Function at 0x402200
Capabilities:
Check if file exists
Get file attributes
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x824
mov eax, dword [0x4f0008]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x4f7f30]
xor edx, edx
mov ecx, dword [0x4f7d48]
push ebx
push esi
mov eax, dword [eax + 0x570]
push edi
xor edi, edi
mov eax, dword [eax + 4]
mov eax, dword [eax + 4]
test eax, eax
je 0x40223d
mov eax, dword [eax + 4]
inc edx
test eax, eax
jne 0x402235
mov eax, dword [ecx]
push edx
call dword [eax + 4]
mov ebx, dword [0x4f7f30]
mov eax, dword [ebx + 0x570]
mov eax, dword [eax + 4]
mov esi, dword [eax + 4]
test esi, esi
je 0x4024a4
nop dword [eax]
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x810], eax
test eax, eax
je 0x4022e8
cmp dword [esi + 0x14], 0
mov ebx, dword [esi + 0x1c]
mov dword [ebp - 0x814], ebx
jne 0x4022d0
mov ecx, 3
call fcn.004579f0
test eax, eax
je 0x4022d0
cmp dword [esi + 0x24], 0
lea ebx, [esi + 0x24]
jne 0x4022ce
mov eax, dword [0x505234]
test eax, eax
jne 0x4022b3
mov ecx, dword [0x505204]
push 0xffffffffffffffff
push str.keyset
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [0x505234], eax
mov edx, dword [eax]
lea ecx, [ebp - 0x824]
push ecx
push ebx
push dword [ebp - 0x810]
mov ecx, eax
push dword [ebp - 0x814]
call dword [edx + 4]
mov ebx, dword [ebx]
mov ecx, dword [0x4f7d48]
push edi
push dword [ebp - 0x810]
mov eax, dword [ecx]
push ebx
call dword [eax + 0xc]
jmp 0x402491
mov ecx, 3
call fcn.00457a50
test eax, eax
je 0x4023d4
lea eax, [ebx + 0x978]
push eax
lea eax, [ebp - 0x614]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push dword [esi + 8]
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x40c]
push str._04d
push eax
call ebx
push 0x4d64d8
lea eax, [ebp - 0x40c]
push eax
push str.Fonts
lea eax, [ebp - 0x614]
push eax
lea eax, [ebp - 0x20c]
push str._s_s_s._s
push eax
call ebx
add esp, 0x24
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x40239a
mov eax, dword [0x5051ac]
cmp dword [eax + 0xc], 0
je 0x402491
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x80c]
push 0x4d2310
push eax
call ebx
add esp, 0xc
lea ecx, [ebp - 0x80c]
call fcn.00449bb0
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea eax, [ebp - 0x818]
push eax
lea edx, [esi + 0x24]
lea ecx, [ebp - 0x20c]
call fcn.0048cce0
add esp, 4
test eax, eax
je 0x402491
mov ecx, dword [0x4f7d48]
push edi
push dword [ebp - 0x818]
mov eax, dword [ecx]
push dword [esi + 0x24]
call dword [eax + 0xc]
jmp 0x402491
mov eax, dword [esi + 0x18]
mov dword [ebp - 0x814], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x810], eax
lea eax, [ebx + 0x978]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyW]
push eax
lea eax, [ebp - 0x614]
push eax
call ebx
mov eax, dword [ebp - 0x814]
mov dword [ebp - 0x820], 0x4d653c
mov dword [ebp - 0x81c], 0x4d6544
cmp eax, 1
jg 0x40242b
push dword [ebp + eax*4 - 0x820]
lea eax, [ebp - 0x40c]
push eax
call ebx
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x40c]
push eax
push dword [ebp - 0x810]
lea eax, [ebp - 0x614]
push str.Fonts
push eax
lea eax, [ebp - 0x20c]
push str._s_s_s._s
push eax
call ebx
add esp, 0x18
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x40247e
mov eax, dword [0x5051ac]
cmp dword [eax + 0xc], 0
jne 0x40236f
jmp 0x402491
mov ecx, dword [0x4f7d48]
lea edx, [ebp - 0x20c]
push edi
push edx
mov eax, dword [ecx]
call dword [eax + 8]
mov esi, dword [esi + 4]
inc edi
test esi, esi
je 0x4024a4
mov ebx, dword [0x4f7f30]
jmp 0x402260
mov ecx, dword [0x4f7d48]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov eax, dword [0x4f7f30]
mov eax, dword [eax + 0x214]
mov eax, dword [eax + 4]
mov esi, dword [eax + 4]
mov dword [ebp - 0x810], esi
test esi, esi
je 0x402535
nop word [eax + eax]
mov edi, dword [esi + 0x2c]
test edi, edi
je 0x402528
mov ecx, 0x271c
call fcn.00457ac0
mov dword [edi + 8], eax
xor ebx, ebx
mov edi, dword [esi + 0x20]
mov esi, dword [esi + 0x2c]
sub edi, ebx
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
call dword [eax]
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], 0
mov ecx, dword [esi + 8]
mov edx, dword [ecx + 4]
mov ecx, dword [edx + 4]
test ecx, ecx
je 0x402519
nop dword [eax]
mov edx, ecx
mov ecx, dword [edx + 4]
test ecx, ecx
jne 0x402510
mov esi, dword [ebp - 0x810]
inc ebx
mov dword [edx + 4], eax
cmp ebx, 7
jl 0x4024e6
mov esi, dword [esi + 4]
mov dword [ebp - 0x810], esi
test esi, esi
jne 0x4024d0
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004912f2
mov esp, ebp
pop ebp
ret