Function at 0x45ab7e
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ad765
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x264
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [ebp + 8], 2
jl 0x45bc48
mov dword [ebp - 0xe0], 0x6b45
mov dword [ebp - 0x160], str.qqcbctken_jzxklrj_zkt_qqrgjjwwo_fjt
cmp dword [ebp - 0xe0], 0x6c86
jle 0x45ac7e
and dword [ebp - 0x74], 0
jmp 0x45abde
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x4133
jge 0x45ac7e
and dword [ebp - 0x1c], 0
jmp 0x45abf8
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1259
jge 0x45ac79
and dword [ebp - 0xa4], 0
jmp 0x45ac17
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x6eb9
jge 0x45ac74
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x1c]
sar eax, cl
mov ecx, dword [ebp - 0xa4]
sar eax, cl
cdq
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a0], edx
push dword [ebp - 0x1a0]
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x25c]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x25c]
call fcn.00402d76
jmp 0x45ac0a
jmp 0x45abf1
jmp 0x45abd7
mov dword [ebp - 0x108], 0x66a3
and dword [ebp - 4], 0
cmp dword [ebp - 0xe0], 0x67fd
jge 0x45aca4
push dword [ebp - 0x160]
call fcn.00481635
pop ecx
jmp 0x45acc0
or dword [ebp - 4], 0xffffffff
jmp 0x45acca
mov dword [ebp - 0x100], 0x3971
mov dword [ebp - 0x1b8], str.wvbgxt_kwreo_urroum_dwcww_gcchvgs_bpf_cdrxos_vpjlyeg_lnawvpbiz_hfolix_xjrjo_ymik_ezxci
cmp dword [ebp - 0x100], 0x3c91
jle 0x45adbd
and dword [ebp - 0x24], 0
jmp 0x45acfb
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1bdc
jge 0x45adbd
and dword [ebp - 0x7c], 0
jmp 0x45ad15
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x5a8a
jge 0x45adb8
and dword [ebp - 0x2c], 0
jmp 0x45ad2f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x64d3
jge 0x45adb3
and dword [ebp - 0xbc], 0
jmp 0x45ad4e
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x772d
jge 0x45adae
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0xbc]
and eax, ecx
cdq
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x178], edx
push dword [ebp - 0x178]
push dword [ebp - 0x17c]
lea ecx, [ebp - 0x1f0]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x1f0]
call fcn.00402d76
jmp 0x45ad41
jmp 0x45ad28
jmp 0x45ad0e
jmp 0x45acf4
mov dword [ebp - 0x1c0], str.uhbnbbqh_yktht_foa_vvediu_ahg_xoneqgzcx_sbsuls_plima
mov dword [ebp - 4], 2
cmp dword [ebp - 0x100], 0x3782
jge 0x45ade6
push dword [ebp - 0x1b8]
call fcn.00481635
pop ecx
jmp 0x45ae02
or dword [ebp - 4], 0xffffffff
jmp 0x45ae0c
cmp dword [ebp - 0x108], 0x66fc
jle 0x45b1b2
and dword [ebp - 0x44], 0
jmp 0x45ae29
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x722e
jge 0x45b074
mov dword [ebp - 0xf8], 0x478c
mov dword [ebp - 0x198], str.kgtlsqkc_gjkn_dlefwoe
cmp dword [ebp - 0xf8], 0x4ac6
jle 0x45aebe
and dword [ebp - 0x34], 0
jmp 0x45ae63
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x5b8b
jge 0x45aebe
and dword [ebp - 0x84], 0
jmp 0x45ae82
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x18d7
jge 0x45aebc
mov eax, dword [ebp - 0x34]
xor eax, dword [ebp - 0x84]
cdq
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], edx
push dword [ebp - 0x1ac]
push dword [ebp - 0x1b0]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45ae75
jmp 0x45ae5c
and dword [ebp - 0x8c], 0
jmp 0x45aed4
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x50f
jge 0x45b026
and dword [ebp - 0x4c], 0
jmp 0x45aef1
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x44e4
jge 0x45b021
mov dword [ebp - 0xd4], 0x4346
mov dword [ebp - 0x124], str.xumxix_abxtyk_nfkbdeu_dyolwb
cmp dword [ebp - 0xd4], 0x4492
jle 0x45af86
and dword [ebp - 0x3c], 0
jmp 0x45af2b
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x24d1
jge 0x45af86
and dword [ebp - 0xac], 0
jmp 0x45af4a
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x7b08
jge 0x45af84
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0xac]
cdq
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x188], edx
push dword [ebp - 0x188]
push dword [ebp - 0x18c]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45af3d
jmp 0x45af24
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x4c]
shl eax, cl
cdq
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], edx
mov dword [ebp - 4], 4
cmp dword [ebp - 0xd4], 0x431f
jge 0x45afc4
mov edx, dword [ebp - 0x124]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45afe0
or dword [ebp - 4], 0xffffffff
