Function at 0x430a1d
Capabilities:
Create thread
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0c
mov eax, dword [0x4eb664]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, ecx
push 0x4eb630
lea ecx, [ebp - 0xab4]
call fcn.004044ee
lea eax, [ebp - 0xa2c]
mov dword [ebp - 0xad4], eax
xor esi, esi
lea eax, [ebp - 0xadc]
push eax
mov dword [ebp - 0xadc], edi
mov dword [ebp - 0xad8], esi
mov dword [ebp - 0xad0], 0x4bdbb0
mov dword [ebp - 0xacc], 0x50
mov dword [ebp - 0xac8], esi
mov dword [ebp - 0xac4], esi
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
test eax, eax
je 0x430d6b
lea ecx, [ebp - 0xa2c]
push ecx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
test eax, eax
je 0x430d52
call fcn.0046855b
test eax, eax
je 0x430bc1
lea eax, [ebp - 0xa2c]
push eax
call fcn.004307f4
pop ecx
test al, al
jne 0x430ae0
lea eax, [ebp - 0xa2c]
push eax
call fcn.0043087f
pop ecx
test al, al
je 0x430bc1
push 0x4eb630
lea ecx, [ebp - 0xab0]
call fcn.004044ee
call fcn.00467330
push eax
lea eax, [ebp - 0xa2c]
push eax
lea eax, [ebp - 0xab0]
push str.execptionpath_failfailpath_sis64_d
push eax
call fcn.00404994
mov edi, dword [ebp - 0xab0]
add esp, 0x10
lea ecx, [ebp - 0xab8]
push edi
call fcn.004301a0
push 4
call fcn.00449b05
mov esi, dword [ebp - 0xab8]
pop ecx
mov dword [ebp - 0xab0], eax
test eax, eax
je 0x430b54
lea ecx, [esi - 0x10]
push ecx
call fcn.00430453
pop ecx
mov ecx, dword [ebp - 0xab0]
add eax, 0x10
mov dword [ecx], eax
xor ecx, ecx
jmp 0x430b5c
xor ecx, ecx
mov dword [ebp - 0xab0], ecx
mov eax, dword [ebx + 0x160]
test eax, eax
je 0x430b82
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push dword [ebx + 0x160]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
mov dword [ebx + 0x160], ecx
push ecx
push ecx
push dword [ebp - 0xab0]
push 0x4309bc
push ecx
push ecx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x30
push 0x4bdc14
push 0x4bdc28
push 0
mov dword [ebx + 0x160], eax
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esi - 0x10]
call fcn.00404f8d
lea ecx, [edi - 0x10]
jmp 0x430d4b
lea eax, [ebp - 0xabc]
push eax
lea eax, [ebp - 0xa2c]
push eax
mov dword [ebp - 0xabc], 0xc800000
mov dword [ebp - 0xab8], esi
call fcn.00466fef
pop ecx
pop ecx
test eax, eax
je 0x430c5d
lea eax, [ebp - 0xa2c]
push eax
call fcn.0040481a
pop ecx
push eax
lea eax, [ebp - 0xa2c]
push eax
lea ecx, [ebp - 0xab4]
call fcn.004047a1
lea eax, [ebp - 0xab4]
push eax
call fcn.00468709
mov esi, 0x4bdc60
push esi
call fcn.0040481a
pop ecx
pop ecx
push eax
push esi
lea ecx, [ebp - 0xab4]
call fcn.0041e1c3
lea eax, [ebp - 0xab4]
push eax
call fcn.00468709
push dword [ebp - 0xab4]
call fcn.00405113
pop ecx
pop ecx
push eax
push dword [ebp - 0xab4]
lea ecx, [ebx + 0xc]
call fcn.0040509a
jmp 0x430d6b
push 0x4eb630
lea ecx, [ebp - 0xab0]
call fcn.004044ee
movzx eax, word [ebp - 0xa2c]
push eax
lea eax, [ebp - 0xab0]
push str._c:200M_
push eax
call fcn.00404994
add esp, 0xc
mov esi, 0x4d3c88
push esi
lea ecx, [ebp - 0xb0c]
call fcn.0040513a
lea ecx, [ebp - 0xaf4]
push esi
call fcn.0040513a
lea ecx, [ebp - 0xaa8]
mov dword [ebp - 0xaac], 0x4bd798
call fcn.0042f7fb
mov esi, dword [ebp - 0xab0]
lea eax, [ebp - 0xb0c]
push eax
lea eax, [ebp - 0xaf4]
push eax
mov eax, dword [ebp - 0xaac]
xor ebx, ebx
push ebx
push 0x4bdca4
push esi
push edi
lea ecx, [ebp - 0xaac]
call dword [eax]
lea ecx, [ebp - 0xaa8]
call fcn.0042f889
push ebx
push 1
lea ecx, [ebp - 0xaf4]
call fcn.00405ac5
push ebx
push 1
lea ecx, [ebp - 0xb0c]
call fcn.00405ac5
lea eax, [ebp - 0xa44]
push eax
push ebx
push 1
push 2
push str.execptioninsufficeient_disk_sapce
push ebx
push 0x6e
mov dword [ebp - 0xa30], 0xf
mov dword [ebp - 0xa34], ebx
mov byte [ebp - 0xa44], bl
call fcn.0048ad9a
lea ecx, [ebp - 0xa44]
call fcn.004073c4
lea ecx, [esi - 0x10]
call fcn.00404f8d
jmp 0x430d6b
mov esi, 0x4d3c88
push esi
call fcn.0040481a
pop ecx
push eax
push esi
lea ecx, [ebp - 0xab4]
call fcn.004047a1
mov ecx, dword [ebp - 0xab4]
lea ecx, [ecx - 0x10]
call fcn.00404f8d
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0048f059
leave
ret 4