Function at 0x430320
Capabilities:
Check if file exists
Get file attributes
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4605ab
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x26c
push ebx
push ebp
push esi
push edi
mov ebp, ecx
lea ecx, [esp + 0x16c]
mov dword [esp + 0x284], 1
call fcn.0040e700
mov edx, dword [esp + 0x28c]
lea eax, [esp + 0x16c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push edx
mov byte [esp + 0x2a8], 2
call fcn.00405950
mov ecx, ebp
call fcn.0042e3a0
xor ebx, ebx
cmp eax, ebx
jne 0x4303fb
lea ecx, [esp + 0x16c]
mov byte [esp + 0x284], 1
call fcn.0040e790
mov eax, dword [esp + 0x2a8]
mov esi, 0x10
cmp eax, esi
jb 0x4303bf
mov eax, dword [esp + 0x294]
push eax
call fcn.0044b92d
add esp, 4
cmp dword [esp + 0x2c4], esi
mov dword [esp + 0x2a8], 0xf
mov dword [esp + 0x2a4], ebx
mov byte [esp + 0x294], bl
jb 0x4303f1
mov ecx, dword [esp + 0x2b0]
push ecx
call fcn.0044b92d
add esp, 4
mov eax, 1
jmp 0x430bc2
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x2b4]
mov edi, 0xf
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.004022a0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x4c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x2ec]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push eax
mov byte [esp + 0x2c8], 3
mov byte [ecx + 4], bl
call fcn.004022a0
lea ecx, [esp + 0x54]
push ecx
mov ecx, ebp
mov byte [esp + 0x2c0], 2
call fcn.0042bb10
mov edx, dword [esp + 0x30]
push 1
push 0x464f38
push edx
push ebx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x294], 4
call fcn.00401450
test eax, eax
jne 0x430508
mov eax, dword [esp + 0x34]
mov esi, 0x10
cmp eax, esi
jb 0x4304a0
mov eax, dword [esp + 0x20]
push eax
call fcn.0044b92d
add esp, 4
lea ecx, [esp + 0x16c]
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
mov byte [esp + 0x284], 1
call fcn.0040e790
cmp dword [esp + 0x2a8], esi
jb 0x4304d9
mov ecx, dword [esp + 0x294]
push ecx
call fcn.0044b540
add esp, 4
cmp dword [esp + 0x2c4], esi
mov dword [esp + 0x2a8], edi
mov dword [esp + 0x2a4], ebx
mov byte [esp + 0x294], bl
jb 0x430bbd
mov edx, dword [esp + 0x2b0]
push edx
jmp 0x430bb5
push 1
push 0xffffffffffffffff
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x1c], 0x2f
call fcn.0040b0b0
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x34]
mov esi, eax
cmp esi, 0xffffffff
je 0x430b44
cmp esi, 0xffffffff
je 0x430b44
cmp ecx, 0x10
mov eax, edx
jae 0x430546
lea eax, [esp + 0x20]
cmp byte [eax + esi + 1], bl
je 0x430b44
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x2d4]
call fcn.004026b0
lea edx, [esi + 1]
push edx
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x24]
call fcn.00405900
push eax
lea ecx, [esp + 0x294]
mov byte [esp + 0x288], 5
call fcn.004026b0
lea ecx, [esp + 0x38]
mov byte [esp + 0x284], 4
call fcn.00401fd0
cmp esi, ebx
lea ecx, [esp + 0x1c]
jne 0x4305b1
push 0x464f38
push ecx
call fcn.00405580
add esp, 8
jmp 0x4305d7
push esi
lea edx, [esp + 0x3c]
push edx
call fcn.00405870
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x288], 6
call fcn.004026b0
lea ecx, [esp + 0x38]
call fcn.00401fd0
mov dword [esp + 0xa4], edi
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
