Function at 0x670ca5f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x6713e6a9
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
mov eax, dword [0x67221378]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov dword [esp + 0x24], 0
mov dword [esp + 0xc], sym.QtCore4.dll_struct_QString::Data_QString::shared_null
mov eax, sym.QtCore4.dll_struct_QString::Data_QString::shared_null
mov ecx, 1
lock xadd dword [eax], ecx
mov dword [esp + 0x38], 1
call fcn.670c7bc0
cmp dword [0x672215ec], 0
je 0x670ca708
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea edx, [esp + 0x10]
push edx
push 8
push eax
mov dword [esp + 0x1c], 0
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x670ca708
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push eax
push 0
push ecx
mov dword [esp + 0x20], 0
call dword [0x672215ec]
test eax, eax
jne 0x670ca6fd
mov eax, dword [esp + 0x14]
test eax, eax
je 0x670ca6fd
xor ecx, ecx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.6712fecc
mov ecx, dword [esp + 0x14]
add esp, 4
mov esi, eax
lea eax, [esp + 0x14]
push eax
push esi
push ecx
call dword [0x672215ec]
test eax, eax
je 0x670ca6f4
push 0xffffffffffffffff
lea edx, [esp + 0x24]
push esi
push edx
call sym.QtCore4.dll_public:_static_class_QString___cdecl_QString::fromUcs2_unsigned_short_int_const___int_
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x3c], 2
call fcn.6705a9c0
lea ecx, [esp + 0x20]
mov byte [esp + 0x38], 1
call sym.QtCore4.dll_public:_void___thiscall_QString::destructor_void_
push esi
call sub.MSVCR90.dll_void___cdecl_operator_delete___void__
add esp, 4
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0xc]
cmp dword [ecx + 8], 0
je 0x670ca727
lea edx, [esp + 0xc]
push edx
call sym.QtCore4.dll_public:_static_bool___cdecl_QFile::exists_class_QString_const__
add esp, 4
test al, al
jne 0x670ca9c6
lea eax, [esp + 0x10]
push str.USERPROFILE
push eax
call sym.QtCore4.dll_class_QByteArray___cdecl_qgetenv_char_const__
mov ecx, dword [eax]
mov eax, dword [ecx + 0xc]
push 0xffffffffffffffff
push eax
lea edx, [esp + 0x24]
mov bl, 3
push edx
mov byte [esp + 0x4c], bl
call sym.QtCore4.dll_public:_static_class_QString___cdecl_QString::fromLocal8Bit_char_const___int_
add esp, 0x14
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x3c], 4
call fcn.6705a9c0
mov eax, dword [esp + 0x14]
mov byte [esp + 0x38], bl
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x670ca77e
mov edx, dword [esp + 0x14]
push edx
call sym.QtCore4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
mov eax, dword [esp + 0x10]
mov byte [esp + 0x38], 1
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x670ca79d
mov edx, dword [esp + 0x10]
push edx
call sym.QtCore4.dll_void___cdecl_qFree_void__
add esp, 4
mov eax, dword [esp + 0xc]
cmp dword [eax + 8], 0
je 0x670ca7bc
lea ecx, [esp + 0xc]
push ecx
call sym.QtCore4.dll_public:_static_bool___cdecl_QFile::exists_class_QString_const__
add esp, 4
test al, al
jne 0x670ca9c6
lea edx, [esp + 0x20]
push str.HOMEPATH
push edx
call sym.QtCore4.dll_class_QByteArray___cdecl_qgetenv_char_const__
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x2c]
push ecx
mov byte [esp + 0x4c], 5
call sym.QtCore4.dll_public:_static_class_QString___cdecl_QString::fromLocal8Bit_char_const___int_
mov esi, eax
lea edx, [esp + 0x2c]
push str.HOMEDRIVE
push edx
mov byte [esp + 0x54], 6
call sym.QtCore4.dll_class_QByteArray___cdecl_qgetenv_char_const__
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x34]
mov bl, 7
push ecx
mov byte [esp + 0x60], bl
