Function at 0x42cdc0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5df300
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
mov eax, dword [0x67432c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xb8], ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov eax, dword [0x679464]
test eax, eax
jne 0x42ce3a
push 0x15c
call fcn.0046d554
add esp, 4
mov dword [ebp - 0xb4], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x42ce2c
mov ecx, eax
call fcn.00443ec0
jmp 0x42ce2e
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x679464], eax
mov ecx, eax
call fcn.00471d04
mov edx, eax
mov dword [ebp - 0x2c], 7
xor eax, eax
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
cmp word [edx], ax
jne 0x42ce60
xor ecx, ecx
jmp 0x42ce74
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42ce65
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x40]
call fcn.00402ac0
mov dword [ebp - 4], 1
call fcn.0045250c
test al, al
je 0x42ce9f
cmp eax, dword [eax + 0x542432a]
iretd
call fcn.00452215
test al, al
je 0x42cec7
xor dword [esi + 0x41], edx
sub eax, 0x9bfadcde
imul esp, dword [edi], 0xffffffd3
pcmpeqw mm3, qword [ebx]
pop eax
push es
dec ecx
mov byte [ecx + 0x56171803], bl
push esi
push edi
pop edi
cwde
dec edx
sub al, 0x66
push ecx
add al, byte [eax]
call fcn.00452032
test al, al
je 0x42cee6
mov eax, 0xcfdbad7e
out dx, eax
pushal
neg byte [esi]
and ax, 0x8694
div dword [edx - 0x3a6f6fad]
stosd dword es:[edi], eax
push 0xa
push str.WnTool.exe
lea ecx, [ebp - 0x40]
call fcn.00405c20
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42cf30
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push 0
cmovae eax, dword [ebp - 0x40]
push 0
push 0
push 0x5e96f0
push eax
call fcn.0045bffe
add byte [eax - 0x18], dl
xlatb
lock add al, byte [eax]
add esp, 0x14
mov dword [ebp - 0xa4], eax
call fcn.0045236e
cmp dword [edx + eax], edx
test al, al
je 0x42cf50
jg 0x42cfb7
test dword [ecx + 0x450c7ac9], esp
in eax, 0xc8
jmp 0x42cf20
call fcn.00452101
test al, al
je 0x42cf71
jecxz 0x42cf31
mov ebp, 0xf55151d0
pop edx
and eax, 0x2fad9555
outsd dx, dword [esi]
dec ebp
mov edi, 0x4f9019ad
or dword [ecx + 0x5215e864], 2
add byte [eax + eax*8 - 0x367fe78c], al
movsd dword es:[edi], dword [esi]
call fcn.0045218b
test al, al
je 0x42cf92
or cl, 0xa5
dec edi
mov cl, 0xd2
ret 0x4400
mov edi, dword [ebp - 0xa4]
test edi, edi
jne 0x42d423
push 0x20
push str.46008065483656430434454140441523
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x74], 0xf
mov dword [ebp - 0x78], edi
mov byte [ebp - 0x88], 0
call fcn.004028a0
cmp dword [ebp - 0x74], 0x10
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 2
cmovae eax, dword [ebp - 0x88]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.00452aae
add esp, 8
mov dword [ebp - 0xb0], edi
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xa8], edi
push 1
push 0x5e768c
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 4
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], edi
mov byte [ebp - 0x58], 0
call fcn.004028a0
cmp dword [ebp - 0x5c], 0x10
lea edx, [ebp - 0x70]
mov dword [ebp - 0x14], 0xf
cmovae edx, dword [ebp - 0x70]
mov dword [ebp - 0x18], edi
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 5
cmp byte [edx], 0
jne 0x42d03e
xor ecx, ecx
jmp 0x42d04c
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42d043
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.004028a0
lea eax, [ebp - 0xb0]
mov byte [ebp - 4], 6
inc ebp
cld
push es
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00457423
mov eax, dword [ebp - 0x14]
add esp, 0xc
cmp eax, 0x10
jb 0x42d086
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00402bc0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 4
cmp eax, 0x10
jb 0x42d0b1
clc
adc byte [edx + 0xd], dh
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00402bc0
call fcn.00451fed
test al, al
je 0x42d0d4
cmpsd dword [esi], dword es:[edi]
jns 0x42d05d
pop ecx
push edx
invalid
mov ebx, dword [ebp - 0xb0]
mov dword [ebp - 0xb4], ebx
cmp ebx, dword [ebp - 0xac]
je 0x42d2c6
dec dword [edi]
test dl, bl
add dword [eax], eax
add byte [edi], cl
pop ds
inc eax
add al, ch
push ecx
add al, byte [eax]
nop dword [eax]
call fcn.0045225a
test al, al
je 0x42d109
sbb dword [edi + 0x2bf6b051], esp
popfd
xchg ecx, eax
add eax, dword [ebp + 0x60]
jge 0x42d186
mov eax, 0x54cde8f8
add al, byte [eax]
call fcn.004525db
test al, al
je 0x42d138
mov fs, esi
stosb byte es:[edi], al
mov dh, 0x15
loope 0x42d0a0
mov dl, 0xb6
salc
ret 0x3065
call fcn.00451fed
test al, al
je 0x42d15f
jae 0x42d0e5
dec edi
sbb dword [esi + 0x49], 0x32e2d54b
