Function at 0x4d23e0
Capabilities:
Get common file path
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53478c
mov eax, dword fs:[0]
push eax
sub esp, 0x50c
mov eax, dword [0x5c6150]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x510], esi
lea ecx, [ebp - 0x4e4]
call fcn.004515b0
push 0x208
lea eax, [ebp - 0x29c]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.004d9fe0
add esp, 0xc
lea eax, [ebp - 0x29c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x4d2e7e
push 0
lea eax, [ebp - 0x4e4]
mov ecx, esi
push eax
call fcn.004d1320
test al, al
je 0x4d2e7e
lea ecx, [ebp - 0x518]
call fcn.00450c10
push 1
lea ecx, [ebp - 0x504]
mov byte [ebp - 4], 1
call fcn.00455bd0
push 0x42
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 2
push 0
push eax
call fcn.004d9fe0
add esp, 0xc
lea ecx, [ebp - 0x504]
push 0xffffffffffffffff
push str.loginopenid
call fcn.00455dc0
mov edi, eax
mov dword [ebp - 0x508], edi
test edi, edi
je 0x4d258a
mov ebx, dword [esi + 0x158]
sub ebx, dword [esi + 0x154]
sar ebx, 4
mov dword [ebp - 0x50c], ebx
call fcn.004602e0
push 0xffffffffffffffff
push eax
push str.version
push edi
lea ecx, [ebp - 0x504]
call fcn.00455da0
push 0xffffffffffffffff
push ebx
push str.idcount
push edi
lea ecx, [ebp - 0x504]
call fcn.00455d40
xor edi, edi
test ebx, ebx
jle 0x4d258a
xor ebx, ebx
push 0x40
lea eax, [ebp - 0x54]
push 0
push eax
call fcn.004d9fe0
mov eax, dword [esi + 0x154]
lea ecx, [ebp - 0x54]
add eax, ebx
push ecx
push eax
call fcn.004d2330
add esp, 0x14
test al, al
je 0x4d257e
push 0x40
lea eax, [ebp - 0x94]
push 0
push eax
call fcn.004d9fe0
push edi
push 0x557338
lea eax, [ebp - 0x94]
push str._s_d
push eax
call fcn.0042cf00
add esp, 0x1c
lea eax, [ebp - 0x54]
lea ecx, [ebp - 0x504]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x94]
push eax
push dword [ebp - 0x508]
call fcn.00455da0
inc edi
add ebx, 0x10
cmp edi, dword [ebp - 0x50c]
jl 0x4d2510
push 0xffffffffffffffff
push str.pingback
lea ecx, [ebp - 0x504]
call fcn.00455dc0
mov edi, eax
test edi, edi
je 0x4d278a
push 0xffffffffffffffff
push dword [esi + 8]
lea ecx, [ebp - 0x504]
push str.nlpshow
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xc]
lea ecx, [ebp - 0x504]
push str.nlplogin
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x10]
lea ecx, [ebp - 0x504]
push str.nlpclose
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x14]
lea ecx, [ebp - 0x504]
push str.ntextshow
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x18]
lea ecx, [ebp - 0x504]
push str.ntextlogin
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x1c]
lea ecx, [ebp - 0x504]
push str.ntextclose
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x20]
lea ecx, [ebp - 0x504]
push str.npicshow
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x24]
lea ecx, [ebp - 0x504]
push str.npiclogin
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x28]
lea ecx, [ebp - 0x504]
push str.npicclose
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x2c]
lea ecx, [ebp - 0x504]
push str.nlpautoclose
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x30]
lea ecx, [ebp - 0x504]
push str.ncpshow
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x34]
lea ecx, [ebp - 0x504]
push str.ncpkeep
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x38]
lea ecx, [ebp - 0x504]
push str.ncplogin
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x3c]
push str.ncpclose
push edi
lea ecx, [ebp - 0x504]
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x40]
lea ecx, [ebp - 0x504]
push str.nepshow
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x44]
lea ecx, [ebp - 0x504]
push str.nepkeep
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x48]
lea ecx, [ebp - 0x504]
push str.nepexit
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x4c]
lea ecx, [ebp - 0x504]
push str.nepclose
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x50]
lea ecx, [ebp - 0x504]
push str.cfgshow
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x54]
lea ecx, [ebp - 0x504]
push str.cfglogin
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x58]
lea ecx, [ebp - 0x504]
push str.dictshow
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x5c]
lea ecx, [ebp - 0x504]
push str.dictlogin
push edi
call fcn.00455d40
push 0xffffffffffffffff
push str.loginpingback
lea ecx, [ebp - 0x504]
call fcn.00455dc0
mov dword [ebp - 0x50c], eax
test eax, eax
je 0x4d2800
lea ebx, [esi + 0x120]
xor edi, edi
mov esi, eax
push 0xffffffffffffffff
push dword [ebx - 0x28]
lea ecx, [edi + 0x5d0458]
call fcn.00450480
push eax
push esi
lea ecx, [ebp - 0x504]
call fcn.00455d40
push 0xffffffffffffffff
push dword [ebx]
lea ecx, [edi + 0x5cf8f0]
call fcn.00450480
push eax
push esi
lea ecx, [ebp - 0x504]
call fcn.00455d40
add edi, 0x124
lea ebx, [ebx + 4]
cmp edi, 0xb68
jl 0x4d27b0
mov esi, dword [ebp - 0x510]
push 0xffffffffffffffff
push str.usercenter
lea ecx, [ebp - 0x504]
call fcn.00455dc0
mov edi, eax
test edi, edi
je 0x4d2a11
push 0xffffffffffffffff
push dword [esi + 0x60]
lea ecx, [ebp - 0x504]
push str.minishow
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x64]
lea ecx, [ebp - 0x504]
push str.miniclick
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x68]
lea ecx, [ebp - 0x504]
push str.newtipshow
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x6c]
lea ecx, [ebp - 0x504]
push str.newtipshowl
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x70]
lea ecx, [ebp - 0x504]
push str.newtiplogin
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x74]
lea ecx, [ebp - 0x504]
push str.newtipdetail
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x78]
lea ecx, [ebp - 0x504]
push str.newtipclose
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x7c]
lea ecx, [ebp - 0x504]
push str.upgradeshow
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x80]
lea ecx, [ebp - 0x504]
push str.upgradeshowl
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x84]
lea ecx, [ebp - 0x504]
push str.upgradelogin
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x88]
lea ecx, [ebp - 0x504]
push str.upgradedetail
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x8c]
lea ecx, [ebp - 0x504]
push str.upgradeclose
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x90]
lea ecx, [ebp - 0x504]
push str.upgradeset
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x94]
push str.medalshow
push edi
lea ecx, [ebp - 0x504]
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x98]
lea ecx, [ebp - 0x504]
push str.medalshowl
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0x9c]
lea ecx, [ebp - 0x504]
push str.medallogin
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xa0]
lea ecx, [ebp - 0x504]
push str.medaldetail
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xa4]
lea ecx, [ebp - 0x504]
push str.medalclose
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xa8]
lea ecx, [ebp - 0x504]
push str.medalset
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xac]
lea ecx, [ebp - 0x504]
push str.activeshow
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xb0]
lea ecx, [ebp - 0x504]
push str.activeclick
push edi
call fcn.00455d40
push 0xffffffffffffffff
push str.softkbd
lea ecx, [ebp - 0x504]
call fcn.00455dc0
mov edi, eax
test edi, edi
je 0x4d2bd6
push 0xffffffffffffffff
push dword [esi + 0xb4]
lea ecx, [ebp - 0x504]
push str.show
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xb8]
lea ecx, [ebp - 0x504]
push 0x54aa6c
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xbc]
lea ecx, [ebp - 0x504]
push str.clkvoiceinput
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xc0]
lea ecx, [ebp - 0x504]
push str.clkhandinput
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xc4]
lea ecx, [ebp - 0x504]
push str.clksymbol
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xc8]
lea ecx, [ebp - 0x504]
push str.clksoftkbd
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xcc]
lea ecx, [ebp - 0x504]
push str.tipshow
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xd4]
lea ecx, [ebp - 0x504]
push str.tipclick
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xd0]
lea ecx, [ebp - 0x504]
push str.tipclose
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xd8]
lea ecx, [ebp - 0x504]
push str.brandshow
