Function at 0x13011b80
Capabilities:
Contain obfuscated stackstrings
Get common file path
Set current directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x130fbbdc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa20
cmp dword [0x1314fd04], 0
jne 0x130120ed
mov eax, dword [ebp + 8]
mov dword [0x1314fd0c], eax
push 0x104
lea ecx, [ebp - 0x67c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x13011cc5
lea edx, [ebp - 0x67c]
push edx
lea ecx, [ebp - 0x8ac]
call fcn.13004bf0
mov dword [ebp - 4], 0
mov dword [ebp - 0x890], 0
push 0
push 0x130fe940
lea ecx, [ebp - 0x8ac]
call fcn.13011b50
mov dword [ebp - 0x88c], eax
mov eax, dword [ebp - 0x88c]
cmp eax, dword [0x130fe978]
je 0x13011c46
mov ecx, dword [ebp - 0x88c]
mov dword [ebp - 0x890], ecx
mov edx, dword [ebp - 0x890]
add edx, 1
push edx
push 0x130fe944
lea ecx, [ebp - 0x8ac]
call fcn.13011b50
mov dword [ebp - 0x88c], eax
jmp 0x13011c0a
cmp dword [ebp - 0x890], 0
jbe 0x13011cb3
mov eax, dword [ebp - 0x890]
push eax
push 0
lea ecx, [ebp - 0x9e8]
push ecx
lea ecx, [ebp - 0x8ac]
call fcn.1300c7f0
mov dword [ebp - 0xa28], eax
mov edx, dword [ebp - 0xa28]
mov dword [ebp - 0xa2c], edx
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0xa2c]
push eax
lea ecx, [ebp - 0x8ac]
call fcn.13004510
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x9e8]
call fcn.13003810
lea ecx, [ebp - 0x8ac]
call fcn.13002ef0
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8ac]
call fcn.13003810
jmp 0x13011cd7
mov dword [0x1314fd04], 1
mov dword [ebp - 0x888], 0x130fe948
lea ecx, [ebp - 0x474]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push 0x130fe958
lea edx, [ebp - 0x474]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov word [ebp - 0x270], 0x45
mov word [ebp - 0x26e], 0x6e
mov word [ebp - 0x26c], 0x67
mov word [ebp - 0x26a], 0x69
mov word [ebp - 0x268], 0x6e
mov word [ebp - 0x266], 0x65
mov word [ebp - 0x264], 0x2e
mov word [ebp - 0x262], 0x64
mov word [ebp - 0x260], 0x6c
mov word [ebp - 0x25e], 0x6c
mov word [ebp - 0x25c], 0
lea eax, [ebp - 0x270]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x1314fd08], eax
call fcn.13012120
mov ecx, 0x1314fd68
call fcn.13013e30
mov word [ebp - 0x258], 0x43
mov word [ebp - 0x256], 0x6c
mov word [ebp - 0x254], 0x69
mov word [ebp - 0x252], 0x45
mov word [ebp - 0x250], 0x78
mov word [ebp - 0x24e], 0x74
mov word [ebp - 0x24c], 0x2e
mov word [ebp - 0x24a], 0x64
mov word [ebp - 0x248], 0x6c
mov word [ebp - 0x246], 0x6c
mov word [ebp - 0x244], 0
mov word [ebp - 0x884], 0
push 0x206
push 0
lea ecx, [ebp - 0x882]
push ecx
call fcn.1301f940
add esp, 0xc
lea edx, [ebp - 0x884]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push 0x130fe970
lea eax, [ebp - 0x884]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea ecx, [ebp - 0x258]
push ecx
lea edx, [ebp - 0x884]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov dword [ebp - 0x23c], 0
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x884]
push ecx
call fcn.13001580
add esp, 8
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x23c], 0
je 0x13011f35
mov edx, dword [ebp - 0x238]
push edx
mov eax, dword [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x91c]
call fcn.13009f90
lea ecx, [ebp - 0x938]
push ecx
lea ecx, [ebp - 0x91c]
call fcn.1300a040
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x938]
call fcn.13002d80
cmp eax, 0x20
jne 0x13011f08
mov dword [ebp - 0x93c], 0
jmp 0x13011edd
mov edx, dword [ebp - 0x93c]
add edx, 1
mov dword [ebp - 0x93c], edx
cmp dword [ebp - 0x93c], 0x20
jae 0x13011f08
mov eax, dword [ebp - 0x93c]
push eax
lea ecx, [ebp - 0x938]
call fcn.13002fc0
mov ecx, dword [ebp - 0x93c]
mov dl, byte [eax]
mov byte [ecx + 0x1314fd10], dl
jmp 0x13011ece
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x9ec], eax
mov ecx, dword [ebp - 0x9ec]
push ecx
call fcn.13020302
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x938]
call fcn.13004550
mov word [ebp - 0x234], 0x69
mov word [ebp - 0x232], 0x6e
mov word [ebp - 0x230], 0x74
mov word [ebp - 0x22e], 0x65
mov word [ebp - 0x22c], 0x72
mov word [ebp - 0x22a], 0x66
mov word [ebp - 0x228], 0x61
mov word [ebp - 0x226], 0x63
mov word [ebp - 0x224], 0x65
mov word [ebp - 0x222], 0x2e
mov word [ebp - 0x220], 0x75
mov word [ebp - 0x21e], 0
mov word [ebp - 0x21c], 0
push 0x206
push 0
lea edx, [ebp - 0x21a]
push edx
call fcn.1301f940
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push 0x130fe974
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea edx, [ebp - 0x234]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0x10]
push ecx
lea edx, [ebp - 0x21c]
push edx
call fcn.13001580
add esp, 8
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x10], 0
je 0x130120d1
mov eax, dword [ebp - 0x240]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
lea ecx, [ebp - 0x9ac]
call fcn.13009f90
lea edx, [ebp - 0x9c8]
push edx
lea ecx, [ebp - 0x9ac]
call fcn.1300a040
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x9c8]
call fcn.13002d80
cmp eax, 0x20
jne 0x130120a7
mov dword [ebp - 0x9cc], 0
jmp 0x1301207c
mov eax, dword [ebp - 0x9cc]
add eax, 1
mov dword [ebp - 0x9cc], eax
cmp dword [ebp - 0x9cc], 0x20
jae 0x130120a7
mov ecx, dword [ebp - 0x9cc]
push ecx
lea ecx, [ebp - 0x9c8]
call fcn.13002fc0
mov edx, dword [ebp - 0x9cc]
mov al, byte [eax]
mov byte [edx + 0x1314fd30], al
jmp 0x1301206d
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x9f0], ecx
mov edx, dword [ebp - 0x9f0]
push edx
call fcn.13020302
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c8]
call fcn.13004550
mov ecx, 0x13152e50
call fcn.1301d8d0
jmp 0x130120ed
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret