Function at 0x472e60
Capabilities:
Check if file exists
Create process on windows
Get common file path
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52d272
mov eax, dword fs:[0]
push eax
sub esp, 0x380
mov eax, dword [0x590cc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
lea ecx, [ebp - 0x26c]
push 3
push ecx
mov dword [ebp - 0x38c], eax
call fcn.0041d2b0
add esp, 8
mov edi, 8
mov dword [ebp - 4], 0
cmp dword [eax + 0x14], edi
jb 0x472ebe
mov eax, dword [eax]
push eax
lea edx, [ebp - 0x250]
push edx
call fcn.0041c3e0
add esp, 8
mov byte [ebp - 4], 2
cmp dword [ebp - 0x258], edi
jb 0x472ee9
mov eax, dword [ebp - 0x26c]
push eax
call fcn.004b9008
add esp, 4
mov eax, dword [ebp - 0x250]
xor ecx, ecx
mov ebx, 7
mov dword [ebp - 0x258], ebx
mov dword [ebp - 0x25c], 0
mov word [ebp - 0x26c], cx
cmp dword [ebp - 0x23c], edi
jae 0x472f1b
lea eax, [ebp - 0x250]
push eax
lea edx, [ebp - 0x2c0]
push edx
call fcn.0041bc70
push str.wtoolx
push eax
lea eax, [ebp - 0x288]
push eax
mov byte [ebp - 4], 3
call fcn.00402b90
add esp, 0x14
push eax
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 4
call fcn.00402630
cmp dword [ebp - 0x274], edi
jb 0x472f68
mov ecx, dword [ebp - 0x288]
push ecx
call fcn.004b9008
add esp, 4
xor edx, edx
mov dword [ebp - 0x274], ebx
mov dword [ebp - 0x278], 0
mov word [ebp - 0x288], dx
mov byte [ebp - 4], 2
cmp dword [ebp - 0x2ac], edi
jb 0x472f9c
mov eax, dword [ebp - 0x2c0]
push eax
call fcn.004b9008
add esp, 4
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x23c], edi
jae 0x472fb0
lea eax, [ebp - 0x250]
push eax
lea ecx, [ebp - 0x2c0]
push ecx
call fcn.0041bc70
push esi
push eax
lea edx, [ebp - 0x288]
push edx
mov byte [ebp - 4], 5
call fcn.00402b90
add esp, 0x14
push eax
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 6
call fcn.00402630
cmp dword [ebp - 0x274], edi
jb 0x472ff9
mov eax, dword [ebp - 0x288]
push eax
call fcn.004b9008
add esp, 4
xor esi, esi
xor ecx, ecx
mov dword [ebp - 0x274], ebx
mov dword [ebp - 0x278], esi
mov word [ebp - 0x288], cx
mov byte [ebp - 4], 2
cmp dword [ebp - 0x2ac], edi
jb 0x47302b
mov edx, dword [ebp - 0x2c0]
push edx
call fcn.004b9008
add esp, 4
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x23c], edi
jae 0x47303f
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0041bc70
push str.linkinfo.ini
push eax
lea ecx, [ebp - 0x2a4]
push ecx
mov byte [ebp - 4], 7
call fcn.00402b90
add esp, 0x14
mov byte [ebp - 4], 9
cmp dword [ebp - 0x2ac], edi
jb 0x473080
mov edx, dword [ebp - 0x2c0]
push edx
call fcn.004b9008
add esp, 4
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x290], edi
jae 0x473094
lea eax, [ebp - 0x2a4]
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x4730ea
cmp dword [ebp - 0x290], edi
jb 0x4730b7
mov eax, dword [ebp - 0x2a4]
push eax
call fcn.004b9008
