Function at 0x401aa0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x597c27
mov eax, dword fs:[0]
push eax
sub esp, 0x234
mov eax, dword [0x6200b8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
xor eax, eax
mov dword [ebp - 0xbc], 7
mov dword [ebp - 0xc0], 0
mov word [ebp - 0xd0], ax
mov dword [ebp - 0xa4], 7
mov dword [ebp - 0xa8], eax
mov word [ebp - 0xb8], ax
mov dword [ebp - 0x8c], 7
mov dword [ebp - 0x90], eax
mov word [ebp - 0xa0], ax
mov dword [ebp - 0x74], 7
mov dword [ebp - 0x78], eax
mov word [ebp - 0x88], ax
mov dword [ebp - 0x5c], 7
mov dword [ebp - 0x60], eax
mov word [ebp - 0x70], ax
mov dword [ebp - 0xd4], 0x708
mov dword [ebp - 4], eax
mov esi, dword [0x6298a4]
test esi, esi
jne 0x401b81
push 0x120
call fcn.0041b975
mov esi, eax
add esp, 4
mov dword [ebp - 0x1c4], esi
mov ecx, esi
mov byte [ebp - 4], 1
call fcn.00420c92
mov byte [ebp - 4], 0
mov dword [esi], vtable.CConfigure.0
mov dword [0x6298a4], esi
mov ecx, esi
call fcn.00420fbf
sub esp, 0x18
mov esi, eax
mov edx, esp
mov dword [ebp - 0x1c4], esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 7
cmp dword [edx + 0x14], 8
mov dword [edx + 0x10], 0
jb 0x401bbb
mov eax, dword [edx]
jmp 0x401bbd
mov eax, edx
xor ecx, ecx
mov word [eax], cx
cmp word [esi], cx
je 0x401bdf
mov ecx, esi
lea edi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x401bd0
sub ecx, edi
sar ecx, 1
push ecx
push esi
mov ecx, edx
call fcn.004029e0
mov byte [ebp - 4], 2
mov esi, dword [0x6298a4]
test esi, esi
jne 0x401c26
push 0x120
call fcn.0041b975
mov esi, eax
add esp, 4
mov dword [ebp - 0x1b8], esi
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.00420c92
mov byte [ebp - 4], 2
mov dword [esi], vtable.CConfigure.0
mov dword [0x6298a4], esi
mov ecx, esi
call fcn.00420fb0
sub esp, 0x18
mov esi, eax
mov edx, esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 7
cmp dword [edx + 0x14], 8
mov dword [edx + 0x10], 0
jb 0x401c5a
mov eax, dword [edx]
jmp 0x401c5c
mov eax, edx
xor ecx, ecx
mov word [eax], cx
cmp word [esi], cx
je 0x401c7f
mov ecx, esi
lea edi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x401c70
sub ecx, edi
sar ecx, 1
push ecx
push esi
mov ecx, edx
call fcn.004029e0
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0
call fcn.00405870
lea ecx, [ebp - 0x240]
call fcn.0042ac77
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x58]
push 0x38
push 0x616ffc
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
call fcn.00402d00
xor eax, eax
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
push 1
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 6
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x401d1a
mov eax, dword [ecx]
jmp 0x401d1c
mov eax, ecx
push 0x38
xor edx, edx
push str.https:__iwogz.oudingsoft.com_cz_windows_2d2a36f23f6f.afc
mov word [eax], dx
call fcn.004029e0
push 0
lea ecx, [ebp - 0xd4]
call fcn.00406890
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x401da1
lea eax, [ebp - 0x1b4]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x401d82
mov eax, dword [ecx]
jmp 0x401d84
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
mov word [eax], dx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.00402ae0
call fcn.0042448f
add esp, 0x1c
mov edi, eax
jmp 0x401e16
cmp dword [ebp - 0x44], 0x10
lea eax, [ebp - 0x58]
lea ecx, [ebp - 0x240]
cmovae eax, dword [ebp - 0x58]
push eax
call fcn.0042b0f8
lea ecx, [ebp - 0x240]
call fcn.0042b50a
mov esi, eax
mov ecx, 1
mov eax, dword [esi + 4]
sub eax, dword [esi]
cmove eax, ecx
mov dword [ebp - 0x1b4], eax
inc eax
push eax
call fcn.0041b9a8
mov edi, eax
add esp, 4
test edi, edi
je 0x401e5d
mov ecx, dword [ebp - 0x1b4]
inc ecx
push ecx
push 0
push edi
call fcn.0043c880
mov eax, dword [esi + 4]
add esp, 0xc
xor ecx, ecx
sub eax, dword [esi]
je 0x401e16
mov eax, dword [esi]
mov al, byte [ecx + eax]
mov byte [ecx + edi], al
inc ecx
mov eax, dword [esi + 4]
sub eax, dword [esi]
cmp ecx, eax
jb 0x401e04
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x1bc], 0
push eax
lea eax, [ebp - 0x1bc]
mov dword [ebp - 0x1c0], 0
push eax
push dword [ebp - 0x1b4]
push edi
call fcn.00425bbd
add esp, 0x10
cmp dword [ebp - 0x1bc], 0
jne 0x401ec4
test edi, edi
je 0x401e5d
push edi
call fcn.0041b970
add esp, 4
xor esi, esi
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x401e74
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.004030a0
xor eax, eax
mov dword [ebp - 0x2c], 7
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
call fcn.00402760
lea ecx, [ebp - 0x240]
call fcn.0042aced
lea ecx, [ebp - 0xd4]
call fcn.00405760
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041b6a9
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x20c]
call fcn.00411da0
push 1
push 0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x20c]
push dword [ebp - 0x1bc]
call fcn.00414950
push str.aa8bd9c822c30
lea ecx, [ebp - 0x20c]
call fcn.00412b00
test eax, eax
jne 0x401f12
test edi, edi
je 0x401f0b
push 1
push edi
call fcn.0041b93f
add esp, 8
xor esi, esi
jmp 0x4021c7
push str.d03d440c405b4
mov ecx, eax
call fcn.00412b00
test eax, eax
je 0x4021c2
mov ecx, eax
call fcn.00412b40
mov esi, eax
test esi, esi
je 0x4021c2
push 0
push str.e52e6390a9a04
push esi
call fcn.004255a8
add esp, 0xc
test al, al
je 0x4021b1
lea ecx, [ebp - 0x1b0]
call fcn.00402200
push str.cc945d3a033ac
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 8
push esi
push eax
call fcn.004259e0
add esp, 0xc
mov edi, eax
lea eax, [ebp - 0x1ac]
cmp eax, edi
je 0x401fc3
mov eax, dword [ebp - 0x198]
cmp eax, 8
jb 0x401f9a
inc eax
lea ecx, [ebp - 0x1ac]
push eax
push dword [ebp - 0x1ac]
call fcn.004030a0
xor eax, eax
mov dword [ebp - 0x198], 7
push edi
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0x19c], 0
mov word [ebp - 0x1ac], ax
call fcn.00402c00
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x401fdc
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004030a0
push str.e3891ec527f47
lea eax, [ebp - 0x28]
push esi
push eax
call fcn.004259e0
add esp, 0xc
lea ecx, [ebp - 0x194]
push eax
call fcn.00402640
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x40200f
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004030a0
push str.a69ae7c33d4c1
lea eax, [ebp - 0x28]
push esi
push eax
call fcn.004259e0
add esp, 0xc
lea ecx, [ebp - 0x17c]
push eax
call fcn.00402640
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x402042
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004030a0
push 1
push str.ee6ef6c15a960
push esi
call fcn.004255a8
push 1
push str.d0dc9322edc38
push esi
mov byte [ebp - 0x1ae], al
call fcn.004255a8
push 0
push str.c4850554512c4
push esi
mov byte [ebp - 0x1ad], al
call fcn.004255a8
push str.b9b355c9cc5ad
mov byte [ebp - 0x1b0], al
lea eax, [ebp - 0x28]
push esi
push eax
call fcn.004259e0
add esp, 0x30
lea ecx, [ebp - 0x164]
push eax
call fcn.00402640
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4020ae
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004030a0
push str.eeaf2c828d697
lea eax, [ebp - 0x28]
push esi
push eax
call fcn.004259e0
add esp, 0xc
lea ecx, [ebp - 0x134]
push eax
call fcn.00402640
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4020e1
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004030a0
push str.f58430f39627b
lea eax, [ebp - 0x28]
push esi
push eax
call fcn.004259e0
add esp, 0xc
lea ecx, [ebp - 0x11c]
push eax
call fcn.00402640
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x402114
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004030a0
push 0
push str.c378176ccf954
push esi
call fcn.00425719
test eax, eax
lea eax, [ebp - 0x28]
push str.e3557e51fae48
push esi
push eax
setne byte [ebp - 0x1af]
call fcn.004259e0
add esp, 0x18
lea ecx, [ebp - 0x104]
push eax
call fcn.00402640
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x40215d
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004030a0
push str.fffa8b51a5d73
lea eax, [ebp - 0x28]
push esi
push eax
call fcn.004259e0
add esp, 0xc
lea ecx, [ebp - 0xec]
push eax
call fcn.00402640
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x402190
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.004030a0
mov ecx, dword [ebx]
test ecx, ecx
je 0x4021a2
lea eax, [ebp - 0x1b0]
push eax
call fcn.004024f0
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 7
call fcn.004022b0
mov ecx, esi
call fcn.00412c60
mov esi, eax
test esi, esi
jne 0x401f37
mov esi, 1
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - method.TiXmlDocument.virtual_0], vtable.TiXmlDocument.0
cmp eax, 0x624e00
je 0x4021e7
push eax
call fcn.0041b970
add esp, 4
lea ecx, [ebp - 0x20c]
call fcn.00412200
jmp 0x401e5f