Function at 0x419680
Capabilities:
Access peb ldr_data
Check if file exists
Get file attributes
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x54c
mov dword [ebp - 0x530], eax
mov eax, dword [0x4425b8]
mov dword [ebp - 0x534], edx
mov dword [ebp - 0x52c], ecx
mov esi, dword [eax + 0x12fc]
test esi, esi
je 0x4197ee
mov ebx, dword [sym.imp.ucrtbase.dll_strcmp]
mov edi, esi
mov dword [ebp - 0x538], esi
mov esi, ebx
mov ebx, dword [ebp - 0x530]
jmp 0x4196db
mov edi, dword [edi + 8]
test edi, edi
je 0x4197e8
mov dword [esp + 4], ebx
mov eax, dword [edi]
mov dword [esp], eax
call esi
test eax, eax
jne 0x4196d0
mov eax, dword [edi + 4]
lea edx, [ebp - 0x520]
xor ecx, ecx
call fcn.00419520
mov esi, eax
cmp eax, 0xffffffff
je 0x4197da
mov edx, dword [ebp - 0x534]
lea ebx, [ebp - 0x418]
mov eax, dword [ebp - 0x52c]
sub edx, 1
cmp edx, eax
jge 0x4197bc
mov dword [ebp - 0x534], esi
mov esi, edx
mov edx, edi
jmp 0x41979d
xor eax, eax
mov ecx, 0x100
mov edi, ebx
rep stosd dword es:[edi], eax
mov ecx, dword [edx + 0x14]
mov eax, dword [ecx + esi*4 + 4]
mov ecx, dword [ecx + esi*4]
cmp eax, ecx
je 0x419772
mov dword [ebp - 0x530], edx
mov edx, dword [ebp - 0x534]
sub eax, 1
sub eax, ecx
mov dword [esp], ebx
mov dword [esp + 8], eax
add ecx, edx
mov dword [esp + 4], ecx
call sub.ucrtbase.dll_memcpy
mov edx, dword [ebp - 0x530]
add esi, 1
mov dword [ebp - 0x530], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], str._d_t_s_n
call fcn.004242a0
cmp dword [ebp - 0x52c], esi
mov edx, dword [ebp - 0x530]
jle 0x4197b6
test esi, esi
js 0x4197ab
mov eax, dword [edx + 0x10]
sub eax, 1
cmp eax, esi
jg 0x419730
add esi, 1
cmp dword [ebp - 0x52c], esi
jg 0x41979d
mov esi, dword [ebp - 0x534]
mov ebx, dword [ebp - 0x520]
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_UnmapViewOfFile]
sub esp, 4
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_CloseHandle]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, dword [ebp - 0x538]
mov dword [esp + 4], 0x5c
mov eax, dword [ebp - 0x530]
mov ebx, dword [sym.imp.ucrtbase.dll_strrchr]
mov dword [esp], eax
call ebx
test eax, eax
je 0x419840
lea edi, [eax + 1]
test esi, esi
je 0x419860
mov ebx, dword [sym.imp.ucrtbase.dll_strcmp]
jmp 0x419827
mov esi, dword [esi + 8]
test esi, esi
je 0x419860
mov dword [esp + 4], edi
mov eax, dword [esi]
mov dword [esp], eax
call ebx
test eax, eax
jne 0x419820
mov edi, esi
jmp 0x4196ea
mov dword [esp + 4], 0x2f
mov edi, dword [ebp - 0x530]
mov dword [esp], edi
call ebx
test eax, eax
jne 0x41980b
jmp 0x41980e
mov ebx, dword [ebp - 0x530]
mov eax, dword [sym.imp.kernel32.dll_GetFileAttributesA]
mov dword [esp], ebx
mov dword [ebp - 0x538], eax
call eax
sub esp, 4
cmp eax, 0xffffffff
jne 0x419a04
mov eax, dword [0x4425b8]
mov esi, dword [ebp - 0x530]
mov edx, dword [eax + 0x1300]
test edx, edx
je 0x419a24
lea esi, [esi]
nop
movzx eax, byte [esi]
cmp al, 0x2f
je 0x419a1c
test al, al
jne 0x4198cf
jmp 0x419a24
movzx eax, byte [esi + 1]