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x290], ebx
mov dword [ebp - 0x294], esi
mov word [ebp - 0x2a4], cx
cmp dword [ebp - 0x23c], edi
jb 0x4730e3
mov edx, dword [ebp - 0x250]
push edx
call fcn.004b9008
add esp, 4
xor eax, eax
jmp 0x473a69
mov ecx, dword [ebp - 0x2a4]
cmp dword [ebp - 0x290], edi
jae 0x4730fe
lea ecx, [ebp - 0x2a4]
xor eax, eax
mov dword [ebp - 0x2c8], ebx
mov dword [ebp - 0x2cc], 0
mov word [ebp - 0x2dc], ax
mov eax, ecx
mov byte [ebp - 4], 0xa
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x473120
sub eax, esi
sar eax, 1
push eax
push ecx
lea ecx, [ebp - 0x2dc]
call fcn.00402460
push 0x5000
push 0x53a154
push str.arguments
push str.LinkInfo
lea ecx, [ebp - 0x330]
push ecx
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 0xb
call fcn.0040dd60
push 0x5000
push 0x53a154
push str.taskbarpin
push str.LinkInfo
lea edx, [ebp - 0x314]
push edx
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 0xc
call fcn.0040dd60
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x216]
push ecx
mov byte [ebp - 4], 0xd
mov word [ebp - 0x218], ax
call fcn.004ba010
add esp, 0xc
push 0
push 0x10
lea edx, [ebp - 0x218]
push edx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x234]
push ecx
call fcn.0041bc70
add esp, 8
mov esi, dword [ebp - 0x38c]
mov eax, esi
mov byte [ebp - 4], 0xe
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4731f0
sub eax, edx
sar eax, 1
push eax
push esi
lea ecx, [ebp - 0x234]
call fcn.00402340
push 4
push str..lnk
lea ecx, [ebp - 0x234]
call fcn.00402340
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x220], edi
jae 0x473232
lea eax, [ebp - 0x234]
push eax
push str.LinkFile___s.
push str.kupdate::KDesktopLink::fixDesktopLink
push 0x2d7
push str.S:_rc_v11_edu_20191101_branchCoding_supportwpsupdateUpdateClient_srcprotocolKProcedureImpl.cpp
push 0
call fcn.0041a9b0
mov eax, dword [ebp - 0x234]
add esp, 0x18
cmp dword [ebp - 0x220], edi
jae 0x473265
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x47364c
push 0x5000
push 0x53a154
push 0x545dd0
push str.LinkInfo
lea edx, [ebp - 0x2c0]
push edx
lea ecx, [ebp - 0x2dc]
call fcn.0040dd60
push 0x5000
push 0x53a154
push str.description
push str.LinkInfo
lea eax, [ebp - 0x26c]
push eax
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 0xf
call fcn.0040dd60
push 0x5000
push 0x53a154
push str.callpath
push str.LinkInfo
lea ecx, [ebp - 0x384]
push ecx
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 0x10
call fcn.0040dd60
mov byte [ebp - 4], 0x11
cmp dword [eax + 0x14], edi
jb 0x4732fa
mov eax, dword [eax]
push eax
lea edx, [ebp - 0x2f8]
push edx
call fcn.0041d2e0
add esp, 8
mov bl, 0x13
mov byte [ebp - 4], bl
cmp dword [ebp - 0x370], edi
jb 0x473326
mov eax, dword [ebp - 0x384]
push eax
call fcn.004b9008
add esp, 4
mov eax, dword [ebp - 0x2f8]
xor ecx, ecx
mov dword [ebp - 0x370], 7
mov dword [ebp - 0x374], 0
mov word [ebp - 0x384], cx
cmp dword [ebp - 0x2e4], edi
jae 0x473357
lea eax, [ebp - 0x2f8]
push eax
call fcn.0041b470
add esp, 4
test al, al
jne 0x4733c7
mov ecx, dword [ebp - 0x2f8]
cmp dword [ebp - 0x2e4], edi
jae 0x473378
lea ecx, [ebp - 0x2f8]
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x23c], edi
jae 0x47338c
lea eax, [ebp - 0x250]
push ecx
push eax
lea edx, [ebp - 0x34c]
push edx
call fcn.0041c4f0
add esp, 0xc
push eax
lea ecx, [ebp - 0x2f8]
mov byte [ebp - 4], 0x14
call fcn.00402630
mov byte [ebp - 4], bl
cmp dword [ebp - 0x338], edi
jb 0x4733c7
mov eax, dword [ebp - 0x34c]
push eax
call fcn.004b9008
add esp, 4
push 0x5000
push 0x53a154
push str.iconlocation
push str.LinkInfo
lea ecx, [ebp - 0x34c]
push ecx
lea ecx, [ebp - 0x2dc]
call fcn.0040dd60
mov esi, eax
mov eax, dword [ebp - 0x250]
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x23c], edi
jae 0x473407
lea eax, [ebp - 0x250]
push eax
lea edx, [ebp - 0x368]
push edx
call fcn.0041bc70
push esi
push eax
lea eax, [ebp - 0x288]
push eax
mov byte [ebp - 4], 0x16
call fcn.00402bf0
add esp, 0x14
cmp dword [ebp - 0x354], edi
jb 0x473440
mov ecx, dword [ebp - 0x368]
push ecx
call fcn.004b9008
add esp, 4
mov ebx, 7
xor esi, esi
xor edx, edx
mov dword [ebp - 0x354], ebx
mov dword [ebp - 0x358], esi
mov word [ebp - 0x368], dx
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x338], edi
jb 0x473477
mov eax, dword [ebp - 0x34c]
push eax
call fcn.004b9008
add esp, 4
mov eax, dword [ebp - 0x2f8]
xor ecx, ecx
mov dword [ebp - 0x338], ebx
mov dword [ebp - 0x33c], esi
mov word [ebp - 0x34c], cx
cmp dword [ebp - 0x2e4], edi
jae 0x4734a0
lea eax, [ebp - 0x2f8]
push eax
call fcn.0041b230
add esp, 4
test al, al
je 0x47357b
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x274], edi
jae 0x4734c5
lea eax, [ebp - 0x288]
push eax
call fcn.0041b230
add esp, 4
test al, al
je 0x47357b
mov ebx, dword [ebp - 0x314]
cmp dword [ebp - 0x300], edi
jae 0x4734ea
lea ebx, [ebp - 0x314]
cmp dword [ebp - 0x258], edi
jb 0x473500
mov edx, dword [ebp - 0x26c]
mov dword [ebp - 0x388], edx
jmp 0x47350c
lea eax, [ebp - 0x26c]
mov dword [ebp - 0x388], eax
mov esi, dword [ebp - 0x330]
cmp dword [ebp - 0x31c], edi
jae 0x473520
lea esi, [ebp - 0x330]
mov edx, dword [ebp - 0x288]
cmp dword [ebp - 0x274], edi
jae 0x473534
lea edx, [ebp - 0x288]
mov ecx, dword [ebp - 0x2f8]
cmp dword [ebp - 0x2e4], edi
jae 0x473548
lea ecx, [ebp - 0x2f8]
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x2ac], edi
jae 0x47355c
lea eax, [ebp - 0x2c0]
push 0
push ebx
mov ebx, dword [ebp - 0x388]
push ebx
push esi
push edx
push ecx
push eax
call fcn.00472a90
add esp, 0x1c
mov ebx, 7
xor esi, esi
jmp 0x4735ad
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x220], edi
jae 0x47358f
lea eax, [ebp - 0x234]
push eax
push str.fixTaskbarpinLink_fail__no_icon___s.
push str.kupdate::KDesktopLink::fixDesktopLink
push 0x2e4
push str.S:_rc_v11_edu_20191101_branchCoding_supportwpsupdateUpdateClient_srcprotocolKProcedureImpl.cpp
push esi
call fcn.0041a9b0
add esp, 0x18
cmp dword [ebp - 0x274], edi
jb 0x4735c4
mov ecx, dword [ebp - 0x288]
push ecx
call fcn.004b9008
add esp, 4
xor edx, edx
mov dword [ebp - 0x274], ebx
mov dword [ebp - 0x278], esi
mov word [ebp - 0x288], dx
cmp dword [ebp - 0x2e4], edi
jb 0x4735f0
mov eax, dword [ebp - 0x2f8]
push eax
call fcn.004b9008
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x2e4], ebx
mov dword [ebp - 0x2e8], esi
mov word [ebp - 0x2f8], cx
cmp dword [ebp - 0x258], edi
jb 0x47361c
mov edx, dword [ebp - 0x26c]
push edx
call fcn.004b9008
add esp, 4
xor eax, eax
mov dword [ebp - 0x258], ebx
mov dword [ebp - 0x25c], esi
mov word [ebp - 0x26c], ax
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x2ac], edi
jb 0x47364c
mov ecx, dword [ebp - 0x2c0]
push ecx
call fcn.004b9008
add esp, 4
call fcn.00448fc0
mov bl, al
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x220], edi
jae 0x473667
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.KERNEL32.DLL_GetFileAttributesW]
xor edx, edx
cmp eax, 0xffffffff
setne dl
mov eax, edx
mov dword [ebp - 0x388], eax
test bl, bl
je 0x473969
test eax, eax
je 0x473854
mov ebx, dword [ebp - 0x38c]
lea eax, [ebp - 0x2c0]
push ebx
push eax
call fcn.004727e0
mov eax, dword [eax + 0x10]
xor ecx, ecx
add esp, 8
test eax, eax
setne cl
mov esi, ecx
cmp dword [ebp - 0x2ac], edi
jb 0x4736c7
mov edx, dword [ebp - 0x2c0]
push edx
call fcn.004b9008
add esp, 4
test esi, esi
jne 0x473818
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x220], edi
jae 0x4736e3
lea eax, [ebp - 0x234]
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0
push 0
push 0
push eax
push 0x557e10
push 0
call esi
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x220], edi
jae 0x47370d
lea eax, [ebp - 0x234]
push 0
push 0
push 0
push eax
push str.taskbarpin
push 0
call esi
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x220], edi
jae 0x473731
lea eax, [ebp - 0x234]
push eax
push str.fixTaskbarpinLink_succeeded___s.
push str.kupdate::KDesktopLink::fixDesktopLink
push 0x2ff
push str.S:_rc_v11_edu_20191101_branchCoding_supportwpsupdateUpdateClient_srcprotocolKProcedureImpl.cpp
push 0
call fcn.0041a9b0
add esp, 0x18
cmp dword [ebp - 0x304], 0
je 0x473818
mov eax, dword [ebp - 0x314]
cmp dword [ebp - 0x300], edi
jae 0x473771
lea eax, [ebp - 0x314]
push 0x53db0c
push eax
call fcn.004bb2ef
add esp, 8
test eax, eax
jne 0x473818
lea eax, [ebp - 0x26c]
push ebx
push eax
call fcn.004727e0
add esp, 8
mov eax, dword [ebp - 0x26c]
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x258], edi
jae 0x4737af
lea eax, [ebp - 0x26c]
push eax
push str.getTaskbarPinned___s.
