Function at 0x424610
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5008b1
mov eax, dword fs:[0]
push eax
sub esp, 0xa4c
mov eax, dword [0x55ec40]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0xa50], edi
mov ecx, dword [0x562328]
mov eax, dword fs:[0x2c]
mov dword [ebp - 0xa54], esi
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0xa4c], eax
mov ecx, eax
mov eax, dword [0x561ba4]
cmp eax, dword [ecx + 4]
jg 0x424d42
jmp 0x42467f
mov ecx, dword [ebp - 0xa4c]
mov eax, dword [0x561ba8]
cmp eax, dword [ecx + 4]
jg 0x424d78
cmp dword [0x55e030], 0
jne 0x42483d
push 0x7ff
lea eax, [ebp - 0xa18]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0xa18]
push eax
lea ecx, [ebp - 0xa48]
call fcn.00413010
lea eax, [ebp - 0xa48]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp - 0xa30]
push eax
call fcn.0042b650
mov esi, eax
add esp, 8
cmp esi, 0x55e020
je 0x42471c
mov ecx, 0x55e020
call fcn.00409ef0
movups xmm0, xmmword [esi]
movups xmmword [0x55e020], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x55e030], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0xa1c]
cmp ecx, 0xf
jbe 0x424756
mov edx, dword [ebp - 0xa30]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42474c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424dae
push ecx
push edx
call fcn.004cefc9
add esp, 8
mov ecx, dword [ebp - 0xa34]
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 0xf
mov byte [ebp - 0xa30], 0
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0xf
jbe 0x4247b2
mov edx, dword [ebp - 0xa48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4247a8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424dae
push ecx
push edx
call fcn.004cefc9
add esp, 8
lea eax, [ebp - 0xa48]
push eax
call fcn.0042c8b0
mov esi, eax
add esp, 4
cmp esi, 0x55e038
je 0x4247fd
mov ecx, 0x55e038
call fcn.00409ef0
movups xmm0, xmmword [esi]
movups xmmword [0x55e038], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x55e048], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0xa34]
cmp ecx, 0xf
jbe 0x424837
mov edx, dword [ebp - 0xa48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42482d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424db3
push ecx
push edx
call fcn.004cefc9
add esp, 8
mov esi, dword [ebp - 0xa54]
push 0x55e020
mov ecx, esi
call fcn.0042b1c0
test al, al
je 0x424915
push 0x3fffffff
push dword [0x55e030]
lea eax, [ebp - 0xa48]
mov ecx, esi
push eax
call fcn.004308e0
lea eax, [ebp - 0xa48]
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0xa30]
push 0x55e038
push eax
call fcn.0042f360
mov ecx, dword [ebp - 0xa34]
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
add esp, 0xc
mov dword [edi + 0x14], 0
movups xmm0, xmmword [ebp - 0xa30]
mov byte [ebp - 0xa30], 0
movups xmmword [edi], xmm0
movq xmm0, qword [ebp - 0xa20]
movq qword [edi + 0x10], xmm0
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 0xf
cmp ecx, 0xf
jbe 0x424d25
mov edx, dword [ebp - 0xa48]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x424906
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424db8
push ecx
push edx
call fcn.004cefc9
add esp, 8
jmp 0x424d25
mov ecx, dword [ebp - 0xa4c]
mov eax, dword [0x561bac]
cmp eax, dword [ecx + 4]
jg 0x424dbd
jmp 0x424934
mov ecx, dword [ebp - 0xa4c]
mov eax, dword [0x561bb0]
cmp eax, dword [ecx + 4]
jg 0x424df3
cmp dword [0x55e060], 0
jne 0x424be9
push 0x103
lea eax, [ebp - 0x31b]
mov byte [ebp - 0x31c], 0
push 0
push eax
call fcn.004d1bb0
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call fcn.004d1bb0
add esp, 0x18
lea eax, [ebp - 0x31c]
push eax
push 0
push 0
push 0x28
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebp - 0x218]
push eax
push 0
push 0
push 0x28
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea eax, [ebp - 0x31c]
push eax
lea ecx, [ebp - 0xa48]
call fcn.00413010
mov ecx, 0x55e050
call fcn.00409ef0
movups xmm0, xmmword [ebp - 0xa48]
lea esi, [ebp - 0x218]
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 0
lea ecx, [esi + 2]
movups xmmword [0x55e050], xmm0
movq xmm0, qword [ebp - 0xa38]
movq qword [0x55e060], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0xa30], xmm0
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x424a15
sub esi, ecx
sar esi, 1
cmp esi, 0x7ffffffe
ja 0x424e29
mov dword [ebp - 0xa1c], 7
