Function at 0x428bc5
Capabilities:
Resolve path using msvcrt

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1810
call fcn.0042fde0
mov eax, dword [0x449014]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xor ebx, ebx
lea ecx, [ebp - 0x1809]
push edi
mov dword [ebp - 0x1808], ebx
mov esi, ebx
call fcn.004221b2
push 0x1000
push ebx
xor eax, eax
push 0x401b3c
mov word [ebp - 0x804], ax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
test eax, eax
je 0x428c27
push 0x400
lea ecx, [ebp - 0x804]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, eax
mov ebx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor eax, eax
mov word [ebp - 0x1004], ax
cmp dword [0x44b0a0], eax
jne 0x43c786
xor eax, eax
mov word [ebp - 0x1804], ax
cmp dword [0x44b0a0], eax
jne 0x43c7fd
cmp dword [0x44c968], 0
jne 0x428c85
cmp dword [0x44b0e4], 0
jne 0x43c868
xor eax, eax
push ecx
mov word [0x44b908], ax
call fcn.00422b30
mov dword [0x44c968], eax
pop ecx
test eax, eax
je 0x428ca4
mov ecx, 0x44b908
xor ebx, ebx
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x428c8f
sub ecx, edx
sar ecx, 1
cmp ecx, esi
jle 0x428ca4
mov esi, ecx
push 0x6e
pop ecx
call fcn.00423041
push eax
push 2
call fcn.0042405d
pop ecx
pop ecx
push 0x44
mov ebx, 0x449068
xor eax, eax
pop ecx
lea edi, [ebx - 8]
cmp dword [edi], eax
je 0x428eb5
cmp dword [0x44b0a0], 0
jne 0x428cf1
movzx eax, word [ebx]
push eax
push 0x4013fc
call dword [sym.imp.VCRUNTIME140.dll_wcschr]
pop ecx
pop ecx
test eax, eax
jne 0x428d66
push 0x5a
pop eax
cmp word [ebx], ax
je 0x428d66
cmp dword [0x44de04], 0
jne 0x428d0f
movzx eax, word [ebx]
push eax
push 0x4014cc
call dword [sym.imp.VCRUNTIME140.dll_wcschr]
pop ecx
pop ecx
test eax, eax
jne 0x428d66
movzx eax, word [ebx]
push 0x42
pop ecx
cmp ax, cx
je 0x428d66
cmp dword [0x44dda0], 0
jne 0x428d2b
push 0x45
pop ecx
cmp ax, cx
je 0x428d66
mov ecx, dword [0x449df4]
mov dword [ecx + 8], edi
call fcn.0042756b
mov edi, dword [edi]
test edi, edi
je 0x43c8c2
lea ecx, [edi + 2]
xor edx, edx
mov ax, word [edi]
add edi, 2
cmp ax, dx
jne 0x428d48
sub edi, ecx
xor eax, eax
sar edi, 1
push 0x44
pop ecx
cmp edi, esi
jg 0x43c8d1
jmp 0x428d6b
push 0x44
xor eax, eax
pop ecx
add ebx, 0x24
cmp ebx, 0x4492f0
jl 0x428cc0
mov edi, 0x88
mov ecx, edi
call fcn.00423041
xor ebx, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x428d8b
sub eax, edx
sar eax, 1
cmp eax, esi
jg 0x43c8d8
xor edx, edx
mov edi, dword [sym.imp.VCRUNTIME140.dll_wcschr]
mov ebx, 0x449068
cmp dword [ebx - 8], edx
je 0x428edd
cmp dword [0x44b0a0], 0
jne 0x428dda
movzx eax, word [ebx]
push eax
push 0x4013fc
call edi
pop ecx
pop ecx
test eax, eax
jne 0x428e24
push 0x5a
pop eax
cmp word [ebx], ax
je 0x428e24
cmp dword [0x44de04], 0
jne 0x428df4
movzx eax, word [ebx]
push eax
push 0x4014cc
call edi
pop ecx
pop ecx
test eax, eax
jne 0x428e24
movzx eax, word [ebx]
cmp eax, 0x55
je 0x428e24
cmp eax, 0x56
je 0x428e24
push 0x42
pop ecx
cmp ax, cx
je 0x428e24
cmp dword [0x44dda0], 0
jne 0x428e1a
push 0x45
pop ecx
cmp ax, cx
je 0x428e24
mov ecx, dword [ebx - 8]
mov edx, esi
call fcn.00423d71
xor edx, edx
add ebx, 0x24
cmp ebx, 0x4492f0
jl 0x428daf
cmp word [ebp - 0x804], 0
je 0x428e4c
mov edx, esi
lea ecx, [ebp - 0x804]
call fcn.00423d71
cmp word [ebp - 0x1004], 0
jne 0x43c8fa
cmp word [ebp - 0x1804], 0
jne 0x43c90c
cmp word [0x44b908], 0
