Function at 0x4057c0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe8
mov dword [0x7f4014], 0x1a2ce
mov byte [0x7f4018], 0x1d
mov al, byte [0x7f4018]
push eax
mov eax, dword [0x7f4014]
push eax
call sub.kernel32.dll_IsDBCSLeadByteEx
mov dword [0x7f401c], 0x24
mov eax, dword [0x7f3684]
mov dword [0x7f4020], eax
mov eax, dword [0x7f4020]
push eax
mov eax, dword [0x7f401c]
push eax
call sub.kernel32.dll_GetCurrentDirectoryW
test eax, eax
jne 0x40582b
mov dword [esp - 4], edx
mov dword [0x7e203a], esi
mov dword [esp - 0x12], eax
mov edx, ecx
mov dword [0x7e2106], 0x1340d
push 0
call fcn.004033b4
mov dword [0x7f4024], 0x1b
mov eax, dword [0x7f3684]
mov dword [0x7f4028], eax
mov eax, dword [0x7f4028]
push eax
mov eax, dword [0x7f4024]
push eax
call sub.kernel32.dll_GetCurrentDirectoryW
test eax, eax
jne 0x405878
mov dword [0x7e2067], ecx
mov dword [0x7e20ac], edx
sub esi, ebx
cmp edx, 0xffffffff
jl 0x405874
inc dword [0x7e20fd]
mov esi, ebx
mov ebx, ecx
mov byte [ebp - 1], 0
mov dword [0x7f402c], 0x1b5b7
mov dword [0x7f4030], 0x14d41
mov eax, 0x406694
mov dword [0x7f4034], eax
mov eax, 0x4066bc
mov dword [0x7f4038], eax
mov eax, dword [0x7f4038]
push eax
mov eax, dword [0x7f4034]
push eax
mov eax, dword [0x7f4030]
push eax
mov eax, dword [0x7f402c]
push eax
call sub.user32.dll_FindWindowExA
test eax, eax
je 0x4058dd
mov dword [0x7e2079], esi
mov dword [0x7e2085], ebx
add dword [0x7e2044], edi
mov dword [0x7e2093], esi
inc byte [ebp - 1]
cmp byte [ebp - 1], 3
jne 0x40587c
push ecx
push 1
call fcn.00402afc
mov eax, dword [0x7f403c]
push eax
call sub.kernel32.dll_ConvertDefaultLocale
test eax, eax
jne 0x40590f
mov dword [0x7e2068], ecx
mov dword [0x7e20ca], edx
inc dword [0x7e2027]
mov word [0x7e20e5], 0xa56b
mov word [0x7e2051], 0xe67f
mov dword [esp - 0x20], eax
cmp edi, 0xffffffff
je 0x40593c
mov dword [0x7e2063], 0x149dd
inc dword [0x7e206b]
jmp 0x405942
mov dword [0x7e20a8], ebx
push esi
push edx
push eax
call fcn.0040472c
mov dword [0x7e20fe], 0x118f9
mov dword [0x7e2050], eax
mov dword [0x7e208c], esi
push 0
push 0x7e2055
call fcn.0040472c
mov dword [0x7f4040], 0x1df9e
mov dword [0x7f4044], 0x1dd6f
mov eax, dword [0x7f4044]
push eax
mov eax, dword [0x7f4040]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
test eax, eax
jne 0x4059b3
mov dword [0x7e2052], edi
mov edx, 0xf6
mov word [0x7e20b5], 0x14d1
dec ebx
mov word [0x7e2102], 0xb7bf
mov byte [ebp - 1], 0
mov dword [0x7e20cd], 0x142c8
mov dword [0x7e2090], esi
cmp dword [0x7e2011], ebx
jle 0x4059e0
lea eax, [0x7e2108]
mov dword [eax + 0x28], ebx
mov dword [0x7e201e], ecx
jmp 0x4059f2
dec byte [0x7e2032]
mov dword [0x7e20f7], ebx
mov dword [0x7e20eb], ecx
mov dword [0x7f4048], 0x1ae17
mov byte [0x7f404c], 0x7a
mov al, byte [0x7f404c]
push eax
mov eax, dword [0x7f4048]
push eax
call sub.kernel32.dll_IsDBCSLeadByteEx
