Function at 0x4092e0
Capabilities:
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x44351c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3c8
mov eax, dword [0x452504]
push ebx
push ebp
push esi
push edi
push 0x17c
push 0x30c
xor ebx, ebx
push ebx
mov dword [esp + 0x3e0], eax
push ebx
lea eax, [esp + 0x64]
push eax
mov esi, ecx
call dword [sym.imp.USER32.dll_SetRect]
mov ebp, 0x1b3
mov edi, 0x2f3
mov dword [esi + 0x58], 3
mov dword [esi + 0x5c], ebx
mov dword [esi + 0x60], ebx
mov dword [esi + 0x70], esi
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xc8], 0xff
mov dword [esp + 0xcc], edi
mov dword [esp + 0xd0], 0x10c
mov dword [esp + 0xd4], ebp
mov dword [esp + 0xd8], 0x111
mov dword [esp + 0xdc], edi
mov dword [esp + 0xe0], 0x11e
call fcn.00415fa0
lea ecx, [eax + 0x51f0]
call fcn.0040f180
cmp eax, ebx
mov dword [esp + 0x34], eax
je 0x4093f2
mov eax, ebp
mov dword [esp + 0xc4], eax
mov dword [esp + 0xd4], eax
mov edx, edi
mov eax, 0x11d
mov dword [esp + 0xd8], eax
mov ecx, 0x106
mov ebp, 0x113
mov edi, 0x12a
mov eax, edx
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], edx
mov dword [esp + 0xd0], ebp
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], edi
push 0x30
call fcn.0043565d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x3e0], ebx
je 0x409416
mov ecx, eax
call fcn.004015a0
mov edi, eax
jmp 0x409418
xor edi, edi
push 0x126
mov dword [esp + 0x3e4], 0xffffffff
call fcn.00401810
push eax
mov ecx, edi
call fcn.00401610
push 0x50
call fcn.0043565d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x3e0], 1
je 0x40945d
mov ecx, eax
call fcn.0040e4d0
mov ebp, eax
jmp 0x40945f
xor ebp, ebp
push esi
push 0x1043
push 7
push 0x2d7
push 0x44654a
push edi
mov ecx, ebp
mov dword [esp + 0x3f8], 0xffffffff
call fcn.0040e820
test al, al
je 0x4094e1
push 0xc
push str.BTN_MINIMIZE
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00402c70
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esi + 0x64]
mov dword [esp + 0x3e4], 2
call fcn.00409000
mov dword [eax], ebp
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x3e0], 0xffffffff
jb 0x4094e1
mov edx, dword [esp + 0x18]
push edx
call fcn.00435091
add esp, 4
push 0x30
call fcn.0043565d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x3e0], 3
je 0x409509
mov ecx, eax
call fcn.004015a0
mov edi, eax
jmp 0x40950b
xor edi, edi
push 0x127
mov dword [esp + 0x3e4], 0xffffffff
call fcn.00401810
push eax
mov ecx, edi
call fcn.00401610
push 0x50
call fcn.0043565d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x3e0], 4
je 0x409550
mov ecx, eax
call fcn.0040e4d0
mov ebp, eax
jmp 0x409552
xor ebp, ebp
push esi
push 0x1044
push 7
push 0x2ee
push 0x44654a
push edi
mov ecx, ebp
mov dword [esp + 0x3f8], 0xffffffff
call fcn.0040e820
test al, al
je 0x4095d7
push 9
push str.BTN_CLOSE
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00402c70
lea eax, [esp + 0x14]
push eax
lea ecx, [esi + 0x64]
mov dword [esp + 0x3e4], 5
call fcn.00409000
mov dword [eax], ebp
mov eax, dword [esp + 0x2c]
or edi, 0xffffffff
cmp eax, 0x10
mov dword [esp + 0x3e0], edi
jb 0x4095da
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00435091
add esp, 4
jmp 0x4095da
or edi, 0xffffffff
