Function at 0x42c9c0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5df310
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
mov eax, dword [0x67432c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xb8], ecx
xor eax, eax
mov dword [ebp - 0xa4], eax
mov eax, dword [0x679464]
test eax, eax
jne 0x42ca3a
push 0x15c
call fcn.0046d56f
add esp, 4
mov dword [ebp - 0xb4], eax
mov dword [ebp - 4], 0
test eax, eax
je 0x42ca2c
mov ecx, eax
call fcn.00443b90
jmp 0x42ca2e
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov dword [0x679464], eax
mov ecx, eax
call fcn.00471d44
mov edx, eax
mov dword [ebp - 0x2c], 7
xor eax, eax
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
cmp word [edx], ax
jne 0x42ca60
xor ecx, ecx
jmp 0x42ca74
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42ca65
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x40]
call fcn.00402ad0
mov dword [ebp - 4], 1
call fcn.004524ef
test al, al
je 0x42ca9f
xor edx, dword [ebx - 0x6d]
or al, bl
jmp 0x42cacf
call fcn.004521f8
test al, al
je 0x42cac7
retf
call fcn.00452015
dec ecx
push ebp
add al, byte [eax]
test al, al
je 0x42cae6
push ss
push ebx
push 0x1e
inc esi
das
sbb eax, ebx
xchg edx, eax
ror dword [ebp - 0x6228e2c4], 1
arpl word [eax], ax
jno 0x42cac8
xor ebp, ecx
pop es
push esi
push 0xa
push str.WnTool.exe
lea ecx, [ebp - 0x40]
call fcn.00405da0
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42cb30
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push 0
cmovae eax, dword [ebp - 0x40]
push 0
push 0
push 0x5e96e8
push eax
call fcn.0045c2e7
add esp, 0x14
mov dword [ebp - 0xa4], eax
call fcn.00452351
test al, al
je 0x42cb50
cmp ch, dl
pop ecx
inc ebp
add eax, 0xbc40497
nop
xor esi, dword [ebx - 0x3f]
sbb cl, dl
test al, 0x91
fsubr st(4)
call 0xe8f6b5bb
invalid
call fcn.004520e4
test al, al
je 0x42cb71
ja 0x42cbab
push 0x1c
pushal
adc byte [ebx + ecx*2 - 0x57389c39], bh
insd dword es:[edi], dx
invalid
call fcn.0045216e
test al, al
je 0x42cb92
mov byte [eax - 0x4cae2356], ch
inc ebp
cli
leave
dec esi
fsub qword [ebp + 0x54]
sbb ebx, dword [edi - 0x14]
adc esp, ecx
scasb al, byte es:[edi]
jmp 0x943cc0a4
mov edi, dword [ebp - 0xa4]
test edi, edi
jne 0x42d023
push 0x20
push str.14124824043828171244112326144871
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x74], 0xf
mov dword [ebp - 0x78], edi
mov byte [ebp - 0x88], 0
call fcn.004028b0
cmp dword [ebp - 0x74], 0x10
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 2
cmovae eax, dword [ebp - 0x88]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.00452a91
add esp, 8
mov dword [ebp - 0xb0], edi
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xa8], edi
push 1
push 0x5e7684
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 4
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], edi
mov byte [ebp - 0x58], 0
call fcn.004028b0
cmp dword [ebp - 0x5c], 0x10
lea edx, [ebp - 0x70]
mov dword [ebp - 0x14], 0xf
cmovae edx, dword [ebp - 0x70]
mov dword [ebp - 0x18], edi
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 5
cmp byte [edx], 0
jne 0x42cc3e
invalid
xor ecx, ecx
jmp 0x42cc4c
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42cc43
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.004028b0
lea eax, [ebp - 0xb0]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0045741c
mov eax, dword [ebp - 0x14]
add esp, 0xc
cmp eax, 0x10
jb 0x42cc86
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00402bd0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 4
cmp eax, 0x10
jb 0x42ccb1
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00402bd0
call fcn.00451fd0
test al, al
je 0x42ccd4
shl cl, 8
ret
mov ebx, dword [ebp - 0xb0]
mov dword [ebp - 0xb4], ebx
cmp ebx, dword [ebp - 0xac]
je 0x42cec6
nop dword [eax]
call fcn.0045223d
test al, al
je 0x42cd09
salc
test al, 0xb2
bound edx, qword [0x7934b1c8]
fiadd dword [eax]
xchg ecx, eax
xor dword [eax - 0x5f], esp
mov bh, 0xe8
mov al, 0x58
add al, byte [eax]
call fcn.004525be
test al, al
je 0x42cd38
test byte [ebx + 0x7828a623], bl
mov bh, byte [ecx]
add esp, dword [ecx]
std
add ch, 0x55
imul ebp, dword [esi + edi*2 + 0x49], 0x64018955
sub byte [eax - 0x46], bl
leave
outsb dx, byte [esi]
jb 0x42cda8
invalid
call fcn.00451fd0
test al, al
je 0x42cd5f
into
in eax, 0xd0
daa
sar dword [ecx + 0x14], cl
pop esi
or eax, 0x9f774bad
insd dword es:[edi], dx
wait
dec esi
push edi
out dx, eax
fcompi st(6)
mov ah, 0x3a
scasd eax, dword es:[edi]
fild qword [esi + ecx*8 - 0x43]
jns 0x42cd9f
fiadd word [ebx + 0x7210147b]
add al, 0x8b
adc ebp, ebx
add cl, byte [ebx - 0x43ba382d]
sldt word [eax]
add bh, al
inc ebp
mov eax, 0
cmp dword [ebx + 0x14], 0x10
jb 0x42cd69
mov edx, dword [ebx]
jmp 0x42cd6b
mov edx, ebx
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
