Function at 0x429a14
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Create directory
Get file attributes

Disassembly:
push 0x160
mov eax, 0x48f10b
call fcn.0045a8ee
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x160], esi
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x20], ebx
call fcn.0040b8e5
push eax
lea ecx, [ebp - 0x20]
call fcn.00409d6c
mov dword [ebp - 4], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x154], 0x4e384246
mov dword [ebp - 0x150], 0x6c4d3248
mov dword [ebp - 0x14c], 0x756f7950
mov dword [ebp - 0x148], 0x354d5248
mov dword [ebp - 0x144], 0x32355349
mov dword [ebp - 0x140], 0x47385142
mov dword [ebp - 0x13c], 0x51555164
mov dword [ebp - 0x138], 0x75555149
mov dword [ebp - 0x134], 0x71736962
mov dword [ebp - 0x130], 0x37674465
mov dword [ebp - 0x12c], 0x516b6e4f
mov dword [ebp - 0x128], 0x54496849
mov dword [ebp - 0x124], 0x7a46774b
mov dword [ebp - 0x120], 0x74417944
mov dword [ebp - 0x11c], 0x7267684e
mov dword [ebp - 0x118], 0x4c385241
mov dword [ebp - 0x114], 0x6f774345
mov dword [ebp - 0x110], 0x42674447
mov dword [ebp - 0x10c], 0x2b306a59
mov dword [ebp - 0x108], 0x66497766
mov dword [ebp - 0x104], 0x3559414d
mov dword [ebp - 0x100], 0x70677866
mov dword [ebp - 0xfc], 0x336f334a
mov dword [ebp - 0xf8], 0x536b424a
mov dword [ebp - 0xf4], 0x6f6b5244
mov dword [ebp - 0xf0], 0x6b49774c
mov dword [ebp - 0xec], 0x71686744
mov dword [ebp - 0xe8], 0x50514266
mov dword [ebp - 0xe4], 0x4b415448
mov dword [ebp - 0xe0], 0x6d775165
mov dword [ebp - 0xdc], 0x3567544c
mov dword [ebp - 0xd8], 0x54597a42
mov dword [ebp - 0xd4], 0x4e6f4849
mov dword [ebp - 0xd0], 0x59346963
mov dword [ebp - 0xcc], 0x73776745
mov dword [ebp - 0xc8], 0x66595441
mov dword [ebp - 0xc4], 0x30304241
mov dword [ebp - 0xc0], 0x31386a4b
mov dword [ebp - 0xbc], 0x68356842
mov dword [ebp - 0xb8], 0x7a416a63
mov dword [ebp - 0xb4], 0x6c463247
mov dword [ebp - 0xb0], 0x49497a46
mov dword [ebp - 0xac], 0x5251674b
mov dword [ebp - 0xa8], 0x6b384249
mov dword [ebp - 0xa4], 0x74415447
mov dword [ebp - 0xa0], 0x4438424c
mov dword [ebp - 0x9c], 0x6677434c
mov dword [ebp - 0x98], 0x35555141
mov dword [ebp - 0x94], 0x39776750
mov dword [ebp - 0x90], 0x79776950
mov dword [ebp - 0x8c], 0x37774866
mov dword [ebp - 0x88], 0x6a6b7750
mov dword [ebp - 0x84], 0x73734359
mov dword [ebp - 0x80], 0x48776a47
mov dword [ebp - 0x7c], 0x794d5446
mov dword [ebp - 0x78], 0x474d4346
mov dword [ebp - 0x74], 0x2b646743
mov dword [ebp - 0x70], 0x3551414c
mov dword [ebp - 0x6c], 0x686f424c
mov dword [ebp - 0x68], 0x70396844
mov dword [ebp - 0x64], 0x506b6e49
mov dword [ebp - 0x60], 0x55675347
mov dword [ebp - 0x5c], 0x466b5346
mov dword [ebp - 0x58], 0x3568584b
mov dword [ebp - 0x54], 0x77646849
mov dword [ebp - 0x50], 0x33594448
mov dword [ebp - 0x4c], 0x4f417a41
mov dword [ebp - 0x48], 0x69674363
mov dword [ebp - 0x44], 0x675a784e
push ebx
sub esp, 0xc
mov dword [ebp - 0x40], 0x70746e4a
mov ecx, esp
mov dword [ebp - 0x3c], 0x3559694a
lea eax, [ebp - 0x15]
mov dword [ebp - 0x38], 0x68493242
lea edx, [ebp - 0x20]
mov dword [ebp - 0x34], 0x31415247
push eax
push edx
lea edi, [ebp - 0x154]
mov dword [ebp - 0x30], 0x6f55414d
push edi
mov dword [ebp - 0x2c], 0x55494364
mov dword [ebp - 0x28], 0x41555343
mov dword [ebp - 0x24], 0x69444141
call fcn.0040a169
lea eax, [ebp - 0x16c]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.004103eb
push eax
lea ecx, [ebp - 0x15c]
call fcn.00409dd5
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 3
call fcn.00455078
