Function at 0x470ea0
Capabilities:
Copy file
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x512af7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x278
mov eax, dword [0x5580c0]
push ebx
push esi
mov esi, ecx
mov dword [esp + 8], eax
xor ebx, ebx
push ebx
push ebx
push ebx
push str.TYPE_A_r_n
mov dword [esp + 0x298], ebx
call fcn.0046a190
cmp eax, 2
je 0x470f1d
lea ecx, [esp + 0xc]
push 0xcf
push ecx
call fcn.0042e2e0
add esp, 8
mov eax, dword [eax]
push ebx
push eax
mov ecx, esi
mov byte [esp + 0x290], 1
call fcn.00452980
lea ecx, [esp + 0xc]
mov byte [esp + 0x288], bl
call fcn.004dd44d
jmp 0x47115a
lea edx, [esp + 0x17c]
push edi
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [esp + 0x7c]
lea ecx, [esp + 0x180]
push eax
push 0x270f
push 0x5565f0
push ecx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
mov edx, dword [0x532674]
push 1
push edx
lea eax, [esp + 0x84]
push 0x93
push eax
lea ecx, [esp + 0x28]
call fcn.004d29ec
push ebx
lea ecx, [esp + 0x28]
mov byte [esp + 0x290], 2
call fcn.004d2bf2
lea ecx, [esp + 0x10]
push 0x117
push ecx
call fcn.0042e2e0
add esp, 8
mov eax, dword [eax]
push ebx
push eax
mov ecx, esi
mov byte [esp + 0x294], 3
call fcn.00452980
lea ecx, [esp + 0x10]
mov byte [esp + 0x28c], 2
call fcn.004dd44d
push str.LIST
lea ecx, [esp + 0x10]
call fcn.004dd5d6
mov edi, dword [esp + 0x29c]
cmp edi, ebx
je 0x470ff6
cmp byte [edi], bl
je 0x470ff6
cmp dword [0x55e91c], ebx
je 0x470fe8
push str.__lLd
lea ecx, [esp + 0x10]
call fcn.004dd829
push 0x20
lea ecx, [esp + 0x10]
call fcn.004dd850
push edi
jmp 0x471003
cmp dword [0x55e91c], ebx
je 0x47100c
push 0x556d2c
lea ecx, [esp + 0x10]
call fcn.004dd829
push 0x5526b0
lea ecx, [esp + 0x10]
call fcn.004dd829
mov edx, dword [esi + 0x4b0]
pop edi
cmp dword [edx + 0x5c], ebx
je 0x471034
push str.NLST_r_n
lea ecx, [esp + 0xc]
call fcn.004dd5d6
mov ecx, dword [esp + 8]
push ebx
lea eax, [esp + 0x18]
push ebx
push eax
push ecx
mov ecx, esi
call fcn.0046f130
cmp eax, ebx
jne 0x471134
cmp dword [0x55e210], ebx
je 0x471064
push ebx
push str.___________parsing_started____________
mov ecx, esi
call fcn.00452980
push ebx
lea ecx, [esp + 0x18]
call fcn.004d2b20
mov eax, dword [esp + 0x294]
mov ecx, dword [esp + 0x290]
lea edx, [esp + 0x14]
push edx
push eax
push ecx
mov ecx, esi
call fcn.004707f0
cmp dword [esi + 0x410], ebx
je 0x4710ab
mov eax, dword [esi + 0x414]
push ebx
lea edx, [esp + 0x7c]
push eax
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov dword [esi + 0x410], ebx
cmp dword [0x55e210], ebx
je 0x4710c0
push ebx
push str.___________parsing_finished____________
mov ecx, esi
call fcn.00452980
lea eax, [esp + 0x78]
push eax
call fcn.004c4aee
lea ecx, [esp + 0x14]
push 0x10d
push ecx
call fcn.0042e2e0
add esp, 0xc
mov eax, dword [eax]
push ebx
push eax
mov ecx, esi
mov byte [esp + 0x290], 4
call fcn.00452980
lea ecx, [esp + 0x10]
mov byte [esp + 0x288], 2
call fcn.004dd44d
lea ecx, [esp + 0x28]
mov byte [esp + 0x288], bl
call fcn.004d2ab5
lea ecx, [esp + 0x28]
call fcn.004d2158
lea ecx, [esp + 8]
mov dword [esp + 0x288], 0xffffffff
call fcn.004dd44d
mov eax, 1
jmp 0x471170
lea edx, [esp + 0x78]
push edx
call fcn.004c4aee
add esp, 4
lea ecx, [esp + 0x28]
mov byte [esp + 0x288], bl
call fcn.004d2ab5
lea ecx, [esp + 0x28]
call fcn.004d2158
lea ecx, [esp + 8]
mov dword [esp + 0x288], 0xffffffff
call fcn.004dd44d
xor eax, eax
mov ecx, dword [esp + 0x280]
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x284
ret 0xc