Function at 0x4b6f80
Capabilities:
Create thread
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fb39a
mov eax, dword fs:[0]
push eax
sub esp, 0x430
mov eax, dword [0x6b000c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x42c], 0
mov dword [ebp - 0x430], 0
call fcn.0040bf10
mov ecx, eax
test ecx, ecx
je 0x4b7758
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x434], esi
mov dword [ebp - 4], 1
call fcn.0040bf10
mov ecx, eax
test ecx, ecx
je 0x4b7762
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x438], edi
mov byte [ebp - 4], 3
mov ecx, ebx
push 0
push str.btnRestoreFiles
call dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::WindowImplBase::EnableWindow_wchar_t_const___bool_]
push 0
push 0
mov ecx, ebx
call fcn.004b61e0
push 0
push str.ScanDiskInfo
mov ecx, ebx
call dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::WindowImplBase::ShowWindow_wchar_t_const___bool_]
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
jne 0x4b7098
push str.optQuickScan
mov ecx, ebx
call dword [sym.imp.ycomuiu.dll_public:_unsigned_int___thiscall_DuiLib::WindowImplBase::IsDlgButtonChecked_wchar_t_const__]
cmp eax, 1
jne 0x4b7064
mov dword [0x6b0c54], 0
xor eax, eax
jmp 0x4b709d
push str.optFormatedScan
mov ecx, ebx
call dword [sym.imp.ycomuiu.dll_public:_unsigned_int___thiscall_DuiLib::WindowImplBase::IsDlgButtonChecked_wchar_t_const__]
cmp eax, 1
jne 0x4b7087
mov dword [0x6b0c54], 2
mov eax, 2
jmp 0x4b709d
mov dword [0x6b0c54], 1
mov eax, 1
jmp 0x4b709d
mov dword [0x6b0c54], eax
cmp eax, 4
ja case.default.0x4b70a6
jmp dword [eax*4 + 0x4b776c]
push ecx
lea eax, [ebp - 0x428]
mov dword [ebp - 0x428], 0xffffffff
push eax
mov ecx, ebx
call fcn.004c8770
mov eax, dword [ebp - 0x428]
cmp eax, 2
jne 0x4b70e1
lea ecx, [ebx + 0xa38]
call fcn.00522ce0
jmp case.default.0x4b70a6
test eax, eax
jne 0x4b7145
cmp dword [ebx + 0xa98], eax
je case.default.0x4b70a6
push eax
call fcn.005b9077
add esp, 4
mov dword [ebx + 0xa88], eax
mov dword [ebx + 0xa8c], edx
push 0
push 1
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
lea ecx, [ebx + 0xa38]
mov dword [ecx + 0x28], eax
lea eax, [ebp - 0x42c]
push eax
push 0
push ecx
push 0x522dc0
push 0
push 0
mov byte [ecx + 0x40], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebx + 0xa74], eax
jmp case.default.0x4b70a6
cmp eax, 1
jne case.default.0x4b70a6
push 0
push 0
lea eax, [ebp - 0x21c]
push eax
push dword [ebx + 4]
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea edx, [ebp - 0x21c]
lea eax, [edx + 2]
lea ecx, [ebx + 0xa94]
mov dword [ebp - 0x42c], eax
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x4b7177
sub edx, dword [ebp - 0x42c]
lea eax, [ebp - 0x21c]
sar edx, 1
push edx
push eax
call fcn.0040c9d0
push dword [ebp - 0x21c]
lea ecx, [ebx + 0xa04]
call fcn.004a74b0
test eax, eax
je 0x4b7700
mov dword [ebx + 0xa9c], eax
mov dword [ebx + 0xa34], eax
jmp 0x4b76d6
push ecx
lea eax, [ebp - 0x430]
mov ecx, ebx
push eax
call fcn.004c8670
mov edi, dword [ebp - 0x430]
mov dword [ebx + 0xa9c], edi
mov dword [ebx + 0xa34], edi
mov edx, dword [edi]
cmp dword [edx - 0xc], 4
jle 0x4b72d9
mov edx, str.._:
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b7200
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x438]
call fcn.0040c9d0
lea eax, [ebp - 0x428]
mov ecx, edi
push eax
call fcn.004a5fd0
mov esi, eax
mov byte [ebp - 4], 6
lea eax, [ebp - 0x42c]
push eax
mov ecx, edi
call fcn.004a60e0
mov byte [ebp - 4], 7
push dword [esi]
push dword [eax]
lea eax, [ebp - 0x434]
push dword [edi + 8]
mov edi, dword [ebp - 0x438]
push edi
push str.__s___s__s____s
push eax
call fcn.0040d300
add esp, 0x18
mov byte [ebp - 4], 6
or esi, 0xffffffff
mov edx, dword [ebp - 0x42c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b7288
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, esi
mov edx, dword [ebp - 0x428]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b72a9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::WindowImplBase::ShowWindow_wchar_t_const___bool_]
mov ecx, ebx
push 1
push str.ScanDiskInfo
call eax
mov esi, dword [ebp - 0x434]
mov ecx, ebx
push esi
push str.ScanDiskInfo
call dword [sym.imp.ycomuiu.dll_public:_int___thiscall_DuiLib::WindowImplBase::SetDlgItemTextW_wchar_t_const___wchar_t_const__]
push ecx
push dword [ebx + 0xb84]
jmp 0x4b76d9
test edx, edx
jne 0x4b71f3
xor ecx, ecx
jmp 0x4b720f
cmp byte [ebx + 0xe6a], 0
je 0x4b7301
lea ecx, [ebx + 0xad8]
call fcn.004ec8a0
jmp case.default.0x4b70a6
push ecx
lea eax, [ebp - 0x428]
mov ecx, ebx
push eax
call fcn.004c8930
mov ecx, dword [ebp - 0x428]
test ecx, ecx
je case.default.0x4b70a6
mov eax, dword [ecx]
mov dword [ebx + 0xadc], eax
lea eax, [ebx + 0xad8]
cmp dword [eax + 0x68], 0
je case.default.0x4b70a6
push 0
mov dword [eax + 0x74], 0
mov dword [eax + 0x88], 0
mov dword [eax + 0x8c], 0
mov dword [eax + 0x90], 0
mov dword [eax + 0x94], 0
mov dword [eax + 8], ecx
call fcn.005b9077
lea ecx, [ebx + 0xad8]
add esp, 4
mov dword [ecx + 0xa0], eax
mov dword [ecx + 0xa4], edx
add ecx, 0x9c
call fcn.0040cb90
push 0
push 1
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
lea ecx, [ebx + 0xad8]
mov dword [ecx + 0x70], eax
lea eax, [ebp - 0x42c]
push eax
push 0
push ecx
push 0x4ec860
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebx + 0xb44], eax
jmp case.default.0x4b70a6
push ecx
lea eax, [ebp - 0x42c]
mov ecx, ebx
push eax
call fcn.004c8a30
test al, al
je 0x4b747a
mov esi, dword [ebp - 0x42c]
mov dword [ebx + 0xa7c], 2
push 0x206
push 0
mov eax, dword [esi + 0x24]
mov dword [ebx + 0xa80], eax
mov ax, word [0x639ee0]
mov word [ebp - 0x424], ax
lea eax, [ebp - 0x422]
push eax
call fcn.00588800
add esp, 0xc
lea ecx, [ebp - 0x424]
push 1
push dword [esi + 0x1c]
push dword [esi + 0x18]
call fcn.004df240
add esp, 0xc
lea eax, [ebp - 0x424]
push eax
push dword [esi + 0x24]
lea eax, [ebp - 0x434]
push str._HD_d___s
push eax
call fcn.0040d300
mov eax, dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::WindowImplBase::ShowWindow_wchar_t_const___bool_]
add esp, 0x10
mov ecx, ebx
push 1
push str.ScanDiskInfo
call eax
mov esi, dword [ebp - 0x434]
mov ecx, ebx
push esi
push str.ScanDiskInfo
call dword [sym.imp.ycomuiu.dll_public:_int___thiscall_DuiLib::WindowImplBase::SetDlgItemTextW_wchar_t_const___wchar_t_const__]
jmp 0x4b76d6
push ecx
lea eax, [ebp - 0x430]
mov ecx, ebx
push eax
call fcn.004c8670
test al, al
je 0x4b7659
mov ecx, dword [ebp - 0x430]
test ecx, ecx
je 0x4b752d
mov eax, dword [ecx + 8]
mov ecx, str.NULL
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4b74cd
test dx, dx
je 0x4b74c9
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4b74cd
add eax, 4
