Function at 0x459d40
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xec4
push ebx
push esi
push edi
push 0x208
lea eax, [ebp - 0x6a0]
mov dword [ebp - 8], edx
push 0
push eax
call fcn.00653fd0
add esp, 0xc
lea eax, [ebp - 0x498]
push 0x208
push 0
push eax
call fcn.00653fd0
add esp, 0xc
lea eax, [ebp - 0xcb8]
push 0x208
push 0
push eax
call fcn.00653fd0
add esp, 0xc
lea eax, [ebp - 0xab0]
push 0x208
push 0
push eax
call fcn.00653fd0
add esp, 0xc
push 0
call fcn.0066b14f
add esp, 4
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
mov dword [ebp - 0xc], edx
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.0066e1ff
mov ecx, dword [ebp + 8]
mov edx, 2
call fcn.0045a110
mov ecx, dword [ebp + 0xc]
mov edx, 2
mov ebx, eax
call fcn.0045a110
push 0x48
mov edi, eax
lea eax, [ebp - 0x80]
push 0
push eax
call fcn.00653fd0
add esp, 0x14
lea ecx, [ebp - 0x80]
xor esi, esi
call fcn.004599c0
test eax, eax
je 0x459eb5
nop dword [eax]
nop dword [eax + eax]
push 0
push 0x104
lea eax, [ebp - 0xec0]
mov ecx, 6
push eax
push dword [ebp - 0x58]
push 0xffffffffffffffff
call fcn.00459a50
call eax
push 0
push 0x104
lea eax, [ebp - 0x8a8]
mov ecx, 6
push eax
push dword [ebp - 0x60]
push 0xffffffffffffffff
call fcn.00459a50
call eax
cmp ebx, esi
jne 0x459e79
lea edx, [ebp - 0xec0]
lea ecx, [ebp - 0x6a0]
call fcn.0045a550
call fcn.0045a570
lea edx, [ebp - 0x8a8]
lea ecx, [ebp - 0xcb8]
call fcn.0045a550
cmp edi, esi
jne 0x459ea4
lea edx, [ebp - 0x8a8]
lea ecx, [ebp - 0x498]
call fcn.0045a550
call fcn.0045a570
lea edx, [ebp - 0x8a8]
lea ecx, [ebp - 0xab0]
call fcn.0045a550
lea ecx, [ebp - 0x80]
inc esi
call fcn.004599c0
test eax, eax
jne 0x459e10
push 0x732da0
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push str.AntiCheat.log
push eax
call fcn.0066449a
add esp, 0xc
lea ecx, [ebp - 0xab0]
call fcn.00459ae0
mov edi, dword [ebp + 0xc]
mov ecx, edi
sub ecx, eax
lea eax, [ebp - 0x498]
push ecx
push eax
lea ecx, [ebp - 0xcb8]
call fcn.00459ae0
mov ebx, dword [ebp + 8]
mov ecx, ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
sub ecx, eax
push ecx
lea eax, [ebp - 0x6a0]
push eax
push dword [ebp - 8]
call esi
push eax
push dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
push dword [ebp - 0x30]
inc eax
push dword [ebp - 0x2c]
push dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x20]
add eax, 0x76c
push eax
push str.__04d__02d__02d__02d:_02d:_02d__Pid_:__d___Code_:_0x_08X____S_0x_p____S_0x_p_n
push dword [ebp - 4]
call fcn.004558e0
push dword [ebp - 4]
call fcn.00664259
add esp, 0x3c
lea eax, [ebp - 0x290]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov edx, 0x732e08
lea ecx, [ebp - 0x290]
call fcn.0045a450
push 0x732e18
lea eax, [ebp - 4]
mov dword [ebp - 4], 0
push str.AntiCheat.vbs
push eax
call fcn.0066449a
add esp, 0xc
lea ecx, [ebp - 0xab0]
call fcn.00459ae0
sub edi, eax
lea ecx, [ebp - 0xcb8]
lea eax, [ebp - 0x498]
push edi
push eax
call fcn.00459ae0
sub ebx, eax
lea eax, [ebp - 0x6a0]
push ebx
push eax
push dword [ebp - 8]
call esi
push eax
push dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
push dword [ebp - 0x30]
inc eax
push dword [ebp - 0x2c]
push dword [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x20]
add eax, 0x76c
push eax
lea eax, [ebp - 0x290]
push eax
push str.Dim_obj__file_nSet_obj__CreateObject__Scripting.FileSystemObject___nSet_file__obj.GetFile___s___nfile.Delete_nmsgbox_____04d__02d__02d__02d:_02d:_02d_____Chr_13___Chr_13___Pid_t:___d___Chr_13____Code_t:__0x_08X___Chr_13___Chr_13____S_0x_p___Chr_13____S_0x_p___0__48___AntiCheat_
push dword [ebp - 4]
call fcn.004558e0
add esp, 0x3c
push dword [ebp - 4]
call fcn.00664259
mov eax, dword [0x732f58]
add esp, 4
movq xmm0, qword [str.wscript.exe__]
mov dword [ebp - 0x180], eax
mov ax, word [0x732f5c]
push 0xf6
mov word [ebp - 0x17c], ax
lea eax, [ebp - 0x17a]
push 0
push eax
movq qword [ebp - 0x188], xmm0
call fcn.00653fd0
add esp, 0xc
lea edx, [ebp - 0x290]
lea ecx, [ebp - 0x188]
call fcn.0045a450
mov edx, 0x732b10
lea ecx, [ebp - 0x188]
call fcn.0045a450
lea eax, [ebp - 0x188]
mov ecx, 0x1f
push 5
push eax
call fcn.00459a50
call eax
push 0
push 0xffffffffffffffff
mov ecx, 0xa
call fcn.00459a50
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret