Function at 0x457df0
Capabilities:
Check if file exists
Get common file path
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4b8972
mov eax, dword fs:[0]
push eax
sub esp, 0x278
mov eax, dword [0x4e1370]
xor eax, esp
mov dword [esp + 0x270], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4e1370]
xor eax, esp
push eax
lea eax, [esp + 0x28c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x29c]
mov ecx, dword [eax + 0xd4]
mov ecx, dword [ecx]
mov edx, dword [eax + 0xc0]
mov dword [esp + 0x18], eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], edx
lea esp, [esp]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x20]
mov edi, dword [esi + 0xd4]
mov eax, dword [esi + 0xc0]
test ebx, ebx
je 0x457e6c
cmp ebx, eax
je 0x457e71
call fcn.00490387
mov ebp, dword [esp + 0x24]
cmp ebp, edi
je 0x45815b
mov eax, dword [esi + 0xfc]
test eax, eax
jne 0x45815b
test ebx, ebx
jne 0x457eca
call fcn.00490387
xor eax, eax
cmp ebp, dword [eax + 0x14]
jne 0x457ea0
call fcn.00490387
mov esi, dword [ebp + 8]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
sub esi, 0x10
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x457ece
cmp eax, dword [esi]
jne 0x457ece
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x457f09
mov eax, dword [ebx]
jmp 0x457e96
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x458156
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.004903e8
add esp, 0x10
lea ebx, [edi + 0x10]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x294], 0
push ecx
mov ecx, dword [ebx - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
lea esi, [ebx - 0x10]
mov dword [esp + 0x20], esp
mov ebp, esp
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x457f49
cmp eax, dword [esi]
jne 0x457f49
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x457f84
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x458156
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [esi + 0x10]
push edx
lea eax, [eax + eax + 2]
push eax
lea ecx, [edi + 0x10]
push ecx
call fcn.004903e8
add esp, 0x10
add edi, 0x10
mov dword [ebp], edi
mov byte [esp + 0x298], 1
test byte [0x4e9a48], 1
jne 0x457fc4
or dword [0x4e9a48], 1
mov byte [esp + 0x298], 2
call fcn.004339d0
push 0x4bf360
call fcn.00490884
add esp, 4
mov byte [esp + 0x298], 1
push 0x4e9a4c
mov byte [esp + 0x29c], 0
call fcn.00435970
test eax, eax
je 0x45802e
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x45802a
call fcn.00490387
xor eax, eax
mov edi, dword [esp + 0x24]
cmp edi, dword [eax + 0x14]
jne 0x457ff7
call fcn.00490387
mov edx, dword [edi]
mov dword [esp + 0x24], edx
mov dword [esp + 0x294], 0xffffffff
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x457e50
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
jmp 0x457e50
mov eax, dword [eax]
jmp 0x457fe9
push ebx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x45807a
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x458076
call fcn.00490387
xor eax, eax
mov edi, dword [esp + 0x24]
cmp edi, dword [eax + 0x14]
jne 0x458056
call fcn.00490387
mov ecx, dword [edi]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x294], 0xffffffff
lea edx, [esi + 0xc]
or eax, 0xffffffff
lock xadd dword [edx], eax
dec eax
test eax, eax
jmp 0x458015
mov eax, dword [eax]
jmp 0x458048
push ebx
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
lea ecx, [esp + 0x3c]
push ecx
test eax, eax
je 0x4580da
mov edi, dword [esp + 0x1c]
mov ebx, dword [edi + 0x80]
