Function at 0x4132bd
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4d7df8
mov eax, dword fs:[0]
push eax
sub esp, 0x850
mov eax, dword [0x57b750]
xor eax, esp
mov dword [esp + 0x848], eax
push ebx
push esi
push edi
mov eax, dword [0x57b750]
xor eax, esp
push eax
lea eax, [esp + 0x860]
mov dword fs:[0], eax
mov ebx, ecx
push str.SOFTWAREMicrosoftWindowsCurrentVersionApp_Paths
lea ecx, [esp + 0x18]
mov dword [esp + 0x24], ebx
call fcn.004024df
and dword [esp + 0x868], 0
call fcn.00499991
push eax
lea ecx, [esp + 0x14]
call fcn.004727f7
push 0
push 0x5c
mov ecx, ebx
mov byte [esp + 0x870], 1
call fcn.00415c06
cmp eax, 0xffffffff
je 0x41342e
mov edi, dword [ebx]
mov esi, 0x82c
push esi
lea eax, [esp + 0x28]
push 0
push eax
call fcn.004be850
add esp, 0xc
test edi, edi
je 0x413369
push edi
lea eax, [esp + 0x28]
call fcn.00410984
lea eax, [esp + 0x43e]
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x86c], 2
call fcn.004024df
push eax
lea eax, [esp + 0x23a]
push eax
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x874], 3
call fcn.0040f56d
add esp, 0xc
push eax
mov ecx, ebx
mov byte [esp + 0x86c], 4
call fcn.0040257e
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.004027b0
mov byte [esp + 0x868], 2
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.004027b0
mov eax, dword [ebx]
cmp dword [eax - 0xc], 0
jne 0x413426
push esi
lea eax, [esp + 0x28]
push 0
push eax
call fcn.004be850
add esp, 0xc
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.004027b0
mov al, 1
mov ecx, dword [esp + 0x860]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x848]
xor ecx, esp
call fcn.004b96ff
mov esp, ebp
pop ebp
ret
mov byte [esp + 0x868], 1
push ecx
mov dword [esp + 0x1c], esp
mov ecx, esp
push ebx
call fcn.0040228a
lea ecx, [esp + 0x18]
call fcn.004067db
call fcn.0047380a
test al, al
je 0x4135f8
lea eax, [esp + 0x10]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov edi, 0x523938
push edi
call fcn.004024df
push ecx
mov byte [esp + 0x874], 5
lea eax, [esp + 0x20]
mov dword [esp + 0x28], esp
mov ecx, esp
push eax
call fcn.0040228a
mov esi, reloc.OLEAUT32.dll_SysReAllocString
push esi
mov byte [esp + 0x878], 1
call fcn.004124c9
test eax, eax
je 0x4134cd
mov eax, dword [esp + 0x10]
push eax
mov dword [esp + 0x1c], eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4134b6
push dword [esp + 0x18]
call fcn.004132ab
jmp 0x4134b8
mov al, 1
test al, al
je 0x4134cd
mov ecx, ebx
lea eax, [esp + 0x10]
push eax
call fcn.0040257e
jmp 0x4133e8
lea eax, [esp + 0x10]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov ebx, str.Path
push ebx
call fcn.004024df
push ecx
mov byte [esp + 0x874], 6
lea eax, [esp + 0x20]
mov dword [esp + 0x28], esp
mov ecx, esp
push eax
call fcn.0040228a
push esi
mov byte [esp + 0x878], 1
call fcn.004124c9
test eax, eax
je 0x413539
mov eax, dword [esp + 0x10]
push eax
mov dword [esp + 0x1c], eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x41352d
push dword [esp + 0x18]
call fcn.004132ab
jmp 0x41352f
mov al, 1
test al, al
je 0x413539
mov ecx, dword [esp + 0x20]
jmp 0x4134be
lea eax, [esp + 0x10]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edi
call fcn.004024df
push ecx
mov byte [esp + 0x874], 7
lea eax, [esp + 0x20]
mov dword [esp + 0x28], esp
mov ecx, esp
push eax
call fcn.0040228a
push esi
mov byte [esp + 0x878], 1
call fcn.004125e6
test eax, eax
je 0x413593
mov edi, dword [esp + 0x10]
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x41358d
push edi
call fcn.004132ab
jmp 0x41358f
mov al, 1
test al, al
jne 0x413533
lea eax, [esp + 0x10]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004024df
push ecx
mov byte [esp + 0x874], 8
lea eax, [esp + 0x20]
mov dword [esp + 0x28], esp
mov ecx, esp
push eax
call fcn.0040228a
push esi
mov byte [esp + 0x878], 1
call fcn.004125e6
test eax, eax
je 0x4135f1
mov esi, dword [esp + 0x10]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4135e7
push esi
call fcn.004132ab
jmp 0x4135e9
mov al, 1
test al, al
jne 0x413533
xor bl, bl
jmp 0x4136d5
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x523938
lea edi, [esp + 0x18]
call fcn.004024df
push ecx
mov byte [esp + 0x870], 9
lea eax, [esp + 0x1c]
mov dword [esp + 0x24], esp
mov ecx, esp
push eax
call fcn.0040228a
mov esi, reloc.OLEAUT32.dll_SysReAllocString
push esi
mov ecx, edi
mov byte [esp + 0x874], 1
call fcn.0041238b
test eax, eax
je 0x413660
mov edi, dword [esp + 0x10]
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x413656
push edi
call fcn.004132ab
jmp 0x413658
mov al, 1
test al, al
jne 0x4134bc
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Path
lea edi, [esp + 0x18]
call fcn.004024df
push ecx
mov byte [esp + 0x870], 0xa
lea eax, [esp + 0x1c]
mov dword [esp + 0x24], esp
mov ecx, esp
push eax
call fcn.0040228a
push esi
mov ecx, edi
mov byte [esp + 0x874], 1
call fcn.0041238b
test eax, eax
je 0x4135f1
mov esi, dword [esp + 0x10]
push esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4136bd
push esi
call fcn.004132ab
jmp 0x4136bf
mov al, 1
test al, al
je 0x4135f1
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.0040257e
mov bl, 1
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.004027b0
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.004027b0
mov al, bl
jmp 0x413402