Function at 0x100046d0
Capabilities:
Get common file path
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xe4
push ebx
mov ebx, ecx
push esi
push edi
lea ecx, [ebx + 0xc]
mov byte [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 1
call fcn.10004ff0
lea ecx, [ebx + 0xdc]
call fcn.10004f00
push 1
sub esp, 0x18
lea ecx, [ebx + 0x128]
mov edx, esp
xorps xmm0, xmm0
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 6
mov dword [edx + 0x14], 0xf
mov eax, dword [str.aimbot]
mov dword [edx], eax
movzx eax, word [0x10119298]
mov word [edx + 4], ax
mov byte [edx + 6], 0
call fcn.10095780
push 1
mov dword [ebx + 0x154], 0x3f800000
lea ecx, [ebx + 0x18c]
mov dword [ebx + 0x158], 0x3f800000
sub esp, 0x18
mov edx, esp
mov dword [ebx + 0x15c], 0x3f800000
mov dword [ebx + 0x160], 0x3e800000
xorps xmm0, xmm0
mov dword [ebx + 0x164], 0x3f19999a
mov word [ebx + 0x168], 0
mov byte [ebx + 0x16a], 1
mov dword [ebx + 0x16c], 0x1000000
mov byte [ebx + 0x170], 1
mov dword [ebx + 0x174], 0
mov dword [ebx + 0x178], 0
mov dword [ebx + 0x17c], 0
mov dword [ebx + 0x180], 0x1010000
mov dword [ebx + 0x184], 0
mov dword [ebx + 0x188], 0
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0xa
mov dword [edx + 0x14], 0xf
movq xmm0, qword [str.triggerbot]
movq qword [edx], xmm0
movzx eax, word [0x101192a4]
mov word [edx + 8], ax
mov byte [edx + 0xa], 0
call fcn.10095780
push 1
sub esp, 0x18
mov word [ebx + 0x1b8], 0x100
mov edx, esp
mov byte [ebx + 0x1ba], 0
mov dword [ebx + 0x1bc], 0
lea ecx, [ebx + 0x1c0]
xorps xmm0, xmm0
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 4
mov dword [edx + 0x14], 0xf
mov eax, dword [str.auto]
mov dword [edx], eax
mov byte [edx + 4], 0
call fcn.10095780
lea ecx, [ebx + 0x1fc]
mov byte [ebx + 0x1ec], 0
mov dword [ebx + 0x1f0], 0xc8
mov byte [ebx + 0x1f4], 0
mov dword [ebx + 0x1f8], 0x320
call fcn.10004f90
lea ecx, [ebx + 0x2dc]
call fcn.10004f90
lea ecx, [ebx + 0x3bc]
call fcn.10004f90
lea ecx, [ebx + 0x49c]
call fcn.10004f90
lea ecx, [ebx + 0x57c]
call fcn.10004f90
lea ecx, [ebx + 0x65c]
call fcn.10004f90
lea ecx, [ebx + 0x73c]
call fcn.10004f90
mov dword [ebx + 0x81c], 0
push 0x100
mov dword [ebx + 0x820], 0
mov dword [ebx + 0x824], 0
call fcn.100e91db
add esp, 4
lea ecx, [ebx + 0x828]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [ebx + 0x820], eax
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [ebx + 0x834], 7
mov dword [ebx + 0x838], 8
mov dword [ebx + 0x81c], 0x3f800000
push dword [ebx + 0x820]
push 0x10
call fcn.10016340
push 1
sub esp, 0x18
lea ecx, [ebx + 0x83c]
mov edx, esp
xorps xmm0, xmm0
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 5
mov dword [edx + 0x14], 0xf
mov eax, dword [str.chams]
mov dword [edx], eax
movzx eax, byte [0x101192b4]
mov byte [edx + 4], al
mov byte [edx + 5], 0
call fcn.10095780
mov dword [ebx + 0x868], 0
push 0x38
mov dword [ebx + 0x86c], 0
mov dword [ebx + 0x870], 0
call fcn.100e91db
add esp, 4