je 0x428e7e
mov edx, esi
mov ecx, 0x44b908
call fcn.00423d71
cmp dword [0x44c918], 0
jne 0x43c91e
push 0x401170
push 2
call fcn.0042405d
cmp byte [ebp - 0x1809], 0
pop ecx
pop ecx
pop edi
pop esi
pop ebx
jne 0x43c9a7
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042e434
leave
ret
cmp word [ebx], cx
jne 0x428d6b
mov dword [ebp - 0x1808], eax
lea eax, [ebp - 0x1808]
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__get_wpgmptr]
mov edi, dword [ebp - 0x1808]
pop ecx
jmp 0x428d43
push 0x44
pop eax
cmp word [ebx], ax
jne 0x428e26
lea eax, [ebp - 0x1808]
mov dword [ebp - 0x1808], edx
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__get_wpgmptr]
pop ecx
mov ecx, dword [ebp - 0x1808]
jmp 0x428e1d
cmp dword [0x44de08], eax
jne 0x428c42
mov ecx, dword [0x449df4]
lea eax, [ebp - 0x1810]
push eax
mov edx, str.mspft140.dll
mov ecx, dword [ecx + 0x24]
call fcn.00428f08
cmp dword [ebp - 0x1810], 0
mov edi, eax
pop ecx
je 0x43c7ec
push edi
lea eax, [ebp - 0x1004]
push 0x400
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov ecx, edi
add esp, 0xc
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, word [ebp - 0x1808]
jne 0x43c7d3
sub ecx, edx
sar ecx, 1
cmp ecx, esi
jle 0x43c7ec
mov esi, ecx
test edi, edi
je 0x428c42
push edi
call ebx
pop ecx
jmp 0x428c42
mov ecx, dword [0x449df4]
lea eax, [ebp - 0x1810]
push eax
mov edx, str.NativeCodeAnalysis.dll
mov ecx, dword [ecx + 0x24]
call fcn.00428f08
cmp dword [ebp - 0x1810], 0
mov edi, eax
pop ecx
je 0x43c857
push edi
lea eax, [ebp - 0x1804]
push 0x400
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov ecx, edi
add esp, 0xc
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, word [ebp - 0x1808]
jne 0x43c83e
sub ecx, edx
sar ecx, 1
cmp ecx, esi
jle 0x43c857
mov esi, ecx
test edi, edi
je 0x428c57
push edi
call ebx
pop ecx
jmp 0x428c57
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x43c88e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll___doserrno]
mov eax, dword [eax]
test eax, eax
jne 0x43c88e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov eax, dword [eax]
test eax, eax
je 0x428c6d
jle 0x43c898
movzx eax, ax
or eax, 0x80070000
cmp eax, 0x8007000e
je 0x43c8aa
cmp eax, 0x80070008
jne 0x428c6d
push 0x1c
push 2
mov edx, 0x401f54
pop ecx
call fcn.00425db2
pop ecx
push 4
pop ecx
call fcn.004222be
push 0x1f6a
call fcn.00422658
jmp 0x428ed7
mov esi, edi
jmp 0x428d6b
mov ecx, edi
call fcn.00423041
mov esi, eax
xor edx, edx
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
cmp ax, dx
jne 0x43c8e6
sub esi, ecx
sar esi, 1
jmp 0x428da4
mov edx, esi
lea ecx, [ebp - 0x1004]
call fcn.00423d71
jmp 0x428e5a
mov edx, esi
lea ecx, [ebp - 0x1804]
call fcn.00423d71
jmp 0x428e68
call fcn.00421dd0
mov edi, 0x88
mov ecx, edi
call fcn.00423041
push eax
push 0x4012e4
push 2
call fcn.0042405d
add esp, 0xc
mov ecx, edi
call fcn.00423041
xor ebx, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x43c94b
sub eax, edx
sar eax, 1
cmp eax, esi
jge 0x43c973
sub esi, eax
push 0x401340
push 2
call fcn.0042405d
pop ecx
pop ecx
sub esi, 1
jne 0x43c960
cmp dword [0x44ddb0], ebx
je 0x43c98e
push 0x420060
push 2
call fcn.0042405d
pop ecx
pop ecx
jmp 0x428e8b
push 0x44b0f0
push 0x420084
push 2
call fcn.0042405d
add esp, 0xc
jmp 0x428e8b
push dword [0x44d1b0]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x428ea9