mov edx, dword [ebx + 4]
add edi, 0x6c
push edx
push ebx
call fcn.004363e0
mov ecx, edi
mov ebp, eax
call fcn.0048ee70
mov dword [ebx + 4], ebp
mov eax, dword [ebp + 4]
mov dword [eax], ebp
mov eax, dword [esp + 0x18]
add eax, 0x100
push eax
push edi
push ecx
mov eax, esi
mov dword [esp + 0x28], esp
mov edi, esp
call fcn.0040bbd0
add eax, 0x10
mov dword [edi], eax
call fcn.00460dc0
add esp, 0xc
jmp 0x458102
mov ebp, dword [esp + 0x1c]
mov edi, dword [ebp + 0x80]
mov edx, dword [edi + 4]
add ebp, 0x6c
push edx
push edi
call fcn.004363e0
mov ecx, ebp
mov ebx, eax
call fcn.0048ee70
mov dword [edi + 4], ebx
mov eax, dword [ebx + 4]
mov dword [eax], ebx
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x458152
call fcn.00490387
xor eax, eax
mov edi, dword [esp + 0x24]
cmp edi, dword [eax + 0x14]
jne 0x45811f
call fcn.00490387
mov eax, dword [edi]
mov dword [esp + 0x24], eax
mov dword [esp + 0x294], 0xffffffff
lea ecx, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x457e50
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
jmp 0x457e50
mov eax, dword [eax]
jmp 0x458111
call fcn.00405210
lea eax, [esp + 0x60]
push eax
call fcn.00435f20
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x86]
mov dword [esp + 0x29c], 3
push edx
mov word [esp + 0x88], cx
call fcn.00494b20
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
add esp, 0xc
push 0
push 0x17
lea eax, [esp + 0x84]
push eax
push 0
call esi
test eax, eax
je 0x4581cb
lea ecx, [esp + 0x60]
push ecx
push ecx
mov edx, esp
mov dword [esp + 0x24], esp
push edx
lea ecx, [esp + 0x88]
call fcn.00405a20
call fcn.00461730
add esp, 8
push 0
push 2
lea eax, [esp + 0x84]
push eax
push 0
call esi
test eax, eax
je 0x458200
lea ecx, [esp + 0x60]
push ecx
push ecx
mov edx, esp
mov dword [esp + 0x24], esp
push edx
lea ecx, [esp + 0x88]
call fcn.00405a20
call fcn.00461730
add esp, 8
mov eax, dword [esp + 0x74]
mov ecx, dword [eax]
mov edx, dword [esp + 0x60]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], edx
mov ebx, dword [esp + 0x30]
mov esi, dword [esp + 0x74]
test ebx, ebx
je 0x458224
cmp ebx, dword [esp + 0x60]
je 0x458229
call fcn.00490387
mov edi, dword [esp + 0x34]
mov ecx, dword [esp + 0x18]
cmp edi, esi
je 0x4584b1
mov eax, dword [ecx + 0xfc]
test eax, eax
jne 0x4584b1
test ebx, ebx
jne 0x45839f
call fcn.00490387
xor eax, eax
cmp edi, dword [eax + 0x14]
jne 0x458260
call fcn.00490387
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx + 8]
sub eax, 0x10
call fcn.0040bbd0
lea esi, [eax + 0x10]
mov dword [esp + 0x38], esi
lea edx, [esp + 0x44]
push edx
mov byte [esp + 0x298], 4
call fcn.00435f20
lea eax, [esp + 0x44]
push eax
push ecx
mov byte [esp + 0x29c], 5
lea eax, [esi - 0x10]
mov dword [esp + 0x24], esp
mov edi, esp
mov dword [esp + 0x24], eax
call fcn.0040bbd0
add eax, 0x10
mov dword [edi], eax
call fcn.004612b0
mov ecx, dword [esp + 0x60]
mov edx, dword [ecx]
mov ebp, dword [esp + 0x4c]
add esp, 8
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], edx
jmp 0x4582d0
mov esi, dword [esp + 0x58]
test ebp, ebp
je 0x4582de
cmp ebp, dword [esp + 0x44]
je 0x4582e3
call fcn.00490387
cmp dword [esp + 0x2c], esi
je 0x4583e8
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0xfc]
test ecx, ecx
jne 0x4583e8
mov edx, dword [eax + 0xd4]
mov ebx, dword [edx]
mov edi, dword [eax + 0xc0]
lea ecx, [ecx]
mov esi, dword [eax + 0xd4]
mov eax, dword [eax + 0xc0]
test edi, edi
je 0x458324