call sym.QtCore4.dll_public:_static_class_QString___cdecl_QString::fromLocal8Bit_char_const___int_
add esp, 0x28
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x3c], 8
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], esi
call fcn.67019290
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x3c], 9
call fcn.6705a9c0
mov ecx, dword [esp + 0x14]
mov byte [esp + 0x38], 8
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x670ca860
mov eax, dword [esp + 0x14]
push eax
call sym.QtCore4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x38], bl
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x670ca87e
mov eax, dword [esp + 0x10]
push eax
call sym.QtCore4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
mov ecx, dword [esp + 0x18]
mov byte [esp + 0x38], 6
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x670ca89d
mov eax, dword [esp + 0x18]
push eax
call sym.QtCore4.dll_void___cdecl_qFree_void__
add esp, 4
mov ecx, dword [esp + 0x1c]
mov byte [esp + 0x38], 5
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x670ca8bc
mov eax, dword [esp + 0x1c]
push eax
call sym.QtCore4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
mov ecx, dword [esp + 0x20]
mov byte [esp + 0x38], 1
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x670ca8db
mov eax, dword [esp + 0x20]
push eax
call sym.QtCore4.dll_void___cdecl_qFree_void__
add esp, 4
mov ecx, dword [esp + 0xc]
cmp dword [ecx + 8], 0
je 0x670ca8fa
lea edx, [esp + 0xc]
push edx
call sym.QtCore4.dll_public:_static_bool___cdecl_QFile::exists_class_QString_const__
add esp, 4
test al, al
jne 0x670ca9c6
lea eax, [esp + 0x1c]
push str.HOME
push eax
call sym.QtCore4.dll_class_QByteArray___cdecl_qgetenv_char_const__
mov ecx, dword [eax]
mov eax, dword [ecx + 0xc]
push 0xffffffffffffffff
push eax
lea edx, [esp + 0x30]
mov bl, 0xa
push edx
mov byte [esp + 0x4c], bl
call sym.QtCore4.dll_public:_static_class_QString___cdecl_QString::fromLocal8Bit_char_const___int_
add esp, 0x14
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x3c], 0xb
call fcn.6705a9c0
mov eax, dword [esp + 0x20]
mov byte [esp + 0x38], bl
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x670ca951
mov edx, dword [esp + 0x20]
push edx
call sym.QtCore4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x38], 1
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x670ca970
mov edx, dword [esp + 0x1c]
push edx
call sym.QtCore4.dll_void___cdecl_qFree_void__
add esp, 4
mov eax, dword [esp + 0xc]
cmp dword [eax + 8], 0
je 0x670ca98b
lea ecx, [esp + 0xc]
push ecx
call sym.QtCore4.dll_public:_static_bool___cdecl_QFile::exists_class_QString_const__
add esp, 4
test al, al
jne 0x670ca9c6
lea edx, [esp + 0x20]
push edx
call sym.QtCore4.dll_public:_static_class_QString___cdecl_QFSFileEngine::rootPath_void_
add esp, 4
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x3c], 0xc
call fcn.6705a9c0
mov eax, dword [esp + 0x20]
mov byte [esp + 0x38], 1
or ecx, 0xffffffff
lock xadd dword [eax], ecx
jne 0x670ca9c6
mov edx, dword [esp + 0x20]
push edx
call sym.QtCore4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
mov esi, dword [esp + 0x40]
lea eax, [esp + 0xc]
push eax
push esi
call sym.QtCore4.dll_public:_static_class_QString___cdecl_QDir::fromNativeSeparators_class_QString_const__
add esp, 8
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x24], 1
mov byte [esp + 0x38], 0
or edx, 0xffffffff
lock xadd dword [ecx], edx
jne 0x670ca9ff
mov eax, dword [esp + 0xc]
push eax
call sym.QtCore4.dll_private:_static_void___cdecl_QString::free_struct_QString::Data__
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0x30
ret