mov dword [esp + 0x88], edi
mov dword [esp + 0x84], ebx
mov byte [esp + 0x74], bl
lea ecx, [esp + 0x11c]
mov byte [esp + 0x284], 8
call fcn.004031a0
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x288], 9
call fcn.004024c0
lea ecx, [esp + 0x290]
push ecx
lea ecx, [esp + 0xac]
mov byte [esp + 0x288], 0xa
call fcn.004024c0
mov byte [esp + 0x284], 0xb
lea esp, [esp]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x120]
push eax
lea ecx, [esp + 0x174]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x84]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.004022a0
mov ecx, ebp
call fcn.0042c870
test al, 2
mov dword [esp + 0x14], eax
je 0x430855
cmp dword [esp + 0x2c8], 0x40
jne 0x430855
mov eax, dword [esp + 0x68]
push 1
push 0x464f38
push eax
push ebx
lea ecx, [esp + 0x64]
call fcn.00401450
test eax, eax
je 0x430859
push 1
push 0xffffffffffffffff
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x60]
mov byte [esp + 0x1c], 0x2f
call fcn.0040b0b0
mov esi, eax
cmp esi, 0xffffffff
je 0x430859
cmp esi, 0xffffffff
je 0x430859
lea edx, [esi + 1]
push edx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x5c]
call fcn.00405900
push 0x464f38
push eax
lea ecx, [esp + 0xec]
push ecx
mov byte [esp + 0x290], 0xc
call fcn.0040bf60
lea edx, [esp + 0xb4]
push edx
push eax
lea eax, [esp + 0x114]
push eax
mov byte [esp + 0x29c], 0xd
call fcn.004154a0
add esp, 0x18
push eax
lea ecx, [esp + 0xac]
mov byte [esp + 0x288], 0xe
call fcn.004026b0
cmp dword [esp + 0x118], 0x10
jb 0x430771
mov ecx, dword [esp + 0x104]
push ecx
call fcn.0044b92d
add esp, 4
cmp dword [esp + 0xfc], 0x10
mov dword [esp + 0x118], edi
mov dword [esp + 0x114], ebx
mov byte [esp + 0x104], bl
jb 0x4307a0
mov edx, dword [esp + 0xe8]
push edx
call fcn.0044b92d
add esp, 4
cmp dword [esp + 0xdc], 0x10
mov dword [esp + 0xfc], edi
mov dword [esp + 0xf8], ebx
mov byte [esp + 0xe8], bl
mov byte [esp + 0x284], 0xb
jb 0x4307d7
mov eax, dword [esp + 0xc8]
push eax
call fcn.0044b92d
add esp, 4
cmp esi, ebx
mov dword [esp + 0xdc], edi
mov dword [esp + 0xd8], ebx
mov byte [esp + 0xc8], bl
je 0x43083e
push esi
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x5c]
call fcn.00405870
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x288], 0xf
call fcn.004026b0
cmp dword [esp + 0x50], 0x10
mov byte [esp + 0x284], 0xb
jb 0x43082d
mov edx, dword [esp + 0x3c]
push edx
call fcn.0044b92d
add esp, 4
mov dword [esp + 0x50], edi
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
jmp 0x430650
lea eax, [esp + 0x54]
push 0x464f38
push eax
call fcn.00405580
add esp, 8
jmp 0x430650
cmp eax, ebx
je 0x4308cd
lea ecx, [esp + 0xa8]
call fcn.00401fd0
lea ecx, [esp + 0x54]
call fcn.00401fd0
lea ecx, [esp + 0x11c]
call fcn.00403200
lea ecx, [esp + 0x70]
call fcn.00401fd0
lea ecx, [esp + 0x8c]
call fcn.00401fd0
lea ecx, [esp + 0x1c]
call fcn.00401fd0
lea ecx, [esp + 0x16c]
mov byte [esp + 0x284], 1
call fcn.0040e790
lea ecx, [esp + 0x290]
call fcn.00401fd0
lea ecx, [esp + 0x2ac]
call fcn.00401fd0
mov eax, dword [esp + 0x14]
jmp 0x430bc2
lea ecx, [esp + 0x11c]
push ecx
lea ecx, [esp + 0x90]
call fcn.004026b0
lea edx, [esp + 0xa8]
push edx