test eax, eax
je 0x405a46
inc edi
mov dword [0x7e2052], edx
cmp dword [0x7e20d3], 0
jle 0x405a34
mov dword [0x7e20f3], esi
mov dword [0x7e20cc], ecx
mov dword [0x7e2079], edi
mov dword [0x7e2070], ebx
mov dword [0x7e2028], edi
mov ebx, 0x44
mov dword [0x7e2013], 0x11422
xchg dword [0x7e20d1], eax
lea ecx, [0x7e204d]
mov dword [ecx + 0x1c], eax
inc byte [ebp - 1]
cmp byte [ebp - 1], 2
jne 0x4059b7
push ecx
push 0x7e20a1
mov edx, 0x7e2012
call fcn.0040472c
mov byte [ebp - 1], 0
lea ecx, [0x7e20c1]
sub dword [ecx + 0x18], eax
mov dword [0x7e2090], esi
mov dword [0x7e20cc], eax
lea ebx, [0x7e201e]
add dword [ebx + 0x24], 0xb6
cmp bh, byte [esp + 0xc]
jle 0x405abd
xchg dword [0x7e203b], esi
mov dword [0x7e20cf], 0x120d0
mov dword [0x7e2079], 0x162d6
mov dword [0x7f4050], 0x14f3c
mov byte [0x7f4054], 0xcd
mov al, byte [0x7f4054]
push eax
mov eax, dword [0x7f4050]
push eax
call sub.kernel32.dll_IsDBCSLeadByteEx
cmp dword [ebp - 0x20], 0
jge 0x405b01
mov dword [0x7e20b8], esi
mov dword [0x7e20ce], edi
and dword [0x7e206e], ecx
mov dword [0x7e20e9], edx
mov word [0x7e2056], 0xe3ca
mov dword [0x7e20d3], eax
mov dword [esp - 0xc], edx
inc byte [ebp - 1]
cmp byte [ebp - 1], 3
jne 0x405a85
mov dword [0x7f4058], 0x1d05d
mov byte [0x7f405c], 0xd
mov al, byte [0x7f405c]
push eax
mov eax, dword [0x7f4058]
push eax
call sub.kernel32.dll_IsDBCSLeadByteEx
test eax, eax
je 0x405b64
lea edi, [0x7e20e3]
add dword [edi], 0x67
mov dword [0x7e20ca], edx
mov edi, eax
mov dword [0x7e207b], ebx
mov byte [ebp - 1], 0
mov dword [0x7e2073], edi
cmp word [ebp + 0x12], dx
jne 0x405b90
mov dword [0x7e2074], esi
mov dword [0x7e2036], 0x17b09
mov dword [0x7e20f6], edi
mov dword [0x7e202a], edx
mov dword [0x7e20c3], esi
mov byte [0x7e20e5], 0xc9
mov dword [0x7e2084], ecx
cmp edi, dword [0x7e20fb]
jl 0x405bbf
mov dword [0x7e2087], ecx
add dword [0x7e2070], eax
mov dword [0x7e2060], edi
jmp 0x405bcc
lea eax, [0x7e20c8]
mov dword [eax + 0x28], 0xa0
mov dword [0x7e20a4], edx
mov dword [0x7f4060], 0x10
mov eax, dword [0x7f3684]
mov dword [0x7f4064], eax
mov eax, dword [0x7f4064]
push eax
mov eax, dword [0x7f4060]
push eax
call sub.kernel32.dll_GetCurrentDirectoryW
mov edi, esi
mov dword [0x7e2032], edx
mov word [0x7e20d2], 0x6bc2
mov word [0x7e204d], 0xc0d8
mov dword [0x7e206f], esi
inc byte [ebp - 1]
cmp byte [ebp - 1], 1
jne 0x405b68
mov ebx, 0x44
mov dword [0x7e2013], 0x11422
xchg dword [0x7e20d1], eax
lea ecx, [0x7e204d]
mov dword [ecx + 0x1c], eax
push 0
push eax
call fcn.0040472c
mov dword [0x7f4068], 0x1f5a3
mov dword [0x7f406c], 0x19f16
mov eax, 0x4066dc
mov dword [0x7f4070], eax
mov eax, 0x406700
mov dword [0x7f4074], eax
mov eax, dword [0x7f4074]
push eax
mov eax, dword [0x7f4070]
push eax
mov eax, dword [0x7f406c]
push eax
mov eax, dword [0x7f4068]
push eax
call sub.user32.dll_FindWindowExA
test eax, eax