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xdc]
lea ecx, [ebp - 0x504]
push str.brandoutput
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xe0]
lea ecx, [ebp - 0x504]
push str.vmode
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xe4]
lea ecx, [ebp - 0x504]
push str.cwall
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xe8]
push str.cwvalid
push edi
lea ecx, [ebp - 0x504]
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xec]
lea ecx, [ebp - 0x504]
push str.cwcount
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xf4]
lea ecx, [ebp - 0x504]
push str.cwshow
push edi
call fcn.00455d40
push 0xffffffffffffffff
push dword [esi + 0xf0]
lea ecx, [ebp - 0x504]
push str.cwuse
push edi
call fcn.00455d40
mov ecx, dword [esi + 0x14c]
mov eax, 0x66666667
sub ecx, dword [esi + 0x148]
xor ebx, ebx
imul ecx
mov dword [ebp - 0x508], ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x4d2df2
xor edi, edi
push 0x40
lea eax, [ebp - 0x94]
push 0
push eax
call fcn.004d9fe0
push ebx
push str.openidcnt
lea eax, [ebp - 0x94]
push str._s_d
push eax
call fcn.0042cf00
add esp, 0x1c
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x504]
push 0xffffffffffffffff
push eax
call fcn.00455dc0
push 0x40
mov ebx, eax
lea eax, [ebp - 0x54]
push 0
push eax
call fcn.004d9fe0
add esp, 0xc
test ebx, ebx
je 0x4d2dbd
mov eax, dword [esi + 0x148]
lea ecx, [ebp - 0x54]
add eax, edi
push ecx
push eax
call fcn.004d2330
add esp, 8
test al, al
je 0x4d2dbd
push 0xffffffffffffffff
lea eax, [ebp - 0x54]
push eax
push str.openid
push ebx
lea ecx, [ebp - 0x504]
call fcn.00455da0
mov eax, dword [esi + 0x148]
lea ecx, [ebp - 0x504]
push 0xffffffffffffffff
push dword [eax + edi + 0x10]
push str.nlogin
push ebx
call fcn.00455d40
mov eax, dword [esi + 0x148]
lea ecx, [ebp - 0x504]
push 0xffffffffffffffff
push dword [eax + edi + 0x18]
push str.logintime
push ebx
call fcn.00455d40
mov eax, dword [esi + 0x148]
lea ecx, [ebp - 0x504]
push 0xffffffffffffffff
push dword [eax + edi + 0x20]
push str.nshowtext
push ebx
call fcn.00455d40
mov eax, dword [esi + 0x148]
lea ecx, [ebp - 0x504]
push 0xffffffffffffffff
push dword [eax + edi + 0x24]
push str.nshowpic
push ebx
call fcn.00455d40
mov eax, dword [esi + 0x148]
lea ecx, [ebp - 0x504]
push 0xffffffffffffffff
push dword [eax + edi + 0x28]
push str.showtexttime
push ebx
call fcn.00455d40
mov eax, dword [esi + 0x148]
lea ecx, [ebp - 0x504]
push 0xffffffffffffffff
push dword [eax + edi + 0x30]
push str.showpictime
push ebx
call fcn.00455d40
mov eax, dword [esi + 0x148]
lea ecx, [ebp - 0x504]
push 0xffffffffffffffff
push dword [eax + edi + 0x38]
push str.showexittime
push ebx
call fcn.00455d40
mov eax, dword [esi + 0x148]
xor ecx, ecx
push 0xffffffffffffffff
cmp byte [eax + edi + 0x40], cl
setne cl
push ecx
push str.isfast
push ebx
lea ecx, [ebp - 0x504]
call fcn.00455d40
mov eax, dword [esi + 0x148]
xor ecx, ecx
push 0xffffffffffffffff
cmp byte [eax + edi + 0x41], cl
setne cl
push ecx
push str.iskeep
push ebx
lea ecx, [ebp - 0x504]
call fcn.00455d40
mov eax, dword [esi + 0x148]
push 0xffffffffffffffff
push dword [eax + edi + 0x48]
push str.nexit
push ebx
lea ecx, [ebp - 0x504]
call fcn.00455d40
mov ecx, dword [esi + 0x14c]
mov eax, 0x66666667
sub ecx, dword [esi + 0x148]
add edi, 0x50
mov ebx, dword [ebp - 0x508]
imul ecx
inc ebx
sar edx, 5
mov eax, edx
mov dword [ebp - 0x508], ebx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x4d2c03
push 0
push 0
push 0
push 0
push str.tempfastpassport.ini
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x3c0]
call fcn.00451610
push 0xffffffffffffffff
lea ecx, [ebp - 0x3c0]
mov byte [ebp - 4], 3
call fcn.00450480
push eax
lea eax, [ebp - 0x518]
push eax
lea ecx, [ebp - 0x504]
call fcn.00456570
push 0
lea eax, [ebp - 0x4e4]
push eax
lea eax, [ebp - 0x518]
push eax
lea ecx, [ebp - 0x3c0]
call fcn.00452a90
push 0
lea ecx, [ebp - 0x3c0]
call fcn.00452290
lea ecx, [ebp - 0x3c0]
call fcn.00424a60
lea ecx, [ebp - 0x504]
call fcn.00455500
lea ecx, [ebp - 0x518]
call fcn.00450c20
lea ecx, [ebp - 0x4e4]
call fcn.00424a60
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004d6cfd
mov esp, ebp
pop ebp
ret