invalid
cmp dword [ebx + 0x14], 0x10
jb 0x42d169
mov edx, dword [ebx]
jmp 0x42d16b
mov edx, ebx
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
cmp byte [edx], 0
jne 0x42d186
xor ecx, ecx
jmp 0x42d199
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42d190
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x58]
call fcn.004028a0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00457902
add esp, 8
mov eax, dword [0x679464]
mov byte [ebp - 4], 8
test eax, eax
jne 0x42d1f3
push 0x15c
call fcn.0046d554
add esp, 4
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 9
test eax, eax
je 0x42d1e8
mov ecx, eax
call fcn.00443ec0
jmp 0x42d1ea
xor eax, eax
mov byte [ebp - 4], 8
mov dword [0x679464], eax
mov ecx, eax
call fcn.00471d04
mov edx, eax
cmp word [edx], 0
jne 0x42d206
xor ecx, ecx
jmp 0x42d21f
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42d210
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x40]
call fcn.00402ac0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x40]
call fcn.00405b10
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42d319
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push 0
cmovae eax, dword [ebp - 0x40]
push 0
push 0
push 0x5e96f0
push eax
call fcn.0045bffe
mov edi, eax
add esp, 0x14
mov dword [ebp - 0xa4], edi
test edi, edi
je 0x42d31f
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x42d297
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00402c10
xor eax, eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], 0
cmp eax, 0x10
jb 0x42d2c0
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00402bc0
mov ebx, dword [ebp - 0xb0]
mov byte [ebp - 4], 3
test ebx, ebx
je 0x42d3dd
push dword [ebp - 0xbc]
lea eax, [ebp - 0xb0]
push eax
push dword [ebp - 0xac]
push ebx
call fcn.00406260
mov ecx, dword [ebp - 0xa8]
mov eax, 0x2aaaaaab
mov ebx, dword [ebp - 0xb0]
add esp, 0x10
sub ecx, ebx
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 0xaaaaaaa
jbe 0x42d37b
call fcn.004830d2
mov edi, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x42d334
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00402c10
xor eax, eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], 0
mov byte [ebp - 4], 4
cmp eax, 0x10
jb 0x42d361
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00402bc0
add ebx, 0x18
mov dword [ebp - 0xb4], ebx
cmp ebx, dword [ebp - 0xac]
jne 0x42d0f0
jmp 0x42d2c0
lea eax, [eax + eax*2]
shl eax, 3
cmp eax, 0x1000
jb 0x42d3b6
test bl, 0x1f
je 0x42d392
call fcn.004830d2
mov eax, dword [ebx - 4]
cmp eax, ebx
jb 0x42d39e
call fcn.004830d2
sub ebx, eax
cmp ebx, 4
jae 0x42d3aa
call fcn.004830d2
cmp ebx, 0x23
jbe 0x42d3b4
call fcn.004830d2
mov ebx, eax
push ebx
call fcn.0046d587
add esp, 4
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x5c]
cmp eax, 0x10
jb 0x42d3f2
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.00402bc0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
mov byte [ebp - 4], 1
cmp eax, 0x10
jb 0x42d423
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.00402bc0
popfd
push edi
std
invalid
call fcn.004524c7
test al, al
je 0x42d43d
das
sbb esi, esi
lodsd eax, dword [esi]
mov dword [esi - 0x23], esp
ljmp 0xb967
mov eax, dword [ebp - 0xb8]
add eax, 0x94
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00457bef
add esp, 8
xor ebx, ebx
mov byte [ebp - 4], 0xa
test edi, edi
setne bl
mov dword [ebp - 0xb8], ebx
call fcn.0045243d
test al, al
je 0x42d495
stc
jle 0x42d41f
xchg ecx, eax
imul ebx, eax, 0xfffffff8
mov esp, 0x1da3a03
mov byte [0xb53641b0], bl
scasd eax, dword es:[edi]
daa
mov eax, ebp
inc edi
add byte [edx], 0x20
mov al, ah
sahf
mov ebx, dword [ebp - 0xb8]
call fcn.00452215
test al, al
je 0x42d4be
mov bh, 0xc8
int3
cmp dword [ebp - 0x8c], 0x10
lea esi, [ebp - 0xa0]
mov eax, dword [0x679468]
cmovae esi, dword [ebp - 0xa0]
test eax, eax
jne 0x42d50a
push 0xdc
call fcn.0046d554
add esp, 4
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 0xb
test eax, eax
je 0x42d4ff
mov ecx, eax
call fcn.0040cfd0
jmp 0x42d501
xor eax, eax
mov byte [ebp - 4], 0xa
mov dword [0x679468], eax
push ebx
push esi
push 1
push 1
mov ecx, eax
call int.00411350
mov eax, dword [ebp - 0x8c]
cmp eax, 0x10
jb 0x42d535
inc eax
lea ecx, [ebp - 0xa0]
push eax
push dword [ebp - 0xa0]
call fcn.00402bc0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x8c], 0xf
mov dword [ebp - 0x90], 0
mov byte [ebp - 0xa0], 0
cmp eax, 8
jb 0x42d565
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00402c10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046d802
mov esp, ebp
pop ebp
ret 4