cmp edi, eax
je 0x458329
call fcn.00490387
cmp ebx, esi
je 0x4583b7
test edi, edi
jne 0x4583a6
call fcn.00490387
xor eax, eax
cmp ebx, dword [eax + 0x14]
jne 0x458346
call fcn.00490387
mov esi, dword [ebx + 8]
test ebp, ebp
jne 0x4583aa
call fcn.00490387
xor eax, eax
mov ecx, dword [esp + 0x2c]
cmp ecx, dword [eax + 0x14]
jne 0x458362
call fcn.00490387
test esi, esi
je 0x4584a7
mov edx, dword [esp + 0x2c]
mov eax, dword [edx + 8]
push esi
push eax
call fcn.004920dc
add esp, 8
test eax, eax
je 0x4583b3
test edi, edi
jne 0x4583af
call fcn.00490387
xor eax, eax
cmp ebx, dword [eax + 0x14]
jne 0x458394
call fcn.00490387
mov ebx, dword [ebx]
mov eax, dword [esp + 0x18]
jmp 0x458310
mov eax, dword [ebx]
jmp 0x458256
mov eax, dword [edi]
jmp 0x45833c
mov eax, dword [ebp]
jmp 0x458354
mov eax, dword [edi]
jmp 0x45838a
inc dword [esp + 0x20]
test ebp, ebp
jne 0x4583e3
call fcn.00490387
xor eax, eax
mov ecx, dword [esp + 0x2c]
cmp ecx, dword [eax + 0x14]
jne 0x4583d0
call fcn.00490387
mov edx, dword [esp + 0x2c]
mov eax, dword [edx]
mov ebx, dword [esp + 0x30]
mov dword [esp + 0x2c], eax
jmp 0x4582d0
mov eax, dword [ebp]
jmp 0x4583c2
mov eax, dword [esp + 0x5c]
cmp dword [esp + 0x20], eax
jne 0x458427
test eax, eax
jbe 0x458427
mov ebx, dword [esp + 0x18]
mov esi, dword [ebx + 0x80]
mov edx, dword [esi + 4]
add ebx, 0x6c
lea ecx, [esp + 0x38]
push ecx
push edx
push esi
call fcn.004363e0
mov ecx, ebx
mov edi, eax
call fcn.0048ee70
mov ebx, dword [esp + 0x30]
mov dword [esi + 4], edi
mov eax, dword [edi + 4]
mov dword [eax], edi
test ebx, ebx
jne 0x4584a3
call fcn.00490387
xor eax, eax
mov ecx, dword [esp + 0x34]
cmp ecx, dword [eax + 0x14]
jne 0x458440
call fcn.00490387
mov edx, dword [esp + 0x34]
mov eax, dword [edx]
lea ebx, [esp + 0x44]
mov dword [esp + 0x34], eax
call fcn.00435ff0
mov ecx, dword [esp + 0x58]
push ecx
call fcn.00490210
mov edx, dword [esp + 0x48]
add esp, 4
push edx
mov dword [esp + 0x5c], 0
call fcn.00490210
mov byte [esp + 0x298], 3
mov eax, dword [esp + 0x20]
add esp, 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x458212
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x458212
mov eax, dword [ebx]
jmp 0x458432
push 0x80004005
call fcn.004058d0
mov eax, dword [ecx + 0xb8]
mov edx, dword [eax]
mov eax, dword [ecx + 0xa4]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x28], eax
jmp 0x4584d0
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x28]
mov ebp, dword [edi + 0xb8]
mov eax, dword [edi + 0xa4]
test esi, esi
je 0x4584ec
cmp esi, eax
je 0x4584f1
call fcn.00490387
mov ebx, dword [esp + 0x2c]
cmp ebx, ebp
je 0x458831
mov ecx, dword [edi + 0xfc]
test ecx, ecx
jne 0x458831
test esi, esi
jne 0x458548
call fcn.00490387
cmp ebx, dword [esi + 0x14]
jne 0x45851e
call fcn.00490387
mov esi, dword [ebx + 8]
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
sub esi, 0x10
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x45854c
cmp eax, dword [esi]
jne 0x45854c
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x458587
mov esi, dword [esi]
jmp 0x458514
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x458156
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.004903e8
add esp, 0x10
lea ebp, [edi + 0x10]
mov dword [esp + 0x40], ebp
mov byte [esp + 0x294], 6
push ecx
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
lea esi, [ebp - 0x10]
mov dword [esp + 0x20], esp
mov ebx, esp
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x4585c4
