Function at 0x409781
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x437fc0
mov eax, dword fs:[0]
push eax
sub esp, 0xa48
mov eax, dword [0x4444c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xa24], ecx
push 0
push 0x26
lea eax, [ebp - 0x780]
push eax
call fcn.0041aee6
add esp, 0xc
and dword [ebp - 4], 0
push 0x43b782
lea ecx, [ebp - 0x9a8]
call fcn.00408211
mov byte [ebp - 4], 1
push 0x43b782
lea ecx, [ebp - 0x10c]
call fcn.00408211
mov byte [ebp - 4], 2
push 0x43b782
lea ecx, [ebp - 0x558]
call fcn.00408211
mov byte [ebp - 4], 3
push 0x43b782
lea ecx, [ebp - 0x330]
call fcn.00408211
mov byte [ebp - 4], 4
push 0x208
push 0
lea eax, [ebp - 0x98c]
push eax
call fcn.0041d130
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0x764]
push eax
call fcn.0041d130
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0x53c]
push eax
call fcn.0041d130
add esp, 0xc
push 0x208
push 0
lea eax, [ebp - 0x314]
push eax
call fcn.0041d130
add esp, 0xc
mov dword [ebp - 0xa28], 0x43ba58
mov eax, dword [ebp - 0xa28]
add eax, 2
mov dword [ebp - 0xa2c], eax
mov eax, dword [ebp - 0xa28]
mov ax, word [eax]
mov word [ebp - 0xa2e], ax
add dword [ebp - 0xa28], 2
cmp word [ebp - 0xa2e], 0
jne 0x40988a
mov eax, dword [ebp - 0xa28]
sub eax, dword [ebp - 0xa2c]
sar eax, 1
mov dword [ebp - 0xa34], eax
push dword [ebp - 0xa34]
push 0x43ba58
push 2
push 1
lea ecx, [ebp - 0x780]
call fcn.004169d7
lea ecx, [ebp - 0x780]
call fcn.00416ddb
mov dword [ebp - 0x9f0], eax
push dword [ebp - 0x9f0]
push 0x104
lea eax, [ebp - 0x98c]
push eax
call fcn.0041d850
add esp, 0xc
push 0x43ba2c
push 0x104
lea eax, [ebp - 0x98c]
push eax
call fcn.0041d7db
add esp, 0xc
push str.NOXa.dll
push 0x104
lea eax, [ebp - 0x98c]
push eax
call fcn.0041d7db
add esp, 0xc
lea ecx, [ebp - 0x780]
call fcn.00416ddb
mov dword [ebp - 0x9f4], eax
push dword [ebp - 0x9f4]
push 0x104
lea eax, [ebp - 0x764]
push eax
call fcn.0041d850
add esp, 0xc
push 0x43ba2c
push 0x104
lea eax, [ebp - 0x764]
push eax
call fcn.0041d7db
add esp, 0xc
push str.BigNoxVMMgr.exe
push 0x104
lea eax, [ebp - 0x764]
push eax
call fcn.0041d7db
add esp, 0xc
lea ecx, [ebp - 0x780]
call fcn.00416ddb
mov dword [ebp - 0x9f8], eax
push dword [ebp - 0x9f8]
push 0x104
lea eax, [ebp - 0x53c]
push eax
call fcn.0041d850
add esp, 0xc
push 0x43ba2c
push 0x104
lea eax, [ebp - 0x53c]
push eax
call fcn.0041d7db
add esp, 0xc
push str.NoxVMSVC.exe
push 0x104
lea eax, [ebp - 0x53c]
push eax
call fcn.0041d7db
add esp, 0xc
lea ecx, [ebp - 0x780]
call fcn.00416ddb
mov dword [ebp - 0x9fc], eax
push dword [ebp - 0x9fc]
push 0x104
lea eax, [ebp - 0x314]
push eax
call fcn.0041d850
add esp, 0xc
push 0x43ba2c
push 0x104
lea eax, [ebp - 0x314]
push eax
call fcn.0041d7db
add esp, 0xc
push str.NoxVMHandle.exe
push 0x104
lea eax, [ebp - 0x314]
push eax
call fcn.0041d7db
add esp, 0xc
lea eax, [ebp - 0x98c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x409b6c
push str.DoInstall.cpp
lea ecx, [ebp - 0x48]
call fcn.00408211
mov byte [ebp - 4], 5
push 0x43b9a0
push str._s_missed
lea eax, [ebp - 0x2c]
push eax
call fcn.00419558
add esp, 0xc
mov dword [ebp - 0xa38], eax
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0xa3c], eax
mov byte [ebp - 4], 6
push 1
push dword [ebp - 0xa3c]
push 3
push 0x9a
lea eax, [ebp - 0x48]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402ad2
mov byte [ebp - 4], 5
mov byte [ebp - 4], 8
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00402ad2
mov byte [ebp - 4], 4
and dword [ebp - 0x9ac], 0
mov byte [ebp - 4], 9
push 0
push 1
lea ecx, [ebp - 0x330]
call fcn.00402ad2
mov byte [ebp - 4], 3
mov byte [ebp - 4], 0xa
push 0
push 1
lea ecx, [ebp - 0x558]
call fcn.00402ad2
mov byte [ebp - 4], 2
mov byte [ebp - 4], 0xb
push 0
push 1
lea ecx, [ebp - 0x10c]
call fcn.00402ad2
mov byte [ebp - 4], 1
mov byte [ebp - 4], 0xc
push 0
push 1
lea ecx, [ebp - 0x9a8]
call fcn.00402ad2
mov byte [ebp - 4], 0
mov dword [ebp - 4], 0xd
push 0
push 1
lea ecx, [ebp - 0x780]
call fcn.004050af
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x9ac]
jmp 0x409ec9
lea eax, [ebp - 0x764]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x409c8b
push str.DoInstall.cpp
lea ecx, [ebp - 0x80]
call fcn.00408211
mov byte [ebp - 4], 0xe
push 0x43b984
push str._s_missed
lea eax, [ebp - 0x64]
push eax
call fcn.00419558
add esp, 0xc
mov dword [ebp - 0xa40], eax
mov eax, dword [ebp - 0xa40]
mov dword [ebp - 0xa44], eax
mov byte [ebp - 4], 0xf
push 1
push dword [ebp - 0xa44]
push 3
push 0x9e
lea eax, [ebp - 0x80]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 0x10
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00402ad2
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 0x11
push 0
push 1
lea ecx, [ebp - 0x80]
call fcn.00402ad2
mov byte [ebp - 4], 4
and dword [ebp - 0x9b0], 0
mov byte [ebp - 4], 0x12
push 0
push 1
lea ecx, [ebp - 0x330]
call fcn.00402ad2
mov byte [ebp - 4], 3
mov byte [ebp - 4], 0x13
push 0
push 1
lea ecx, [ebp - 0x558]
call fcn.00402ad2
mov byte [ebp - 4], 2
mov byte [ebp - 4], 0x14
push 0
push 1
lea ecx, [ebp - 0x10c]
call fcn.00402ad2
mov byte [ebp - 4], 1
mov byte [ebp - 4], 0x15
push 0
push 1
lea ecx, [ebp - 0x9a8]
call fcn.00402ad2
mov byte [ebp - 4], 0
mov dword [ebp - 4], 0x16
push 0
push 1
lea ecx, [ebp - 0x780]
call fcn.004050af
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x9b0]
jmp 0x409ec9
lea eax, [ebp - 0x53c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x409d7e
push str.DoInstall.cpp
lea ecx, [ebp - 0xb8]
call fcn.00408211
mov byte [ebp - 4], 0x17
push 0x43b974
push str._s_missed
lea eax, [ebp - 0x9c]
push eax
call fcn.00419558
add esp, 0xc
mov dword [ebp - 0xa48], eax
mov eax, dword [ebp - 0xa48]
mov dword [ebp - 0xa4c], eax
mov byte [ebp - 4], 0x18
push 1
push dword [ebp - 0xa4c]
push 3
push 0xa2
lea eax, [ebp - 0xb8]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x9c]
call fcn.00402765
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb8]
call fcn.00402765
and dword [ebp - 0x9b4], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x330]
call fcn.00402765
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x558]
call fcn.00402765
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10c]
call fcn.00402765
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x9a8]
call fcn.00402765
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x780]
call fcn.00404d88
mov eax, dword [ebp - 0x9b4]
jmp 0x409ec9
lea eax, [ebp - 0x314]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x409e6e
push str.DoInstall.cpp
lea ecx, [ebp - 0xf0]
call fcn.00408211
mov byte [ebp - 4], 0x19
push 0x43b964
push str._s_missed
lea eax, [ebp - 0xd4]
push eax
call fcn.00419558
add esp, 0xc
mov dword [ebp - 0xa50], eax
mov eax, dword [ebp - 0xa50]
mov dword [ebp - 0xa54], eax
mov byte [ebp - 4], 0x1a
push 1
push dword [ebp - 0xa54]
push 3
push 0xa6
lea eax, [ebp - 0xf0]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0xd4]
call fcn.00402765
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xf0]
call fcn.00402765
and dword [ebp - 0x9b8], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x330]
call fcn.00402765
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x558]
call fcn.00402765
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10c]
call fcn.00402765
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x9a8]
call fcn.00402765
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x780]
call fcn.00404d88
mov eax, dword [ebp - 0x9b8]
jmp 0x409ec9
mov dword [ebp - 0x9bc], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x330]
call fcn.00402765
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x558]
call fcn.00402765
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10c]
call fcn.00402765
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x9a8]
call fcn.00402765
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x780]
call fcn.00404d88
mov eax, dword [ebp - 0x9bc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041c438
leave
ret