Function at 0x404e40
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x238
mov eax, dword [0x5673f0]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x100
lea eax, [ebp - 0x230]
push 0
push eax
call fcn.004fc760
add esp, 0xc
lea ecx, [ebp - 0x230]
push ecx
push 0xff
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebp - 0x230]
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x404e82
mov edx, dword [str.TInjector.cfg]
mov ecx, dword [0x549b94]
mov dword [eax], edx
mov edx, dword [0x549b98]
mov dword [eax + 4], ecx
mov cx, word [0x549b9c]
mov dword [eax + 8], edx
mov dl, byte [0x549b9e]
mov word [eax + 0xc], cx
push edi
mov byte [eax + 0xe], dl
lea eax, [ebp - 0x230]
push 0x549690
push eax
call fcn.004fb853
mov edi, eax
add esp, 8
mov dword [ebp - 0x234], edi
test edi, edi
je 0x405304
push 0x12c
lea ecx, [ebp - 0x130]
push 0
push ecx
call fcn.004fc760
push edi
lea edx, [ebp - 0x130]
push 0x12c
push edx
call fcn.004fbb4d
add esp, 0x18
test eax, eax
je 0x4052f9
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
lea eax, [ebp - 0x130]
push 0x549c30
push eax
call fcn.004fb220
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x4052cf
inc ebx
lea eax, [ebp - 0x130]
mov dword [ebp - 0x238], ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x404f42
sub eax, edx
cmp eax, 3
jbe 0x404f8a
lea ecx, [ebp - 0x130]
cmp byte [ecx + eax - 1], 0xa
jne 0x404f62
mov byte [ecx + eax - 1], 0
lea eax, [ebp - 0x130]
lea ebx, [eax + 1]
jmp 0x404f70
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x404f70
sub eax, ebx
cmp byte [ecx + eax - 1], 0xd
mov ebx, dword [ebp - 0x238]
jne 0x404f8a
mov byte [ecx + eax - 1], dl
push 0x13
lea ecx, [ebp - 0x130]
push str.LastInfectedProcess
push ecx
call fcn.004fbc85
add esp, 0xc
test eax, eax
jne 0x404fbe
mov edx, esi
mov eax, ebx
sub edx, ebx
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [edx + eax + 0x445], cl
inc eax
test cl, cl
jne 0x404fb0
push 8
lea eax, [ebp - 0x130]
push str.DLL_Path
push eax
call fcn.004fbc85
add esp, 0xc
test eax, eax
jne 0x404ff7
test ebx, ebx
je 0x404fea
mov eax, ebx
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x404fe1
sub eax, ecx
push eax
push ebx
lea ecx, [esi + 0x548]
call fcn.00402040
push 8
lea ecx, [ebp - 0x130]
push str.DLL_Name
push ecx
call fcn.004fbc85
add esp, 0xc
test eax, eax
jne 0x405036
test ebx, ebx
je 0x405029
mov eax, ebx
lea ecx, [eax + 1]
lea ebx, [ebx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x405020
sub eax, ecx
push eax
push ebx
lea ecx, [esi + 0xbc]
call fcn.00402040
push 6
lea edx, [ebp - 0x130]
push str.Filter
push edx
call fcn.004fbc85
add esp, 0xc
test eax, eax
jne 0x405076
test ebx, ebx
je 0x405069
mov eax, ebx
lea ecx, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x405060
sub eax, ecx
push eax
push ebx
