Function at 0x45cd40
Capabilities:
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x494a58
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x610
mov eax, dword [esp + 0x62c]
push ebx
push ebp
mov ebp, ecx
mov ecx, dword [esp + 0x630]
push esi
push edi
push eax
push ecx
mov ecx, ebp
mov dword [esp + 0x24], ebp
call fcn.0047cb10
xor eax, eax
mov dword [ebp], 0x4a03b8
mov dword [ebp + 0x54], eax
mov dword [ebp + 0x5c], eax
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x60], eax
lea ebx, [ebp + 0xa4]
mov dword [esp + 0x628], eax
mov eax, ebx
xor edx, edx
lea edi, [ebx + 3]
mov ecx, 0x41
mov word [eax], dx
mov byte [eax + 2], dl
xor eax, eax
rep stosd dword es:[edi], eax
lea edi, [ebx + 0x107]
mov ecx, 0x40
rep stosd dword es:[edi], eax
lea edi, [ebx + 0x207]
mov ecx, 0x40
rep stosd dword es:[edi], eax
lea edi, [ebx + 0x307]
mov ecx, 0xc1
mov dword [esp + 0x10], edi
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x220]
push ecx
push 0x400
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov edi, str._tmpFile.txt
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x220]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea eax, [ebx + 0x207]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
lea edi, [ebx + 0x107]
lea esi, [ebx + 3]
push edi
push esi
lea eax, [esp + 0x22c]
push ebx
push eax
call dword [sym.imp.MSVCRT.dll__splitpath]
mov ecx, dword [esp + 0x24]
lea eax, [ebx + 0x207]
push eax
push edi
push esi
push ebx
push ecx
call dword [sym.imp.MSVCRT.dll__makepath]
add esp, 0x28
mov edx, dword [esp + 0x644]
mov ecx, dword [esp + 0x640]
xor ebx, ebx
mov dword [ebp], 0x4a03a8
mov dword [ebp + 0x68], ebx
mov dword [ebp + 0x64], ebx
mov dword [ebp + 0x74], ebx
mov dword [ebp + 0x70], ebx
mov dword [ebp + 0x78], 0xc5
mov dword [ebp + 0x7c], 0xf
mov dword [ebp + 0x80], 0x10
mov dword [ebp + 0x84], 0x100
mov eax, dword [ebp + 0x5c]
mov dword [ebp + 0xa0], edx
mov edx, dword [esp + 0x63c]
mov dword [ebp + 0x6c], eax
mov eax, dword [esp + 0x638]
push ecx
push 2
push edx
push eax
mov ecx, ebp
mov byte [esp + 0x638], 1
mov dword [ebp + 0x9c], 0x437f0000
call fcn.0045dd90
call fcn.00456570
test eax, eax
jne 0x45d34f
mov ecx, dword [ebp + 0xa0]
mov edx, dword [ebp + 0x6c]
neg ecx
sbb cl, cl
push 0x64
and cl, 0xfc
add cl, 0x10
mov byte [edx + 0xf6], cl
call sub.MFC42.DLL_operatornew
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
cmp esi, ebx
mov byte [esp + 0x628], 2
je 0x45cf50
mov edx, dword [ebp + 0x6c]
xor eax, eax
xor ecx, ecx
mov ax, word [edx + 0xfc]
mov cx, word [edx + 0xfe]
push eax
push ecx
mov ecx, esi
call fcn.0047e430
mov dword [esi], 0x4a0398
mov dword [esi + 0x54], ebx
mov dword [esi + 0x5c], ebx
mov dword [esi + 0x58], ebx
mov dword [esi + 0x60], ebx
jmp 0x45cf52
xor esi, esi
push 0x64
mov byte [esp + 0x62c], 1
mov dword [ebp + 0x64], esi
call sub.MFC42.DLL_operatornew
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
cmp esi, ebx
