Function at 0x4f1920
Capabilities:
Check if file exists
Get common file path
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x628
push ebx
push esi
push edi
xor ebx, ebx
mov ecx, 0x82
xor eax, eax
lea edi, [ebp - 0x20e]
mov word [ebp - 0x210], bx
rep stosd dword es:[edi], eax
mov ecx, 0x82
lea edi, [ebp - 0x626]
mov word [ebp - 0x628], bx
push ebx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x210]
push 0x1a
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x4f1990
lea ecx, [ebp - 0x210]
push str.360SEie8core_
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea edx, [ebp - 0x210]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x4f199f
xor eax, eax
lea esp, [ebp - 0x634]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x210]
test eax, eax
jne 0x4f19ad
xor esi, esi
jmp 0x4f19e4
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edi, [eax + eax + 2]
mov eax, edi
add eax, 3
and al, 0xfc
call fcn.004f3f00
mov esi, esp
push ebx
push ebx
push edi
push esi
lea edx, [ebp - 0x210]
push 0xffffffffffffffff
push edx
push ebx
push ebx
mov byte [esi], 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0x104
push esi
push 0x5c28fc
call dword [sym.imp.MSVCRT.dll_strncpy]
lea eax, [ebp - 0x210]
push 0x104
push eax
push 0x5c26f0
call dword [sym.imp.MSVCRT.dll_wcsncpy]
add esp, 0x18
lea ecx, [ebp - 0x628]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
lea edx, [ebp - 0x210]
push edx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov esi, 0x5c7a30
mov ecx, esi
call fcn.004f1bc0
add esi, 0x474
cmp esi, 0x5cca58
jl 0x4f1a33
mov esi, 0x5c2c2a
mov edi, esi
neg edi
mov dword [ebp - 4], edi
jmp 0x4f1a59
mov edi, dword [ebp - 4]
push esi
push 0x5388d0
call dword [sym.imp.MSVCRT.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x4f1af7
mov eax, dword [0x53a7f4]
mov edx, 0x104
cmp eax, 8
mov eax, esi
jne 0x4f1abc
lea edi, [edi + ebx + str.8eframe.dll]
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x4f1aae
mov cx, word [edi + eax]
test cx, cx
je 0x4f1aae
mov word [eax], cx
add eax, 2
dec edx
jne 0x4f1a88
sub eax, 2
mov word [eax], 0
jmp 0x4f1b03
test edx, edx
jne 0x4f1ab5
sub eax, 2
mov word [eax], 0
jmp 0x4f1b03
lea edi, [edi + ebx + str.6hdocvw.dll]
lea ecx, [edx + 0x7ffffefa]
test ecx, ecx
je 0x4f1ae9
mov cx, word [edi + eax]
test cx, cx
je 0x4f1ae9
mov word [eax], cx
add eax, 2
dec edx
jne 0x4f1ac3
sub eax, 2
mov word [eax], 0
jmp 0x4f1b03
test edx, edx
jne 0x4f1af0
sub eax, 2
mov word [eax], 0
jmp 0x4f1b03
mov edx, dword [0x53a7f4]
add edx, 0x30
mov word [esi], dx
mov ecx, 0x82
xor eax, eax
lea edi, [ebp - 0x41a]
mov word [ebp - 0x41c], 0
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x210]
lea ecx, [ebp - 0x41c]
push eax
push ecx
call dword [sym.imp.MSVCRT.dll_wcscpy]
add esp, 8
lea edx, [ebp - 0x41c]
push esi
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
lea eax, [ebp - 0x41c]
push eax
call edi
test eax, eax
mov dword [esi - 0x20e], eax
je 0x4f1b62
lea ecx, [ebp - 0x41c]
push ecx
call edi
sub ebx, 0x474
add esi, 0x474
cmp ebx, 0xffffafd8
jg 0x4f1a56
mov esi, 0x5c2a08
mov ecx, esi
call fcn.004f1bc0
add esi, 0x474
cmp esi, 0x5c7a30
jl 0x4f1b7f
lea edx, [ebp - 0x628]
push edx
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea esp, [ebp - 0x634]
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret