Function at 0x470e10
Capabilities:
Get common file path
Resolve function by parsing pe exports
Set current directory

Disassembly:
push 0xffffffffffffffff
push 0x4eb069
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4d8
push ebx
push ebp
push esi
push edi
mov edi, ecx
push 0x416
mov dword [esp + 0x60], edi
call fcn.00449130
xor esi, esi
add esp, 4
cmp eax, esi
mov dword [esp + 0x58], eax
je 0x470e4f
mov word [eax], si
push eax
push 0x208
mov dword [esp + 0x4f8], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push 2
mov dword [esp + 0x4c], esi
call fcn.00449130
add esp, 4
cmp eax, esi
mov dword [esp + 0x48], eax
je 0x470e7b
mov word [eax], si
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], esi
lea eax, [esp + 0x4f8]
push eax
call fcn.00443850
mov ecx, dword [esp + 0x4fc]
push 4
push ecx
push str._fix
call fcn.00444970
add esp, 0x10
test al, al
mov byte [esp + 0x37], al
je 0x470ec7
add dword [esp + 0x4f8], 8
lea edx, [esp + 0x4f8]
push edx
call fcn.00443850
add esp, 4
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x4efd50
call ebx
lea esi, [eax + eax + 2]
lea eax, [esi + 2]
push eax
call fcn.00449130
mov ecx, esi
mov edx, ecx
shr ecx, 2
mov esi, 0x4efd50
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
add esp, 4
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x3c], eax
push 0x4efd50
call ebx
lea esi, [eax + eax + 2]
lea eax, [esi + 2]
push eax
call fcn.00449130
mov ecx, esi
mov edx, ecx
shr ecx, 2
mov esi, 0x4efd50
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
add esp, 4
mov dword [esp + 0x14], eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x54], eax
push 0x4efd50
call ebx
lea esi, [eax + eax + 2]
lea eax, [esi + 2]
push eax
call fcn.00449130
mov ecx, esi
mov edx, ecx
shr ecx, 2
mov esi, 0x4efd50
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
add esp, 4
mov dword [esp + 0x2c], eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x44], eax
push 0x4efd50
call ebx
lea esi, [eax + eax + 2]
lea eax, [esi + 2]
push eax
call fcn.00449130
mov ecx, esi
mov edx, ecx
mov ebp, eax
shr ecx, 2
mov esi, 0x4efd50
mov edi, ebp
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x44], ebp
mov byte [esp + 0x4f4], 5
mov dword [esp + 0x3c], 0
mov byte [esp + 0x1f], 0
mov byte [esp + 0x2b], 0
mov byte [esp + 0x2a], 0
push 4
mov eax, dword [esp + 0x500]
push eax
push str.raw
call fcn.00444970
add esp, 0x10
test al, al
je 0x470ffc
mov esi, dword [esp + 0x4f8]
lea ecx, [esp + 0x4f8]
add esi, 8
push ecx
mov byte [esp + 0x2a], 1
mov dword [esp + 0x4fc], esi
call fcn.00443850
add esp, 4
push 1
push 0x2c
lea edx, [esp + 0x500]
push edx
lea ecx, [esp + 0x54]
call fcn.00459430
push 0
lea ecx, [esp + 0x40]
push ecx
push eax
call fcn.0044c770
mov ecx, dword [esp + 0x68]
add esp, 0xc
push 0
lea edx, [esp + 0x40]
push edx
call fcn.004166b6
mov edi, dword [esp + 0x3c]
cmp word [edi], 0
jne 0x4710d0
test ebp, ebp
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
je 0x471057
mov eax, dword [0x51d3c8]
add ebp, 0xfffffff8
push ebp
push 0
push eax
call esi
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x47106e
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, dword [esp + 0x14]
test eax, eax
