Function at 0x429c00
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x532b2e
mov eax, dword fs:[0]
push eax
sub esp, 0x1d8
mov eax, dword [0x579258]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1dc], edi
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
push eax
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 2
push eax
call fcn.004296a0
push eax
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 3
push eax
call fcn.0042e510
mov esi, eax
add esp, 0x10
lea eax, [ebp - 0x40]
cmp eax, esi
je 0x429d0f
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x429cdb
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x429cd1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a273
push edx
push ecx
call fcn.00460404
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov edx, dword [ebp - 0x5c]
cmp edx, 0x10
jb 0x429d43
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x429d39
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a273
push edx
push ecx
call fcn.00460404
add esp, 8
mov edx, dword [ebp - 0x74]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
mov byte [ebp - 4], 2
cmp edx, 0x10
jb 0x429d90
mov ecx, dword [ebp - 0x88]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x429d86
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a273
push edx
push ecx
call fcn.00460404
add esp, 8
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x42a1a0
test al, 0x10
je 0x42a1a0
cmp byte [ebp + 0x10], 0
je 0x429ddc
mov eax, dword [edi + 4]
push dword [ebp - 0x1cc]
cmp eax, dword [edi + 8]
je 0x429dd4
mov ecx, eax
call fcn.00405480
add dword [edi + 4], 0x18
jmp 0x429ddc
push eax
mov ecx, edi
call fcn.004392e0
mov ecx, dword [ebp - 0x30]
mov eax, SysReAllocString
sub eax, ecx
cmp eax, 3
jb 0x42a27d
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
push 3
cmovae eax, dword [ebp - 0x40]
push 0x53f0e8
push ecx
push eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0x70]
call fcn.00404b20
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x429e49
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x429e3f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a278
push edx
push ecx
call fcn.00460404
add esp, 8
movups xmm0, xmmword [ebp - 0x70]
push pe_nt_image_headers32
lea eax, [ebp - 0x1c8]
movups xmmword [ebp - 0x58], xmm0
push 0
movq xmm0, qword [ebp - 0x60]
push eax
movq qword [ebp - 0x48], xmm0
call fcn.004ecad0
add esp, 0xc
lea eax, [ebp - 0x1c8]
cmp dword [ebp - 0x5c], 0x10
lea ecx, [ebp - 0x58]
cmovae ecx, dword [ebp - 0x70]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
mov dword [ebp - 0x1e4], edi
cmp edi, 0xffffffff
je 0x42a1a0
mov eax, dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1d8], eax
lea esi, [ebp - 0x19c]
lea ecx, [esi + 1]
nop dword [eax + eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x429ec0
sub esi, ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x1d0], ecx
cmp esi, ecx
ja 0x429f00
cmp ecx, 0x10
mov dword [ebp - 0x18], esi
push esi
lea eax, [ebp - 0x19c]
lea edi, [ebp - 0x28]
cmovae edi, dword [ebp - 0x28]
push eax
push edi
call fcn.004ec550
mov byte [edi + esi], 0
add esp, 0xc
mov edi, dword [ebp - 0x28]
jmp 0x429fad
cmp esi, 0x7fffffff
ja 0x42a27d
mov edi, esi
or edi, 0xf
cmp edi, 0x7fffffff
jbe 0x429f20
mov edi, SysReAllocString
jmp 0x429f3e
mov edx, ecx
mov eax, SysReAllocString
shr edx, 1
sub eax, edx
cmp ecx, eax
jbe 0x429f36
mov edi, SysReAllocString
jmp 0x429f3e
lea eax, [ecx + edx]
cmp edi, eax
cmovb edi, eax
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x28]
call fcn.00405420
mov dword [ebp - 0x1cc], eax
lea eax, [ebp - 0x19c]
push esi
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0x1cc]
push eax
push edi
mov dword [ebp - 0x18], esi
call fcn.004ebfd0
mov eax, dword [ebp - 0x1d0]