lea ecx, [ebx + 0x874]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [ebx + 0x86c], eax
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [ebx + 0x880], 7
mov dword [ebx + 0x884], 8
mov dword [ebx + 0x868], 0x3f800000
push dword [ebx + 0x86c]
push 0x10
call fcn.10016340
mov dword [ebx + 0x888], 0
push 0x68
mov dword [ebx + 0x88c], 0
mov dword [ebx + 0x890], 0
call fcn.100e91db
add esp, 4
lea ecx, [ebx + 0x894]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [ebx + 0x88c], eax
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [ebx + 0x8a0], 7
mov dword [ebx + 0x8a4], 8
mov dword [ebx + 0x888], 0x3f800000
push dword [ebx + 0x88c]
push 0x10
call fcn.10016340
mov dword [ebx + 0x8a8], 0
mov dword [ebx + 0x8ac], 0
mov dword [ebx + 0x8b0], 0
push 0x7c
call fcn.100e91db
add esp, 4
lea ecx, [ebx + 0x8b4]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [ebx + 0x8ac], eax
mov dword [ecx], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 0
mov dword [ebx + 0x8c0], 7
mov dword [ebx + 0x8c4], 8
mov dword [ebx + 0x8a8], 0x3f800000
push dword [ebx + 0x8ac]
push 0x10
call fcn.10016340
push 1
sub esp, 0x18
lea ecx, [ebx + 0x8c8]
mov edx, esp
xorps xmm0, xmm0
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 4
mov dword [edx + 0x14], 0xf
mov eax, dword [str.glow]
mov dword [edx], eax
mov byte [edx + 4], 0
call fcn.10095780
lea ecx, [ebx + 0x8f4]
call fcn.100052a0
push 1
sub esp, 0x18
lea ecx, [ebx + 0x994]
mov edx, esp
xorps xmm0, xmm0
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 3
mov dword [edx + 0x14], 0xf
movzx eax, word [0x101192c0]
mov word [edx], ax
movzx eax, byte [0x101192c2]
mov byte [edx + 2], al
mov byte [edx + 3], 0
call fcn.10095780
lea ecx, [ebx + 0x9c0]
call fcn.10005680
lea ecx, [ebx + 0xab8]
mov dword [ebx + 0xaac], 0
mov dword [ebx + 0xab0], 0
mov dword [ebx + 0xab4], 0
call fcn.100058f0
mov eax, dword [str.Default]
lea ecx, [ebx + 0xcb8]
mov dword [esp + 0x20], eax
lea edx, [esp + 0x20]
movzx eax, word [0x101192c8]
xorps xmm0, xmm0
mov word [esp + 0x24], ax
movzx eax, byte [0x101192ca]
mov byte [esp + 0x26], al
lea eax, [esp + 0x38]
push ecx
push eax
push edx
movlpd qword [esp + 0x34], xmm0
mov dword [esp + 0x3c], 7
mov dword [esp + 0x40], 0xf
mov byte [esp + 0x33], 0
call fcn.10012660
mov edi, 1
lea esi, [esp + 0x38]
mov ecx, dword [esi - 4]
lea esi, [esi - 0x18]
dec edi
cmp ecx, 0x10
jb 0x10004c2b
mov eax, dword [esi]
inc ecx
cmp ecx, 0x1000
jb 0x10004c21
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10004ef1
mov eax, edx
push ecx
push eax
call fcn.100e94f6
add esp, 8
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
test edi, edi
jne 0x10004bf4
mov eax, dword [str.Default]
lea ecx, [ebx + 0xcc4]
mov dword [esp + 0x38], eax
lea edx, [esp + 0x38]
mov ax, word [0x101192c8]
xorps xmm0, xmm0
mov word [esp + 0x3c], ax
mov al, byte [0x101192ca]
mov byte [esp + 0x3e], al
lea eax, [esp + 0x50]
push ecx
push eax
push edx
movlpd qword [esp + 0x4c], xmm0
mov dword [esp + 0x54], 7
mov dword [esp + 0x58], 0xf
mov byte [esp + 0x4b], 0
call fcn.10012660
mov edi, 1
lea esi, [esp + 0x50]
nop word [eax + eax]
mov ecx, dword [esi - 4]
lea esi, [esi - 0x18]
dec edi
cmp ecx, 0x10
jb 0x10004cd7
mov eax, dword [esi]
inc ecx
cmp ecx, 0x1000
jb 0x10004ccd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10004ef1
mov eax, edx
push ecx
push eax
call fcn.100e94f6
add esp, 8
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
test edi, edi
jne 0x10004ca0
mov dword [ebx + 0xcd0], edi
push 0x2c
mov dword [ebx + 0xcd4], edi
mov dword [ebx + 0xcd8], edi
call fcn.100e91db
add esp, 4
lea ecx, [ebx + 0xcdc]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [ebx + 0xcd4], eax
mov dword [ecx], edi
mov dword [ecx + 4], edi
mov dword [ecx + 8], edi
mov dword [ebx + 0xce8], 7
mov dword [ebx + 0xcec], 8
mov dword [ebx + 0xcd0], 0x3f800000
push dword [ebx + 0xcd4]
push 0x10
call fcn.10016340
lea esi, [ebx + 0xcf0]
xor eax, eax
xorps xmm0, xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 7
mov word [esi], ax
mov dword [ebx + 0xd08], eax
mov dword [ebx + 0xd0c], eax
mov dword [ebx + 0xd10], eax
lea eax, [esp + 0x1c]
push eax
push edi
push edi
push 0x10111370
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
js 0x10004e35
mov edx, dword [esp + 0x1c]
mov ecx, edx
mov byte [esp + 0x18], 0
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10004da1
push dword [esp + 0x18]
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [esp + 0x5c]
call fcn.10023fd0
lea eax, [esp + 0x50]
cmp esi, eax
je 0x10004def
mov ecx, esi
call fcn.10014d80
movups xmm0, xmmword [esp + 0x50]
xor eax, eax
mov ecx, 7
mov word [esp + 0x50], ax
movups xmmword [esi], xmm0
movq xmm0, qword [esp + 0x60]
movq qword [esi + 0x10], xmm0
jmp 0x10004df3
mov ecx, dword [esp + 0x64]
cmp ecx, 8
jb 0x10004e2b
mov edx, dword [esp + 0x50]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10004e21
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10004ef1
push ecx
push edx
call fcn.100e94f6
add esp, 8
push dword [esp + 0x1c]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
push 4
push str.Seth
call fcn.100e75e6
mov edx, eax
lea ecx, [esp + 0x80]
call fcn.10002b70
lea eax, [esp + 0x78]
mov ecx, esi
push eax
call fcn.10002d70
lea ecx, [esp + 0x78]
call fcn.10014d80
mov ecx, ebx
call fcn.100106b0
push 0
push str.default.json
mov ecx, ebx
call fcn.10008f70
xor eax, eax
mov byte [esp + 0xa7], 0
push eax
lea esi, [ebx + 0xcc4]
mov word [esp + 0xb0], ax
push esi
push 0x100045f0
lea eax, [esp + 0x9c]
mov byte [esp + 0xb7], 0
push eax
push 0
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EnumFontFamiliesExW]
mov ecx, dword [esi]
mov eax, 0x2aaaaaab
mov edi, dword [ebx + 0xcc8]
add ecx, 0x18
mov esi, edi
mov byte [esp + 0x18], 0
push dword [esp + 0x18]
sub esi, ecx
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, edi
push eax
call fcn.10024100
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.100f1c2a
int3