Function at 0x41b9dc
Capabilities:
Check if file exists
Read .ini file

Disassembly:
push 0x89c
mov eax, 0x5651ba
call fcn.0045329e
mov esi, ecx
mov edi, 0x208
lea eax, [ebp - 0x420]
push edi
xor ebx, ebx
push ebx
push eax
call fcn.004306b0
push edi
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.004306b0
add esp, 0x18
mov dword [ebp - 0x850], ebx
xor eax, eax
lea ecx, [ebp - 0x860]
mov word [ebp - 0x860], ax
push 7
pop edi
push ebx
push 0x5c2948
mov dword [ebp - 0x84c], edi
call fcn.00407d50
push ebx
xor eax, eax
mov dword [ebp - 4], ebx
push 0x5c2948
lea ecx, [ebp - 0x8a8]
mov dword [ebp - 0x894], edi
mov dword [ebp - 0x898], ebx
mov word [ebp - 0x8a8], ax
call fcn.00407d50
push ebx
xor eax, eax
mov byte [ebp - 4], 1
push 0x5c2948
lea ecx, [ebp - 0x890]
mov dword [ebp - 0x87c], edi
mov dword [ebp - 0x880], ebx
mov word [ebp - 0x890], ax
call fcn.00407d50
push ebx
xor eax, eax
mov byte [ebp - 4], 2
push 0x5c2948
lea ecx, [ebp - 0x878]
mov dword [ebp - 0x864], edi
mov dword [ebp - 0x868], ebx
mov word [ebp - 0x878], ax
call fcn.00407d50
push ebx
push 0x2b
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 3
push eax
push ebx
call fcn.00424d3f
mov ebx, 0x5c29b0
lea eax, [ebp - 0x420]
push ebx
push eax
call fcn.00440d50
mov edi, str.PandaPdf
lea eax, [ebp - 0x420]
push edi
push eax
call fcn.00440d50
lea eax, [ebp - 0x420]
push ebx
push eax
call fcn.00440d50
lea eax, [ebp - 0x420]
push edi
push eax
call fcn.00440d50
push str..ini
lea eax, [ebp - 0x420]
push eax
call fcn.00440d50
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x420]
add esp, 0x38
push eax
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0x5c2948
push str.UsrPath
push str.AppConfig
call ebx
lea eax, [ebp - 0x218]
push eax
call fcn.00440de3
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
pop ecx
test eax, eax
jle 0x41bbd4
lea eax, [ebp - 0x218]
push eax
call edi
test eax, eax
je 0x41bbd4
cmp word [ebp - 0x218], 0
jne 0x41bb7b
xor eax, eax
jmp 0x41bb88
lea eax, [ebp - 0x218]
push eax
call fcn.00440de3
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x860]
call fcn.00407d50
cmp word [ebp - 0x218], 0
jne 0x41bba9
xor eax, eax
jmp 0x41bbb6
lea eax, [ebp - 0x218]
push eax
call fcn.00440de3
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0xc]
call fcn.00407d50
cmp byte [esi + 4], 0
mov byte [esi + 3], 1
je 0x41bee7
push 0x208
lea eax, [ebp - 0x830]
push 0
push eax
call fcn.004306b0
push 0x208
lea eax, [ebp - 0x628]
push 0
push eax
call fcn.004306b0
add esp, 0x18
cmp dword [esi + 0x64], 0
jne 0x41bc30
push 0x104
lea eax, [ebp - 0x628]
push eax
push dword [esi + 8]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x628]
push 0x5c
push eax
call fcn.00432af9
pop ecx
pop ecx
xor ecx, ecx
mov word [eax + 2], cx
jmp 0x41bc4a
lea eax, [esi + 0x54]
cmp dword [eax + 0x14], 8
jb 0x41bc3b
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x628]
push eax
call fcn.00440dc1
pop ecx
pop ecx
push str.Config.cfg
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x830]
push 0x5691a0
push eax
call fcn.0041cbbd
add esp, 0x10
lea eax, [ebp - 0x830]
push eax
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0x5c2948
push str.UsrPath
push str.AppInfo
call ebx
lea eax, [ebp - 0x218]
push eax
call fcn.00440de3
pop ecx
test eax, eax
jle 0x41bd13
lea eax, [ebp - 0x218]
push eax
call edi
test eax, eax
je 0x41bd13
cmp word [ebp - 0x218], 0
jne 0x41bcba
xor eax, eax
jmp 0x41bcc7
lea eax, [ebp - 0x218]
push eax
call fcn.00440de3
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x8a8]
call fcn.00407d50
cmp word [ebp - 0x218], 0
jne 0x41bce8
xor eax, eax
jmp 0x41bcf5
lea eax, [ebp - 0x218]
push eax
call fcn.00440de3
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0xc]
call fcn.00407d50
cmp byte [esi + 4], 0
mov byte [esi + 3], 1
je 0x41bee7
lea eax, [esi + 0x6c]
cmp dword [eax + 0x14], 8
jb 0x41bd1e
mov eax, dword [eax]
push str.Config.cfg
push eax
lea eax, [ebp - 0x830]
push 0x5691a0
push eax
call fcn.0041cbbd
add esp, 0x10
lea eax, [ebp - 0x830]
push eax
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0x5c2948
push str.UsrPath
push str.AppInfo
call ebx
lea eax, [ebp - 0x218]
push eax
call fcn.00440de3
pop ecx
test eax, eax
jle 0x41bde1
lea eax, [ebp - 0x218]
push eax
call edi
test eax, eax
je 0x41bde1
cmp word [ebp - 0x218], 0
jne 0x41bd88
xor eax, eax
jmp 0x41bd95
lea eax, [ebp - 0x218]
push eax
call fcn.00440de3
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x890]
call fcn.00407d50
cmp word [ebp - 0x218], 0
jne 0x41bdb6
xor eax, eax
jmp 0x41bdc3
lea eax, [ebp - 0x218]
push eax
call fcn.00440de3
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0xc]
call fcn.00407d50
cmp byte [esi + 4], 0
mov byte [esi + 3], 1
je 0x41bee7
push 0x5c2948
push str.UsrPath
push str.AppInfo
lea eax, [ebp - 0x848]
mov ecx, esi
push eax
call fcn.0041b0e1
cmp dword [ebp - 0x834], 8
lea eax, [ebp - 0x848]
mov byte [ebp - 4], 4
cmovae eax, dword [ebp - 0x848]
push eax
call fcn.00440de3
pop ecx
test eax, eax
jle 0x41be73
cmp dword [ebp - 0x834], 8
lea eax, [ebp - 0x848]
cmovae eax, dword [ebp - 0x848]
push eax
call edi
test eax, eax
je 0x41be73
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x848]
push eax
lea ecx, [ebp - 0x878]
call fcn.00407e50
lea ecx, [esi + 0xc]
lea eax, [ebp - 0x848]
cmp ecx, eax
je 0x41be69
push 0xffffffffffffffff
push 0
push eax
call fcn.00407e50
cmp byte [esi + 4], 0
mov byte [esi + 3], 1
je 0x41bed8
cmp byte [esi + 4], 0
je 0x41bed8
cmp byte [esi + 3], 0
je 0x41bed8
lea eax, [ebp - 0x8a8]
push eax
lea ecx, [ebp - 0x860]
call fcn.00408c10
test eax, eax
je 0x41be99
mov byte [esi + 5], 1
lea eax, [ebp - 0x890]
push eax
lea ecx, [ebp - 0x860]
call fcn.00408c10
test eax, eax
je 0x41beb3
mov byte [esi + 5], 1
lea eax, [ebp - 0x878]
push eax
lea ecx, [ebp - 0x860]
call fcn.00408c10
test eax, eax
je 0x41bed8
push 1
push 1
lea ecx, [ebp - 0x860]
call fcn.0041cb37
push 0
push 1
lea ecx, [ebp - 0x848]
call fcn.00407c90
push 0
push 1
lea ecx, [ebp - 0x878]
call fcn.00407c90
push 0
push 1
lea ecx, [ebp - 0x890]
call fcn.00407c90
push 0
push 1
lea ecx, [ebp - 0x8a8]
call fcn.00407c90
push 0
push 1
lea ecx, [ebp - 0x860]
call fcn.00407c90
call fcn.00453259
ret