add esp, 0xc
mov byte [edi + esi], 0
cmp eax, 0x10
jb 0x429faa
mov ecx, dword [ebp - 0x28]
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x429fa0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a278
push edx
push ecx
call fcn.00460404
add esp, 8
mov dword [ebp - 0x28], edi
mov esi, dword [ebp - 0x14]
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x18]
cmp esi, 0x10
cmovae eax, edi
cmp edx, 1
jne 0x429fd9
movzx eax, byte [eax]
cmp al, 0x2e
jne 0x429fcc
xor eax, eax
jmp 0x429fd1
sbb eax, eax
or eax, 1
test eax, eax
je 0x42a167
cmp esi, 0x10
lea ecx, [ebp - 0x28]
cmovae ecx, edi
cmp edx, 2
jne 0x42a007
movzx eax, byte [ecx]
cmp al, 0x2e
jne 0x429ffa
movzx eax, byte [ecx + 1]
cmp al, 0x2e
jne 0x429ffa
xor eax, eax
jmp 0x429fff
sbb eax, eax
or eax, 1
test eax, eax
jne 0x42a007
mov al, 1
jmp 0x42a009
xor al, al
test al, al
jne 0x42a167
mov esi, dword [ebp - 0x30]
mov eax, SysReAllocString
sub eax, esi
cmp eax, edx
jb 0x42a27d
cmp dword [ebp - 0x2c], 0x10
lea ecx, [ebp - 0x40]
push edx
cmovae ecx, dword [ebp - 0x40]
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 0x10
cmovae eax, edi
push eax
push esi
push ecx
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x88]
call fcn.00404b20
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x42a085
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x42a07b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a278
push edx
push ecx
call fcn.00460404
add esp, 8
test byte [ebp - 0x1c8], 0x10
movups xmm0, xmmword [ebp - 0x88]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [ebp - 0x78]
movq qword [ebp - 0x18], xmm0
je 0x42a167
mov edi, dword [ebp - 0x1dc]
lea eax, [ebp - 0x28]
mov esi, dword [edi + 4]
cmp esi, dword [edi + 8]
je 0x42a14f
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [ebp - 0x14], 0x10
mov ecx, dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
mov dword [ebp - 0x1cc], ecx
mov dword [ebp - 0x1d0], eax
cmp ecx, 0x10
jae 0x42a0fd
movups xmm0, xmmword [eax]
mov eax, 0xf
movups xmmword [esi], xmm0
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], eax
add dword [edi + 4], 0x18
jmp 0x42a158
mov eax, ecx
mov ecx, SysReAllocString
or eax, 0xf
cmp eax, 0x7fffffff
cmova eax, ecx
mov ecx, esi
mov dword [ebp - 0x1e0], eax
inc eax
push eax
call fcn.00405420
mov ecx, dword [ebp - 0x1cc]
inc ecx
mov dword [esi], eax
push ecx
push dword [ebp - 0x1d0]
push eax
call fcn.004ebfd0
mov ecx, dword [ebp - 0x1cc]
add esp, 0xc
mov eax, dword [ebp - 0x1e0]
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], eax
add dword [edi + 4], 0x18
jmp 0x42a158
push eax
push esi
mov ecx, edi
call fcn.004392e0
push 0
lea eax, [ebp - 0x28]
push edi
push eax
call fcn.00429c00
add esp, 0xc
push pe_nt_image_headers32
lea eax, [ebp - 0x1c8]
push 0
push eax
call fcn.004ecad0
mov edi, dword [ebp - 0x1e4]
lea eax, [ebp - 0x1c8]
add esp, 0xc
push eax
push edi
call dword [ebp - 0x1d4]
test eax, eax
jne 0x429eb2
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x42a1d4
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x42a1ca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a278
push edx
push ecx
call fcn.00460404
add esp, 8
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp edx, 0x10
jb 0x42a216
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x42a20c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a278
push edx
push ecx
call fcn.00460404
add esp, 8
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x42a258
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x42a24e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a278
push edx
push ecx
call fcn.00460404
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00460412
mov esp, ebp
pop ebp
ret
call fcn.004f5b2a
call fcn.004f5b2a
call fcn.00404fc0
int3