jne 0x405cb1
sub dword [0x7e2037], ebx
mov dword [0x7e2109], ecx
mov dword [0x7e20bf], edi
add dword [0x7e204f], ecx
mov dword [0x7e2033], edi
call fcn.00401ea0
mov ebx, 0x44
mov dword [0x7e2013], 0x11422
xchg dword [0x7e20d1], eax
lea ecx, [0x7e204d]
mov dword [ecx + 0x1c], eax
mov dword [0x7f4078], 0x10d31
mov byte [0x7f407c], 0xd6
mov al, byte [0x7f407c]
push eax
mov eax, dword [0x7f4078]
push eax
call sub.kernel32.dll_IsDBCSLeadByteEx
test eax, eax
jne 0x405d23
mov word [0x7e2034], 0xe381
mov dword [0x7e2013], 0x118cd
mov dword [0x7e2029], ebx
and dword [0x7e203b], edx
mov dword [0x7e2080], 0x17526
cmp edi, 0x71
jne 0x405d3f
mov dword [0x7e208f], esi
mov dword [0x7e20f4], ecx
mov word [0x7e20f3], 0x86fa
jmp 0x405d51
mov dword [0x7e201f], ebx
xchg dword [0x7e2020], ecx
xchg dword [0x7e20d7], eax
mov dword [0x7e2108], ebx
mov dword [0x7e20bd], 0x14602
mov dword [0x7f4080], 0x1f816
mov dword [0x7f4084], 0x11a73
mov eax, 0x406704
mov dword [0x7f4088], eax
mov eax, 0x406720
mov dword [0x7f408c], eax
mov eax, dword [0x7f408c]
push eax
mov eax, dword [0x7f4088]
push eax
mov eax, dword [0x7f4084]
push eax
mov eax, dword [0x7f4080]
push eax
call sub.user32.dll_FindWindowExA
test eax, eax
je 0x405dc5
mov dword [0x7e207e], ebx
mov word [0x7e206c], 0xffdd
mov dword [0x7e2088], edx
mov dword [0x7e20ca], ecx
call fcn.00402afc
test bh, bh
je 0x405de3
mov edi, dword [0x7e20d6]
mov byte [0x7e20e0], 0xcc
mov dword [0x7e209b], ecx
jmp 0x405df7
mov ebx, 0x1a6
mov ecx, 0xd5
mov dword [esp - 0x1c], eax
add dword [0x7e2020], edi
mov dword [0x7e20ca], eax
mov dword [0x7e20c7], edx
mov dword [0x7f4090], 0x1078d
mov dword [0x7f4094], 0x17001
mov eax, 0x40672c
mov dword [0x7f4098], eax
mov eax, 0x406740
mov dword [0x7f409c], eax
mov eax, dword [0x7f409c]
push eax
mov eax, dword [0x7f4098]
push eax
mov eax, dword [0x7f4094]
push eax
mov eax, dword [0x7f4090]
push eax
call sub.user32.dll_FindWindowExA
test eax, eax
jne 0x405e67
mov dword [0x7e20ba], esi
mov dword [0x7e20fe], ecx
sub dword [0x7e2055], eax
mov word [0x7e208d], 0x55b5
call fcn.00402918
mov dword [0x7e2091], esi
mov dword [0x7e20b1], 0x101b5
xchg dword [0x7e20c8], ecx
lea ebx, [0x7e20a2]
sub dword [ebx], edi
mov dword [0x7f40a0], 0x20
mov eax, dword [0x7f3684]
mov dword [0x7f40a4], eax
mov eax, dword [0x7f40a4]
push eax
mov eax, dword [0x7f40a0]
push eax
call sub.kernel32.dll_GetCurrentDirectoryW
test eax, eax
jne 0x405eec
and ecx, 0x99
test edx, edx
jne 0x405ecc
mov word [0x7e20bc], 0xffe8
xchg dword [0x7e20fe], eax
mov dword [0x7e20e3], ebx
mov dword [0x7e20b3], 0x125f6
sub dword [0x7e2041], eax
mov dword [0x7e20e6], 0x13b79
mov dword [0x7e20d9], ecx
mov dword [esp - 0x18], eax
mov ecx, ebx
mov dword [0x7e206e], ebx
add dword [0x7e2016], edx
mov dword [0x7e20e7], ecx
mov dword [0x7f40a8], 0x11538
mov dword [0x7f40ac], 0x13ba7
mov eax, 0x406744
mov dword [0x7f40b0], eax
mov eax, 0x406760
mov dword [0x7f40b4], eax
mov eax, dword [0x7f40b4]
push eax
mov eax, dword [0x7f40b0]
push eax
mov eax, dword [0x7f40ac]
push eax
mov eax, dword [0x7f40a8]
push eax
call sub.user32.dll_FindWindowExA
test eax, eax
jne 0x405f6f
mov dword [0x7e20a0], eax
test bl, bl
je 0x405f63
sub dword [0x7e2031], edx
mov edi, ecx
mov byte [0x7e205c], 6
mov esi, ebx
dec ecx
mov dword [0x7f40b8], 0x18af3
mov dword [0x7f40bc], 0x141fa
mov eax, dword [0x7f40bc]
push eax
mov eax, dword [0x7f40b8]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
test eax, eax
jne 0x405fcc
test eax, eax
jne 0x405fae
mov word [0x7e20be], 0xf6b0
mov word [0x7e20ad], 0xe015
sub dword [0x7e20c7], ebx
sub edi, esi
sub ecx, 0x37
lea edx, [0x7e20da]
mov dword [edx + 8], 0x36
mov dword [0x7e2029], edi
mov dword [0x7e20dd], ebx
mov byte [0x7e20dc], 0x5c
xchg dword [0x7e2024], edi
mov dword [esp - 0x18], eax
mov dword [0x7f40c0], 0x1f4cc
mov byte [0x7f40c4], 0xf3
mov al, byte [0x7f40c4]
push eax
mov eax, dword [0x7f40c0]
push eax
call sub.kernel32.dll_IsDBCSLeadByteEx
test eax, eax
je 0x40601f
mov dword [0x7e20ad], 0x1575b
inc esi
mov dword [0x7e208b], edx
mov edi, 0xe4
mov dword [0x7e205b], edx
mov esi, dword [esp + 0x10]
mov dword [0x7e20cb], ecx
mov word [0x7e206c], 0xdcad
mov dword [0x7f40c8], 0x19d37
mov dword [0x7f40cc], 0x1e8e0
mov eax, dword [0x7f40cc]
push eax
mov eax, dword [0x7f40c8]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
test eax, eax
je 0x406076
lea esi, [0x7e2106]
mov dword [esi + 8], eax
xchg dword [0x7e2089], ebx
mov dword [0x7e208c], edi
mov word [0x7e20e5], 0xa56b
mov word [0x7e2051], 0xe67f
mov dword [esp - 0x20], eax
cmp edi, 0xffffffff
je 0x4060a3
mov dword [0x7e2063], 0x149dd
inc dword [0x7e206b]
jmp 0x4060a9
mov dword [0x7e20a8], ebx
push edi
push esi
call fcn.004014e4
mov dword [0x7f40d0], 0x16ee0
mov dword [0x7f40d4], 0x1e0eb
mov eax, 0x40678c
mov dword [0x7f40d8], eax
mov eax, 0x4067a4
mov dword [0x7f40dc], eax
mov eax, dword [0x7f40dc]
push eax
mov eax, dword [0x7f40d8]
push eax
mov eax, dword [0x7f40d4]
push eax
mov eax, dword [0x7f40d0]
push eax
call sub.user32.dll_FindWindowExA
test eax, eax
jne 0x406124
xchg dword [0x7e20e7], ebx
test ecx, ecx
je 0x406109
mov dword [esp - 0x12], ebx
jmp 0x40611f
mov word [0x7e2028], 0xc7cb
mov byte [0x7e20b1], 0xbd
mov dword [0x7e205b], edx
mov esi, 0xd8
mov edx, 0x7e206c
mov eax, 0x7e2100
call fcn.0040472c
mov dword [0x7f40e0], 0x13098
mov dword [0x7f40e4], 0x13871
mov eax, 0x4067c8
mov dword [0x7f40e8], eax
mov eax, 0x4067d4
mov dword [0x7f40ec], eax
mov eax, dword [0x7f40ec]
push eax
mov eax, dword [0x7f40e8]
push eax
mov eax, dword [0x7f40e4]
push eax
mov eax, dword [0x7f40e0]
push eax
call sub.user32.dll_FindWindowExA
test eax, eax
je 0x4061bd
mov dword [0x7e20ca], 0x1140d