add esi, 1
test al, al
je 0x419a24
cmp al, 0x2f
je 0x419a1c
cmp al, 0x5c
jne 0x4198b8
add esi, 1
mov dword [esp + 0x14], 0
lea ebx, [ebp - 0x51c]
mov dword [esp + 0xc], 0x104
mov dword [esp + 0x10], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], esi
mov eax, dword [0x4425b8]
mov eax, dword [eax + 0x1300]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_SearchPathA]
sub esp, 0x18
test eax, eax
je 0x4198a0
lea esi, [esi]
nop
mov eax, dword [ebp - 0x530]
mov edx, ebx
call fcn.00419400
lea edx, [ebp - 0x520]
lea ecx, [eax + 0xc]
mov edi, eax
mov eax, ebx
call fcn.00419520
mov esi, eax
cmp eax, 0xffffffff
je 0x4197da
mov ecx, dword [edi + 0xc]
mov dword [edi + 0x10], 1
add ecx, eax
cmp eax, ecx
jae 0x419b14
mov edx, 1
lea esi, [esi]
nop
add eax, 1
cmp byte [eax - 1], 0xa
jne 0x419977
add edx, 1
mov dword [edi + 0x10], edx
cmp eax, ecx
jne 0x419968
add edx, 1
lea eax, [edx*4]
mov dword [edi + 0x10], edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov edx, dword fs:[0x18]
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [edi + 0x14], eax
sub esp, 0xc
mov dword [eax], 0
mov ecx, dword [edi + 0xc]
lea eax, [esi + ecx]
cmp esi, eax
jae 0x419b23
mov eax, esi
mov ebx, 1
lea esi, [esi]
nop
add eax, 1
cmp byte [eax - 1], 0xa
jne 0x4199e9
mov edx, dword [edi + 0x14]
mov ecx, eax
sub ecx, esi
mov dword [edx + ebx*4], ecx
mov ecx, dword [edi + 0xc]
add ebx, 1
lea edx, [esi + ecx]
cmp eax, edx
jb 0x4199d0
lea edx, [ebx*4]
sub eax, esi
mov ecx, dword [edi + 0x14]
mov dword [ecx + edx], eax
jmp 0x419705
mov dword [esp + 4], ebx
lea ebx, [ebp - 0x51c]
mov dword [esp], ebx
call dword [sym.imp.ucrtbase.dll_strcpy]
jmp 0x419920
test al, al
jne 0x4198d3
mov eax, dword [0x4422d4]
test eax, eax
je 0x419af5
lea ebx, [ebp - 0x51c]
lea esi, [ebp - 0x418]
jmp 0x419a8f
movzx edx, byte [ebp + eax - 0x51d]
cmp dl, 0x2f
je 0x419a5d
cmp dl, 0x5c
je 0x419a5d
mov byte [ebp + eax - 0x51c], 0x2f
add eax, 1
add eax, ebx
mov dword [esp + 4], edi
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_strcpy]
mov dword [esp], ebx
mov eax, dword [ebp - 0x538]
call eax
sub esp, 4
cmp eax, 0xffffffff
jne 0x419ad6
mov dword [esp + 4], ebx
mov dword [esp], str.Unable_to_access_file__s_n
call fcn.004242a0
mov eax, dword [ebp - 0x530]
mov dword [esp + 8], str.Enter_path_to_file__s___cr__to_end_search_:
mov dword [esp + 4], 0x100
mov dword [esp], esi
mov dword [esp + 0xc], eax
call fcn.00419630
mov dword [esp + 8], 0x104
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004255b0
mov dword [esp], ebx
call dword [sym.imp.ucrtbase.dll_strlen]
test eax, eax
jne 0x419a40
cmp byte [ebp - 0x51c], 0
jne 0x419920
mov eax, dword [ebp - 0x530]
xor edx, edx
call fcn.00419400
jmp 0x4197da
mov eax, dword [ebp - 0x530]
mov dword [esp], str.Unable_to_access_file__s_n
mov dword [esp + 4], eax
call fcn.004242a0
mov byte [ebp - 0x51c], 0
jmp 0x419ae3
mov eax, 8
mov edx, 2
jmp 0x419985
xor eax, eax
mov edx, 4
jmp 0x4199f9