Function at 0x402e30
Capabilities:
Check if file exists

Disassembly:
push 0xffffffffffffffff
push 0x4144e0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x624
push ebx
push esi
push edi
mov eax, dword [esp + 0x648]
mov esi, dword [sym.imp.MSVCRT.dll_swprintf]
push eax
lea ecx, [esp + 0x42c]
xor ebx, ebx
push 0x41cc44
push ecx
mov dword [esp + 0x644], ebx
call esi
mov edx, dword [esp + 0x64c]
add esp, 0xc
lea eax, [esp + 0x220]
push str.system.dat
push edx
push 0x41c15c
push eax
call esi
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
add esp, 0x10
lea ecx, [esp + 0x220]
push ecx
call edi
test eax, eax
je 0x403059
mov eax, dword [esp + 0x644]
lea edx, [esp + 0x42e]
and eax, 0xffff
push edx
push eax
lea ecx, [esp + 0x20]
push str._c:_sSystem32configSOFTWARE
push ecx
call esi
add esp, 0x10
lea edx, [esp + 0x18]
push edx
call edi
test eax, eax
je 0x40301f
lea eax, [esp + 0x18]
push eax
push str.LOAD_HKLMRRUSystemHive__s
push 0x4207a4
call sub.MFC42u.DLL_CString::Format
add esp, 0xc
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x4207b8
call fcn.00413dc4
push 0x20
push 0x40
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x4207a4
mov byte [esp + 0x654], 1
call sub.MFC42u.DLL_CString::CString_2
push ecx
mov byte [esp + 0x654], 2
mov ecx, esp
mov dword [esp + 0x28], esp
push str.reg.exe
call fcn.00413dc4
mov byte [esp + 0x654], bl
call fcn.0040eb10
add esp, 0x1c
lea ecx, [esp + 0x220]
push ecx
push str.RESTORE_HKLMRRUSystemHiveCurrentControlSetControlLsa__s
push 0x4207a4
call sub.MFC42u.DLL_CString::Format
add esp, 0xc
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x4207b8
call fcn.00413dc4
push 0x20
push 0x40
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x4207a4
mov byte [esp + 0x654], 3
call sub.MFC42u.DLL_CString::CString_2
push ecx
mov byte [esp + 0x654], 4
mov ecx, esp
mov dword [esp + 0x30], esp
push str.reg.exe
call fcn.00413dc4
mov byte [esp + 0x654], bl
call fcn.0040eb10
add esp, 0x1c
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x4207b8
call fcn.00413dc4
push 0x20
push 0x40
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.UNLOAD_HKLMRRUSystemHive
mov byte [esp + 0x654], 5
call fcn.00413dc4
push ecx
mov byte [esp + 0x654], 6
mov ecx, esp
mov dword [esp + 0x30], esp
push str.reg.exe
call fcn.00413dc4
mov byte [esp + 0x654], bl
call fcn.0040eb10
add esp, 0x1c
jmp 0x4030ad
lea edx, [esp + 0x18]
push edx
push str.SYSTEM_file_doesnt_exist:__s
push 0x42079c
call sub.MFC42u.DLL_CString::Format
add esp, 0xc
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x41c198
call fcn.00413dc4
push ecx
mov byte [esp + 0x644], 7
mov ecx, esp
mov dword [esp + 0x1c], esp
jmp 0x403094
lea eax, [esp + 0x220]
push eax
push str.System_hive_file_doesnt_exist:__s
push 0x42079c
call sub.MFC42u.DLL_CString::Format
add esp, 0xc
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0x41c198
call fcn.00413dc4
push ecx
mov byte [esp + 0x644], 8
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x42079c
call sub.MFC42u.DLL_CString::CString_2
mov byte [esp + 0x644], bl
call fcn.00406ff0
add esp, 0xc
lea ecx, [esp + 0x648]
mov dword [esp + 0x638], 0xffffffff
call sub.MFC42u.DLL_CString::CString
mov ecx, dword [esp + 0x630]
pop edi
pop esi
xor eax, eax
mov dword fs:[0], ecx
pop ebx
add esp, 0x630
ret