jmp 0x45afea
push dword [ebp - 0x114]
push dword [ebp - 0x118]
lea ecx, [ebp - 0x208]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x208]
call fcn.00402d76
jmp 0x45aeea
jmp 0x45aec7
mov dword [ebp - 4], 6
cmp dword [ebp - 0xf8], 0x4561
jge 0x45b049
mov edx, dword [ebp - 0x198]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45b065
or dword [ebp - 4], 0xffffffff
jmp 0x45b06f
jmp 0x45ae22
mov dword [ebp - 0xe8], 0xa94
mov dword [ebp - 0x130], str.wys_fzrciv_ymyoxvfqf_zxdmsx_onyk_xqs_wefgbrqen_dqzpmszlo_ycvrdah_watn_nev_sbyr_ddayxfxj
cmp dword [ebp - 0xe8], 0xcd5
jle 0x45b15c
push 0
call dword [sym.imp.USER32.dll_DestroyMenu]
and dword [ebp - 0x5c], 0
jmp 0x45b0ad
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x2821
jge 0x45b15c
and dword [ebp - 0x94], 0
jmp 0x45b0d0
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x32af
jge 0x45b157
and dword [ebp - 0xcc], 0
jmp 0x45b0f2
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x2353
jge 0x45b152
and dword [ebp - 0x54], 0
jmp 0x45b10b
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x6d6d
jge 0x45b150
mov eax, dword [ebp - 0xcc]
cdq
idiv dword [ebp - 0x54]
mov eax, dword [ebp - 0x94]
mov ecx, edx
sar eax, cl
or eax, dword [ebp - 0x5c]
cdq
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], edx
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45b104
jmp 0x45b0e5
jmp 0x45b0c3
jmp 0x45b0a6
push 0x18ed
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov dword [ebp - 4], 8
cmp dword [ebp - 0xe8], 0x777
jge 0x45b18c
mov edx, dword [ebp - 0x130]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45b1a8
or dword [ebp - 4], 0xffffffff
jmp 0x45b1b2
push 1
lea eax, [ebp - 0x22c]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.00453ac9
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x1d8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x1d8]
lea edi, [ebp - 0x1cc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x108], 0x658e
jge 0x45b32f
mov dword [ebp - 0xf0], 0x836
mov dword [ebp - 0x13c], str.qzpiara_hrjqtwe_xqn
cmp dword [ebp - 0xf0], 0xbc0
jle 0x45b2d7
and dword [ebp - 0xb4], 0
jmp 0x45b232
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x2ad0
jge 0x45b2d7
and dword [ebp - 0x64], 0
jmp 0x45b24f
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x2e12
jge 0x45b2d2
and dword [ebp - 0x9c], 0
jmp 0x45b26e
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x10b8
jge 0x45b2cd
and dword [ebp - 0x6c], 0
jmp 0x45b287
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x48f6
jge 0x45b2cb
mov eax, dword [ebp - 0xb4]
xor eax, dword [ebp - 0x64]
mov edx, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x6c]
shl edx, cl
xor eax, edx
cdq
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], edx
push dword [ebp - 0x128]
push dword [ebp - 0x12c]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45b280
jmp 0x45b261
jmp 0x45b248
jmp 0x45b225
push dword [ebp - 0x1c0]
call fcn.00481635
pop ecx
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0xf0], 0x660
jge 0x45b303
mov edx, dword [ebp - 0x13c]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45b31f
mov dword [ebp - 4], 0xa
jmp 0x45b32f
jmp 0x45b468
or dword [ebp - 4], 0xffffffff
jmp 0x45b472
cmp dword [ebp - 0x1cc], 0
je 0x45b48f
push 0
push dword [ebp - 0x1c4]
push dword [ebp - 0x1c8]
call dword [ebp - 0x1cc]
mov dword [ebp - 0xfc], 0x685a
mov dword [ebp - 0x110], str.qmz_xqh_qfoecv_mzx_hhsh_bcnzdc_nkj_ztbx_pznjwsrd_kmovajocj
cmp dword [ebp - 0xfc], 0x68c9
jle 0x45b89c
push 0x201d
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [ebp - 0xec], 0x434f
mov dword [ebp - 0x154], str.oevtg_idi_eysbyvt_lgxovzzjs
cmp dword [ebp - 0xec], 0x4554
jle 0x45b5c0
push 0
push 0x242f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
and dword [ebp - 0x28], 0
jmp 0x45b500
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x2044
jge 0x45b5b2
and dword [ebp - 0x30], 0
jmp 0x45b51a
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x437f
jge 0x45b5ad
and dword [ebp - 0x38], 0
jmp 0x45b534
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1c38
jge 0x45b5a8
and dword [ebp - 0x40], 0
jmp 0x45b54a
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x3bc6
jge 0x45b5a6
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x30]
shl eax, cl
mov edx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x40]
shl edx, cl
xor eax, edx
cdq
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], edx
