Function at 0x100070b8
Capabilities:
Get common file path
Set current directory

Disassembly:
mov eax, 0x10134100
call fcn.1007db34
sub esp, 0x900
push ebx
call fcn.10050fd7
xor ebx, ebx
cmp dword [0x101ad64c], ebx
jne 0x10007524
lea eax, [ebp - 0x18]
push eax
call fcn.1005183e
pop ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], ebx
cmp dword [eax - 8], ebx
jne 0x10007102
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.10094cc0
jmp 0x10007524
push esi
push edi
push eax
call fcn.1005e5ae
pop ecx
mov edi, 0x101ad1f8
push ebx
mov ecx, edi
call fcn.1004bccb
test eax, eax
je 0x100073c5
lea eax, [ebp - 0x1c]
mov ecx, edi
push eax
call fcn.1005014c
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 1
cmp dword [eax - 8], ebx
je 0x10007142
push eax
mov ecx, 0x101ad0a8
call fcn.10022822
push 1
mov ecx, 0x101ad158
pop esi
mov dword [0x101a9b98], esi
call fcn.10057d11
test eax, eax
je 0x100071c8
push dword [0x101ad648]
lea ecx, [ebp - 0x10]
call fcn.10094520
push 0x10160bc0
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 2
call fcn.10095910
push str.DtsFrame32.dll
lea ecx, [ebp - 0x10]
call fcn.10095910
push dword [ebp - 0x10]
call fcn.1005eb9d
test eax, eax
pop ecx
je 0x100071bc
push ebx
push esi
call fcn.1005ed98
pop ecx
pop ecx
call fcn.1005ee0c
cmp dword [0x101b04b8], ebx
je 0x100071bc
push str.Init_DtsFrame__r_n
push str.SafeNet
push 4
call fcn.1007bb15
add esp, 0xc
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call fcn.10094cc0
mov ecx, 0x10b
xor eax, eax
lea edi, [ebp - 0x468]
mov dword [ebp - 0x46c], ebx
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x24]
mov dword [ebp - 0x28], ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov ecx, 0x127
xor eax, eax
lea edi, [ebp - 0x908]
mov dword [ebp - 0x90c], ebx
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x38]
mov dword [ebp - 0x3c], ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x46c]
mov esi, 0x101a9bf0
push eax
mov ecx, esi
call fcn.10009de0
push 1
pop edi
cmp dword [ebp - 0x46c], edi
je 0x1000722b
cmp dword [ebp - 0x46c], 3
jne 0x10007231
mov dword [ebp - 0x46c], edi
lea eax, [ebp - 0x28]
mov ecx, esi
push eax
call fcn.10009e08
lea eax, [ebp - 0x90c]
mov ecx, esi
push eax
call fcn.10009e2f
cmp dword [ebp - 0x46c], edi
je 0x10007263
cmp dword [ebp - 0x28], ebx
jne 0x10007263
cmp dword [ebp - 0x90c], ebx
je 0x100073b3
mov ecx, 0x101ad158
call fcn.10058169
test eax, eax
jne 0x100073b3
push dword [0x101ad648]
lea ecx, [ebp - 0x14]
call fcn.10094520
push 0x5c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call fcn.100985e0
push 0x10160bc0
lea ecx, [ebp - 0x14]
call fcn.10095910
push str.TFloatTip.dll
lea ecx, [ebp - 0x14]
call fcn.10095910
push dword [ebp - 0x14]
call fcn.10004376
pop ecx
call fcn.1000477b
cmp dword [ebp - 0x46c], edi
jne 0x100072eb
mov eax, dword [0x101ad3c0]
mov dword [ebp - 0x3c], 0xaddcbc12
not eax
and eax, edi
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x3c]
push eax
call fcn.100048aa
lea eax, [ebp - 0x46c]
push eax
call fcn.10004892
pop ecx
pop ecx
