Function at 0x44deb0
Capabilities:
Get common file path

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x5799fd
push eax
mov dword fs:[0], esp
lea eax, [ebp - 0x280]
push ebx
sub esp, 0x270
push esi
push edi
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
test eax, eax
je 0x44e528
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x44e7ae
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x50], eax
push str.TUpI8bR0JmCR09mGTwCBPy8JHGDklpHR0pIKzwIjPw
lea ecx, [ebp - 0x50]
mov dword [ebp - 4], 0
call fcn.0042db40
test al, al
jne 0x44df41
push 0x2c
push str.TUpI8bR0JmCR09mGTwCBPy8JHGDklpHR0pIKzwIjPw
lea ecx, [ebp - 0x50]
call fcn.0042de80
mov dword [ebp - 4], 1
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x44e7b8
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x48], eax
push str.VGZsyVHZDtGycIbJxkgZOzMcFMDUSfCSZ6cAxQxkdkZDQPQ
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.0042db40
test al, al
jne 0x44df88
push 0x31
push str.VGZsyVHZDtGycIbJxkgZOzMcFMDUSfCSZ6cAxQxkdkZDQPQ
lea ecx, [ebp - 0x48]
call fcn.0042de80
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x78]
push 0x54
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
push str.WEoycdwslcVAMvUK0ASHBAdb2FCol1QRgBPm4gRMSRWzGC85jbjQtTOEASfNj5k8Eio5OWxg2WFmACUNg
movups xmmword [ebp - 0x78], xmm0
mov dword [ebp - 0x64], 0
call fcn.0042c350
mov byte [ebp - 4], 5
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x44e7ae
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 6
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x44e7ae
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x4c], eax
push str.bTNWMbj1neZ1Yl
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 7
call fcn.0042db40
test al, al
jne 0x44e014
push 0xe
push str.bTNWMbj1neZ1Yl
lea ecx, [ebp - 0x4c]
call fcn.0042de80
lea eax, [ebp - 0x280]
mov byte [ebp - 4], 8
push eax
push ecx
mov esi, esp
mov dword [ebp - 0x40], esi
mov eax, dword [ebp - 0x48]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x40], eax
call fcn.0042d200
add eax, 0x10
lea ecx, [ebp - 0x44]
mov dword [esi], eax
call fcn.00443e40
add esp, 4
mov byte [ebp - 4], 9
push dword [eax]
lea eax, [ebp - 0x24]
push eax
call fcn.00420220
mov byte [ebp - 4], 8
add esp, 0xc
mov edx, dword [ebp - 0x44]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e076
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov esi, esp
mov dword [ebp - 0x3c], esi
mov eax, dword [ebp - 0x4c]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x3c], eax
call fcn.0042d200
add eax, 0x10
lea ecx, [ebp - 0x28]
mov dword [esi], eax
call fcn.00443e40
mov edi, eax
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x44], eax
call fcn.0042d200
add eax, 0x10
lea ecx, [ebp - 0x2c]
mov dword [esi], eax
call fcn.00443e40
add esp, 4
push edi
lea edx, [ebp - 0x24]
mov byte [ebp - 4], 0xb
mov ecx, eax
call fcn.0044cd60
mov edx, dword [ebp - 0x2c]
or esi, 0xffffffff
add esp, 4
mov byte [ebp - 0x15], al
add edx, 0xfffffff0
mov ecx, esi
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x44e0f4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov eax, esi
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e112
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov dword [ebp - 0x14], esp
lea eax, [ebp - 0x78]
mov esi, esp
sub esp, 0x18
mov ecx, esp
push eax
call fcn.0042d2f0
mov ecx, esi
call fcn.00443a10
mov byte [ebp - 4], 0xc
add esp, 0x14
mov ecx, dword [ebp - 0x24]
mov esi, esp
add ecx, 0xfffffff0
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x38], esi
call fcn.0042d200
add eax, 0x10
mov dword [esi], eax
push ecx
mov edi, esp
mov byte [ebp - 4], 0xd
push ecx
mov ecx, dword [ebp - 0x44]
mov esi, esp
mov dword [ebp - 0x38], esi
call fcn.0042d200
add eax, 0x10
mov ecx, edi
mov dword [esi], eax
call fcn.00443e40
add esp, 4
mov byte [ebp - 4], 8
mov ecx, SysReAllocString
call fcn.00447130
add esp, 0xc
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x15], 0
je 0x44e192
test al, al
jne 0x44e49b
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x44e7c2
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push str.c3A4jVQMCaVzEGWE0w
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0xe
call fcn.0042db40
test al, al
jne 0x44e1d2
push 0x13
push str.c3A4jVQMCaVzEGWE0w
lea ecx, [ebp - 0x28]
call fcn.0042de80
mov byte [ebp - 4], 0xf
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x44e7cc
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x58], eax
push str.V3BQmbCMRJIwcIXEyIJyNgQ5sAzkv0Ng0zHDUI
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x10
call fcn.0042db40
test al, al
jne 0x44e216
push 0x27
push str.V3BQmbCMRJIwcIXEyIJyNgQ5sAzkv0Ng0zHDUI
lea ecx, [ebp - 0x58]
call fcn.0042de80
mov byte [ebp - 4], 0x11
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x44e7d6
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x54], eax
push str.ZzVntaBNGzDzcEiRwIJLE1wIgBjhHUAhta5EANOvBkAT0BxVAeCTcETRwIJNE1wIoBloQfAw
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x12
call fcn.0042db40
test al, al
jne 0x44e25a
push 0x4a
push str.ZzVntaBNGzDzcEiRwIJLE1wIgBjhHUAhta5EANOvBkAT0BxVAeCTcETRwIJNE1wIoBloQfAw
lea ecx, [ebp - 0x54]
call fcn.0042de80
mov byte [ebp - 4], 0x14
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x44e7e0
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x2c], eax
movzx eax, byte [ebp - 0x2d]
push eax
movzx eax, byte [ebp - 0x15]
push eax
push ecx
mov byte [ebp - 4], 0x15
mov esi, esp
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x54]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x38], eax
call fcn.0042d200
add eax, 0x10
lea ecx, [ebp - 0x1c]
mov dword [esi], eax
call fcn.00443e40
add esp, 4
mov byte [ebp - 4], 0x16
push dword [eax]
lea eax, [ebp - 0x2c]
push eax
call fcn.00420220
mov byte [ebp - 4], 0x15
add esp, 0x10
mov edx, dword [ebp - 0x1c]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e2df
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x44e7ea
