Function at 0x100029f0
Capabilities:
Get common file path
Set current directory

Disassembly:
sub esp, 0xc08
lea eax, [esp + 8]
push ebx
push ebp
push esi
push edi
push 0x100
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [esp + 0x818]
lea edx, [esp + 0xa18]
push ecx
lea eax, [esp + 0x21c]
push edx
lea ecx, [esp + 0x18]
push eax
lea edx, [esp + 0x24]
push ecx
push edx
call fcn.1000975b
push 0
lea eax, [esp + 0x230]
push str.dll_
lea ecx, [esp + 0x2c]
push eax
lea edx, [esp + 0x638]
push ecx
push edx
call fcn.100096a5
mov eax, dword [esp + 0xc44]
add esp, 0x28
cmp eax, 1
jne 0x10002bc4
lea eax, [esp + 0x418]
push eax
push 0x100
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov ebp, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea ecx, [esp + 0x618]
push ecx
call ebp
push 0x1002515c
lea edx, [esp + 0x21c]
push str.dllSSAPI
lea eax, [esp + 0x18]
push edx
lea ecx, [esp + 0x24]
push eax
push ecx
call fcn.100096a5
add esp, 0x14
lea edx, [esp + 0x18]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ebx, eax
mov esi, 0xfffffffe
test ebx, ebx
je 0x10002bad
push str.ShapeShifter
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x10002ba6
mov ecx, dword [esp + 0xcf4]
mov edx, dword [esp + 0xcf0]
push ecx
mov ecx, dword [esp + 0xcf0]
push edx
mov edx, dword [esp + 0xcf0]
push ecx
push edx
sub esp, 0x20
mov ecx, 8
lea esi, [esp + 0xcf8]
mov edi, esp
mov edx, dword [esp + 0xc78]
sub esp, 0x60
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x18
lea esi, [esp + 0xcf8]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0xcdc]
push ecx
mov ecx, dword [esp + 0xcf8]
push edx
mov edx, dword [esp + 0xcf8]
push ecx
mov ecx, dword [esp + 0xce0]
push edx
mov edx, dword [esp + 0xce0]
push ecx
mov ecx, dword [esp + 0xce0]
push edx
mov edx, dword [esp + 0xd04]
push ecx
mov ecx, dword [esp + 0xd04]
push edx
mov edx, dword [esp + 0xd04]
push ecx
mov ecx, dword [esp + 0xd04]
push edx
mov edx, dword [esp + 0xcf0]
push ecx
mov ecx, dword [esp + 0xcf0]
push edx
mov edx, dword [esp + 0xcf0]
push ecx
mov ecx, dword [esp + 0xcf0]
push edx
mov edx, dword [esp + 0xcf0]
push ecx
push edx
call eax
mov esi, eax
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea eax, [esp + 0x418]
push eax
call ebp
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc08
ret
cmp eax, 2
jne 0x10002ccb
lea ecx, [esp + 0x418]
push ecx
push 0x100
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov ebp, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
lea edx, [esp + 0x618]
push edx
call ebp
push 0x1002515c
lea eax, [esp + 0x21c]
push str.dllSSAPI
lea ecx, [esp + 0x18]
push eax
lea edx, [esp + 0x24]
push ecx
push edx
call fcn.100096a5
add esp, 0x14
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ecx, dword [esp + 0xcf4]
mov edx, dword [esp + 0xcf0]
mov ebx, eax
mov eax, dword [esp + 0xcec]
push ecx
mov ecx, dword [esp + 0xcec]
push edx
push eax
push ecx
mov edx, dword [esp + 0xc74]
sub esp, 0x20
mov eax, dword [esp + 0xc90]
mov ecx, 8
lea esi, [esp + 0xcf8]
mov edi, esp
sub esp, 0x60
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x18
lea esi, [esp + 0xcf8]
mov edi, esp
push edx
mov edx, dword [esp + 0xcc8]
push eax
mov eax, dword [esp + 0xcc8]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0xcd0]
push ecx
mov ecx, dword [esp + 0xcc8]
push edx
mov edx, dword [esp + 0xcc8]
push eax
push ecx
push edx
push ebx
call fcn.100010f0
add esp, 0xb0
mov esi, eax
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea eax, [esp + 0x418]
push eax
call ebp
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc08
ret
mov esi, dword [esp + 0xc2c]
mov edi, dword [esp + 0xc28]
mov ecx, dword [esp + 0xc38]
mov ebx, dword [esp + 0xc34]
mov ebp, dword [esp + 0xc30]
push esi
push edi
push ecx
push ebx
push ebp
call fcn.10004370
mov edx, dword [esp + 0xd08]
mov eax, dword [esp + 0xd00]
mov ecx, dword [esp + 0xcfc]
add esp, 0x14
fld qword [esp + 0xcc8]
push edx
mov edx, dword [esp + 0xc48]
push eax
mov eax, dword [esp + 0xc44]
push ecx
mov ecx, dword [esp + 0xce8]
fmul qword [0x1001f588]
push edx
mov edx, dword [esp + 0xce8]
push eax
push ebx
push ebp
mov eax, dword [esp + 0xc88]
push esi
push edi
push ecx
mov ecx, dword [esp + 0xc90]
push edx
sub esp, 8
fstp qword [esp]
push eax
push ecx
call fcn.100074c0
add esp, 0x3c
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc08
ret