push 0x130
call fcn.0043565d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x3e0], 6
je 0x409603
mov ecx, eax
call fcn.00419970
jmp 0x409605
xor eax, eax
mov ebp, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push ebx
mov dword [esp + 0x3e4], edi
mov dword [esi + 0x80], eax
call ebp
mov edx, dword [esi + 4]
mov ecx, dword [esi + 0x80]
push eax
push 0x1045
push edx
push 0x151
push 0x194
push 0x21
push 0xb
push 0x40000000
push str.IE_ADVERTISE
call fcn.00419830
test eax, eax
je 0x409679
call fcn.00415fa0
push 1
lea ecx, [esp + 0x16c]
push ecx
lea ecx, [eax + 0x6160]
call fcn.00405340
mov ecx, dword [esi + 0x80]
lea edx, [esp + 0x168]
push edx
call fcn.00419550
push 0x130
call fcn.0043565d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x3e0], 7
je 0x4096a2
mov ecx, eax
call fcn.00419970
jmp 0x4096a4
xor eax, eax
push ebx
mov dword [esp + 0x3e4], edi
mov dword [esi + 0x84], eax
call ebp
mov ecx, dword [esi + 0x84]
push eax
mov eax, dword [esi + 4]
push 0x1046
push eax
push 0x97
push 0x15b
push 0x21
push 0x1a7
push 0x40000000
push str.IE_GAMERATE
call fcn.00419830
test eax, eax
je 0x409714
call fcn.00415fa0
push ebx
lea ecx, [esp + 0x16c]
push ecx
lea ecx, [eax + 0x6160]
call fcn.00405340
mov ecx, dword [esi + 0x84]
lea edx, [esp + 0x168]
push edx
call fcn.00419550
push 0x38
call fcn.0043565d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x3e0], 8
je 0x40973c
mov ecx, eax
call fcn.00402020
mov ebp, eax
jmp 0x40973e
xor ebp, ebp
push ebx
push esi
push 0xf4
push 0x2b1
push 0xe0
push 0x1b3
push 0x1015
push 0x40000000
push 0x44654a
push str.EDIT
push 0x20200
mov ecx, ebp
mov dword [esp + 0x40c], edi
mov byte [ebp + 0x30], bl
call fcn.00402420
test eax, eax
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
je 0x409873
call fcn.00415fa0
cmp dword [eax + 0x590c], ebx
jne 0x4097c8
call fcn.00415fa0
add eax, 0x5804
push eax
mov eax, dword [ebp + 4]
push ebx
push 0xc
push eax
call edi
mov eax, dword [esi + 0x8c]
mov ecx, dword [ebp + 4]
push ebx
push eax
push 0x30
push ecx
call edi
mov edx, dword [ebp]
push ebx
mov ecx, ebp
call dword [edx + 4]
jmp 0x40981a
push 0x104
lea eax, [esp + 0x16c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
movsx ecx, byte [esp + 0x168]
push ecx
lea edx, [esp + 0x2d4]
push str._c:Hangame
push edx
call fcn.004352bf
mov ecx, dword [ebp + 4]
add esp, 0xc
lea eax, [esp + 0x2d0]
push eax
push ebx
push 0xc
push ecx
call edi
mov eax, dword [esi + 0x8c]
mov edx, dword [ebp + 4]
push ebx
push eax
push 0x30
push edx
call edi
push 8
push str.EDT_PATH
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00402c70
lea eax, [esp + 0x14]
push eax
lea ecx, [esi + 0x64]
mov dword [esp + 0x3e4], 9
call fcn.00409000
mov dword [eax], ebp
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x3e0], 0xffffffff
jb 0x409873
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00435091
add esp, 4
push 0x30
call fcn.0043565d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov dword [esp + 0x3e0], 0xa
je 0x40989d
mov ecx, eax
call fcn.004015a0
mov dword [esp + 0x10], eax
jmp 0x4098a1
mov dword [esp + 0x10], ebx
push 0x12a
mov dword [esp + 0x3e4], 0xffffffff
call fcn.00401810
mov ecx, dword [esp + 0x14]