je 0x471085
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [0x51d3c8]
add edi, 0xfffffff8
push edi
push 0
push eax
call esi
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4710aa
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, dword [esp + 0x58]
test eax, eax
mov dword [esp + 0x48], 0
je 0x471c2a
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
jmp 0x471c28
mov eax, dword [esp + 0x4f8]
cmp word [eax], 0x2c
mov ebp, 2
jne 0x4710eb
add eax, ebp
mov dword [esp + 0x4f8], eax
lea ecx, [esp + 0x4f8]
push ecx
call fcn.00443850
mov ecx, dword [esp + 0x4fc]
mov ax, word [ecx]
add esp, 4
test ax, ax
je 0x471140
lea ebx, [ebx]
cmp ax, 0x26
jne 0x47111d
mov byte [esp + 0x1b], 1
jmp 0x471128
cmp ax, 0x2a
jne 0x471133
mov byte [esp + 0x27], 1
mov ax, word [ecx + ebp]
add ecx, ebp
test ax, ax
jne 0x471110
mov dword [esp + 0x4f8], ecx
lea ebx, [ebx]
mov ax, word [ecx]
cmp ax, 9
jb 0x47114f
cmp ax, 0xd
jbe 0x471155
cmp ax, 0x20
jne 0x471159
add ecx, ebp
jmp 0x471140
push 1
push 0x2c
lea edx, [esp + 0x500]
mov dword [esp + 0x500], ecx
push edx
lea ecx, [esp + 0x54]
call fcn.00459430
xor edi, edi
push edi
lea ecx, [esp + 0x58]
push ecx
push eax
call fcn.0044c770
mov edx, dword [esp + 0x60]
push edx
call fcn.00422077
mov esi, eax
mov eax, dword [esp + 0x508]
add esp, 0x10
cmp word [eax], 0x2c
jne 0x47125b
push 1
push 0x2c
lea ecx, [esp + 0x500]
add eax, ebp
push ecx
lea ecx, [esp + 0x54]
mov dword [esp + 0x504], eax
call fcn.00459430
push edi
lea edx, [esp + 0x48]
push edx
push eax
call fcn.0044c770
mov eax, dword [esp + 0x504]
add esp, 0xc
cmp word [eax], 0x2c
jne 0x47125b
push 1
push 0x2c
lea ecx, [esp + 0x500]
add eax, ebp
push ecx
lea ecx, [esp + 0x54]
mov dword [esp + 0x504], eax
call fcn.00459430
push edi
lea edx, [esp + 0x44]
push edx
push eax
call fcn.0044c770
mov eax, dword [esp + 0x504]
add esp, 0xc
cmp word [eax], 0x2c
jne 0x47125b
push 1
mov edx, eax
push 0x2c
lea ecx, [esp + 0x500]
add edx, ebp
push ecx
lea ecx, [esp + 0x54]
mov dword [esp + 0x504], edx
call fcn.00459430
push 0x2c
lea edx, [esp + 0x30]
push edx
push eax
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
call fcn.0044ca90
add esp, 0xc
cmp eax, edi
jle 0x47125b
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], eax
xor edi, edi
xor ebp, ebp
test esi, esi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebp
je 0x47129a
push esi
call ebx
lea edi, [eax + eax + 2]
lea ecx, [edi + 2]
push ecx
call fcn.00449130
mov ecx, edi
mov edx, ecx
shr ecx, 2
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
add esp, 4
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x28], eax
mov ebp, eax
cmp word [ebp], 0
je 0x4712f8
mov al, byte [esp + 0x37]
test al, al
je 0x4712f6
push ebp
call ebx
cmp word [ebp], 0
mov esi, eax
je 0x4712f6
cmp word [ebp + 2], 0x3a
jne 0x4712f6
cmp word [ebp + 4], 0x5c
jne 0x4712f6
cmp word [ebp + 6], 0x2e
je 0x4712f6
lea eax, [esi + 8]
push eax
lea ecx, [esp + 0x2c]
call fcn.004494e0
mov ebp, dword [esp + 0x28]
lea ecx, [esi + esi + 4]
push ecx
lea edx, [ebp + 4]
push edx
lea eax, [ebp + 8]
push eax
call fcn.004b3b10
add esp, 0xc
mov word [ebp + 6], 0x2e
mov edi, ebp
push 2
call fcn.00449130
mov ebp, eax
add esp, 4
test ebp, ebp