cmp byte [edx], 0
jne 0x42cd86
xor ecx, ecx
jmp 0x42cd99
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42cd90
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x58]
call fcn.004028b0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 7
or eax, 0x8dfffd5b
inc ebp
test al, 0xc6
inc ebp
cld
pop es
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004578fb
add esp, 8
mov eax, dword [0x679464]
mov byte [ebp - 4], 8
test eax, eax
jne 0x42cdf3
push 0x15c
call fcn.0046d56f
add esp, 4
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 9
test eax, eax
je 0x42cde8
mov ecx, eax
call fcn.00443b90
jmp 0x42cdea
xor eax, eax
mov byte [ebp - 4], 8
mov dword [0x679464], eax
mov ecx, eax
call fcn.00471d44
mov edx, eax
cmp word [edx], 0
jne 0x42ce06
xor ecx, ecx
jmp 0x42ce1f
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42ce10
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x40]
call fcn.00402ad0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x40]
call fcn.00405c90
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x42cf19
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push 0
cmovae eax, dword [ebp - 0x40]
push 0
push 0
push 0x5e96e8
push eax
call fcn.0045c2e7
mov edi, eax
add esp, 0x14
mov dword [ebp - 0xa4], edi
test edi, edi
je 0x42cf1f
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x42ce97
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00402c20
xor eax, eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], 0
cmp eax, 0x10
jb 0x42cec0
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00402bd0
mov ebx, dword [ebp - 0xb0]
mov byte [ebp - 4], 3
test ebx, ebx
je 0x42cfdd
push dword [ebp - 0xbc]
lea eax, [ebp - 0xb0]
push eax
push dword [ebp - 0xac]
push ebx
call fcn.004063d0
mov ecx, dword [ebp - 0xa8]
mov eax, 0x2aaaaaab
mov ebx, dword [ebp - 0xb0]
add esp, 0x10
sub ecx, ebx
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 0xaaaaaaa
jbe 0x42cf7b
call fcn.004830c1
mov edi, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x42cf34
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00402c20
xor eax, eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], 0
mov byte [ebp - 4], 4
cmp eax, 0x10
jb 0x42cf61
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00402bd0
add ebx, 0x18
mov dword [ebp - 0xb4], ebx
cmp ebx, dword [ebp - 0xac]
jne 0x42ccf0
jmp 0x42cec0
lea eax, [eax + eax*2]
shl eax, 3
cmp eax, 0x1000
jb 0x42cfb6
test bl, 0x1f
je 0x42cf92
call fcn.004830c1
mov eax, dword [ebx - 4]
cmp eax, ebx
jb 0x42cf9e
call fcn.004830c1
sub ebx, eax
cmp ebx, 4
jae 0x42cfaa
call fcn.004830c1
cmp ebx, 0x23
jbe 0x42cfb4
call fcn.004830c1
mov ebx, eax
push ebx
call fcn.0046d5a2
add esp, 4
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x5c]
inc ebp
movsb byte es:[edi], byte [esi]
cmp eax, 0x10
jb 0x42cff2
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.00402bd0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
mov byte [ebp - 4], 1
cmp eax, 0x10
jb 0x42d023
inc eax
lea ecx, [ebp - 0x88]
push eax
push dword [ebp - 0x88]
call fcn.00402bd0
std
invalid
call fcn.004524aa
test al, al
je 0x42d03d
jnp 0x42d0ab
pop es
pop es
insd dword es:[edi], dx
stosb byte es:[edi], al
jnp 0x42cfbf
loop 0x42d0a0
js 0x42cfde
les esi, [ecx]
jnp 0x42d066
jl 0x42cfc9
mov eax, dword [ebp - 0xb8]
add eax, 0x94
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00457be8
add esp, 8
xor ebx, ebx
mov byte [ebp - 4], 0xa
test edi, edi
setne bl
mov dword [ebp - 0xb8], ebx
call fcn.00452420
test al, al
je 0x42d095
test dword [eax - 1], ecx
invalid
add byte [eax - 0x73], dl
test dword [eax - 1], esp
invalid
invalid
sub al, ch
adc eax, ebp
mov dword [0xa6b99c28], eax
popfd
aam 0x7c
aad 0xc7
or dword [ebx + 0x232737f2], esi
jg 0x42d021
enter 0x212f, 0x6b
inc edi
invalid
call fcn.004521f8
test al, al
je 0x42d0be
salc
lahf
invalid
add eax, 0xf271a241
inc ebp
loope 0x42d047
sbb dh, byte [edi - 0x18]
rcl byte [ecx], cl
ret
cmp dword [ebp - 0x8c], 0x10
lea esi, [ebp - 0xa0]
mov eax, dword [0x679468]
cmovae esi, dword [ebp - 0xa0]
test eax, eax
jne 0x42d10a
push 0xdc
call fcn.0046d56f
add esp, 4
mov dword [ebp - 0xbc], eax
mov byte [ebp - 4], 0xb
test eax, eax
je 0x42d0ff
mov ecx, eax
call fcn.0040d0b0
jmp 0x42d101
xor eax, eax
mov byte [ebp - 4], 0xa
mov dword [0x679468], eax
push ebx
push esi
push 1
push 1
mov ecx, eax
call fcn.00411430
mov eax, dword [ebp - 0x8c]
cmp eax, 0x10
jb 0x42d135
inc eax
lea ecx, [ebp - 0xa0]
push eax
push dword [ebp - 0xa0]
call fcn.00402bd0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x8c], 0xf
mov dword [ebp - 0x90], 0
mov byte [ebp - 0xa0], 0
cmp eax, 8
jb 0x42d165
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00402c20
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046d81d
mov esp, ebp
pop ebp
ret 4