push eax
call fcn.00401610
push 0x50
call fcn.0043565d
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov dword [esp + 0x3e0], 0xb
je 0x4098e8
mov ecx, eax
call fcn.0040e4d0
mov ebp, eax
jmp 0x4098ea
xor ebp, ebp
mov edx, dword [esp + 0x10]
push esi
push 0x1016
push 0xe0
push 0x2b7
push 0x44654a
push edx
mov ecx, ebp
mov dword [esp + 0x3f8], 0xffffffff
call fcn.0040e820
test al, al
je 0x409989
call fcn.00415fa0
cmp dword [eax + 0x590c], ebx
jne 0x409930
mov eax, dword [ebp]
push ebx
mov ecx, ebp
call dword [eax + 4]
push 0xe
push str.BTN_SELECT_DIR
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00402c70
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esi + 0x64]
mov dword [esp + 0x3e4], 0xc
call fcn.00409000
mov dword [eax], ebp
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x3e0], 0xffffffff
jb 0x409989
mov edx, dword [esp + 0x18]
push edx
call fcn.00435091
add esp, 4
push 0x38
call fcn.0043565d
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov dword [esp + 0x3e0], 0xd
je 0x4099b1
mov ecx, eax
call fcn.00402020
mov ebp, eax
jmp 0x4099b3
xor ebp, ebp
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0xc8]
push ebx
push esi
push eax
mov eax, dword [esp + 0xd0]
push ecx
push edx
push eax
push 0x1017
push 0x40008002
push 0x44654a
push str.BUTTON
push ebx
mov ecx, ebp
mov dword [esp + 0x40c], 0xffffffff
mov byte [ebp + 0x30], bl
call fcn.00402420
test eax, eax
je 0x409abb
push 0x104
lea ecx, [esp + 0x270]
push ecx
push 0x13a
call fcn.0041a480
mov eax, dword [esi + 0x8c]
mov edx, dword [ebp + 4]
add esp, 0xc
push ebx
push eax
push 0x30
push edx
call edi
mov ecx, dword [ebp + 4]
lea eax, [esp + 0x26c]
push eax
push ebx
push 0xc
push ecx
call edi
push 0xb
push str.CHK_HANGAME
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00402c70
lea edx, [esp + 0x14]
push edx
lea ecx, [esi + 0x64]
mov dword [esp + 0x3e4], 0xe
call fcn.00409000
mov dword [eax], ebp
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x3e0], 0xffffffff
jb 0x409a9b
mov eax, dword [esp + 0x18]
push eax
call fcn.00435091
add esp, 4
mov ecx, dword [ebp + 4]
push ebx
push 1
push 0xf1
push ecx
call edi
call fcn.00415fa0
push 1
lea ecx, [eax + 0x51e8]
call fcn.00402480
push 0x38
call fcn.0043565d
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov dword [esp + 0x3e0], 0xf
je 0x409ae3
mov ecx, eax
call fcn.00402020
mov ebp, eax
jmp 0x409ae5
xor ebp, ebp
mov edx, dword [esp + 0xe0]
mov eax, dword [esp + 0xdc]
mov ecx, dword [esp + 0xd8]
push ebx
push esi
push edx
mov edx, dword [esp + 0xe0]
push eax
push ecx
push edx
push 0x1018
push 0x40008002
push 0x44654a
push str.BUTTON
push ebx
mov ecx, ebp
mov dword [esp + 0x40c], 0xffffffff
mov byte [ebp + 0x30], bl
call fcn.00402420
test eax, eax
je 0x409bfd
call fcn.00415fa0
cmp dword [eax + 0x12e70], ebx
push 0x104
je 0x409b57
lea eax, [esp + 0x68]
push eax
push 0x132
jmp 0x409b61
lea ecx, [esp + 0x68]
push ecx
push 0x13f
call fcn.0041a480
mov eax, dword [esi + 0x8c]
mov edx, dword [ebp + 4]
add esp, 0xc
push ebx
push eax
push 0x30
push edx
call edi
mov ecx, dword [ebp + 4]
lea eax, [esp + 0x64]
push eax
push ebx
push 0xc
push ecx
call edi
mov edx, dword [ebp + 4]
push ebx
push 1
push 0xf1
push edx
call edi
call fcn.00415fa0
push 0x14
push str.CHK_HANGAMEFLASHINST
lea ecx, [esp + 0x1c]
mov dword [eax + 0x591c], 1
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00402c70
lea eax, [esp + 0x14]
push eax
lea ecx, [esi + 0x64]
mov dword [esp + 0x3e4], 0x10
call fcn.00409000
mov dword [eax], ebp
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x3e0], 0xffffffff
jb 0x409bfd
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00435091
add esp, 4
cmp dword [esp + 0x34], ebx
jne 0x409d2c
push 0x38
call fcn.0043565d
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov dword [esp + 0x3e0], 0x11
je 0x409c2f
mov ecx, eax
call fcn.00402020
mov ebp, eax
jmp 0x409c31
xor ebp, ebp
push ebx
push esi
push 0x130
push 0x2f3
push 0x123
push 0x1b3
push 0x1019
push 0x40008002
push 0x44654a
push str.BUTTON
push ebx
mov ecx, ebp
mov dword [esp + 0x40c], 0xffffffff
mov byte [ebp + 0x30], bl
call fcn.00402420
test eax, eax
je 0x409d3b
push 0x104
lea edx, [esp + 0x2d4]
push edx
push 0x148
call fcn.0041a480
mov eax, dword [esi + 0x8c]
add esp, 0xc
push ebx
push eax
mov eax, dword [ebp + 4]
push 0x30
push eax
call edi
mov edx, dword [ebp + 4]
lea ecx, [esp + 0x2d0]
push ecx
push ebx
push 0xc
push edx
call edi
mov eax, dword [ebp + 4]
push ebx
push 1
push 0xf1
push eax
call edi
call fcn.00415fa0
push 0x1a
push str.CHK_NAVERTOOLBAR_IEADDRESS
lea ecx, [esp + 0x1c]
mov dword [eax + 0x5918], 3
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00402c70
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esi + 0x64]
mov dword [esp + 0x3e4], 0x12
call fcn.00409000
mov dword [eax], ebp
cmp dword [esp + 0x2c], 0x10
mov dword [esp + 0x3e0], 0xffffffff
jb 0x409d3b
mov edx, dword [esp + 0x18]
push edx
call fcn.00435091
add esp, 4
jmp 0x409d3b
call fcn.00415fa0
mov dword [eax + 0x5918], 1
push 0x30
call fcn.0043565d
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov dword [esp + 0x3e0], 0x13
je 0x409d63
mov ecx, eax
call fcn.004015a0
mov ebp, eax
jmp 0x409d65
xor ebp, ebp
push 0x124
mov dword [esp + 0x3e4], 0xffffffff
call fcn.00401810
push eax
mov ecx, ebp
call fcn.00401610
push 0x50
call fcn.0043565d
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov dword [esp + 0x3e0], 0x14
je 0x409daa
mov ecx, eax
call fcn.0040e4d0
mov edi, eax
jmp 0x409dac
xor edi, edi
push esi
push 0x101a
push 0x145
push 0x209
push 0x44654a
push ebp
mov ecx, edi
mov dword [esp + 0x3f8], 0xffffffff
call fcn.0040e820
test al, al
je 0x409e3e
push 0x10
mov ebp, 0xf
push str.BTN_STARTINSTALL
lea ecx, [esp + 0x40]
mov dword [esp + 0x58], ebp
mov dword [esp + 0x54], ebx
mov byte [esp + 0x44], bl
call fcn.00402c70
lea eax, [esp + 0x38]
push eax
lea ecx, [esi + 0x64]
mov dword [esp + 0x3e4], 0x15
call fcn.00409000
mov dword [eax], edi
cmp dword [esp + 0x50], 0x10
mov dword [esp + 0x3e0], 0xffffffff
jb 0x409e32
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.00435091
add esp, 4
mov dword [esp + 0x50], ebp
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
call fcn.00415fa0
mov ecx, dword [esp + 0x3d8]
pop edi
pop esi
mov dword [eax + 0x5910], 1
pop ebp
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x3c8]
pop ebx
call fcn.00435083
add esp, 0x3d4
ret