Function at 0x44b3a0
Capabilities:
Get common file path

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5754ad
push eax
mov dword fs:[0], esp
lea eax, [ebp - 0x280]
push ebx
sub esp, 0x270
push esi
push edi
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
test eax, eax
je 0x44ba18
call fcn.0042b460
mov ecx, eax
test ecx, ecx
je 0x44bc9e
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x50], eax
push str.TkE_bm5Rcm1wYz9zcm1TbmJfcmNw
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0
call fcn.0042b6d0
test al, al
jne 0x44b431
push 0x1c
push str.TkE_bm5Rcm1wYz9zcm1TbmJfcmNw
lea ecx, [ebp - 0x50]
call fcn.0042b9f0
mov dword [ebp - 4], 1
call fcn.0042b460
mov ecx, eax
test ecx, ecx
je 0x44bca8
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x48], eax
push str.ICN1cVo_c3JtU25iX3JjcCxjdmMgHi1n
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.0042b6d0
test al, al
jne 0x44b478
push 0x20
push str.ICN1cVo_c3JtU25iX3JjcCxjdmMgHi1n
lea ecx, [ebp - 0x48]
call fcn.0042b9f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x78]
push 0x3c
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
push str.UW1kcnVfcGNaS2dhcG1xbWRyWlVnbGJtdXFaQXNwcGNsclRjcHFnbWxaUHNs
movups xmmword [ebp - 0x78], xmm0
mov dword [ebp - 0x64], 0
call fcn.00429fb0
mov byte [ebp - 4], 5
call fcn.0042b460
mov ecx, eax
test ecx, ecx
je 0x44bc9e
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 6
call fcn.0042b460
mov ecx, eax
test ecx, ecx
je 0x44bc9e
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x4c], eax
push str.TlIvNkY
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 7
call fcn.0042b6d0
test al, al
jne 0x44b504
push 8
push str.TlIvNkY
lea ecx, [ebp - 0x4c]
call fcn.0042b9f0
lea eax, [ebp - 0x280]
mov byte [ebp - 4], 8
push eax
push ecx
mov esi, esp
mov dword [ebp - 0x40], esi
mov eax, dword [ebp - 0x48]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x40], eax
call fcn.0042b170
add eax, 0x10
lea ecx, [ebp - 0x44]
mov dword [esi], eax
call fcn.004418d0
add esp, 4
mov byte [ebp - 4], 9
push dword [eax]
lea eax, [ebp - 0x24]
push eax
call fcn.0041e770
mov byte [ebp - 4], 8
add esp, 0xc
mov edx, dword [ebp - 0x44]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44b566
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov esi, esp
mov dword [ebp - 0x3c], esi
mov eax, dword [ebp - 0x4c]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x3c], eax
call fcn.0042b170
add eax, 0x10
lea ecx, [ebp - 0x28]
mov dword [esi], eax
call fcn.004418d0
mov edi, eax
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x44], eax
call fcn.0042b170
add eax, 0x10
lea ecx, [ebp - 0x2c]
mov dword [esi], eax
call fcn.004418d0
add esp, 4
push edi
lea edx, [ebp - 0x24]
mov byte [ebp - 4], 0xb
mov ecx, eax
call fcn.0044a2c0
mov edx, dword [ebp - 0x2c]
or esi, 0xffffffff
add esp, 4
mov byte [ebp - 0x15], al
add edx, 0xfffffff0
mov ecx, esi
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x44b5e4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov eax, esi
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44b602
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov dword [ebp - 0x14], esp
lea eax, [ebp - 0x78]
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.0042a8a0
mov ecx, esi
call fcn.00441670
mov byte [ebp - 4], 0xc
add esp, 0x14
mov ecx, dword [ebp - 0x24]
mov esi, esp
add ecx, 0xfffffff0
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x38], esi
call fcn.0042b170
add eax, 0x10
mov dword [esi], eax
push ecx
mov edi, esp
mov byte [ebp - 4], 0xd
push ecx
mov ecx, dword [ebp - 0x44]
mov esi, esp
mov dword [ebp - 0x38], esi
call fcn.0042b170
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.004418d0
add esp, 4
mov byte [ebp - 4], 8
mov ecx, SysReAllocString
call fcn.004446c0
add esp, 0xc
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x15], 0
je 0x44b682