cmp esi, 7
ja 0x424a6d
mov dword [ebp - 0xa20], esi
lea eax, [ebp - 0x218]
add esi, esi
push esi
push eax
lea eax, [ebp - 0xa30]
push eax
call fcn.004d1630
add esp, 0xc
xor eax, eax
mov word [ebp + esi - 0xa30], ax
jmp 0x424b38
mov eax, esi
or eax, 7
cmp eax, 0x7ffffffe
jbe 0x424a8c
mov ecx, closesocket
mov dword [ebp - 0xa4c], getpeername
add ecx, ecx
jmp 0x424ab5
mov ecx, 0xa
cmp eax, ecx
cmovb eax, ecx
mov dword [ebp - 0xa4c], eax
lea ecx, [eax + 1]
cmp ecx, 0x7fffffff
ja 0x424e33
add ecx, ecx
cmp ecx, 0x1000
jb 0x424ae2
lea eax, [ecx + 0x23]
cmp eax, ecx
jbe 0x424e33
push eax
call fcn.004cef99
add esp, 4
test eax, eax
je 0x424e2e
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
mov eax, dword [ebp - 0xa4c]
jmp 0x424b01
test ecx, ecx
je 0x424aff
push ecx
call fcn.004cef99
mov ecx, eax
mov dword [ebp - 0xa50], eax
mov eax, dword [ebp - 0xa4c]
add esp, 4
jmp 0x424b07
xor ecx, ecx
mov dword [ebp - 0xa50], ecx
mov dword [ebp - 0xa20], esi
add esi, esi
mov dword [ebp - 0xa1c], eax
lea eax, [ebp - 0x218]
push esi
push eax
push ecx
mov dword [ebp - 0xa30], ecx
call fcn.004d1630
mov eax, dword [ebp - 0xa50]
add esp, 0xc
xor ecx, ecx
mov word [eax + esi], cx
lea eax, [ebp - 0xa30]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0xa48]
push eax
call fcn.00430aa0
mov esi, eax
add esp, 8
cmp esi, 0x55e068
je 0x424b91
mov ecx, 0x55e068
call fcn.00409ef0
movups xmm0, xmmword [esi]
movups xmmword [0x55e068], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x55e078], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea ecx, [ebp - 0xa48]
call fcn.00409ef0
mov ecx, dword [ebp - 0xa1c]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 7
jbe 0x424be3
mov edx, dword [ebp - 0xa30]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x424bd9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424e2e
push ecx
push edx
call fcn.004cefc9
add esp, 8
mov esi, dword [ebp - 0xa54]
push 0x55e050
mov ecx, esi
call fcn.0042b1c0
test al, al
je 0x424c8e
push 0x3fffffff
push dword [0x55e060]
lea eax, [ebp - 0xa48]
mov ecx, esi
push eax
call fcn.004308e0
lea eax, [ebp - 0xa48]
mov dword [ebp - 4], 3
push eax
lea eax, [ebp - 0xa30]
push 0x55e068
push eax
call fcn.0042f360
xorps xmm0, xmm0
lea ecx, [ebp - 0xa48]
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
add esp, 0xc
movups xmm0, xmmword [ebp - 0xa30]
mov dword [edi + 0x14], 0
mov byte [ebp - 0xa30], 0
movups xmmword [edi], xmm0
movq xmm0, qword [ebp - 0xa20]
movq qword [edi + 0x10], xmm0
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 0xf
call fcn.00409ef0
jmp 0x424d25
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp dword [esi + 0x14], 0xf
mov eax, dword [esi + 0x10]
mov dword [ebp - 0xa54], eax
jbe 0x424cb3
mov esi, dword [esi]
cmp eax, 0x7fffffff
ja 0x424e38
mov dword [edi + 0x14], 0xf
cmp eax, 0xf
ja 0x424cd5
mov dword [edi + 0x10], eax
movups xmm0, xmmword [esi]
movups xmmword [edi], xmm0
jmp 0x424d25
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x424ce6
mov eax, closesocket
jmp 0x424cf0
mov ecx, 0x16
cmp eax, ecx
cmovb eax, ecx
mov dword [ebp - 0xa50], eax
lea eax, [ebp - 0xa50]
push eax
push edi
call fcn.00401c80
mov edx, dword [ebp - 0xa54]
mov ecx, dword [ebp - 0xa50]
mov dword [edi + 0x14], ecx
mov dword [edi], eax
lea ecx, [edx + 1]
mov dword [edi + 0x10], edx
push ecx
push esi
push eax
call fcn.004d1630
add esp, 0x14
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004cefd7
mov esp, ebp
pop ebp
ret
push 0x561ba4
call fcn.004cf855
add esp, 4
cmp dword [0x561ba4], 0xffffffff
jne 0x424679
push 0x503870
call fcn.004cf7c4
push 0x561ba4
call fcn.004cf804
add esp, 8
jmp 0x424679
push 0x561ba8
call fcn.004cf855
add esp, 4
cmp dword [0x561ba8], 0xffffffff
jne 0x424690
push 0x5038d0
call fcn.004cf7c4
push 0x561ba8
call fcn.004cf804
add esp, 8
jmp 0x424690
call fcn.004d529e
call fcn.004d529e
call fcn.004d529e
push 0x561bac
call fcn.004cf855
add esp, 4
cmp dword [0x561bac], 0xffffffff
jne 0x42492e
push 0x503930
call fcn.004cf7c4
push 0x561bac
call fcn.004cf804
add esp, 8
jmp 0x42492e
push 0x561bb0
call fcn.004cf855
add esp, 4
cmp dword [0x561bb0], 0xffffffff
jne 0x424945
push 0x503990
call fcn.004cf7c4
push 0x561bb0
call fcn.004cf804
add esp, 8
jmp 0x424945
call fcn.0040df80
call fcn.004d529e
call fcn.0040dec0
call fcn.0040df80
int3