Function at 0x427910
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x49c
mov eax, dword [0x4656fc]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x49c], ecx
mov eax, dword [ebp - 0x49c]
cmp dword [eax + 0x54], 0
je 0x427959
push 0
push 0x45468c
push str.ck_W
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428cf0
mov eax, 1
jmp 0x427ebe
mov ecx, dword [ebp - 0x49c]
movzx edx, byte [ecx + 0x64]
test edx, edx
je 0x42796e
xor eax, eax
jmp 0x427ebe
push 0
push 0x3023
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x428]
push ecx
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428c90
mov ecx, eax
call fcn.00428cc0
mov ecx, eax
call fcn.00425410
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 0
push 2
lea edx, [ebp - 0x434]
push edx
lea eax, [ebp - 0x430]
push eax
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428c90
mov ecx, eax
call fcn.00428cc0
mov ecx, eax
call fcn.00425410
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 0
push 0x3024
lea ecx, [ebp - 0x43c]
push ecx
lea edx, [ebp - 0x438]
push edx
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428d50
mov ecx, eax
call fcn.00428cc0
mov ecx, eax
call fcn.00428bf0
xor eax, eax
mov word [ebp - 0x418], ax
push 0x206
push 0
lea ecx, [ebp - 0x416]
push ecx
call fcn.0043b030
add esp, 0xc
push 0x104
lea edx, [ebp - 0x418]
push edx
push 0x3ec
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428c30
lea eax, [ebp - 0x418]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
lea ecx, [ebp - 0x418]
push ecx
push 0x3ec
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428c60
lea edx, [ebp - 0x418]
push edx
mov ecx, 0x4672a8
call fcn.00405150
movzx eax, word [ebp - 0x418]
test eax, eax
jne 0x427b74
push 0
push 0x4546a4
push 0x4546b0
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428cf0
push 1
push 0x3023
lea ecx, [ebp - 0x444]
push ecx
lea edx, [ebp - 0x440]
push edx
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428c90
mov ecx, eax
call fcn.00428cc0
mov ecx, eax
call fcn.00425410
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 1
push 2
lea eax, [ebp - 0x44c]
push eax
lea ecx, [ebp - 0x448]
push ecx
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428c90
mov ecx, eax
call fcn.00428cc0
mov ecx, eax
call fcn.00425410
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 1
push 0x3024
lea edx, [ebp - 0x454]
push edx
lea eax, [ebp - 0x450]
push eax
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428d50
mov ecx, eax
call fcn.00428cc0
mov ecx, eax
call fcn.00428bf0
push 0x3ec
lea ecx, [ebp - 0x458]
push ecx
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428cc0
mov ecx, eax
call fcn.00428c10
mov eax, 1
jmp 0x427ebe
lea edx, [ebp - 0x418]
push edx
mov ecx, dword [ebp - 0x49c]
call fcn.00427800
test eax, eax
jne 0x427c71
push 0
push 0x4546dc
push 0x4546e8
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428cf0
push 1
push 0x3023
lea eax, [ebp - 0x460]
push eax
lea ecx, [ebp - 0x45c]
push ecx
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428c90
mov ecx, eax
call fcn.00428cc0
mov ecx, eax
call fcn.00425410
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 1
push 2
lea edx, [ebp - 0x468]
push edx
lea eax, [ebp - 0x464]
push eax
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428c90
mov ecx, eax
call fcn.00428cc0
mov ecx, eax
call fcn.00425410
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 1
push 0x3024
lea ecx, [ebp - 0x470]
push ecx
lea edx, [ebp - 0x46c]
push edx
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428d50
mov ecx, eax
call fcn.00428cc0
mov ecx, eax
call fcn.00428bf0
push 0x3ec
lea eax, [ebp - 0x474]
push eax
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428cc0
mov ecx, eax
call fcn.00428c10
mov eax, 1
jmp 0x427ebe
lea ecx, [ebp - 0x418]
push ecx
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectory]
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0
je 0x427d86
cmp dword [ebp - 0x424], 0xb7
je 0x427d86
push 0
push 0x45472c
push 0x454738
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428cf0
push 1
push 0x3023
lea edx, [ebp - 0x47c]
push edx
lea eax, [ebp - 0x478]
push eax
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428c90
mov ecx, eax
call fcn.00428cc0
mov ecx, eax
call fcn.00425410
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 1
push 2
lea ecx, [ebp - 0x484]
push ecx
lea edx, [ebp - 0x480]
push edx
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428c90
mov ecx, eax
call fcn.00428cc0
mov ecx, eax
call fcn.00425410
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
push 1
push 0x3024
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x488]
push ecx
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428d50
mov ecx, eax
call fcn.00428cc0
mov ecx, eax
call fcn.00428bf0
push 0x3ec
lea edx, [ebp - 0x490]
push edx
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428cc0
mov ecx, eax
call fcn.00428c10
mov eax, 1
jmp 0x427ebe
xor eax, eax
mov word [ebp - 0x210], ax
push 0x206
push 0
lea ecx, [ebp - 0x20e]
push ecx
call fcn.0043b030
add esp, 0xc
push 0x104
lea edx, [ebp - 0x210]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x210]
push eax
mov ecx, dword [ebp - 0x49c]
add ecx, 0x5c
call fcn.0042c900
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0
jge 0x427e13
push 0x10
push 0x45477c
push 0x454788
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428cf0
push 0
mov ecx, dword [ebp - 0x49c]
mov edx, dword [ecx + 4]
push edx
call dword [sym.imp.USER32.dll_EndDialog]
mov eax, 1
jmp 0x427ebe
mov eax, dword [ebp - 0x49c]
mov dword [eax + 0x54], 1
push 1
push 0x3f0
lea ecx, [ebp - 0x494]
push ecx
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428cc0
mov ecx, eax
call fcn.00428b80
push 1
push 0x3ee
lea edx, [ebp - 0x498]
push edx
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428cc0
mov ecx, eax
call fcn.00428b80
push 0
push 0x64
push 0x64
mov ecx, dword [ebp - 0x49c]
add ecx, 4
call fcn.00428ba0
mov ecx, dword [ebp - 0x49c]
mov dword [ecx + 0x60], eax
push 0
push 0
mov edx, dword [ebp - 0x49c]
push edx
push fcn.00427f10
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0
je 0x427eb9
mov eax, dword [ebp - 0x41c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0043a91c
mov esp, ebp
pop ebp
ret