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
push 0x5908b4
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x17
call fcn.0042db40
test al, al
jne 0x44e31f
push 0
push 0x5908b4
lea ecx, [ebp - 0x1c]
call fcn.0042de80
mov byte [ebp - 4], 0x18
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x44e7f4
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0x5908b4
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x19
call fcn.0042db40
test al, al
jne 0x44e363
push 0
push 0x5908b4
lea ecx, [ebp - 0x20]
call fcn.0042de80
push ecx
mov byte [ebp - 4], 0x1a
mov esi, esp
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x58]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x34], eax
call fcn.0042d200
add eax, 0x10
lea ecx, [ebp - 0x60]
mov dword [esi], eax
call fcn.00443e40
mov edi, eax
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x14], eax
call fcn.0042d200
add eax, 0x10
lea ecx, [ebp - 0x5c]
mov dword [esi], eax
call fcn.00443e40
add esp, 4
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1c
push ecx
lea ecx, [ebp - 0x20]
mov edx, edi
push ecx
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, eax
call fcn.00454fe0
mov edx, dword [ebp - 0x5c]
or esi, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e3ec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x60]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e406
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e420
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e43a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e454
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x38]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e46b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x34]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e482
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e49e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x44e49e
or esi, 0xffffffff
mov edx, dword [ebp - 0x3c]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e4b5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e4cf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x64]
cmp ecx, 8
jb 0x44e509
mov edx, dword [ebp - 0x78]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x44e4ff
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44e7fe
push ecx
push edx
call fcn.00549e44
add esp, 8
mov edx, dword [ebp - 0x40]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e520
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x44]
jmp 0x44e789
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x44e803
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push str.R3c2teDcFBWRwyQFEI
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0x1d
call fcn.0042db40
test al, al
jne 0x44e56b
push 0x13
push str.R3c2teDcFBWRwyQFEI
lea ecx, [ebp - 0x28]
call fcn.0042de80
mov dword [ebp - 4], 0x1e
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x44e80d
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x2c], eax
push str.OGV0ldn8A7ADVNgFwYTzVhEwOH0oAPFwJXXFw0ptXgQdOGl0B
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1f
call fcn.0042db40
test al, al
jne 0x44e5b2
push 0x31
push str.OGV0ldn8A7ADVNgFwYTzVhEwOH0oAPFwJXXFw0ptXgQdOGl0B
lea ecx, [ebp - 0x2c]
call fcn.0042de80
mov byte [ebp - 4], 0x20
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x44e817
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x20], eax
push 0x5908b4
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x21
call fcn.0042db40
test al, al
jne 0x44e5f6
push 0
push 0x5908b4
lea ecx, [ebp - 0x20]
call fcn.0042de80
mov byte [ebp - 4], 0x22
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x44e821
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
push 0x5908b4
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x23
call fcn.0042db40
test al, al
jne 0x44e63a
push 0
push 0x5908b4
lea ecx, [ebp - 0x1c]
call fcn.0042de80
mov byte [ebp - 4], 0x24
call fcn.0042d8d0
mov ecx, eax
test ecx, ecx
je 0x44e82b
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
push 0x5908b4
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x25
call fcn.0042db40
test al, al
jne 0x44e67e
push 0
push 0x5908b4
lea ecx, [ebp - 0x24]
call fcn.0042de80
push ecx
mov byte [ebp - 4], 0x26
mov esi, esp
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x2c]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x14], eax
call fcn.0042d200
add eax, 0x10
lea ecx, [ebp - 0x3c]
mov dword [esi], eax
call fcn.00443e40
mov edi, eax
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x34], esi
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
mov ecx, eax
mov dword [ebp - 0x34], eax
call fcn.0042d200
add eax, 0x10
lea ecx, [ebp - 0x40]
mov dword [esi], eax
call fcn.00443e40
add esp, 4
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x28
push ecx
lea ecx, [ebp - 0x1c]
mov edx, edi
push ecx
lea ecx, [ebp - 0x24]
push ecx
mov ecx, eax
call fcn.00454fe0
mov edx, dword [ebp - 0x40]
or esi, 0xffffffff
add esp, 0xc
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e707
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e721
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e73b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e755
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e76f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x44e786
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x34]
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x44e79b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x80004005
call fcn.0042de60
push 0x80004005
call fcn.0042de60
push 0x80004005
call fcn.0042de60
push 0x80004005
call fcn.0042de60
push 0x80004005
call fcn.0042de60
push 0x80004005
call fcn.0042de60
push 0x80004005
call fcn.0042de60
push 0x80004005
call fcn.0042de60
call fcn.0054ed2f
push 0x80004005
call fcn.0042de60
push 0x80004005
call fcn.0042de60
push 0x80004005
call fcn.0042de60
push 0x80004005
call fcn.0042de60
push 0x80004005
call fcn.0042de60
int3