Function at 0x4483e0
Capabilities:
Contain obfuscated stackstrings
Get common file path
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x98
mov eax, dword [0x547008]
xor eax, ebp
mov dword [esp + 0x90], eax
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov word [ecx + 0x34], 0x101
lea eax, [ecx + 0x3c]
movups xmmword [ecx + 0x3c], xmm0
mov dword [esp + 4], ecx
mov dword [ecx + 0x38], eax
xor eax, eax
dec eax
lea edi, [esp + 0x20]
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
push edi
call fcn.00518420
add esp, 4
movzx edx, byte [edi + 0xb]
mov ebx, edx
and ebx, 0x7f
test dl, dl
mov esi, dword [edi]
mov eax, dword [edi + 4]
mov ecx, ebx
cmovs ecx, eax
test ecx, ecx
je 0x44856f
test dl, dl
mov ecx, edi
cmovs ecx, esi
cmp byte [ecx], 0x7b
je 0x44856f
lea esi, [esp + 0x68]
push edi
push 0x52d06f
push esi
call fcn.0047dc40
add esp, 0xc
movzx eax, byte [esi + 0xb]
test al, al
js 0x4484a2
mov edx, 0xa
cmp eax, 0xa
jne 0x4484b8
xor eax, eax
inc eax
lea ecx, [esp + 0x68]
push 0x52d06d
push eax
push 0
push edx
push edx
push eax
push edx
call fcn.0047c9b0
jmp 0x4484ef
mov edx, 0x7fffffff
and edx, dword [esp + 0x70]
dec edx
mov eax, dword [esp + 0x6c]
cmp edx, eax
je 0x448488
mov esi, dword [esp + 0x68]
lea ecx, [esi + eax]
cmp ecx, 0x52d06d
ja 0x4484d3
lea edx, [esi + eax]
inc edx
cmp edx, 0x52d06d
ja 0x448f93
mov byte [ecx], 0x7d
inc eax
cmp byte [esp + 0x73], 0
js 0x448fba
mov ecx, eax
and cl, 0x7f
mov byte [esp + 0x73], cl
mov byte [esi + eax], 0
lea ebx, [esp + 0x24]
mov esi, dword [esp + 0x68]
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x6f]
mov dword [esp + 0x7b], eax
mov dl, byte [esp + 0x73]
xor eax, eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x68], eax
cmp byte [ebx + 7], 0
jns 0x44852f
push dword [esp + 0x20]
mov edi, edx
call fcn.004e82d5
mov edx, edi
add esp, 4
mov dword [esp + 0x20], esi
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x7b]
mov dword [ebx + 3], ecx
mov dword [ebx], eax
mov byte [esp + 0x2b], dl
cmp byte [esp + 0x73], 0
jns 0x44855f
push dword [esp + 0x68]
call fcn.004e82d5
add esp, 4
mov dl, byte [esp + 0x2b]
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
mov ecx, edx
and cl, 0x7f
movzx ebx, cl
lea edi, [esp + 0x20]
test dl, dl
cmovns esi, edi
cmovs ebx, eax
cmp ebx, 0x7ffffff8
jae 0x448fcc
cmp ebx, 5
mov edi, dword [esp + 4]
jae 0x448599
lea eax, [esp + 0x68]
mov byte [eax + 0xb], bl
test ebx, ebx
jne 0x4485c7
jmp 0x4485d8
mov edi, ebx
or edi, 3
inc edi
js 0x448fd5
lea eax, [edi + edi]
push eax
call fcn.004e82a5
add esp, 4
mov dword [esp + 0x68], eax
or edi, 0x80000000
mov dword [esp + 0x70], edi
mov dword [esp + 0x6c], ebx
mov edi, dword [esp + 4]
xor ecx, ecx
movsx edx, byte [esi + ecx]
mov word [eax], dx
add eax, 2
inc ecx
cmp ebx, ecx
jne 0x4485c9
lea ebx, [edi + 0x14]
mov word [eax], 0
cmp byte [esp + 0x73], 0
js 0x4485ed
lea eax, [esp + 0x68]
jmp 0x4485f1
mov eax, dword [esp + 0x68]
push ebx
push eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
mov esi, eax
cmp byte [esp + 0x73], 0
jns 0x44860e
push dword [esp + 0x68]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x2b], 0
jns 0x448621
push dword [esp + 0x20]
call fcn.004e82d5
add esp, 4
test esi, esi
jns 0x44865c
xorps xmm0, xmm0
movups xmmword [ebx], xmm0
lea esi, [esp + 0x20]
mov ecx, esi
push 0xf2
push 0x52cf20
push 2
call fcn.0045baa0
lea ecx, [esp + 0x5c]
push 0x52cf3d
push str.uid_not_found__use_empty
call fcn.004148f0
mov ecx, esi
call fcn.0045bd40
lea eax, [edi + 0x24]
mov dword [esp + 0xc], eax
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
test eax, eax
jns 0x448673
call fcn.005183b0
xor eax, eax
dec eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
lea esi, [esp + 0x20]
mov ecx, esi
mov edx, ebx
call fcn.00448fe0
movzx ebx, byte [esp + 0x2b]
test bl, bl
js 0x44869d
and ebx, 0x7f
jmp 0x4486a5
mov esi, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
cmp ebx, 0x7ffffff8
jae 0x448fc3
cmp ebx, 0xb
jae 0x4486c3
lea eax, [esp + 0x68]
mov byte [eax + 0xb], bl
test ebx, ebx
jne 0x4486e8
jmp 0x4486f9
mov edi, esi
mov esi, ebx
or esi, 7
inc esi
push esi
call fcn.004e82a5
add esp, 4
mov dword [esp + 0x68], eax
or esi, 0x80000000
mov dword [esp + 0x70], esi
mov esi, edi
mov dword [esp + 0x6c], ebx
add ebx, ebx
xor ecx, ecx
mov dl, byte [esi + ecx]
mov byte [eax], dl
inc eax
add ecx, 2
cmp ebx, ecx
jne 0x4486ec
mov byte [eax], 0
cmp byte [esp + 0x2b], 0
jns 0x44870f
push dword [esp + 0x20]
call fcn.004e82d5
add esp, 4
lea edi, [esp + 0x20]
mov byte [edi + 0xb], 3
cmp edi, 0x52a5fc
ja 0x44872e
lea eax, [esp + 0x23]
cmp eax, 0x52a5fc
ja 0x448f93
mov al, byte [0x52a5fe]
mov byte [esp + 0x22], al
movzx eax, word [0x52a5fc]
mov word [esp + 0x20], ax
mov byte [esp + 0x23], 0
movzx eax, byte [esp + 0x73]
test al, al
js 0x448756
and eax, 0x7f
jmp 0x44875a
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 4]
add ecx, 0x38
mov dword [esp + 8], ecx
test eax, eax
je 0x4487ae
lea eax, [esp + 0x10]
mov dword [eax], edi
lea edx, [esp + 0x88]
lea esi, [esp + 0x78]
mov ecx, dword [esp + 8]
push edx
push eax
push 0x529a29
push edi
push esi
call fcn.0042b210
mov ecx, dword [esi]
add ecx, 0x1c
lea eax, [esp + 0x68]
push eax
call fcn.004147e0
cmp byte [esp + 0x2b], 0
jns 0x4487ae
push dword [esp + 0x20]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x73], 0
jns 0x4487c1
push dword [esp + 0x68]
call fcn.004e82d5
add esp, 4
xor eax, eax
dec eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov ecx, edi
mov edx, dword [esp + 0xc]
call fcn.00448fe0
movzx ebx, byte [esp + 0x2b]
test bl, bl
js 0x4487e9
and ebx, 0x7f
jmp 0x4487f1
mov edi, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
cmp ebx, 0x7ffffff8
jae 0x448fc3
cmp ebx, 0xb
jae 0x44880f
lea eax, [esp + 0x68]
mov byte [eax + 0xb], bl
test ebx, ebx
jne 0x448830
jmp 0x448841
mov esi, ebx
or esi, 7
inc esi
push esi
call fcn.004e82a5
add esp, 4
mov dword [esp + 0x68], eax
or esi, 0x80000000
mov dword [esp + 0x70], esi
mov dword [esp + 0x6c], ebx
add ebx, ebx
xor ecx, ecx
mov dl, byte [edi + ecx]
mov byte [eax], dl
inc eax
add ecx, 2
cmp ebx, ecx
jne 0x448834
mov byte [eax], 0
cmp byte [esp + 0x2b], 0
jns 0x448857
push dword [esp + 0x20]
call fcn.004e82d5
add esp, 4
lea ebx, [esp + 0x20]
mov byte [ebx + 0xb], 9
cmp ebx, str.report_id
ja 0x448876
lea eax, [esp + 0x29]
cmp eax, str.report_id
ja 0x448f93
mov dword [esp + 0x24], 0x695f7472
mov dword [esp + 0x20], 0x6f706572
mov word [esp + 0x28], 0x64
movzx eax, byte [esp + 0x73]
test al, al
js 0x44889b
and eax, 0x7f
jmp 0x44889f
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x4488e8
lea eax, [esp + 0x10]
mov dword [eax], ebx
lea edx, [esp + 0x88]
lea esi, [esp + 0x78]
mov ecx, dword [esp + 8]
push edx
push eax
push 0x529a29
push ebx
push esi
call fcn.0042b210
mov ecx, dword [esi]
add ecx, 0x1c
lea eax, [esp + 0x68]
push eax
call fcn.004147e0
cmp byte [esp + 0x2b], 0
jns 0x4488e8
push dword [esp + 0x20]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x73], 0
jns 0x4488fb
push dword [esp + 0x68]
call fcn.004e82d5
add esp, 4
mov byte [esp + 0x2b], 0xa
cmp ebx, 0x52a608
ja 0x448917
lea eax, [esp + 0x2a]
cmp eax, 0x52a608
ja 0x448f93
movzx eax, word [0x52a610]
mov word [esp + 0x28], ax
movsd xmm0, qword [0x52a608]
movsd qword [esp + 0x20], xmm0
mov byte [esp + 0x2a], 0
lea esi, [esp + 0x68]
mov byte [esi + 0xb], 3
cmp esi, 0x52cf48
ja 0x448955
lea eax, [esp + 0x6b]
cmp eax, 0x52cf48
ja 0x448f93
mov dword [esp + 0x68], 0x726576
lea eax, [esp + 0x10]
mov dword [eax], esi
lea edx, [esp + 0x88]
lea edi, [esp + 0x78]
mov ecx, dword [esp + 8]
push edx
push eax
push 0x529a29
push esi
push edi
call fcn.0042b210
mov ecx, dword [edi]
add ecx, 0x1c
push ebx
call fcn.004147e0
cmp byte [esp + 0x73], 0
jns 0x44899e
push dword [esp + 0x68]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x2b], 0
jns 0x4489b1
push dword [esp + 0x20]
call fcn.004e82d5
add esp, 4
mov byte [esp + 0x2b], 5
cmp ebx, str.Win32
ja 0x4489cd
lea eax, [esp + 0x25]
cmp eax, str.Win32
ja 0x448f93
mov dword [esp + 0x20], 0x336e6957
mov word [esp + 0x24], 0x32
lea ebx, [esp + 0x6c]
mov byte [ebx + 7], 4
cmp esi, str.plat
ja 0x4489f8
cmp ebx, str.plat
ja 0x448f93
mov dword [esp + 0x68], 0x74616c70
mov byte [esp + 0x6c], 0
mov dword [esp + 0x10], esi
mov ecx, dword [esp + 8]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x14]
push eax
push 0x529a29
push esi
push edi
call fcn.0042b210
mov ecx, dword [esp + 0x78]
add ecx, 0x1c
lea eax, [esp + 0x20]
push eax
call fcn.004147e0
cmp byte [esp + 0x73], 0
jns 0x448a4a
push dword [esp + 0x68]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x2b], 0
jns 0x448a5d
push dword [esp + 0x20]
call fcn.004e82d5
add esp, 4
mov byte [esp + 0x2b], 6
lea eax, [esp + 0x20]
cmp eax, 0x52cf57
ja 0x448a7c
lea eax, [esp + 0x26]
cmp eax, 0x52cf57
ja 0x448f93
mov word [esp + 0x24], 0x7865
mov dword [esp + 0x20], 0x646e6159
mov byte [esp + 0x26], 0
mov byte [esp + 0x73], 4
cmp esi, str.prod
ja 0x448aa9
cmp ebx, str.prod
ja 0x448f93
mov dword [esp + 0x68], 0x646f7270
mov byte [esp + 0x6c], 0
mov dword [esp + 0x10], esi
mov ecx, dword [esp + 8]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x14]
push eax
push 0x529a29
push esi
push edi
call fcn.0042b210
mov ecx, dword [esp + 0x78]
add ecx, 0x1c
lea eax, [esp + 0x20]
push eax
call fcn.004147e0
cmp byte [esp + 0x73], 0
jns 0x448afb
push dword [esp + 0x68]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x2b], 0
jns 0x448b0e
push dword [esp + 0x20]
call fcn.004e82d5
add esp, 4
xor ecx, ecx
mov eax, dword [esp + 4]
cmp byte [eax + 0x35], 0
mov edx, 0x52cf63
mov eax, str.true
cmove eax, edx
sete cl
lea ebx, [ecx + 4]
mov byte [esp + 0x2b], bl
lea edx, [esp + 0x20]
cmp edx, eax
ja 0x448b44
add ecx, esp
add ecx, 0x24
cmp ecx, eax
ja 0x448f93
push ebx
push eax
lea eax, [esp + 0x28]
push eax
call fcn.004ebca0
add esp, 0xc
mov byte [esp + ebx + 0x20], 0
push 0x10
call fcn.004e82a5
add esp, 4
mov dword [esp + 0x68], eax
mov dword [esp + 0x70], 0x80000010
mov dword [esp + 0x6c], 0xc
cmp eax, str.gzip_enabled
ja 0x448b8c
lea ecx, [eax + 0xc]
cmp ecx, str.gzip_enabled
ja 0x448f93
mov dword [eax + 8], 0x64656c62
mov dword [eax + 4], 0x616e655f
mov dword [eax], 0x70697a67
mov byte [eax + 0xc], 0
movzx eax, byte [esp + 0x2b]
test al, al
js 0x448bb2
and eax, 0x7f
jmp 0x448bb6
mov eax, dword [esp + 0x24]
lea ebx, [esp + 0x20]
test eax, eax
je 0x448bf3
mov dword [esp + 0x10], esi
mov ecx, dword [esp + 8]
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x14]
push eax
push 0x529a29
push esi
push edi
call fcn.0042b210
mov ecx, dword [esp + 0x78]
add ecx, 0x1c
push ebx
call fcn.004147e0
cmp byte [esp + 0x73], 0
jns 0x448bff
push dword [esp + 0x68]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x2b], 0
jns 0x448c12
push dword [esp + 0x20]
call fcn.004e82d5
add esp, 4
lea ecx, [esp + 0x68]
mov edx, dword [esp + 0xc]
call fcn.00448fe0
xor esi, esi
push 0x208
call fcn.004e82a5
add esp, 4
mov edi, eax
mov eax, edi
add eax, esi
je 0x448f78
mov word [eax], 0
add esi, 2
cmp esi, 0x208
jne 0x448c30
push edi
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov ebx, eax
dec eax
cmp eax, 0x102
ja 0x448caf
cmp ebx, 4
jbe 0x448c8f
mov esi, ebx
or esi, 3
lea eax, [esi*2 + 2]
inc esi
push eax
call fcn.004e82a5
add esp, 4
mov dword [esp + 0x10], eax
or esi, 0x80000000
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], ebx
jmp 0x448c96
lea eax, [esp + 0x10]
mov byte [eax + 0xb], bl
mov ecx, ebx
add ecx, ebx
push ecx
push edi
push eax
mov esi, eax
call fcn.004ebca0
add esp, 0xc
mov word [esi + ebx*2], 0
jmp 0x448cbd
xor eax, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], eax
lea esi, [esp + 0x10]
test edi, edi
lea ebx, [esp + 0x20]
je 0x448cf5
mov eax, 0x208
test eax, eax
je 0x448cec
add eax, 0xfffffffe
mov ecx, edi
add ecx, eax
jne 0x448cce
push str.null_pointer_given_to_destroy_at
push str.__loc___nullptr
push 0x44
jmp 0x448f84
push edi
call fcn.004e82d5
add esp, 4
movzx eax, byte [esp + 0x1b]
test al, al
js 0x448d26
mov edx, 4
cmp eax, 4
mov edi, dword [esp + 4]
jne 0x448d40
xor eax, eax
inc eax
lea ecx, [esp + 0x10]
push 0x52cf80
push eax
push 0
push edx
push edx
push eax
push edx
call fcn.0047d310
jmp 0x448d7e
mov edx, 0x7fffffff
and edx, dword [esp + 0x18]
dec edx
mov eax, dword [esp + 0x14]
cmp edx, eax
mov edi, dword [esp + 4]
je 0x448d0c
mov esi, dword [esp + 0x10]
lea ecx, [esi + eax*2]
cmp ecx, 0x52cf80
ja 0x448d5d
lea edx, [esi + eax*2]
add edx, 2
cmp edx, 0x52cf80
ja 0x448fa9
mov word [ecx], 0x5c
lea ecx, [eax + 1]
cmp byte [esp + 0x1b], 0
js 0x448f6f
and cl, 0x7f
mov byte [esp + 0x1b], cl
mov word [esi + eax*2 + 2], 0
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x78]
mov dword [ecx + 8], eax
movsd xmm0, qword [esp + 0x10]
movsd qword [ecx], xmm0
xor esi, esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], esi
movzx eax, byte [esp + 0x73]
mov edx, eax
and edx, 0x7f
test al, al
cmovs edx, dword [esp + 0x6c]
mov dword [esp + 0x18], esi
lea eax, [esp + 0x68]
cmovs eax, dword [esp + 0x68]
push edx
push eax
call fcn.0047d900
movsd xmm0, qword [eax]
movsd qword [esp + 0x20], xmm0
mov ecx, dword [eax + 8]
mov dword [esp + 0x28], ecx
mov dword [eax], esi
mov dword [eax + 8], esi
mov dword [eax + 4], esi
movzx eax, byte [esp + 0x2b]
test al, al
js 0x448e10
lea ecx, [eax - 1]
mov edx, 4
cmp ecx, 4
jae 0x448e2b
mov esi, eax
sub esi, edx
add esi, 4
lea ecx, [esp + 0x20]
push 0x52cf76
push 4
push 0
push eax
push eax
push esi
push edx
call fcn.0047d310
jmp 0x448e71
mov edx, 0x7fffffff
and edx, dword [esp + 0x28]
dec edx
mov eax, dword [esp + 0x24]
mov ecx, edx
sub ecx, eax
cmp ecx, 4
jb 0x448df1
mov ebx, dword [esp + 0x20]
lea ecx, [ebx + eax*2]
cmp ecx, 0x52cf76
ja 0x448e48
lea edx, [ebx + eax*2]
add edx, 8
cmp edx, 0x52cf76
ja 0x448fa9
mov dword [ecx + 4], 0x70006d
mov dword [ecx], 0x64002e
lea ecx, [eax + 4]
cmp byte [esp + 0x2b], 0
js 0x448f66
and cl, 0x7f
mov byte [esp + 0x2b], cl
mov word [ebx + eax*2 + 8], 0
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x27]
mov dword [esp + 0x8b], eax
mov bl, byte [esp + 0x2b]
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x20], eax
cmp byte [edi + 0xb], 0
jns 0x448ead
push dword [edi]
call fcn.004e82d5
add esp, 4
mov dword [edi], esi
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x8b]
mov dword [edi + 4], eax
mov dword [edi + 7], ecx
mov byte [edi + 0xb], bl
cmp byte [esp + 0x2b], 0
jns 0x448ed9
push dword [esp + 0x20]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x83], 0
jns 0x448eef
push dword [esp + 0x78]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x1b], 0
jns 0x448f02
push dword [esp + 0x10]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x73], 0
jns 0x448f15
push dword [esp + 0x68]
call fcn.004e82d5
add esp, 4
push 0x52cf84
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [edi + 0xc], eax
test eax, eax
je 0x448f48
push str.MiniDumpWriteDump
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [edi + 0x10], eax
test eax, eax
je 0x448f48
push 0x4490c0
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov dword [edi + 0x48], eax
mov dword [0x54ca34], edi
mov ecx, dword [esp + 0x90]
xor ecx, ebp
call fcn.004e8be6
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp + 0x24], ecx
jmp 0x448e6a
mov dword [esp + 0x14], ecx
jmp 0x448d77
push str.null_pointer_given_to_construct_at
push str.__location___nullptr
push 0x28
push str....._third_partylibc_srcinclude__memoryconstruct_at.h
push str._s:_d:_assertion__s_failed:__s_n
call fcn.00457520
push str.char_traits::copy_overlapped_range
push str.__s2_____s1____s2_____s1____n
push 0xf3
push str....._third_partylibc_srcinclude__stringchar_traits.h
jmp 0x448f89
push str.char_traits::copy_overlapped_range
push str.__s2_____s1____s2_____s1____n
push 0x13b
jmp 0x448fa2
mov dword [esp + 0x6c], eax
jmp 0x4484eb
lea ecx, [esp + 0x68]
call fcn.004148d0
lea ecx, [esp + 0x68]
call fcn.004148d0
call fcn.00516400
int3