.MSVCR100.dll_wcscat_s]
mov ecx, dword [ebp - 0x1c88]
add esp, 0xc
push 0
lea eax, [ebp - 0x218]
push eax
call fcn.004076f0
xor eax, eax
jmp 0x40c9da
mov esi, dword [ebp - 0x1c88]
push 0
lea ecx, [ebp - 0x420]
push ecx
mov ecx, esi
call fcn.004076f0
push 0
lea edx, [ebp - 0xa38]
push edx
mov ecx, esi
call fcn.004076f0
xor eax, eax
jmp 0x40c9da
lea ecx, [ebp - 0x1c81]
mov dword [ebp - 4], 0xffffffff
call fcn.00433280
mov eax, 0x80004005
jmp 0x40c9da
mov eax, 0x80070057
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b12f6
mov esp, ebp
pop ebp
ret 0xc