mov byte [esp + 0x628], 3
je 0x45cfab
mov edx, dword [ebp + 0x6c]
xor eax, eax
xor ecx, ecx
mov ax, word [edx + 0xfc]
mov cx, word [edx + 0xfe]
push eax
push ecx
mov ecx, esi
call fcn.0047e430
mov dword [esi], 0x4a0398
mov dword [esi + 0x54], ebx
mov dword [esi + 0x5c], ebx
mov dword [esi + 0x58], ebx
mov dword [esi + 0x60], ebx
jmp 0x45cfad
xor esi, esi
mov edi, dword [ebp + 0x6c]
mov dword [ebp + 0x68], esi
xor ecx, ecx
mov byte [esp + 0x628], 1
cmp word [edi + 0xfe], bx
jbe 0x45d058
mov esi, dword [esp + 0x634]
mov edx, dword [esp + 0x630]
xor eax, eax
cmp word [edi + 0xfc], bx
jbe 0x45d047
jmp 0x45cfe7
xor ebx, ebx
mov edi, dword [ebp + 0x64]
mov dword [esp + 0x10], ebx
mov bx, word [edx]
inc eax
mov edi, dword [edi + 8]
add edx, 2
add esi, 2
mov edi, dword [edi + ecx*4]
mov word [edi + eax*2 - 2], bx
mov edi, dword [ebp + 0x68]
mov bx, word [esi - 2]
mov edi, dword [edi + 8]
mov edi, dword [edi + ecx*4]
mov word [edi + eax*2 - 2], bx
mov di, word [esi - 2]
mov word [esp + 0x10], di
mov di, word [edx - 2]
mov word [esp + 0x12], di
mov edi, dword [ebp + 8]
mov ebx, dword [esp + 0x10]
mov edi, dword [edi + ecx*4]
mov dword [edi + eax*4 - 4], ebx
mov edi, dword [ebp + 0x6c]
xor ebx, ebx
mov bx, word [edi + 0xfc]
cmp eax, ebx
jl 0x45cfe5
xor ebx, ebx
mov edi, dword [ebp + 0x6c]
xor eax, eax
inc ecx
mov ax, word [edi + 0xfe]
cmp ecx, eax
jl 0x45cfd8
mov eax, dword [ebp + 0x6c]
xor ecx, ecx
mov dword [ebp + 0x9c], 0x457ff000
xor edx, edx
mov cx, word [eax + 0xf8]
mov dword [ebp + 0x88], ecx
mov dx, word [eax + 0xfe]
xor ecx, ecx
mov cx, word [eax + 0xf8]
lea edx, [edx + ecx - 1]
xor ecx, ecx
mov dword [ebp + 0x8c], edx
mov cx, word [eax + 0xfa]
mov dword [ebp + 0x90], ecx
xor edx, edx
mov dx, word [eax + 0xfc]
xor ecx, ecx
mov cx, word [eax + 0xfa]
lea edx, [edx + ecx - 1]
mov dword [ebp + 0x94], edx
mov cl, byte [eax + 0xf6]
cmp cl, 1
jae 0x45d0cd
mov byte [eax + 0xf6], 0x10
mov ecx, ebp
call fcn.0045be60
cmp dword [esp + 0x640], 1
jne 0x45d34f
mov eax, dword [ebp + 0x24]
cmp eax, 2
jne 0x45d1de
mov ecx, dword [ebp + 0x28]
cmp ecx, ebx
jle 0x45d1de
mov eax, dword [ebp + 4]
shl ecx, 2
push ecx
mov dword [esp + 0x1c], eax
call sub.MFC42.DLL_operatornew
mov edx, eax
add esp, 4
cmp edx, ebx
mov dword [esp + 0x14], edx
jne 0x45d148
mov edx, dword [ebp + 0x28]
lea eax, [esp + 0x20]
push edx
push str.In_To_RowOrder__for:
push str._s:__d
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea ecx, [esp + 0x20]
push 0xa24
push str.C:RapiscanSecure1000TSA_requalImageProcessingSecureIp.h
push ecx
push 2
jmp 0x45d207
mov ecx, dword [ebp + 0x18]
xor eax, eax
imul ecx, dword [ebp + 0x1c]
shl ecx, 2
mov esi, ecx
mov edi, edx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
mov dword [esp + 0x10], ebx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [ebp + 0x1c]
xor edi, edi
cmp eax, ebx
jle 0x45d1b3
mov esi, dword [esp + 0x18]
mov ecx, dword [ebp + 0x18]
xor eax, eax
cmp ecx, ebx