cmp eax, dword [esi]
jne 0x4585c4
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x4585ff
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x458156
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [esi + 0x10]
push edx
lea eax, [eax + eax + 2]
push eax
lea ecx, [edi + 0x10]
push ecx
call fcn.004903e8
add esp, 0x10
add edi, 0x10
mov dword [ebx], edi
mov byte [esp + 0x298], 7
test byte [0x4e9a48], 1
jne 0x4586c6
or dword [0x4e9a48], 1
push 4
mov byte [esp + 0x29c], 8
call fcn.0049069b
xor edi, edi
add esp, 4
cmp eax, edi
je 0x458640
mov dword [eax], 0x4e9a4c
jmp 0x458642
xor eax, eax
mov dword [0x4e9a4c], eax
mov byte [esp + 0x298], 9
call fcn.0048ee10
mov dword [0x4e9a60], eax
mov dword [0x4e9a64], edi
mov byte [esp + 0x298], 0xa
push 4
mov dword [esp + 0x40], 0x4e9a68
call fcn.0049069b
add esp, 4
cmp eax, edi
je 0x458685
mov dword [eax], 0x4e9a68
jmp 0x458687
xor eax, eax
mov dword [0x4e9a68], eax
mov byte [esp + 0x298], 0xb
call fcn.0048ee10
mov dword [0x4e9a7c], eax
mov dword [0x4e9a80], edi
mov byte [esp + 0x298], 0xc
call fcn.00433ab0
push 0x4bf360
call fcn.00490884
add esp, 4
mov byte [esp + 0x298], 7
push 0x4e9a4c
mov byte [esp + 0x29c], 6
call fcn.00435970
test eax, eax
jne 0x4587e0
push ebp
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x4587e0
push ebp
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
lea edx, [esp + 0x40]
push edx
test eax, eax
je 0x4587b8
mov edi, dword [esp + 0x1c]
mov ebx, dword [edi + 0x80]
mov eax, dword [ebx + 4]
add edi, 0x6c
push eax
push ebx
call fcn.004363e0
mov ecx, edi
mov ebp, eax
call fcn.0048ee70
mov ecx, dword [esp + 0x18]
add ecx, 0x100
mov dword [ebx + 4], ebp
mov eax, dword [ebp + 4]
push ecx
mov dword [eax], ebp
push edi
push ecx
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
mov dword [esp + 0x28], esp
mov ebx, esp
call eax
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
jl 0x45876e
cmp eax, dword [esi]
jne 0x45876e
mov edi, esi
mov ecx, 1
lock xadd dword [edx], ecx
add edi, 0x10
mov dword [ebx], edi
call fcn.00460dc0
add esp, 0xc
jmp 0x4587e0
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x458156
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [esi + 0x10]
push edx
lea eax, [eax + eax + 2]
push eax
lea ecx, [edi + 0x10]
push ecx
call fcn.004903e8
add edi, 0x10
add esp, 0x10
mov dword [ebx], edi
call fcn.00460dc0
add esp, 0xc
jmp 0x4587e0
mov ebp, dword [esp + 0x1c]
mov edi, dword [ebp + 0x80]
mov eax, dword [edi + 4]
add ebp, 0x6c
push eax
push edi
call fcn.004363e0
mov ecx, ebp
mov ebx, eax
call fcn.0048ee70
mov dword [edi + 4], ebx
mov eax, dword [ebx + 4]
mov dword [eax], ebx
mov eax, dword [esp + 0x28]
test eax, eax
jne 0x45882d
call fcn.00490387
xor eax, eax
mov edi, dword [esp + 0x2c]
cmp edi, dword [eax + 0x14]
jne 0x4587fd
call fcn.00490387
mov ecx, dword [edi]
mov dword [esp + 0x2c], ecx
mov byte [esp + 0x294], 3
lea edx, [esi + 0xc]
or eax, 0xffffffff
lock xadd dword [edx], eax
dec eax
test eax, eax
jg 0x4584d0
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
jmp 0x4584d0
mov eax, dword [eax]
jmp 0x4587ef
lea ebx, [esp + 0x60]
call fcn.00435ff0
mov ecx, dword [esp + 0x74]
push ecx
call fcn.00490210
mov edx, dword [esp + 0x64]
add esp, 4
push edx
mov dword [esp + 0x78], 0
call fcn.00490210
add esp, 4
mov ecx, dword [esp + 0x28c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x270]
xor ecx, esp
call fcn.0049021b
add esp, 0x284
ret 4