Function at 0x4266ac
Capabilities:
Get common file path

Disassembly:
sub esp, 0x31c
push ebx
push ebp
push esi
push edi
push str.Global_asknamepwd
push 1
pop esi
xor ebx, ebx
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push 0xffffffffffffffff
push eax
mov dword [esp + 0x20], eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x445494
push 0x445514
push 0x445414
mov dword [esp + 0x20], ebx
call fcn.004219e7
add esp, 0xc
test eax, eax
jne 0x426eaf
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call dword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
call fcn.0041edcd
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 4
jl 0x426a9b
cmp dword [esp + 0x14], ebx
jne 0x426a9b
cmp dword [0x441ff4], ebx
je 0x4267aa
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 3
je 0x42674c
mov ecx, dword [0x441fdc]
cmp dword [ecx], ebx
jne 0x4267aa
cmp eax, 3
jle 0x4267aa
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
call esi
cmp dword [0x43e9c8], ebx
mov ebp, eax
jge 0x42676a
mov eax, dword [0x441fa0]
mov dword [0x43e9c8], eax
call fcn.0041c4b1
test eax, eax
je 0x42679c
push 3
push dword [0x43e9c8]
push 0x3bc
push str.C:_build_rel_sp_8_4_6_2_srcwindowsSHARED_sslsock_sslsock.cpp
call fcn.0041c4e1
push str.AskNamePwd__in_session_0_and_os_is__vista_n
call fcn.0041c506
add esp, 0x14
call fcn.0041c4cc
push edi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push ebp
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x40
xor eax, eax
pop ecx
lea edi, [esp + 0x129]
mov byte [esp + 0x128], bl
push 0x104
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x12c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call sub.PSAPI.DLL_GetModuleBaseNameA
mov edi, dword [sym.imp.MSVCRT.dll__stricmp]
lea eax, [esp + 0x128]
push str.arr_srvs.exe
push eax
call edi
pop ecx
test eax, eax
pop ecx
je 0x426810
lea eax, [esp + 0x128]
push str.arr_isrv.exe
push eax
call edi
pop ecx
test eax, eax
pop ecx
jne 0x426b20
cmp dword [0x441ff4], ebx
je 0x426891
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 3
je 0x426833
mov ecx, dword [0x441fdc]
cmp dword [ecx], ebx
jne 0x426891
cmp eax, 3
jle 0x426891
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
call esi
cmp dword [0x43e9c8], ebx
mov ebp, eax
jge 0x426851
mov eax, dword [0x441fa0]
mov dword [0x43e9c8], eax
call fcn.0041c4b1
test eax, eax
je 0x426883
push 3
push dword [0x43e9c8]
push 0x3c4
push str.C:_build_rel_sp_8_4_6_2_srcwindowsSHARED_sslsock_sslsock.cpp
call fcn.0041c4e1
push str.AskNamePwd__try_to_launch_arr_getp_to_get_proxy_information_n
call fcn.0041c506
add esp, 0x14
call fcn.0041c4cc
push edi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push ebp
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x40
xor eax, eax
pop ecx
lea edi, [esp + 0x25]
mov byte [esp + 0x24], bl
push 0x43e9d0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x4453d4
stosb byte es:[edi], al
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
je 0x4268c5
cmp dword [0x4455a4], ebx
mov dword [esp + 0x10], ebx
je 0x4268cd
mov dword [esp + 0x10], 1
push ebx
call dword [sym.imp.MSVCRT.dll_time]
pop ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, dword [sym.imp.MSVCRT.dll_sprintf]
push eax
lea eax, [esp + 0x238]
push str.GlobalArrayProxyUserInputWaitEvent__d__d__d
push eax
call edi
add esp, 0x14
lea eax, [esp + 0x22c]
push eax
push ebx
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov ebp, eax
push ebp
call fcn.0041cbb6
lea eax, [esp + 0x230]
push eax
lea eax, [esp + 0x2c]
push dword [esp + 0x18]
push str.arr_getp.exe__getproxyuser__d__s
push eax
call edi
add esp, 0x14
lea eax, [esp + 0x24]
push ebx
push ebx
push ebx
push ebx
push eax
call sub.MSVCRT.dll_strlen
pop ecx
inc eax
push eax
lea eax, [esp + 0x38]
push eax
push ebx
push 0x3b
call fcn.0041decf
add esp, 0x20
test eax, eax
jne 0x4269e2
cmp dword [0x441ff4], ebx
je 0x426ba5
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 1
je 0x426989
mov ecx, dword [0x441fdc]
cmp dword [ecx], ebx
jne 0x426b20
cmp eax, 1
jle 0x426b20
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
call esi
cmp dword [0x43e9c8], ebx
mov ebp, eax
jge 0x4269a7
mov eax, dword [0x441fa0]
mov dword [0x43e9c8], eax
call fcn.0041c4b1
test eax, eax
je 0x426b12
push 1
push dword [0x43e9c8]
push 0x3d2
push str.C:_build_rel_sp_8_4_6_2_srcwindowsSHARED_sslsock_sslsock.cpp
call fcn.0041c4e1
lea eax, [esp + 0x34]
push eax
push str.AskNamePwd:_Fail_to_launch__s_n
call fcn.0041c506
add esp, 0x18
jmp 0x426b0d
push 0x7530
push ebp
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x426b20
cmp dword [0x441ff4], ebx
je 0x426a77
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 3
je 0x426a19
mov ecx, dword [0x441fdc]
cmp dword [ecx], ebx
jne 0x426a77
cmp eax, 3
jle 0x426a77
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
call esi
cmp dword [0x43e9c8], ebx
mov ebp, eax
jge 0x426a37
mov eax, dword [0x441fa0]
mov dword [0x43e9c8], eax
call fcn.0041c4b1
test eax, eax
je 0x426a69
push 3
push dword [0x43e9c8]
push 0x3d7
push str.C:_build_rel_sp_8_4_6_2_srcwindowsSHARED_sslsock_sslsock.cpp
call fcn.0041c4e1
push str.AskNamePwd:_Try_to_get_proxy_user_again_n
call fcn.0041c506
add esp, 0x14
call fcn.0041c4cc
push edi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push ebp
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x445494
push 0x445514
push 0x445414
call fcn.004219e7
add esp, 0xc
test eax, eax
jne 0x426eb8
jmp 0x426b20
cmp dword [0x441ff4], ebx
je 0x426ba5
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 3
je 0x426ac2
mov ecx, dword [0x441fdc]
cmp dword [ecx], ebx
jne 0x426b20
cmp eax, 3
jle 0x426b20
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
call esi
cmp dword [0x43e9c8], ebx
mov ebp, eax
jge 0x426ae0
mov eax, dword [0x441fa0]
mov dword [0x43e9c8], eax
call fcn.0041c4b1
test eax, eax
je 0x426b12
push 3
push dword [0x43e9c8]
push 0x3e3
push str.C:_build_rel_sp_8_4_6_2_srcwindowsSHARED_sslsock_sslsock.cpp
call fcn.0041c4e1
push str.AskNamePwd__in_session_0_and_os_is___vista_n
call fcn.0041c506
add esp, 0x14
call fcn.0041c4cc
push edi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push ebp
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [0x441ff4], ebx
je 0x426ba5
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 3
je 0x426b43
mov ecx, dword [0x441fdc]
cmp dword [ecx], ebx
jne 0x426ba5
cmp eax, 3
jle 0x426ba5
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edi, eax
call esi
cmp dword [0x43e9c8], ebx
mov ebp, eax
jge 0x426b61
mov eax, dword [0x441fa0]
mov dword [0x43e9c8], eax
call fcn.0041c4b1
test eax, eax
je 0x426b97
push 3
push dword [0x43e9c8]
push 0x3e6
push str.C:_build_rel_sp_8_4_6_2_srcwindowsSHARED_sslsock_sslsock.cpp
call fcn.0041c4e1
push dword [esp + 0x24]
push str.AskNamePwd:_prompt_a_dialog_to_get_proxy_user_pass_in_session__u_n
call fcn.0041c506
add esp, 0x18
call fcn.0041c4cc
push edi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push ebp
call dword [sym.imp.KERNEL32.dll_SetLastError]
push str.ArrayApi.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
cmp edi, ebx
jne 0x426d2f
cmp dword [0x441ff4], ebx
je 0x426c48
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 2
je 0x426be1
mov ecx, dword [0x441fdc]
cmp dword [ecx], ebx
jne 0x426c48
cmp eax, 2
jle 0x426c48
mov ebp, dword [sym.imp.WS2_32.dll_WSAGetLastError]
call ebp
mov edi, eax
call esi
cmp dword [0x43e9c8], ebx
mov dword [esp + 0x10], eax
jge 0x426c03
mov eax, dword [0x441fa0]
mov dword [0x43e9c8], eax
call fcn.0041c4b1
test eax, eax
je 0x426c35
push 2
push dword [0x43e9c8]
push 0x3ea
push str.C:_build_rel_sp_8_4_6_2_srcwindowsSHARED_sslsock_sslsock.cpp
call fcn.0041c4e1
push str.Failed_to_start_load_ArrayApi.dll__so_resource_will_be_losted_n
call fcn.0041c506
add esp, 0x14
call fcn.0041c4cc
push edi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x426c4e
mov ebp, dword [sym.imp.WS2_32.dll_WSAGetLastError]
push str.pubapps.ocx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
cmp edi, ebx
jne 0x426d35
cmp dword [0x441ff4], ebx
je 0x426ce5
