Function at 0x460f70
Capabilities:
Get common file path
Set current directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a0b88
mov eax, dword fs:[0]
push eax
sub esp, 0x234
mov eax, dword [0x639354]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x238], eax
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jne 0x460fc5
xor eax, eax
jmp 0x461469
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00560a80
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push dword [esi]
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.00448a10
lea eax, [ebp - 0x234]
mov dword [ebp - 4], 0
push esi
push eax
call fcn.00445e00
add esp, 0x14
mov byte [ebp - 4], 2
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x461485
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x220], eax
mov byte [ebp - 4], 4
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x46148f
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x224], eax
mov eax, dword [edi]
mov byte [ebp - 4], 5
cmp dword [eax - 0xc], 0
jne 0x4610d4
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.00445d90
add esp, 8
push eax
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 6
call fcn.004297a0
mov edx, dword [ebp - 0x21c]
or ebx, 0xffffffff
mov byte [ebp - 4], 5
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4610b1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x224]
call fcn.004297a0
mov edi, dword [ebp - 0x220]
mov esi, dword [ebp - 0x224]
jmp 0x461203
push eax
push dword [0x641b8c]
lea eax, [ebp - 0x21c]
push eax
call fcn.00448a10
add esp, 0xc
push eax
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 7
call fcn.004297a0
mov edx, dword [ebp - 0x21c]
or eax, 0xffffffff
mov byte [ebp - 4], 5
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x46111c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [ebp - 0x220]
xor esi, esi
mov ebx, edi
movzx eax, word [edi]
test ax, ax
je 0x4611a0
mov ecx, eax
push ecx
push 0x5beab8
call fcn.00561402
add esp, 8
test eax, eax
je 0x46114d
test esi, esi
mov eax, ebx
cmovne eax, esi
mov esi, eax
jmp 0x46114f
xor esi, esi
movzx eax, word [ebx + 2]
add ebx, 2
mov ecx, eax
test ax, ax
jne 0x461130
test esi, esi
je 0x4611a0
sub esi, edi
sar esi, 1
js 0x4614a3
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, esi
or eax, ecx
jge 0x46118e
push esi
lea ecx, [ebp - 0x220]
call fcn.00429eb0
mov edi, dword [ebp - 0x220]
cmp esi, dword [edi - 8]
jg 0x4614a3
xor eax, eax
mov dword [edi - 0xc], esi
mov word [edi + esi*2], ax
push dword [ebp - 0x234]
lea eax, [ebp - 0x21c]
push edi
push eax
call fcn.00448a10
add esp, 0xc
push eax
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 8
call fcn.004297a0
mov edx, dword [ebp - 0x21c]
or ebx, 0xffffffff
mov byte [ebp - 4], 5
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4611ea
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x224]
push 0
push 0
push esi
push dword [ebp - 0x230]
call fcn.00445800
add esp, 0x10
mov byte [ebp - 4], 9
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x461499
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x22c], eax
mov byte [ebp - 4], 0xb
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x4614ad
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x228], eax
push 4
lea eax, [ebp - 0x240]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x234]
call fcn.00429f50
mov eax, dword [eax]
mov ecx, 0x5beac0
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x461292
test dx, dx
je 0x461286
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x461292
add eax, 4
add ecx, 4
test dx, dx
jne 0x461264
mov dword [ebp - 0x21c], 0
jmp 0x46129d
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x21c], ecx
mov edx, dword [ebp - 0x240]
mov eax, ebx
mov byte [ebp - 4], 0xc
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4612be
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x21c], 0
lea ecx, [ebp - 0x22c]
jne 0x461316
push 0xb
push str.msiexec.exe
xor ebx, ebx
call fcn.0042a060
mov ecx, dword [ebp - 0x23c]
push esi
mov eax, dword [ecx]
cmp dword [eax - 0xc], ebx
jne 0x4612ff
lea eax, [ebp - 0x228]
push str._i___s_
push eax
call fcn.0042c720
add esp, 0xc
jmp 0x461339
push eax
lea eax, [ebp - 0x228]
push 0x5beaf4
push eax
call fcn.0042c720
add esp, 0x10
jmp 0x461339
lea eax, [ebp - 0x224]
push eax
call fcn.004297a0
mov ecx, dword [ebp - 0x23c]
push ecx
lea ecx, [ebp - 0x228]
call fcn.004297a0
mov ebx, 1
push edi
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov eax, dword [ebp - 0x238]
mov ecx, 0x5bbd7c
mov eax, dword [eax]
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x461376
test dx, dx
je 0x461372
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x461376
add eax, 4
add ecx, 4
test dx, dx
jne 0x461350
xor eax, eax
jmp 0x46137b
sbb eax, eax
or eax, 1
mov esi, dword [ebp - 0x228]
neg eax
push 1
push ebx
sbb eax, eax
mov byte [ebp - 4], 0xc
push 0
neg eax
push 1
dec eax
push eax
push esi
push dword [ebp - 0x22c]
call fcn.00480190
add esp, 0x1c
mov ebx, eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
xor eax, eax
cmp ebx, 1
sete al
or ebx, 0xffffffff
mov dword [ebp - 0x238], eax
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x4613da
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x22c]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4613f7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x224]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461414
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x46142b
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x234]
mov eax, ebx
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461448
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x230]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x461463
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0055c3a9
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00429b60
push 0x80004005
call fcn.00429b60
push 0x80004005
call fcn.00429b60
push 0x80070057
call fcn.00429b60
push 0x80004005
call fcn.00429b60
int3