mov dword [ebp - 0x1c], ebx
call fcn.0040b8e5
push eax
lea ecx, [ebp - 0x1c]
call fcn.00409d6c
mov byte [ebp - 4], 4
mov dword [ebp - 0xe0], 0x4b554146
mov dword [ebp - 0xdc], 0x3642694f
mov dword [ebp - 0xd8], 0x6f636e5a
mov dword [ebp - 0xd4], 0x35304342
mov dword [ebp - 0xd0], 0x53557845
mov dword [ebp - 0xcc], 0x76774749
mov dword [ebp - 0xc8], 0x7a4a5263
mov dword [ebp - 0xc4], 0x56636848
mov dword [ebp - 0xc0], 0x69637859
mov dword [ebp - 0xbc], 0x70355244
mov dword [ebp - 0xb8], 0x756b544b
mov dword [ebp - 0xb4], 0x6f494164
mov dword [ebp - 0xb0], 0x68514159
mov dword [ebp - 0xac], 0x48455763
mov dword [ebp - 0xa8], 0x566b7a4f
mov dword [ebp - 0xa4], 0x706f5241
mov dword [ebp - 0xa0], 0x4d55424c
mov dword [ebp - 0x9c], 0x6d385466
mov dword [ebp - 0x98], 0x4b63694a
mov dword [ebp - 0x94], 0x564d694f
mov dword [ebp - 0x90], 0x4d677743
mov dword [ebp - 0x8c], 0x4f497746
mov dword [ebp - 0x88], 0x7941514e
mov dword [ebp - 0x84], 0x596f774b
mov dword [ebp - 0x80], 0x725a6962
mov dword [ebp - 0x7c], 0x69677841
mov dword [ebp - 0x78], 0x45304363
mov dword [ebp - 0x74], 0x44414349
mov dword [ebp - 0x70], 0x34455349
mov dword [ebp - 0x6c], 0x5473584a
mov dword [ebp - 0x68], 0x37384850
mov dword [ebp - 0x64], 0x62736765
mov dword [ebp - 0x60], 0x6d415448
mov dword [ebp - 0x5c], 0x7345534a
mov dword [ebp - 0x58], 0x6b49694b
mov dword [ebp - 0x54], 0x39426949
mov dword [ebp - 0x50], 0x314e434a
mov dword [ebp - 0x4c], 0x59306a65
mov dword [ebp - 0x48], 0x2b734748
mov dword [ebp - 0x44], 0x48514141
lea eax, [ebp - 0x14]
mov dword [ebp - 0x40], 0x6b59544a
push eax
push ebx
sub esp, 0xc
mov dword [ebp - 0x3c], 0x4b416a65
mov ecx, esp
mov dword [ebp - 0x38], 0x7846524f
lea eax, [ebp - 0x15]
mov dword [ebp - 0x34], 0x62347946
lea edx, [ebp - 0x21]
mov dword [ebp - 0x30], 0x31735364
push eax
push edx
lea edi, [ebp - 0xe0]
mov dword [ebp - 0x2c], 0x304d534d
push edi
mov dword [ebp - 0x28], 0x4141414a
mov word [ebp - 0x24], 0x4941
mov byte [ebp - 0x22], 0x6f
call fcn.0040a169
lea eax, [ebp - 0x16c]
push eax
call fcn.0042a1df
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.004103eb
push eax
lea eax, [ebp - 0x158]
mov ecx, esi
push eax
call fcn.0045002c
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 6
call fcn.00423f23
mov ecx, dword [ebp - 0x158]
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 4
call fcn.00455078
mov edi, dword [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
cmp dword [edi - 0xc], ebx
je 0x42a015
cmp dword [esi - 0xc], 0
lea ecx, [ebp - 0x1c]
jne 0x429f9b
lea eax, [ebp - 0x20]
push eax
call fcn.00423f23
mov esi, dword [ebp - 0x1c]
jmp 0x429fc0
push edi
call fcn.00426558
mov esi, dword [ebp - 0x1c]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x429fb4
test al, 0x10
jne 0x429fc0
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x42a005
mov ecx, dword [ebp - 0x160]
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x15c]
lea eax, [ebp - 0x158]
push eax
call fcn.0045002c
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 7
call fcn.00423f23
mov ecx, dword [ebp - 0x158]
mov byte [ebp - 4], 4
lea ecx, [ecx - 0x10]
call fcn.0040bc6b
mov edi, dword [ebp - 0x20]
cmp dword [edi - 0xc], ebx
jne 0x429f84
jmp 0x42a015
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor ebx, ebx
cmp eax, 0xb7
cmovne ebx, eax
lea ecx, [esi - 0x10]
call fcn.0040bc6b
mov ecx, dword [ebp - 0x15c]
add ecx, 0xfffffff0
call fcn.0040bc6b
lea ecx, [edi - 0x10]
call fcn.0040bc6b
mov eax, ebx
call fcn.0045a89d
ret