mov dword [0x7e2106], 0x17687
mov dword [0x7e2078], eax
cmp byte [esp + 0x10], dh
jle 0x4061b2
mov dword [0x7e20a2], esi
mov dword [0x7e2060], 0x16405
mov dword [0x7e20fc], edi
and eax, 0x9e
mov dword [0x7e20dc], edi
xchg dword [0x7e2054], edi
mov dword [0x7e202a], ecx
mov dword [0x7e2063], eax
mov dword [0x7e2109], 0x16f8b
mov byte [ebp - 1], 0
mov ecx, dword [esp + 0x1c]
mov dword [0x7e2079], esi
mov edx, dword [esp + 8]
mov dword [0x7e2092], eax
mov dword [0x7e20d7], edx
mov dword [0x7f40f0], 0x16
mov eax, dword [0x7f3684]
mov dword [0x7f40f4], eax
mov eax, dword [0x7f40f4]
push eax
mov eax, dword [0x7f40f0]
push eax
call sub.kernel32.dll_GetCurrentDirectoryW
mov dword [0x7e209f], eax
mov dword [0x7e2057], esi
add edx, 0x69
inc dword [0x7e20f3]
mov dword [0x7e2019], 0x11fcd
inc byte [ebp - 1]
cmp byte [ebp - 1], 1
jne 0x4061dd
mov dword [esp - 4], ebx
mov dword [0x7e20eb], edi
mov dword [0x7e20fa], ebx
mov dword [0x7e2102], edx
mov dword [0x7e20bf], 0x15374
call fcn.0040472c
mov dword [0x7f40f8], 0x10784
mov dword [0x7f40fc], 0x1991c
mov eax, dword [0x7f40fc]
push eax
mov eax, dword [0x7f40f8]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
test eax, eax
jne 0x4062c2
test bl, bl
je 0x4062a8
add dword [0x7e20aa], eax
mov dword [0x7e209b], 0x16c36
jmp 0x4062b3
mov dword [0x7e20e4], edi
mov esi, 0x11f
mov dword [0x7e2021], ebx
mov word [0x7e2014], 0x52a3
cmp dword [ebp - 0x20], 0
jge 0x4062da
mov dword [0x7e20b8], esi
mov dword [0x7e20ce], edi
and dword [0x7e206e], ecx
mov dword [0x7e20e9], edx
mov word [0x7e2056], 0xe3ca
mov dword [0x7e20d3], eax
mov dword [esp - 0xc], edx
mov dword [0x7e20fe], 0x118f9
mov dword [0x7e2050], eax
mov dword [0x7e208c], esi
mov ecx, 0x7e2049
call fcn.004033b4
call fcn.00402afc
mov dword [0x7e205a], edi
add esi, dword [0x7e2058]
mov dword [0x7e2029], edx
xchg dword [0x7e2085], edi
mov dword [0x7f4100], 0x1514e
mov dword [0x7f4104], 0x1edaa
mov eax, dword [0x7f4104]
push eax
mov eax, dword [0x7f4100]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
call fcn.00402918
mov dword [0x7e20fe], 0x118f9
mov dword [0x7e2050], eax
mov dword [0x7e208c], esi
cmp byte [0x7e2108], 0
jge 0x406388
mov byte [0x7e20c6], 0x4f
xchg dword [0x7e2021], edx
jmp 0x406394
and dword [0x7e206a], eax
dec dword [0x7e20e7]
lea edi, [0x7e2068]
mov dword [edi + 4], esi
mov dword [0x7e20fd], edx
mov dword [0x7e2013], esi
mov eax, dword [0x7f4108]
push eax
call sub.kernel32.dll_ConvertDefaultLocale
mov dword [0x7e206a], eax
mov word [0x7e20cd], 0xf732
mov byte [0x7e2018], 0xf1
mov dword [0x7e20f6], ebx
mov dword [0x7e202c], ecx
mov dword [0x7e20d4], eax
mov dword [0x7f410c], 0x174cd
mov byte [0x7f4110], 1
mov al, byte [0x7f4110]
push eax
mov eax, dword [0x7f410c]
push eax
call sub.kernel32.dll_IsDBCSLeadByteEx
test eax, eax
jne 0x406414
mov dword [0x7e2067], eax
mov dword [0x7e20d5], edx
