Function at 0x4498a0
Capabilities:
Get common file path
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49f4e6
mov eax, dword fs:[0]
push eax
sub esp, 0x16c
mov eax, dword [0xa57200]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x138], 0
push 0x4e848f
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x134], 0
movups xmmword [ebp - 0x148], xmm0
call fcn.0040a370
push 0
xorps xmm0, xmm0
mov dword [ebp - 4], 0
push 0x4e848f
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x120], 0
movups xmmword [ebp - 0x130], xmm0
mov dword [ebp - 0x11c], 0
call fcn.0040a370
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 1
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
xorps xmm0, xmm0
mov dword [ebp - 0x150], 0
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x14c], 0
movups xmmword [ebp - 0x160], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x449970
sub ecx, edx
lea eax, [ebp - 0x114]
push ecx
push eax
lea ecx, [ebp - 0x160]
call fcn.0040a370
push 1
push 0x4d8eb4
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 2
call fcn.00408680
push str.adb.exe
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.00409a70
mov esi, eax
add esp, 0xc
lea eax, [ebp - 0x148]
cmp eax, esi
je 0x4499f8
mov ecx, eax
call fcn.00408790
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x148], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x138], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x449a34
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449a2a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x449a2a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00452e8b
add esp, 8
push 0x4d8ed4
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.00409a70
mov esi, eax
add esp, 0xc
lea eax, [ebp - 0x130]
cmp eax, esi
je 0x449a8a
mov ecx, eax
call fcn.00408790
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x130], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x120], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x449ac6
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449abc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x449abc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00452e8b
add esp, 8
cmp dword [ebp - 0x134], 0xf
lea eax, [ebp - 0x148]
push 0
cmova eax, dword [ebp - 0x148]
push 0x80
push 1
push 0
push 0
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x449b25
push 0
lea eax, [ebp - 0x118]
mov dword [ebp - 0x118], 0
push eax
push 0xc8000
push 0x87a3a0
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x11c], 0xf
lea eax, [ebp - 0x130]
push 0
cmova eax, dword [ebp - 0x130]
push 0x80
push 1
push 0
push 0
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x449b84
push 0
lea eax, [ebp - 0x118]
mov dword [ebp - 0x118], 0
push eax
push 0x1a210
push 0x9423a0
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x14c]
cmp ecx, 0xf
jbe 0x449bbe
mov edx, dword [ebp - 0x160]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449bb4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449c56
push ecx
push edx
call fcn.00452e8b
add esp, 8
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 0xf
mov byte [ebp - 0x160], 0
cmp ecx, 0xf
jbe 0x449c0f
mov edx, dword [ebp - 0x130]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449c05
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x449c56
push ecx
push edx
call fcn.00452e8b
add esp, 8
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0xf
mov byte [ebp - 0x130], 0
cmp ecx, 0xf
jbe 0x449c66
mov edx, dword [ebp - 0x148]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449c5c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x449c5c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00452e8b
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00452bc2
mov esp, ebp
pop ebp
ret