Function at 0x4685d9
Capabilities:
Create thread
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0c
mov eax, dword [0x52fe80]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, ecx
call fcn.00420bd2
push eax
lea ecx, [ebp - 0xab4]
call fcn.00423e41
lea eax, [ebp - 0xa2c]
mov dword [ebp - 0xadc], edi
mov dword [ebp - 0xad4], eax
xor esi, esi
lea eax, [ebp - 0xadc]
mov dword [ebp - 0xad8], esi
push eax
mov dword [ebp - 0xad0], 0x4f8d84
mov dword [ebp - 0xacc], 0x50
mov dword [ebp - 0xac8], esi
mov dword [ebp - 0xac4], esi
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
test eax, eax
je 0x46892c
lea ecx, [ebp - 0xa2c]
push ecx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
test eax, eax
je 0x468913
call fcn.0049de27
test eax, eax
je 0x46877f
lea eax, [ebp - 0xa2c]
push eax
call fcn.004683a5
pop ecx
test al, al
jne 0x46869d
lea eax, [ebp - 0xa2c]
push eax
call fcn.00468432
pop ecx
test al, al
je 0x46877f
call fcn.00420bd2
push eax
lea ecx, [ebp - 0xab0]
call fcn.00423e41
call fcn.0049ce3b
push eax
lea eax, [ebp - 0xa2c]
push eax
lea eax, [ebp - 0xab0]
push str.execptionpath_failfailpath_sis64_d
push eax
call fcn.00424501
mov edi, dword [ebp - 0xab0]
lea ecx, [ebp - 0xab8]
add esp, 0x10
push edi
call fcn.00467d43
push 4
call fcn.00481836
mov esi, dword [ebp - 0xab8]
mov dword [ebp - 0xab0], eax
pop ecx
test eax, eax
je 0x468712
lea ecx, [esi - 0x10]
push ecx
call fcn.00467ffe
pop ecx
mov ecx, dword [ebp - 0xab0]
add eax, 0x10
mov dword [ecx], eax
xor ecx, ecx
jmp 0x46871a
xor ecx, ecx
mov dword [ebp - 0xab0], ecx
mov eax, dword [ebx + 0x168]
test eax, eax
je 0x468740
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push dword [ebx + 0x168]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
mov dword [ebx + 0x168], ecx
push ecx
push ecx
push dword [ebp - 0xab0]
push 0x468571
push ecx
push ecx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x30
push 0x4f8dec
push 0x4f8e00
push 0
mov dword [ebx + 0x168], eax
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esi - 0x10]
call fcn.004206ab
lea ecx, [edi - 0x10]
jmp 0x46890c
lea eax, [ebp - 0xabc]
mov dword [ebp - 0xabc], 0xc800000
push eax
lea eax, [ebp - 0xa2c]
mov dword [ebp - 0xab8], esi
push eax
call fcn.0049cb1a
pop ecx
pop ecx
test eax, eax
je 0x46881b
lea eax, [ebp - 0xa2c]
push eax
call fcn.004241d7
pop ecx
push eax
lea eax, [ebp - 0xa2c]
push eax
lea ecx, [ebp - 0xab4]
call fcn.0042415e
lea eax, [ebp - 0xab4]
push eax
call fcn.0049dfdb
mov esi, str.liebao
push esi
call fcn.004241d7
pop ecx
pop ecx
push eax
push esi
lea ecx, [ebp - 0xab4]
call fcn.0043be5f
lea eax, [ebp - 0xab4]
push eax
call fcn.0049dfdb
push dword [ebp - 0xab4]
call fcn.00405d70
pop ecx
pop ecx
push eax
push dword [ebp - 0xab4]
lea ecx, [ebx + 0xc]
call fcn.00407560
jmp 0x46892c
call fcn.00420bd2
push eax
lea ecx, [ebp - 0xab0]
call fcn.00423e41
movzx eax, word [ebp - 0xa2c]
push eax
lea eax, [ebp - 0xab0]
push str._c:200M_
push eax
call fcn.00424501
add esp, 0xc
lea ecx, [ebp - 0xb0c]
mov esi, 0x50f8e0
push esi
call fcn.00406c40
push esi
lea ecx, [ebp - 0xaf4]
call fcn.00406c40
lea ecx, [ebp - 0xaa8]
mov dword [ebp - 0xaac], 0x4f87bc
call fcn.00467146
mov esi, dword [ebp - 0xab0]
lea eax, [ebp - 0xb0c]
push eax
lea eax, [ebp - 0xaf4]
xor ebx, ebx
push eax
mov eax, dword [ebp - 0xaac]
lea ecx, [ebp - 0xaac]
push ebx
push 0x4f8e6c
push esi
push edi
call dword [eax]
lea ecx, [ebp - 0xaa8]
call fcn.004671d4
xor edi, edi
lea ecx, [ebp - 0xaf4]
push ebx
inc edi
push edi
call fcn.00403650
push ebx
push edi
lea ecx, [ebp - 0xb0c]
call fcn.00403650
lea eax, [ebp - 0xa44]
mov dword [ebp - 0xa30], 0xf
push eax
push ebx
push edi
push 2
push str.execptioninsufficeient_disk_sapce
push ebx
push 0x6e
mov dword [ebp - 0xa34], ebx
mov byte [ebp - 0xa44], bl
call fcn.004b1bf0
push ebx
push edi
lea ecx, [ebp - 0xa44]
call fcn.00403580
lea ecx, [esi - 0x10]
call fcn.004206ab
jmp 0x46892c
mov esi, 0x50f8e0
push esi
call fcn.004241d7
pop ecx
push eax
push esi
lea ecx, [ebp - 0xab4]
call fcn.0042415e
mov ecx, dword [ebp - 0xab4]
lea ecx, [ecx - 0x10]
call fcn.004206ab
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004bc1bd
mov esp, ebp
pop ebp
ret 4