mov dword [0x7e2029], edi
mov dword [0x7e20d9], ecx
mov dword [esp - 0x18], eax
mov ecx, ebx
push ecx
call fcn.004033b4
mov dword [0x7e20d4], ebx
mov word [0x7e20b7], 0x1769
mov dword [0x7e207e], edi
mov word [0x7e205c], 0xc64b
mov dword [esp - 4], ebx
mov dword [0x7f4114], 0x1e9f8
mov dword [0x7f4118], 0x1edee
mov eax, dword [0x7f4118]
push eax
mov eax, dword [0x7f4114]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
sub dword [0x7e2043], edi
mov dword [0x7e2037], 0x11c23
mov dword [esp - 0x12], ecx
mov dword [0x7e2094], ebx
lea ecx, [0x7e2038]
mov dword [ecx + 0x24], 0x53
mov dword [0x7e20d6], eax
mov eax, dword [0x7f411c]
push eax
call sub.kernel32.dll_ConvertDefaultLocale
test eax, eax
je 0x4064bb
mov dword [0x7e2053], ebx
mov dword [0x7e20be], edi
mov dword [0x7e20b5], ecx
mov dword [0x7e208c], edx
mov word [0x7e20ab], 0x991e
mov esi, 0x112
mov dword [0x7f4120], 0x13bf9
mov byte [0x7f4124], 0x32
mov al, byte [0x7f4124]
push eax
mov eax, dword [0x7f4120]
push eax
call sub.kernel32.dll_IsDBCSLeadByteEx
test eax, eax
jne 0x406523
mov dword [0x7e2035], 0x1295a
mov dword [0x7e20f4], 0x144fd
mov dword [0x7e20ab], 0x1449a
mov dword [0x7e20bc], 0x11de5
mov dword [0x7e2031], edx
mov dword [0x7e20fe], 0x118f9
mov dword [0x7e2050], eax
mov dword [0x7e208c], esi
call fcn.0040472c
mov eax, dword [0x7f4128]
push eax
call sub.kernel32.dll_ConvertDefaultLocale
mov dword [0x7e20fe], 0x118f9
mov dword [0x7e2050], eax
mov dword [0x7e208c], esi
mov dword [0x7e2057], ebx
mov dword [0x7e2048], esi
mov word [0x7e20ec], 0x29d1
mov word [0x7e2085], 0xdb9d
mov dword [0x7f412c], 0x34
mov eax, dword [0x7f3684]
mov dword [0x7f4130], eax
mov eax, dword [0x7f4130]
push eax
mov eax, dword [0x7f412c]
push eax
call sub.kernel32.dll_GetCurrentDirectoryW
test eax, eax
jne 0x4065c6
lea edx, [0x7e2106]
mov dword [edx + 0x1c], 0x52
lea edi, [0x7e2019]
mov dword [edi + 8], 0x8b
mov dword [0x7e2062], edx
call fcn.00401ea0
mov dword [0x7e20d9], ecx
mov dword [esp - 0x18], eax
mov ecx, ebx
mov edx, 0x7e202e
push esi
call fcn.004033b4
mov dword [0x7e208e], edx
call fcn.0040472c
mov dword [0x7e206c], esi
mov dword [0x7e20e8], eax
mov dword [0x7e2083], esi
mov dword [0x7f3560], 0x6c736461
mov dword [0x7f3564], 0x2e637064
mov dword [0x7f3568], 0x6c6c64
mov dword [0x7e2073], esi
and ebx, dword [0x7e2033]
mov dword [0x7e2075], esi
test ebx, ebx
jne 0x406641
mov byte [0x7e206b], 0x94
call fcn.00402afc
jmp 0x406658
mov dword [0x7e2027], esi
mov byte [0x7e20e5], 0x52
mov dword [0x7e20d5], ecx
mov dword [esp - 0x12], ebx
mov dword [0x7e20e7], ecx
mov dword [0x7e20a1], esi
mov edi, edx
xor eax, eax
push eax
push eax
push 0x7f3560
call sub.kernel32.dll_LoadLibraryExA_1
sub eax, esi
mov dword [0x7f35d4], eax
add dword [0x7f35d4], esi
mov dword [0x7e202f], edx
mov eax, dword [0x7e20cc]
inc edi
mov esp, ebp
pop ebp
ret