push str.kupdate::KDesktopLink::fixDesktopLink
push 0x304
push str.S:_rc_v11_edu_20191101_branchCoding_supportwpsupdateUpdateClient_srcprotocolKProcedureImpl.cpp
push 0
call fcn.0041a9b0
add esp, 0x18
cmp dword [ebp - 0x25c], 0
je 0x473809
mov ecx, dword [ebp - 0x330]
cmp dword [ebp - 0x31c], edi
jae 0x4737eb
lea ecx, [ebp - 0x330]
mov eax, dword [ebp - 0x26c]
cmp dword [ebp - 0x258], edi
jae 0x4737ff
lea eax, [ebp - 0x26c]
push ecx
push eax
call fcn.00470cc0
add esp, 8
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0xe
call fcn.0051c7a0
lea ecx, [ebp - 0x2c0]
push ebx
push ecx
call fcn.004727e0
xor edx, edx
add esp, 8
cmp dword [eax + 0x10], edx
setne dl
mov esi, edx
cmp dword [ebp - 0x2ac], edi
jb 0x473849
mov eax, dword [ebp - 0x2c0]
push eax
call fcn.004b9008
add esp, 4
test esi, esi
je 0x473854
mov ebx, 1
jmp 0x473856
xor ebx, ebx
cmp dword [ebp - 0x220], edi
jb 0x47386d
mov ecx, dword [ebp - 0x234]
push ecx
call fcn.004b9008
add esp, 4
xor edx, edx
mov esi, 7
mov dword [ebp - 0x220], esi
mov dword [ebp - 0x224], 0
mov word [ebp - 0x234], dx
cmp dword [ebp - 0x300], edi
jb 0x4738a2
mov eax, dword [ebp - 0x314]
push eax
call fcn.004b9008
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x300], esi
mov dword [ebp - 0x304], 0
mov word [ebp - 0x314], cx
cmp dword [ebp - 0x31c], edi
jb 0x4738d2
mov edx, dword [ebp - 0x330]
push edx
call fcn.004b9008
add esp, 4
xor eax, eax
mov dword [ebp - 0x31c], esi
mov dword [ebp - 0x320], 0
mov word [ebp - 0x330], ax
cmp dword [ebp - 0x2c8], edi
jb 0x473902
mov ecx, dword [ebp - 0x2dc]
push ecx
call fcn.004b9008
add esp, 4
xor edx, edx
mov dword [ebp - 0x2c8], esi
mov dword [ebp - 0x2cc], 0
mov word [ebp - 0x2dc], dx
cmp dword [ebp - 0x290], edi
jb 0x473932
mov eax, dword [ebp - 0x2a4]
push eax
call fcn.004b9008
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x290], esi
mov dword [ebp - 0x294], 0
mov word [ebp - 0x2a4], cx
cmp dword [ebp - 0x23c], edi
jb 0x473962
mov edx, dword [ebp - 0x250]
push edx
call fcn.004b9008
add esp, 4
mov eax, ebx
jmp 0x473a69
cmp dword [ebp - 0x220], edi
jb 0x473980
mov eax, dword [ebp - 0x234]
push eax
call fcn.004b9008
add esp, 4
xor esi, esi
xor ecx, ecx
mov ebx, 7
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x224], esi
mov word [ebp - 0x234], cx
cmp dword [ebp - 0x300], edi
jb 0x4739b3
mov edx, dword [ebp - 0x314]
push edx
call fcn.004b9008
add esp, 4
xor eax, eax
mov dword [ebp - 0x300], ebx
mov dword [ebp - 0x304], esi
mov word [ebp - 0x314], ax
cmp dword [ebp - 0x31c], edi
jb 0x4739df
mov ecx, dword [ebp - 0x330]
push ecx
call fcn.004b9008
add esp, 4
xor edx, edx
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x320], esi
mov word [ebp - 0x330], dx
cmp dword [ebp - 0x2c8], edi
jb 0x473a0b
mov eax, dword [ebp - 0x2dc]
push eax
call fcn.004b9008
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x2c8], ebx
mov dword [ebp - 0x2cc], esi
mov word [ebp - 0x2dc], cx
cmp dword [ebp - 0x290], edi
jb 0x473a37
mov edx, dword [ebp - 0x2a4]
push edx
call fcn.004b9008
add esp, 4
xor eax, eax
mov dword [ebp - 0x290], ebx
mov dword [ebp - 0x294], esi
mov word [ebp - 0x2a4], ax
cmp dword [ebp - 0x23c], edi
jb 0x473a63
mov ecx, dword [ebp - 0x250]
push ecx
call fcn.004b9008
add esp, 4
mov eax, dword [ebp - 0x388]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b9ff3
mov esp, ebp
pop ebp
ret