jle 0x45d1ab
mov ecx, dword [esp + 0x10]
lea ecx, [edx + ecx*4]
mov edx, eax
add ecx, 4
imul edx, dword [ebp + 0x1c]
add edx, edi
inc eax
mov edx, dword [esi + edx*4]
mov dword [ecx - 4], edx
mov edx, dword [esp + 0x10]
inc edx
mov dword [esp + 0x10], edx
mov edx, dword [ebp + 0x18]
cmp eax, edx
jl 0x45d185
mov edx, dword [esp + 0x14]
mov eax, dword [ebp + 0x1c]
inc edi
cmp edi, eax
jl 0x45d175
mov ecx, dword [ebp + 0x18]
mov edi, dword [ebp + 4]
imul ecx, dword [ebp + 0x1c]
shl ecx, 2
mov eax, ecx
mov esi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call sub.MFC42.DLL_operatordelete
add esp, 4
mov dword [ebp + 0x44], ebx
jmp 0x45d211
mov ecx, dword [ebp + 0x28]
push ecx
push eax
push str._s_Dim__d__len__d
push 0x4f3230
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0xa1b
push str.C:RapiscanSecure1000TSA_requalImageProcessingSecureIp.h
push 0x4f3230
push 0xa
mov ecx, 0x4f2950
call fcn.004778e0
mov ebx, dword [ebp + 0x64]
mov eax, dword [ebx + 0x24]
cmp eax, 2
jne 0x45d314
mov ecx, dword [ebx + 0x28]
test ecx, ecx
jle 0x45d314
mov edx, dword [ebx + 4]
lea eax, [ecx + ecx]
push eax
mov dword [esp + 0x18], edx
call sub.MFC42.DLL_operatornew
mov edx, eax
add esp, 4
test edx, edx
mov dword [esp + 0x18], edx
jne 0x45d27a
mov ecx, dword [ebx + 0x28]
lea edx, [esp + 0x20]
push ecx
push str.In_To_RowOrder__for:
push str._s:__d
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
lea eax, [esp + 0x20]
push 0xa24
push str.C:RapiscanSecure1000TSA_requalImageProcessingSecureIp.h
push eax
push 2
jmp 0x45d33d
mov ecx, dword [ebx + 0x1c]
xor eax, eax
imul ecx, dword [ebx + 0x18]
shl ecx, 1
mov esi, ecx
mov edi, edx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [ebx + 0x1c]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x10], edi
jle 0x45d2e6
mov esi, dword [esp + 0x14]
mov ecx, dword [ebx + 0x18]
xor eax, eax
test ecx, ecx
jle 0x45d2de
mov ecx, dword [esp + 0x10]
lea ecx, [edx + ecx*2]
mov edx, dword [ebx + 0x1c]
add ecx, 2
imul edx, eax
add edx, edi
inc eax
mov dx, word [esi + edx*2]
mov word [ecx - 2], dx
mov edx, dword [esp + 0x10]
inc edx
mov dword [esp + 0x10], edx
mov edx, dword [ebx + 0x18]
cmp eax, edx
jl 0x45d2b6
mov edx, dword [esp + 0x18]
mov eax, dword [ebx + 0x1c]
inc edi
cmp edi, eax
jl 0x45d2a6
mov ecx, dword [ebx + 0x1c]
mov edi, dword [ebx + 4]
imul ecx, dword [ebx + 0x18]
shl ecx, 1
mov eax, ecx
mov esi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call sub.MFC42.DLL_operatordelete
add esp, 4
mov dword [ebx + 0x44], 0
jmp 0x45d347
mov ecx, dword [ebx + 0x28]
push ecx
push eax
push str._s_Dim__d__len__d
push 0x4f3230
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x10
push 0xa1b
push str.C:RapiscanSecure1000TSA_requalImageProcessingSecureIp.h
push 0x4f3230
push 0xa
mov ecx, 0x4f2950
call fcn.004778e0
mov ecx, dword [ebp + 0x68]
call fcn.0047a080
mov ecx, dword [esp + 0x620]
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x61c
ret 0x18