test al, al
jne 0x44b98b
call fcn.0042b460
mov ecx, eax
test ecx, ecx
je 0x44bcb2
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push str.bnBtYnNhcg
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xe
call fcn.0042b6d0
test al, al
jne 0x44b6c2
push 0xc
push str.bnBtYnNhcg
lea ecx, [ebp - 0x28]
call fcn.0042b9f0
mov byte [ebp - 4], 0xf
call fcn.0042b460
mov ecx, eax
test ecx, ecx
je 0x44bcbc
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x58], eax
push str.cl9xaV1hcGNfcmdtbF1kX2dqY2I
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x10
call fcn.0042b6d0
test al, al
jne 0x44b706
push 0x1c
push str.cl9xaV1hcGNfcmdtbF1kX2dqY2I
lea ecx, [ebp - 0x58]
call fcn.0042b9f0
mov byte [ebp - 4], 0x11
call fcn.0042b460
mov ecx, eax
test ecx, ecx
je 0x44bcc6
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x54], eax
push str.cnFmXWFwY19yZ21sXXBjcTsjYiRfc3JtcHNsXWFwY19yZ21sOyNi
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x12
call fcn.0042b6d0
test al, al
jne 0x44b74a
push 0x34
push str.cnFmXWFwY19yZ21sXXBjcTsjYiRfc3JtcHNsXWFwY19yZ21sOyNi
lea ecx, [ebp - 0x54]
call fcn.0042b9f0
mov byte [ebp - 4], 0x14
call fcn.0042b460
mov ecx, eax
test ecx, ecx
je 0x44bcd0
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x2c], eax
movzx eax, byte [ebp - 0x2d]
push eax
movzx eax, byte [ebp - 0x15]
push eax
push ecx
mov byte [ebp - 4], 0x15
mov esi, esp
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x54]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x38], eax
call fcn.0042b170
add eax, 0x10
lea ecx, [ebp - 0x1c]
mov dword [esi], eax
call fcn.004418d0
add esp, 4
mov byte [ebp - 4], 0x16
push dword [eax]
lea eax, [ebp - 0x2c]
push eax
call fcn.0041e770
mov byte [ebp - 4], 0x15
add esp, 0x10
mov edx, dword [ebp - 0x1c]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44b7cf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042b460
mov ecx, eax
test ecx, ecx
je 0x44bcda
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
push 0x589e44
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x17
call fcn.0042b6d0
test al, al
jne 0x44b80f
push 0
push 0x589e44
lea ecx, [ebp - 0x1c]
call fcn.0042b9f0
mov byte [ebp - 4], 0x18
call fcn.0042b460
mov ecx, eax
test ecx, ecx
je 0x44bce4
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0x589e44
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x19
call fcn.0042b6d0
test al, al
jne 0x44b853
push 0
push 0x589e44
lea ecx, [ebp - 0x20]
call fcn.0042b9f0
push ecx
mov byte [ebp - 4], 0x1a
mov esi, esp
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x58]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x34], eax
call fcn.0042b170
add eax, 0x10
lea ecx, [ebp - 0x60]
mov dword [esi], eax
call fcn.004418d0
mov edi, eax
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x14], eax
call fcn.0042b170
add eax, 0x10
lea ecx, [ebp - 0x5c]
mov dword [esi], eax
call fcn.004418d0
add esp, 4
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1c
push ecx
lea ecx, [ebp - 0x20]
mov edx, edi
push ecx
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, eax
call fcn.004523c0
mov edx, dword [ebp - 0x5c]
or esi, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44b8dc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x60]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44b8f6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44b910
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44b92a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44b944
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x38]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44b95b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x34]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44b972
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44b98e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x44b98e
or esi, 0xffffffff