mov dword [esp + 0x1c], ebp
je 0x471312
mov word [ebp], 0
mov eax, dword [esp + 0x4fc]
test eax, eax
je 0x47132d
mov cl, byte [eax + 0x69]
test cl, cl
jne 0x47132d
mov esi, dword [eax + 0x18]
mov dword [esp + 0x10], esi
jmp 0x47134d
push 0x51d5ec
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, dword [0x51d1c8]
push 0x51d5ec
mov dword [esp + 0x14], esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, byte [esp + 0x27]
test al, al
jne 0x471a5e
movzx ecx, word [0x522010]
push 0x4fa38c
mov dword [esp + 0x18], 0
mov dword [esp + 0x24], ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea edi, [eax + 2]
mov dword [esp + 0x2c], eax
lea eax, [edi + edi + 4]
push 0
call fcn.00449190
mov esi, eax
add esp, 4
test esi, esi
je 0x471399
mov word [esi + edi*2 + 2], 0
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
push edi
push esi
push edx
push 0x4fa38c
push 0
push eax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov edi, eax
test edi, edi
jge 0x4713ba
xor edi, edi
lea eax, [edi + edi + 4]
push esi
mov word [esi + edi*2], 0
call fcn.00449190
add esp, 4
test eax, eax
mov dword [esp + 0x20], eax
je 0x4713dc
mov word [eax + edi*2 + 2], 0
mov esi, dword [esp + 0x40]
xor eax, eax
mov ax, word [esi]
test ax, ax
mov byte [esp + 0x4f0], 8
mov dword [esp + 0x2c], eax
je 0x4714a9
push 0x7c
push esi
call dword [sym.imp.SHLWAPI.dll_StrChrW]
test eax, eax
lea ecx, [esp + 0x20]
push esi
je 0x47144b
call fcn.00456630
push 0x4fa388
lea ecx, [esp + 0x24]
call fcn.00449510
mov eax, dword [esp + 0x20]
cmp word [eax], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x14], eax
je 0x4714a9
cmp word [eax], 0x7c
jne 0x471440
mov word [eax], 0
add eax, 2
cmp word [eax], 0
jne 0x471435
jmp 0x4714a9
call fcn.00449510
mov edi, dword [esp + 0x20]
push edi
call ebx
lea esi, [eax + eax + 6]
mov dword [esp + 0x14], eax
lea eax, [esi + esi + 2]
push edi
call fcn.00449190
add esp, 4
test eax, eax
mov dword [esp + 0x20], eax
je 0x47147a
mov word [eax + esi*2], 0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
lea edi, [eax + ecx*2 + 2]
lea ecx, [ecx + ecx + 2]
mov edx, ecx
shr ecx, 2
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x14]
mov word [eax + ecx*4 + 4], 0
mov dword [esp + 0x14], eax
mov edx, dword [esp + 0x28]
push edx
call ebx
mov edi, eax
lea esi, [edi + edi + 0x10]
cmp esi, 0x3f7a0
jg 0x4714c3
mov esi, 0x3f7a2
mov ecx, dword [esp + 0x28]
lea eax, [esi + esi + 0x12]
push ecx
call fcn.00449190
mov edx, eax
add esp, 4
test edx, edx
mov dword [esp + 0x28], edx
je 0x4714e5
mov word [edx + esi*2 + 0x10], 0
mov eax, esi
sub eax, edi
lea ecx, [eax + eax + 0x10]
xor eax, eax
lea edi, [edx + edi*2]
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov edx, dword [esp + 0x28]
xor eax, eax
mov dword [esp + 0x80], 0x58
mov ecx, 0x14
lea edi, [esp + 0x88]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x44]
mov cx, word [eax]
neg cx
mov dword [esp + 0x9c], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 0xa0], esi
sbb ecx, ecx
and ecx, eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x8c], eax
xor eax, eax
mov dword [esp + 0x98], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xb4]
or eax, edx
test eax, 0x40000
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], eax
jne 0x47159d
or eax, 0x200000
mov dword [esp + 0xb4], eax
call fcn.00444ab0
mov al, byte [esp + 0x1b]
test al, al
je 0x4715ba
lea ecx, [esp + 0x80]
push ecx
call dword [0x51d3f4]
jmp 0x4715c8
lea edx, [esp + 0x80]
push edx
call dword [0x51d3f0]
cmp eax, 1
je 0x4715f8
mov eax, dword [esp + 0x20]
test eax, eax
mov byte [esp + 0x4f0], 7
je 0x471b10
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x471b10
mov eax, dword [esp + 0xb4]
test ah, 2
jne 0x47161e
mov ecx, dword [esp + 0x9c]
push ecx
lea ecx, [esp + 0x20]
call fcn.00456630
mov ebp, dword [esp + 0x1c]
jmp 0x47199d
test eax, 0x80000
je 0x47178a
mov eax, dword [esp + 0x9c]
push eax
mov dword [esp + 0x18], eax
mov esi, eax
call ebx
cmp word [esi + eax*2 + 2], 0
lea eax, [esi + eax*2 + 2]
mov dword [esp + 0x38], eax
jne 0x471663
mov edx, dword [esp + 0x9c]
push edx
lea ecx, [esp + 0x20]
call fcn.00456630
mov ebp, dword [esp + 0x1c]
jmp 0x47199d
cmp word [ebp], 0
je 0x47169c
push ebp
call ebx
push 0x4f3aa4
mov esi, eax
call ebx
mov edi, eax
inc edi
lea eax, [edi + esi]
shl eax, 1
push ebp
call fcn.00449190
mov ebp, eax
lea eax, [edi + edi]
push eax
lea ecx, [ebp + esi*2]
push 0x4f3aa4
push ecx
call fcn.004b3b10
add esp, 0x10
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4716dc
xor esi, esi
test ebp, ebp
je 0x4716af
push ebp
call ebx
mov esi, eax
mov edx, dword [esp + 0x14]
push edx
call ebx
mov edi, eax
inc edi
lea eax, [edi + esi]
shl eax, 1
push ebp
call fcn.00449190
mov ecx, dword [esp + 0x18]
mov ebp, eax
lea eax, [edi + edi]
push eax
push ecx
lea edx, [ebp + esi*2]
push edx
call fcn.004b3b10
add esp, 0x10
test ebp, ebp
mov dword [esp + 0x10], 0
je 0x4716ef
push ebp
call ebx
mov dword [esp + 0x10], eax
push 0x4f036c
call ebx
mov esi, eax
mov eax, dword [esp + 0x10]
inc esi
add eax, esi
shl eax, 1
push ebp
call fcn.00449190
mov edx, dword [esp + 0x14]
lea ecx, [esi + esi]
push ecx
mov edi, eax
lea eax, [edi + edx*2]
push 0x4f036c
push eax
call fcn.004b3b10
add esp, 0x10
test edi, edi
mov dword [esp + 0x10], 0
je 0x471735
push edi
call ebx
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x38]
push ecx
call ebx
mov edx, dword [esp + 0x10]
mov esi, eax
inc esi
lea eax, [esi + edx]
shl eax, 1
push edi
call fcn.00449190
mov ecx, dword [esp + 0x14]
mov ebp, eax
lea eax, [esi + esi]
mov esi, dword [esp + 0x3c]
push eax
lea edx, [ebp + ecx*2]
push esi
push edx
call fcn.004b3b10
add esp, 0x10
push esi
call ebx
cmp word [esi + eax*2 + 2], 0
lea eax, [esi + eax*2 + 2]
mov dword [esp + 0x38], eax
jne 0x471663
mov dword [esp + 0x1c], ebp
jmp 0x47199d
mov esi, dword [esp + 0x9c]
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x14], esi
call fcn.00423ae8
mov eax, dword [esp + 0x14]
sub eax, esi
add esp, 4
sar eax, 1
push eax
push esi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], 0
call fcn.00449600
push 0x4f036c
lea ecx, [esp + 0x18]
call fcn.00449510
lea ecx, [esp + 0x10]
push ecx
call fcn.00443850
mov edx, dword [esp + 0x14]
add esp, 4
cmp word [edx], 0
jne 0x471800
mov eax, dword [esp + 0x9c]
push eax
lea ecx, [esp + 0x20]
call fcn.00456630
mov ebp, dword [esp + 0x1c]
jmp 0x471983
cmp word [ebp], 0
