Function at 0x403df0
Capabilities:
Contain obfuscated stackstrings
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8a0
mov dword [ebp - 0x80], 0x1b9efa77
mov dword [ebp - 0x90], 0x16981ee3
mov dword [ebp - 0x50], 0x138079e7
mov dword [ebp - 0x18], 0x2c72018c
mov dword [ebp - 0x78], 0x74fe3778
mov dword [ebp - 0x44], 0xe540ca2
mov dword [ebp - 0x20], 0x3e8795dc
mov dword [ebp - 0x84], 0x55f917ed
mov dword [ebp - 0x9c], 0x1c504903
mov dword [ebp - 0x10], 0x7067a2d1
mov dword [ebp - 0x5c], 0x609dbfb9
mov dword [ebp - 0x14], 0x482b6dc9
mov dword [ebp - 0x7c], 0x255fd839
mov dword [ebp - 0x3c], 0x6d6d5152
mov dword [ebp - 0x38], 0x524f3a6b
mov dword [ebp - 0x88], 0x2eeefba2
mov dword [ebp - 0x34], 0x1c37d3c0
mov dword [ebp - 0x74], 0x3fbb2e5c
mov dword [ebp - 0x58], 0x716cf65b
mov dword [ebp - 0x2c], 0x4ea9ffef
mov dword [ebp - 0x48], 0x2d5c81fd
mov dword [ebp - 0x24], 0x1bcc45a9
mov dword [ebp - 8], 0x68603fff
mov dword [ebp - 0xc], 0x531e5a94
mov dword [ebp - 0x98], 0x3100e861
mov dword [ebp - 0x94], 0x207d65d3
mov dword [ebp - 4], 0x2b62f219
mov dword [ebp - 0x30], 0xc91a9a3
mov dword [ebp - 0x40], 0x1b328c30
mov dword [ebp - 0x70], 0x4caa261b
mov dword [ebp - 0x54], 0x23dbe537
mov dword [ebp - 0x68], 0x333b712e
mov dword [ebp - 0x1c], 0x81b44b7
mov dword [ebp - 0x60], 0x3b5018e1
mov dword [ebp - 0x4c], 0xd97249b
mov dword [ebp - 0x28], 0x239316e2
mov dword [ebp - 0x6c], 0x7e89dae6
mov dword [ebp - 0x8c], 0x42e0a22b
mov dword [ebp - 0x64], 0x4c95ac9d
mov dword [ebp - 0xa0], 0x2e4c4a30
mov eax, 0x79212e0f
mul dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
sub dword [ebp - 0x90], 0x53a52e36
mov eax, 0x2efd4766
mul dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
sub dword [ebp - 0x44], 0x61fd216
sub dword [ebp - 0x78], 0x32202c60
mov eax, 0x79a30b70
mul dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
sub dword [ebp - 0x5c], 0x2780c770
mov eax, 0x7033b116
mul dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, 0xab22997
mul dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
sub dword [ebp - 0x80], 0x7c68b4f5
mov eax, 0x44d04e79
mul dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
sub dword [ebp - 0x10], 0x725e850d
sub dword [ebp - 0x44], 0x30df7e6
mov eax, 0x4109bb1e
mul dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
add dword [ebp - 0x44], 0x69970840
sub dword [ebp - 0x38], 0x7fc5673d
mov eax, 0x1fe44bf7
mul dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
add dword [ebp - 0x9c], 0x7073745d
sub dword [ebp - 0x14], 0x5580c623
add dword [ebp - 0x3c], 0x68eae7a8
mov eax, 0x2d5c6f0c
mul dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, 0x1ca3e5be
mul dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, 0x42d5755b
mul dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, 0x47cb7bd2
mul dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
mov eax, 0x34a39240
mul dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
sub dword [ebp - 0x3c], 0x50a908b0
mov eax, 0x44fdada7
mul dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
add dword [ebp - 0x90], 0x3aef30f4
sub dword [ebp - 0x2c], 0x7d2775d2
sub dword [ebp - 0x18], 0x63bffff1
mov eax, 0x4e71f03e
mul dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
sub dword [ebp - 0x50], 0x733f48d1
mov eax, 0x2a182e53
mul dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
sub dword [ebp - 0x84], 0x4c35d55e
mov eax, 0x6de2d06d
mul dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
sub dword [ebp - 0xc], 0x483e35e1
sub dword [ebp - 0x44], 0x145a3600
sub dword [ebp - 0x7c], 0x43e6d478
sub dword [ebp - 0x38], 0x460fd52b
sub dword [ebp - 0xc], 0x62b1c964
mov eax, 0x7240a7d
mul dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
sub dword [ebp - 0x48], 0x791f4ff4
sub dword [ebp - 0x54], 0xa3bc19c
mov eax, 0x6180dea8
mul dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add dword [ebp - 0x58], 0xf18b96a
mov eax, 0x4e254d85
mul dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, 0x1e99992c
mul dword [ebp - 0x84]
mov eax, dword [ebp - 0x84]
mov eax, 0x372b3f60
mul dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
add dword [ebp - 0x58], 0x5ae61d5c
sub dword [ebp - 0x48], 0x6dab61cb
sub dword [ebp - 0x98], 0x643ee0fb
mov eax, 0x2fe2be92
mul dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov eax, 0x6cfe999
mul dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
mov eax, 0x19c45331
mul dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, 0x30281f67
mul dword [ebp - 0x90]
mov eax, dword [ebp - 0x90]
sub dword [ebp - 0x94], 0x153d903e
add dword [ebp - 0x84], 0x7b51eb88
add dword [ebp - 0x80], 0x77a1f967
mov eax, 0x2b1003cd
mul dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, 0x13ee649d
mul dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
xor eax, eax
lea esp, [esp]
cmp eax, 0x166c480
jg 0x40417f
inc eax
cmp eax, 0x37e3fd1
jl 0x404170
mov eax, dword [0x46ccac]
push esi
push edi
mov dword [0x471b64], eax
call fcn.00403af0
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov edi, 0x2ec37
jmp 0x4041a0
cmp dword [0x471b64], 0x51f
jne 0x4041b7
lea ecx, [ebp - 0x8a0]
push ecx
push 0
call esi
sub edi, 1
jne 0x4041a0
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret 0x10