push dword [ebp - 0x140]
push dword [ebp - 0x144]
lea ecx, [ebp - 0x220]
call fcn.00454899
pop ecx
pop ecx
mov ecx, eax
call fcn.00402f89
push eax
call fcn.00481635
pop ecx
lea ecx, [ebp - 0x220]
call fcn.00402d76
jmp 0x45b543
jmp 0x45b52d
jmp 0x45b513
jmp 0x45b4f9
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
and dword [ebp - 0x68], 0
jmp 0x45b5cd
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x76eb
jge 0x45b857
mov dword [ebp - 0xe4], 0x2725
mov dword [ebp - 0x1a8], str.ruuz_nbflep_vgdhaul_cpbmtlwj_yltodmgi_pbdpxcy_orb_fle_uook
cmp dword [ebp - 0xe4], 0x2945
jle 0x45b699
and dword [ebp - 0x58], 0
jmp 0x45b60b
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x26f9
jge 0x45b699
and dword [ebp - 0x48], 0
jmp 0x45b625
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x4c21
jge 0x45b694
and dword [ebp - 0x50], 0
jmp 0x45b63b
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x3bce
jge 0x45b692
and dword [ebp - 0x60], 0
jmp 0x45b651
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x14c
jge 0x45b690
mov ecx, dword [ebp - 0x48]
imul ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x58]
shl eax, cl
mov ecx, dword [ebp - 0x60]
shl eax, cl
cdq
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], edx
push dword [ebp - 0x14c]
push dword [ebp - 0x150]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45b64a
jmp 0x45b634
jmp 0x45b61e
jmp 0x45b604
and dword [ebp - 0x70], 0
jmp 0x45b6a6
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x657c
jge 0x45b809
and dword [ebp - 0x78], 0
jmp 0x45b6c0
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x2149
jge 0x45b804
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x70]
sar eax, cl
mov ecx, dword [ebp - 0x78]
sar eax, cl
cdq
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], edx
mov dword [ebp - 0xdc], 0x49ec
mov dword [ebp - 0x148], str.vjczmirt_ack_xpx_lgr_rwgtlihy_cpzcwill_evxz_ocvde_luvxn_hhckrxsh_luhxec_wyzhmtigm
cmp dword [ebp - 0xdc], 0x4b69
jle 0x45b7a0
and dword [ebp - 0x90], 0
jmp 0x45b721
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x4050
jge 0x45b7a0
and dword [ebp - 0x80], 0
jmp 0x45b73a
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xf7b
jge 0x45b79b
and dword [ebp - 0x88], 0
jmp 0x45b759
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x7a55
jge 0x45b799
mov eax, dword [ebp - 0x80]
sub eax, dword [ebp - 0x88]
or eax, dword [ebp - 0x90]
cdq
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], edx
push dword [ebp - 0x158]
push dword [ebp - 0x15c]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45b74c
jmp 0x45b733
jmp 0x45b714
push dword [ebp - 0x164]
push dword [ebp - 0x168]
mov ecx, 0xab4b00
call fcn.0047c980
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0xdc], 0x485a
jge 0x45b7d9
mov edx, dword [ebp - 0x148]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45b7f5
or dword [ebp - 4], 0xffffffff
jmp 0x45b7ff
jmp 0x45b6b9
jmp 0x45b69f
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0xe4], 0x25a8
jge 0x45b82c
mov edx, dword [ebp - 0x1a8]
mov ecx, 0xab4b00
call fcn.0047de2e
jmp 0x45b848
or dword [ebp - 4], 0xffffffff
jmp 0x45b852
jmp 0x45b5c6
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0xec], 0x4139
jge 0x45b876
push dword [ebp - 0x154]
call fcn.00481635
pop ecx
jmp 0x45b892
or dword [ebp - 4], 0xffffffff
jmp 0x45b89c
mov dword [ebp - 0xf4], 0x2fef
mov dword [ebp - 0x1bc], str.lhci_qumak_wbm_ezutqo_zbxch_svmzdguto_zkxettv
cmp dword [ebp - 0xf4], 0x339e
jle 0x45b9a7
and dword [ebp - 0x98], 0
jmp 0x45b8d6
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x177
jge 0x45b99d
and dword [ebp - 0xa0], 0
jmp 0x45b8fc
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xd0a
jge 0x45b998
and dword [ebp - 0xa8], 0
jmp 0x45b922
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x638a
jge 0x45b993
and dword [ebp - 0xb0], 0
jmp 0x45b944
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x37cc
jge 0x45b991
mov eax, dword [ebp - 0x98]
cdq
idiv dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0xb0]
or eax, edx
cdq
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x170], edx
push dword [ebp - 0x170]
push dword [ebp - 0x174]
mov ecx, 0xab4b00
call fcn.0047c980
jmp 0x45b937
jmp 0x45b915
jmp 0x45b8ef
jmp 0x45b8c9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
jmp 0x45bc53
mov eax, dword [ebp + 8]
inc eax
push eax
call fcn.0045d641
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret