Function at 0x41f8d0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x157c
call fcn.0041c300
push esi
mov esi, dword [sym.imp.USER32.dll_CharUpperBuffW]
push edi
mov edi, 0x3784fe
lea ebx, [ebx]
push 0
push 0
call esi
dec edi
jne 0x41f8f0
mov dword [ebp - 0x40], 0x7935daab
mov dword [ebp - 0x24], 0x3a60f872
mov dword [ebp - 0x84], 0x1970d83b
mov dword [ebp - 0xb8], 0xa47b59f
mov dword [ebp - 0x50], 0x56621e25
mov dword [ebp - 0x18], 0x5fede645
mov dword [ebp - 0xcc], 0x1d5127ec
mov dword [ebp - 0xc4], 0x375e7ad
mov dword [ebp - 0x30], 0x1e98ea90
mov dword [ebp - 0x98], 0x2e903300
mov dword [ebp - 0xd4], 0x165c71a
mov dword [ebp - 0x9c], 0x4059616c
mov dword [ebp - 0x48], 0xb0ff30d
mov dword [ebp - 0x5c], 0x23b3458a
mov dword [ebp - 0x68], 0x387d9514
mov dword [ebp - 0x20], 0x33bf5759
mov dword [ebp - 0xf0], 0x331242f8
mov dword [ebp - 0xe8], 0x4c937dc
mov dword [ebp - 0x54], 0x4c1cd04e
mov dword [ebp - 0xe0], 0x1f679649
mov dword [ebp - 0xb0], 0x3ade9619
mov dword [ebp - 0x10], 0x18970618
mov dword [ebp - 0x38], 0x2bd51607
mov dword [ebp - 0x1c], 0x2d2b64fe
mov dword [ebp - 0xd0], 0x4246f8b0
mov dword [ebp - 0xd8], 0x19df79df
mov dword [ebp - 0x74], 0x754ea52b
mov dword [ebp - 0x80], 0x1bd17116
mov dword [ebp - 4], 0x4f9bfe87
mov dword [ebp - 0x28], 0x713ca66f
mov dword [ebp - 0xa0], 0x436f12e
mov dword [ebp - 0xa8], 0x5bcd9bcd
mov dword [ebp - 0x90], 0x18fd8f27
mov dword [ebp - 0xbc], 0x2a395c33
mov dword [ebp - 0x6c], 0x464a7f7d
mov dword [ebp - 0x4c], 0x70dece71
mov dword [ebp - 0xec], 0x74128ff1
mov dword [ebp - 8], 0x4853dbe7
mov dword [ebp - 0x78], 0x3405e2b5
mov dword [ebp - 0xe4], 0x39d2c4fc
mov dword [ebp - 0x44], 0x32501f09
mov dword [ebp - 0x3c], 0x24b158cb
mov dword [ebp - 0x34], 0x28d59195
mov dword [ebp - 0x14], 0x5577858f
mov dword [ebp - 0xc0], 0x4b2b8f57
mov dword [ebp - 0xc8], 0x47261d40
mov dword [ebp - 0x60], 0x618c7fe
mov dword [ebp - 0x94], 0x7aa0fa1c
mov dword [ebp - 0xf4], 0x5a3ee071
mov dword [ebp - 0x7c], 0x5fc45d84
mov dword [ebp - 0xc], 0x77d503cd
mov dword [ebp - 0xb4], 0x2e8dd4ef
mov dword [ebp - 0x70], 0x32c2eb7
mov dword [ebp - 0xdc], 0x1dd1ae14
mov dword [ebp - 0x2c], 0x193d25ec
mov dword [ebp - 0xac], 0x4050126d
mov dword [ebp - 0x8c], 0x44451645
mov dword [ebp - 0xa4], 0x418ffae3
mov dword [ebp - 0x58], 0x3a0a6f01
mov dword [ebp - 0x64], 0x63b1cb69
mov dword [ebp - 0x88], 0x7593f951
mov eax, 0x236bea87
mul dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
add dword [ebp - 0x84], 0x3bc2df3f
sub dword [ebp - 0x84], 0x9e52189
add dword [ebp - 0x40], 0x10b5a543
sub dword [ebp - 0x40], 0x5fc44545
sub dword [ebp - 0x24], 0x155fa474
add dword [ebp - 0xb8], 0x1fbf4006
add dword [ebp - 0x24], 0x484d1df2
add dword [ebp - 0x40], 0x7a2946e9
sub dword [ebp - 0xb8], 0x2d61cb01
sub dword [ebp - 0x24], 0x785e8833
sub dword [ebp - 0x50], 0xabf730a
add dword [ebp - 0x24], 0x597074e7
mov eax, 0x74f18602
mul dword [ebp - 0xcc]
mov eax, dword [ebp - 0xcc]
add dword [ebp - 0x9c], 0x36833955
sub dword [ebp - 0x9c], 0x3eb9f38
mov eax, 0x4b9f92ec
mul dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
sub dword [ebp - 0x24], 0xacf1611
mov eax, 0x359f7a53
mul dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd4]
mov eax, 0x6accc76a
mul dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb8]
sub dword [ebp - 0xc4], 0x7c7c6e02
sub dword [ebp - 0x50], 0x1155acab
add dword [ebp - 0x40], 0x6b28a6a3
add dword [ebp - 0x40], 0x39a99307
add dword [ebp - 0x5c], 0x48ae1948
add dword [ebp - 0x20], 0x51f058ee
add dword [ebp - 0x98], 0x51c6c408
mov eax, 0x2713281f
mul dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
add dword [ebp - 0x48], 0x74d77b16
add dword [ebp - 0x5c], 0x7afc4e1c
add dword [ebp - 0x20], 0x5c4553df
mov eax, dword [0x4f5448]
mov ecx, dword [0x4f543c]
mov dword [0x9a0704], eax
mov dword [0x9a2e68], ecx
call fcn.0041f110
cmp dword [0x9a0704], 0xc30
jne 0x41fcfd
lea edx, [ebp - 0x32c]
push edx
push edi
push edi
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
push 0x40468c
call dword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
lea eax, [ebp - 0x57c]
push eax
push 0x4046a8
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push edi
call dword [sym.imp.KERNEL32.dll_DebugActiveProcessStop]
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0x4046c8
call esi
push edi
lea ecx, [ebp - 0xf8]
push ecx
push edi
push edi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_WriteConsoleA]
call edi
push 0
lea edx, [ebp - 0xd7c]
push edx
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x10c]
push ecx
lea edx, [ebp - 0x108]
push edx
lea eax, [ebp - 0x104]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
push 0
call esi
push 0
lea ecx, [ebp - 0xfc]
push ecx
push 0
push 0
push 0
call edi
push 0
push 0
push 0
push 0x4046e8
push 0x404718
push 0
call dword [sym.imp.KERNEL32.dll_UpdateResourceA]
lea edx, [ebp - 0x157c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
call dword [0x99eef0]
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret 0x10