je 0x47183f
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push ebp
call esi
push 0x4f3aa4
mov edi, eax
call esi
mov esi, eax
inc esi
lea eax, [esi + edi]
shl eax, 1
push ebp
call fcn.00449190
lea ecx, [esi + esi]
push ecx
mov ebp, eax
lea edx, [ebp + edi*2]
push 0x4f3aa4
push edx
call fcn.004b3b10
add esp, 0x10
mov ebx, dword [esp + 0x14]
test ebx, ebx
je 0x47187f
xor edi, edi
test ebp, ebp
je 0x471856
push ebp
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
inc esi
lea eax, [esi + edi]
shl eax, 1
push ebp
call fcn.00449190
mov ebp, eax
lea eax, [esi + esi]
push eax
lea ecx, [ebp + edi*2]
push ebx
push ecx
call fcn.004b3b10
add esp, 0x10
mov edi, dword [esp + 0x10]
mov ax, word [edi]
test ax, ax
mov esi, edi
je 0x4718b2
lea ecx, [ecx]
cmp ax, 9
jb 0x47189c
cmp ax, 0xd
jbe 0x4718ae
cmp ax, 0x20
je 0x4718ae
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x471890
mov dword [esp + 0x10], edi
sub edi, esi
sar edi, 1
test edi, edi
jge 0x4718c3
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
lea eax, [edi + edi + 4]
push 0
call fcn.00449190
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x4718de
mov word [ebx + edi*2 + 2], 0
lea eax, [edi + edi]
mov ecx, eax
mov edx, ecx
shr ecx, 2
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
test ebx, ebx
rep movsb byte es:[edi], byte [esi]
mov word [eax + ebx], 0
je 0x471935
xor edi, edi
test ebp, ebp
je 0x47190c
push ebp
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
inc esi
lea eax, [esi + edi]
shl eax, 1
push ebp
call fcn.00449190
mov ebp, eax
lea eax, [esi + esi]
push eax
lea ecx, [ebp + edi*2]
push ebx
push ecx
call fcn.004b3b10
add esp, 0x10
mov esi, dword [esp + 0x10]
lea esp, [esp]
mov ax, word [esi]
cmp ax, 9
jb 0x47194f
cmp ax, 0xd
jbe 0x471955
cmp ax, 0x20
jne 0x47195a
add esi, 2
jmp 0x471940
test ebx, ebx
mov dword [esp + 0x10], esi
je 0x471975
mov edx, dword [0x51d3c8]
add ebx, 0xfffffff8
push ebx
push 0
push edx
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp word [esi], 0
jne 0x471800
mov dword [esp + 0x1c], ebp
mov eax, dword [esp + 0x14]
test eax, eax
je 0x47199d
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [esp + 0xb4]
test ah, 2
jne 0x471a30
mov al, byte [esp + 0x26]
test al, al
jne 0x471a30
mov al, byte [esp + 0x1b]
test al, al
je 0x471a30
cmp word [esp + 0x2c], 0
je 0x471a30
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x30]
call fcn.004565f0
mov esi, dword [esp + 0x2c]
push esi
call fcn.004474e0
add esp, 4
test eax, eax
jne 0x4719e8
mov eax, esi
jmp 0x4719eb
add eax, 2
push 0x2e
push 0
push eax
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
test eax, eax
jne 0x471a1a
push 0x4f414c
lea ecx, [esp + 0x20]
call fcn.00449510
mov edx, dword [esp + 0x40]
push edx
lea ecx, [esp + 0x20]
call fcn.00449510
mov ebp, dword [esp + 0x1c]
test esi, esi
je 0x471a30
mov eax, dword [0x51d3c8]
add esi, 0xfffffff8
push esi
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [esp + 0x20]
test eax, eax
mov byte [esp + 0x4f0], 7
je 0x471b10
mov edx, dword [0x51d3c8]
mov ecx, eax
add ecx, 0xfffffff8
push ecx
push 0
push edx
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x471b10
xor eax, eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x44]
xor ecx, ecx
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x38]
or eax, 0x40
cmp edi, ecx
lea edx, [esp + 0x2e0]
mov dword [esp + 0x60], esi
mov dword [esp + 0x64], ecx
mov word [esp + 0xd8], cx
mov word [esp + 0x2e0], cx
mov dword [esp + 0x68], edx
mov dword [esp + 0x70], eax
je 0x471ac4
mov dword [esp + 0x74], 0x44e070
mov dword [esp + 0x78], edi
lea ecx, [esp + 0x60]
push ecx
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
test eax, eax
mov dword [esp + 0x2c], eax
je 0x471aff
lea edx, [esp + 0xd8]
push edx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
test eax, eax
je 0x471aff
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0x20]
call fcn.00456630
mov ebp, dword [esp + 0x1c]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x4f0], 7
call fcn.0044e010
mov ebx, dword [esp + 0x500]
test ebx, ebx
je 0x471c47
push ebp
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebx]
mov esi, eax
lea eax, [esi + esi + 4]
push ecx
call fcn.00449190
add esp, 4
test eax, eax
mov dword [ebx], eax
je 0x471b44
mov word [eax + esi*2 + 2], 0
mov edi, dword [ebx]
lea eax, [esi + esi]
mov ecx, eax
mov edx, ecx
shr ecx, 2
mov esi, ebp
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx]
mov word [eax + ecx], 0
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
mov edi, dword [esp + 0x58]
push edi
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
call fcn.0041f8a9
test ebp, ebp
je 0x471b8c
mov edx, dword [0x51d3c8]
add ebp, 0xfffffff8
push ebp
push 0
push edx
call esi
mov eax, dword [esp + 0x28]
test eax, eax
je 0x471ba2
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov eax, dword [esp + 0x40]
test eax, eax
je 0x471bb9
mov ecx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push ecx
call esi
mov eax, dword [esp + 0x44]
test eax, eax
je 0x471bd0
mov edx, dword [0x51d3c8]
add eax, 0xfffffff8
push eax
push 0
push edx
call esi
mov eax, dword [esp + 0x54]
test eax, eax
je 0x471be6
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
mov ecx, dword [esp + 0x3c]
mov edx, dword [0x51d3c8]
add ecx, 0xfffffff8
push ecx
push 0
push edx
call esi
mov eax, dword [esp + 0x48]
test eax, eax
je 0x471c0f
add eax, 0xfffffff8
push eax
mov eax, dword [0x51d3c8]
push 0
push eax
call esi
test edi, edi
mov dword [esp + 0x48], 0
je 0x471c2a
mov ecx, dword [0x51d3c8]
add edi, 0xfffffff8
push edi
push 0
push ecx
call esi
mov ecx, dword [esp + 0x4e8]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x4e4
ret 0xc
xor esi, esi
test ebp, ebp
mov dword [esp + 0x2c], esi
je 0x471c82
push ebp
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [eax + eax + 2]
lea edx, [esi + 2]
push edx
call fcn.00449130
mov ecx, esi
mov edx, ecx
shr ecx, 2
mov esi, ebp
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
add esp, 4
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, eax
mov dword [esp + 0x2c], esi
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x5c]
push esi
push eax
mov byte [esp + 0x4f8], 0xa
call fcn.00448be0
test esi, esi
mov byte [esp + 0x4f0], 7
je 0x471b63
mov ecx, dword [0x51d3c8]
add esi, 0xfffffff8
push esi
mov esi, dword [sym.imp.KERNEL32.dll_HeapFree]
push 0
push ecx
call esi
jmp 0x471b69