Function at 0x4c5ce0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57d07b
mov eax, dword fs:[0]
push eax
sub esp, 0x240
mov eax, dword [0x5fc150]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
call fcn.0040baa0
mov edi, dword [sym.imp.USER32.dll_EnableWindow]
mov ebx, eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [sym.imp.USER32.dll_GetDlgItem]
sub eax, 0x110
je 0x4c5d57
sub eax, 1
je 0x4c5e41
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0052c233
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [ebx + 0x2cc]
sub eax, 1
je 0x4c5d7f
sub eax, 1
je 0x4c5d6e
mov eax, 0x190e
jmp 0x4c5d84
mov eax, 0x1910
mov dword [ebp - 0x24c], 1
jmp 0x4c5d8e
mov eax, 0x190f
mov dword [ebp - 0x24c], 0
push 0
push 1
push 0xf1
push eax
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
lea eax, [ebx + 0x2d0]
push eax
push 0
push 0xc
push 0x1911
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
push dword [ebp - 0x24c]
push 0x1911
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call edi
push dword [ebp - 0x24c]
push 0x1912
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call edi
mov eax, dword [ebx + 0x231dc]
test eax, eax
je 0x4c5df9
push 6
push dword [esi + 0xc]
call eax
xor eax, eax
cmp byte [ebx + 0x71d], al
push 0
setne al
push eax
push 0xf1
push 0x191e
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
xor eax, eax
cmp byte [ebx + 0x73c], al
push 0
setne al
push eax
push 0xf1
push 0x191f
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov ecx, dword [sym.imp.USER32.dll_GetDlgItem]
mov edx, dword [ebp + 0x10]
mov eax, edx
shr eax, 0x10
cmp eax, 0x300
jne 0x4c5eb6
mov eax, 0x1911
cmp dx, ax
jne 0x4c5eb6
lea eax, [ebp - 0x218]
push eax
push 0x104
push 0xd
push 0x1911
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
lea eax, [ebp - 0x218]
push eax
lea edi, [ebx + 0x2d0]
push 0x104
push edi
call fcn.0054bd88
add esp, 0xc
lea esi, [ebx + 0x4d8]
push 0x104
push esi
push edi
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
push esi
mov ecx, ebx
call fcn.004ba8d0
mov eax, 1
jmp 0x4c5d39
add edx, 0xffffe6f2
cmp edx, 0x11
ja case.0x4c5ecc.6417
movzx eax, byte [edx + 0x4c5fe4]
jmp dword [eax*4 + 0x4c5fc8]
mov dword [ebx + 0x2cc], 0
push 0
push 0x1911
push dword [esi + 0xc]
call ecx
push eax
call edi
push 0
push 0x1912
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call edi
mov eax, 1
jmp 0x4c5d39
mov dword [ebx + 0x2cc], 1
jmp 0x4c5edd
push 1
push 0x1911
mov dword [ebx + 0x2cc], 2
push dword [esi + 0xc]
call ecx
push eax
call edi
push 1
jmp 0x4c5eee
push str.Select_a_folder_as_default_directory
lea ecx, [ebp - 0x230]
call fcn.004029a0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x230]
push 0
push 0x1911
push eax
push dword [esi + 0xc]
lea eax, [ebp - 0x248]
push eax
call fcn.00425040
add esp, 0x14
lea ecx, [ebp - 0x248]
call fcn.004038c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.004038c0
mov eax, 1
jmp 0x4c5d39
push 0x191e
mov ecx, esi
call fcn.004443c0
mov byte [ebx + 0x71d], al
mov eax, 1
jmp 0x4c5d39
push 0x191f
mov ecx, esi
call fcn.004443c0
mov byte [ebx + 0x73c], al
mov eax, 1
jmp 0x4c5d39