lea ecx, [esp + 0x74]
call fcn.004026b0
cmp dword [esp + 0x158], ebx
jne 0x43090d
test byte [esp + 0x2c8], 0x20
je 0x43090d
mov dword [esp + 0x14], 1
cmp dword [esp + 0x154], ebx
jne 0x430925
test byte [esp + 0x2c8], 0x40
je 0x430925
or dword [esp + 0x14], 1
push 0x46239c
push 0x464f38
lea ecx, [esp + 0x78]
call fcn.0040c830
push 0x46239c
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0xcc]
push ecx
call fcn.0040bf60
lea edx, [esp + 0x7c]
push edx
push eax
lea eax, [esp + 0x4c]
push eax
mov byte [esp + 0x29c], 0x10
call fcn.004154a0
add esp, 0x18
mov esi, dword [esp + 0x2cc]
push eax
mov ecx, esi
mov byte [esp + 0x288], 0x11
call fcn.004026b0
lea ecx, [esp + 0x38]
call fcn.00401fd0
lea ecx, [esp + 0xc4]
mov byte [esp + 0x284], 0xb
call fcn.00401fd0
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x120]
push edx
lea eax, [esp + 0x174]
push eax
push 0x464f38
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x4c]
push edx
call fcn.0040bf60
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x108], esp
lea edx, [esp + 0x2b8]
push edx
push eax
push ecx
mov byte [esp + 0x2b8], 0x12
call fcn.004154a0
add esp, 0xc
mov ecx, ebp
call fcn.0042c870
lea ecx, [esp + 0x38]
mov dword [esp + 0x18], eax
call fcn.0044b540
mov eax, dword [esp + 0x18]
cmp eax, ebx
jne 0x430a22
test byte [esp + 0x2c8], 0x40
je 0x430a22
mov edi, dword [esp + 0x14]
or edi, 0x10
jmp 0x430aa2
test al, 2
jne 0x430a9e
or eax, dword [esp + 0x14]
lea ecx, [esp + 0xa8]
mov esi, eax
call fcn.00401fd0
lea ecx, [esp + 0x54]
call fcn.00401fd0
lea ecx, [esp + 0x11c]
call fcn.00403200
lea ecx, [esp + 0x70]
call fcn.00401fd0
lea ecx, [esp + 0x8c]
call fcn.00401fd0
lea ecx, [esp + 0x1c]
call fcn.00401fd0
lea ecx, [esp + 0x16c]
mov byte [esp + 0x284], 1
call fcn.0040e790
lea ecx, [esp + 0x290]
call fcn.00401fd0
lea ecx, [esp + 0x2ac]
call fcn.00401fd0
mov eax, esi
jmp 0x430bc2
mov edi, dword [esp + 0x14]
cmp dword [esi + 0x18], 0x10
jb 0x430aad
mov esi, dword [esi + 4]
jmp 0x430ab0
add esi, 4
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x430acb
test byte [esp + 0x2c8], 0x40
jne 0x430acb
or edi, 2
jmp 0x430ad2
test al, 0x10
jne 0x430ad2
or edi, 0x18
lea ecx, [esp + 0xa8]
call fcn.00401fd0
lea ecx, [esp + 0x54]
call fcn.00401fd0
lea ecx, [esp + 0x11c]
call fcn.00403200
lea ecx, [esp + 0x70]
call fcn.00401fd0
lea ecx, [esp + 0x8c]
call fcn.00401fd0
lea ecx, [esp + 0x1c]
call fcn.00401fd0
lea ecx, [esp + 0x16c]
mov byte [esp + 0x284], 1
call fcn.0040e790
lea ecx, [esp + 0x290]
call fcn.00401fd0
lea ecx, [esp + 0x2ac]
call fcn.00401fd0
mov eax, edi
jmp 0x430bc2
mov esi, 0x10
cmp ecx, esi
jb 0x430b56
push edx
call fcn.0044b92d
add esp, 4
lea ecx, [esp + 0x16c]
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
mov byte [esp + 0x284], 1
call fcn.0040e790
cmp dword [esp + 0x2a8], esi
jb 0x430b8f
mov eax, dword [esp + 0x294]
push eax
call fcn.0044b92d
add esp, 4
cmp dword [esp + 0x2c4], esi
mov dword [esp + 0x2a8], edi
mov dword [esp + 0x2a4], ebx
mov byte [esp + 0x294], bl
jb 0x430bbd
mov ecx, dword [esp + 0x2b0]
push ecx
call fcn.0044b92d
add esp, 4
mov eax, 2
mov ecx, dword [esp + 0x27c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x278
ret 0x48