cmp dword [0x101b04b8], ebx
je 0x10007383
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x178]
push dword [ebp - 0x114]
push dword [ebp - 0x458]
push eax
lea eax, [ebp - 0x1dc]
push eax
push dword [ebp - 0x1e8]
push dword [ebp - 0x45c]
push dword [ebp - 0x14]
push 0x426
push str._InstallHookAPI__Line:_d__Module__s__CreatorFlag__08x__IP__08x__HostName__s__UserName__s__ReaderFlag__08x__IP__08x__HostName__s__UserName__s_
push str.floattip
push 4
call fcn.1007bb15
add esp, 0x34
cmp dword [0x101b04b8], ebx
je 0x10007383
movzx eax, byte [ebp - 0x69c]
push eax
lea eax, [ebp - 0x908]
push dword [ebp - 0x694]
push eax
push dword [ebp - 0x90c]
push 0x433
push str._InstallHookAPI__Line:_d__bValid:_d__wszTip:_s__clrTip:_x__btTransparent:_x
push str.wndtitle
push 4
call fcn.1007bb15
add esp, 0x20
cmp dword [ebp - 0x28], ebx
je 0x10007392
lea eax, [ebp - 0x24]
push eax
call fcn.1000481d
pop ecx
cmp dword [ebp - 0x90c], ebx
je 0x100073a7
lea eax, [ebp - 0x908]
push eax
call fcn.1000491f
pop ecx
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.10094cc0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], bl
call fcn.10094cc0
mov edi, 0x101ad1f8
jmp 0x100073cb
mov dword [0x101a9b98], ebx
mov eax, dword [0x101ad3ac]
mov ecx, dword [0x101ad3b0]
push eax
push ecx
push dword [0x101a9b98]
mov dword [0x101a9ba0], eax
mov dword [0x101a9b9c], ecx
call fcn.1000754f
add esp, 0xc
mov ecx, edi
mov dword [0x101ad64c], eax
push ebx
call fcn.1004bccb
test eax, eax
je 0x100074b1
lea eax, [ebp - 0x10]
mov ecx, edi
push eax
call fcn.10007531
mov eax, dword [ebp - 0x10]
mov byte [ebp - 4], 4
cmp dword [eax - 8], ebx
je 0x100074a6
push 0x1019f4bc
lea ecx, [ebp - 0x14]
call fcn.10094520
mov esi, 0x104
lea ecx, [ebp - 0x14]
push esi
mov byte [ebp - 4], 5
call fcn.10095990
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x14]
call fcn.10095a60
push dword [ebp - 0x10]
push dword [ebp - 0x14]
call fcn.1007eb9e
pop ecx
cmp eax, ebx
pop ecx
je 0x1000749a
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
cmp dword [0x101b04b8], ebx
je 0x1000749a
push eax
mov ecx, 0x101ad158
push dword [ebp - 0x10]
push dword [ebp - 0x14]
call fcn.100aa1c0
push eax
push str.__s_SetCurrentDirectory__s___s__d
push 0x1016324c
push 4
call fcn.1007bb15
add esp, 0x1c
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call fcn.10094cc0
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call fcn.10094cc0
mov ecx, 0x101ad158
call fcn.10057bc2
test eax, eax
je 0x10007516
mov ecx, edi
call fcn.1005017c
test eax, eax
je 0x10007516
push dword [0x101ad648]
lea ecx, [ebp - 0x10]
call fcn.10094520
mov byte [ebp - 4], 6
call fcn.100bc710
test eax, eax
je 0x100074ec
push str.OeaDDERouter64.exe
jmp 0x100074f1
push str.OeaDDERouter.exe
lea ecx, [ebp - 0x10]
call fcn.10095910
push ebx
push ebx
push 0x1019f4bc
push dword [ebp - 0x10]
call fcn.100aa530
add esp, 0x10
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call fcn.10094cc0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.10094cc0
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
leave
ret