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 2
je 0x426c86
mov ecx, dword [0x441fdc]
cmp dword [ecx], ebx
jne 0x426ce5
cmp eax, 2
jle 0x426ce5
call ebp
mov edi, eax
call esi
cmp dword [0x43e9c8], ebx
mov dword [esp + 0x10], eax
jge 0x426ca2
mov eax, dword [0x441fa0]
mov dword [0x43e9c8], eax
call fcn.0041c4b1
test eax, eax
je 0x426cd4
push 2
push dword [0x43e9c8]
push 0x3ee
push str.C:_build_rel_sp_8_4_6_2_srcwindowsSHARED_sslsock_sslsock.cpp
call fcn.0041c4e1
push str.Failed_to_start_load_pubapps.ocx__so_resource_will_be_losted_n
call fcn.0041c506
add esp, 0x14
call fcn.0041c4cc
push edi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0x40
xor eax, eax
pop ecx
lea edi, [esp + 0x25]
mov byte [esp + 0x24], bl
push 0x103
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea eax, [esp + 0x24]
push str.Downloaded_Program_FilesArr_HIAX.ocx
push eax
call sub.MSVCRT.dll_strcat
pop ecx
lea eax, [esp + 0x28]
pop ecx
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
cmp edi, ebx
je 0x426ec5
jmp 0x426d35
mov ebp, dword [sym.imp.WS2_32.dll_WSAGetLastError]
push ebx
push 0x42475b
push dword [0x441e30]
push 0x66
push edi
call dword [sym.imp.USER32.dll_DialogBoxParamA]
push edi
mov dword [esp + 0x14], eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [esp + 0x10], ebx
jg 0x426dfd
cmp dword [0x441ff4], ebx
je 0x426dfd
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 1
je 0x426d86
mov ecx, dword [0x441fdc]
cmp dword [ecx], ebx
jne 0x426dfd
cmp eax, 1
jle 0x426dfd
call ebp
mov dword [esp + 0x1c], eax
call esi
cmp dword [0x43e9c8], ebx
mov dword [esp + 0x20], eax
jge 0x426da4
mov eax, dword [0x441fa0]
mov dword [0x43e9c8], eax
call fcn.0041c4b1
test eax, eax
je 0x426de9
push 1
push dword [0x43e9c8]
push 0x402
push str.C:_build_rel_sp_8_4_6_2_srcwindowsSHARED_sslsock_sslsock.cpp
call fcn.0041c4e1
add esp, 0x10
push 0x66
push dword [0x441e30]
push edi
call esi
push eax
push dword [esp + 0x20]
push str.Failed_to_start_dialog_to_get_username_and_password___result_d__error_d__hInst0x_p__hWnd0x_p__IDD_d_n
call fcn.0041c506
add esp, 0x18
call fcn.0041c4cc
push dword [esp + 0x1c]
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push dword [esp + 0x20]
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [esp + 0x10], 1
jne 0x426f4f
push 0x445494
mov edi, 0x445414
push 0x445514
push edi
call fcn.00421a67
add esp, 0xc
cmp dword [0x441ff4], ebx
je 0x426f4f
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 3
je 0x426e4f
mov ecx, dword [0x441fdc]
cmp dword [ecx], ebx
jne 0x426f4f
cmp eax, 3
jle 0x426f4f
call ebp
mov ebp, eax
call esi
cmp dword [0x43e9c8], ebx
mov esi, eax
jge 0x426e69
mov eax, dword [0x441fa0]
mov dword [0x43e9c8], eax
call fcn.0041c4b1
test eax, eax
je 0x426e9c
push 3
push dword [0x43e9c8]
push 0x408
push str.C:_build_rel_sp_8_4_6_2_srcwindowsSHARED_sslsock_sslsock.cpp
call fcn.0041c4e1
push edi
push str.Proxy_user_name__s_is_saved_n
call fcn.0041c506
add esp, 0x18
call fcn.0041c4cc
push ebp
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x426f4f
mov dword [esp + 0x10], esi
jmp 0x426f4f
mov dword [esp + 0x10], 1
jmp 0x426f4f
cmp dword [0x441ff4], ebx
je 0x426f47
mov eax, dword [0x441fd4]
mov eax, dword [eax]
cmp eax, 1
je 0x426ee8
mov ecx, dword [0x441fdc]
cmp dword [ecx], ebx
jne 0x426f47
cmp eax, 1
jle 0x426f47
call ebp
mov edi, eax
call esi
cmp dword [0x43e9c8], ebx
mov esi, eax
jge 0x426f02
mov eax, dword [0x441fa0]
mov dword [0x43e9c8], eax
call fcn.0041c4b1
test eax, eax
je 0x426f39
push 1
push dword [0x43e9c8]
push 0x3f6
push str.C:_build_rel_sp_8_4_6_2_srcwindowsSHARED_sslsock_sslsock.cpp
call fcn.0041c4e1
lea eax, [esp + 0x34]
push eax
push str.Failed_to_start_load__s__so_resource_will_be_losted_n
call fcn.0041c506
add esp, 0x18
call fcn.0041c4cc
push edi
call dword [sym.imp.WS2_32.dll_WSASetLastError]
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [esp + 0x10], 2
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_SetEvent]
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x31c
ret