mov edx, dword [ebp - 0x3c]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44b9a5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44b9bf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x64]
cmp ecx, 8
jb 0x44b9f9
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44b9ef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44bcee
push ecx
push edx
call fcn.00545311
add esp, 8
mov edx, dword [ebp - 0x40]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44ba10
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x44]
jmp 0x44bc79
call fcn.0042b460
mov ecx, eax
test ecx, ecx
je 0x44bcf3
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push str.bnBtYnNhcg
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0x1d
call fcn.0042b6d0
test al, al
jne 0x44ba5b
push 0xc
push str.bnBtYnNhcg
lea ecx, [ebp - 0x28]
call fcn.0042b9f0
mov dword [ebp - 4], 0x1e
call fcn.0042b460
mov ecx, eax
test ecx, ecx
je 0x44bcfd
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x2c], eax
push str.RWNyQXNwcGNsckJncGNhcm1wd11kX2dqY2I
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1f
call fcn.0042b6d0
test al, al
jne 0x44baa2
push 0x24
push str.RWNyQXNwcGNsckJncGNhcm1wd11kX2dqY2I
lea ecx, [ebp - 0x2c]
call fcn.0042b9f0
mov byte [ebp - 4], 0x20
call fcn.0042b460
mov ecx, eax
test ecx, ecx
je 0x44bd07
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0x589e44
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x21
call fcn.0042b6d0
test al, al
jne 0x44bae6
push 0
push 0x589e44
lea ecx, [ebp - 0x20]
call fcn.0042b9f0
mov byte [ebp - 4], 0x22
call fcn.0042b460
mov ecx, eax
test ecx, ecx
je 0x44bd11
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
push 0x589e44
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x23
call fcn.0042b6d0
test al, al
jne 0x44bb2a
push 0
push 0x589e44
lea ecx, [ebp - 0x1c]
call fcn.0042b9f0
mov byte [ebp - 4], 0x24
call fcn.0042b460
mov ecx, eax
test ecx, ecx
je 0x44bd1b
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push 0x589e44
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x25
call fcn.0042b6d0
test al, al
jne 0x44bb6e
push 0
push 0x589e44
lea ecx, [ebp - 0x24]
call fcn.0042b9f0
push ecx
mov byte [ebp - 4], 0x26
mov esi, esp
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x2c]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x14], eax
call fcn.0042b170
add eax, 0x10
lea ecx, [ebp - 0x3c]
mov dword [esi], eax
call fcn.004418d0
mov edi, eax
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x34], esi
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x34], eax
call fcn.0042b170
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.004418d0
add esp, 4
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x28
push ecx
lea ecx, [ebp - 0x1c]
mov edx, edi
push ecx
lea ecx, [ebp - 0x24]
push ecx
mov ecx, eax
call fcn.004523c0
mov edx, dword [ebp - 0x40]
or esi, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44bbf7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44bc11
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44bc2b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44bc45
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44bc5f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44bc76
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x34]
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x44bc8b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x80004005
call fcn.0042b9d0
push 0x80004005
call fcn.0042b9d0
push 0x80004005
call fcn.0042b9d0
push 0x80004005
call fcn.0042b9d0
push 0x80004005
call fcn.0042b9d0
push 0x80004005
call fcn.0042b9d0
push 0x80004005
call fcn.0042b9d0
push 0x80004005
call fcn.0042b9d0
call fcn.0054a2ff
push 0x80004005
call fcn.0042b9d0
push 0x80004005
call fcn.0042b9d0
push 0x80004005
call fcn.0042b9d0
push 0x80004005
call fcn.0042b9d0
push 0x80004005
call fcn.0042b9d0
int3