add ecx, 4
test dx, dx
jne 0x4b74a7
xor eax, eax
jmp 0x4b74d2
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4b752d
push eax
mov eax, dword [ebp - 0x430]
mov dword [ebx + 0xbb0], 1
mov dword [ebp - 0x42c], 2
push dword [eax + 0x10]
push dword [eax + 0x3c]
push dword [eax + 0x38]
call fcn.005dd6d0
mov ecx, dword [ebp - 0x430]
mov dword [ebx + 0xbd0], eax
mov dword [ebx + 0xbd4], edx
mov eax, dword [ecx + 0x18]
imul eax, dword [ecx + 0x10]
mov dword [ebx + 0xbdc], 0
mov dword [ebx + 0xbd8], eax
jmp 0x4b7609
mov edi, dword [ebp - 0x430]
mov edx, dword [edi]
cmp dword [edx - 0xc], 4
jle 0x4b764a
mov edx, str.._:
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4b7550
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x438]
call fcn.0040c9d0
lea eax, [ebp - 0x428]
mov ecx, edi
push eax
call fcn.004a5fd0
mov esi, eax
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x42c]
push eax
mov ecx, edi
call fcn.004a60e0
mov byte [ebp - 4], 0xb
push dword [esi]
push dword [eax]
lea eax, [ebp - 0x434]
push dword [edi + 8]
mov edi, dword [ebp - 0x438]
push edi
push str.__s___s__s____s
push eax
call fcn.0040d300
add esp, 0x18
mov byte [ebp - 4], 0xa
or esi, 0xffffffff
mov edx, dword [ebp - 0x42c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b75d8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov eax, esi
mov edx, dword [ebp - 0x428]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4b75f9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x434]
mov dword [ebp - 0x42c], 1
mov eax, dword [sym.imp.ycomuiu.dll_public:_void___thiscall_DuiLib::WindowImplBase::ShowWindow_wchar_t_const___bool_]
mov ecx, ebx
push 1
push str.ScanDiskInfo
call eax
push esi
push str.ScanDiskInfo
mov ecx, ebx
call dword [sym.imp.ycomuiu.dll_public:_int___thiscall_DuiLib::WindowImplBase::SetDlgItemTextW_wchar_t_const___wchar_t_const__]
mov eax, dword [ebp - 0x42c]
mov dword [ebx + 0xa7c], eax
mov eax, dword [ebp - 0x430]
mov dword [ebx + 0xa9c], eax
mov dword [ebx + 0xa34], eax
jmp 0x4b76d6
test edx, edx
jne 0x4b7544
xor ecx, ecx
jmp 0x4b755f
push ecx
lea eax, [ebp - 0x428]
mov ecx, ebx
push eax
call fcn.004c8930
test al, al
je 0x4b76d6
mov eax, dword [ebp - 0x428]
test eax, eax
je 0x4b76d6
push 0
mov dword [ebx + 0xbb0], 1
push dword [eax + 0x18]
push dword [eax + 0x24]
push dword [eax + 0x20]
call fcn.005dd6d0
mov dword [ebx + 0xbd0], eax
mov eax, dword [ebp - 0x428]
push 0
mov dword [ebx + 0xbd4], edx
push dword [eax + 0x18]
push dword [eax + 0x2c]
push dword [eax + 0x28]
call fcn.005dd6d0
mov dword [ebx + 0xbd8], eax
mov eax, dword [ebp - 0x428]
mov dword [ebx + 0xbdc], edx
mov dword [ebx + 0xa7c], 2
mov eax, dword [eax]
mov dword [ebx + 0xa80], eax
push ecx
push 0
lea ecx, [ebx + 0xa38]
call fcn.00522bb0
push 0
push dword [0x6b8fa8]
mov ecx, ebx
push 0x420
call dword [sym.imp.ycomuiu.dll_public:_long_int___thiscall_DuiLib::CWindowWnd::PostMessageW_unsigned_int__unsigned_int__long_int_]
mov ecx, ebx
call fcn.004b7780
mov byte [ebp - 4], 1
or ebx, 0xffffffff
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4b771e
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x4b773a
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0055f9be
mov esp, ebp
pop ebp
ret 4
push 0x80004005
call fcn.0040b250
push 0x80004005
call fcn.0040b250
sal dword [ecx + 0x4b], 0
retf 19315