lea ecx, [esi + 0x31c]
call fcn.00402040
push 5
lea eax, [ebp - 0x130]
push str.Title
push eax
call fcn.004fbc85
add esp, 0xc
test eax, eax
jne 0x4050b6
test ebx, ebx
je 0x4050a9
mov eax, ebx
lea ecx, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4050a0
sub eax, ecx
push eax
push ebx
lea ecx, [esi + 0x320]
call fcn.00402040
push 5
lea ecx, [ebp - 0x130]
push str.FType
push ecx
call fcn.004fbc85
add esp, 0xc
test eax, eax
jne 0x405112
push ebx
call fcn.004fbd5b
add esp, 4
mov ecx, esi
cmp eax, 1
jne 0x4050f9
push 0x3ed
call fcn.0040dfa7
mov edx, dword [eax + 0x20]
push 0
push 1
push 0xf1
push edx
jmp 0x405110
push 0x3ee
call fcn.0040dfa7
mov eax, dword [eax + 0x20]
push 0
push 1
push 0xf1
push eax
call edi
push 5
lea ecx, [ebp - 0x130]
push str.SType
push ecx
call fcn.004fbc85
add esp, 0xc
test eax, eax
jne 0x40516e
push ebx
call fcn.004fbd5b
add esp, 4
mov ecx, esi
cmp eax, 1
jne 0x405155
push 0x3f0
call fcn.0040dfa7
mov edx, dword [eax + 0x20]
push 0
push 1
push 0xf1
push edx
jmp 0x40516c
push 0x3f1
call fcn.0040dfa7
mov eax, dword [eax + 0x20]
push 0
push 1
push 0xf1
push eax
call edi
push 5
lea ecx, [ebp - 0x130]
push str.IType
push ecx
call fcn.004fbc85
add esp, 0xc
test eax, eax
jne 0x4052cf
push ebx
call fcn.004fbd5b
add esp, 4
cmp eax, 1
jne 0x4051ba
push 0x3f2
mov ecx, esi
call fcn.0040dfa7
mov edx, dword [eax + 0x20]
push 0
push 1
push 0xf1
push edx
call edi
jmp 0x4052cf
push ebx
call fcn.004fbd5b
add esp, 4
cmp eax, 2
jne 0x4051e8
push 0x3f3
mov ecx, esi
call fcn.0040dfa7
mov eax, dword [eax + 0x20]
push 0
push 1
push 0xf1
push eax
call edi
jmp 0x4052cf
push ebx
call fcn.004fbd5b
add esp, 4
cmp eax, 3
jne 0x4052cf
push 0x3f6
mov ecx, esi
call fcn.0040dfa7
mov ecx, dword [eax + 0x20]
push 0
push 1
push 0xf1
push ecx
call edi
push 0x549c88
push 1
mov ecx, esi
call fcn.0040dfa7
mov ecx, eax
call fcn.0040e0bd
push 0x3f2
mov ecx, esi
call fcn.0040dfa7
mov edx, dword [eax + 0x20]
push 0
push 0
push 0xf1
push edx
call edi
push 0x3f3
mov ecx, esi
call fcn.0040dfa7
mov eax, dword [eax + 0x20]
push 0
push 0
push 0xf1
push eax
call edi
push 0x3f6
mov ecx, esi
call fcn.0040dfa7
mov ecx, dword [eax + 0x20]
push 0
push 1
push 0xf1
push ecx
call edi
push 0
push 0x3f0
mov ecx, esi
call fcn.0040dfa7
mov ecx, eax
call fcn.0040e1ca
push 0
push 0x3f1
mov ecx, esi
call fcn.0040dfa7
mov ecx, eax
call fcn.0040e1ca
push 0
push 0x3f4
mov ecx, esi
call fcn.0040dfa7
mov ecx, eax
call fcn.0040e1ca
push 0
push 0x3f5
mov ecx, esi
call fcn.0040dfa7
mov ecx, eax
call fcn.0040e1ca
mov edx, dword [ebp - 0x234]
push edx
lea eax, [ebp - 0x130]
push 0x12c
push eax
call fcn.004fbb4d
add esp, 0xc
test eax, eax
jne 0x404f14
mov edi, dword [ebp - 0x234]
pop ebx
push edi
call fcn.004fb8d7
add esp, 4
jmp 0x405323
push 0x3f1
mov ecx, esi
call fcn.0040dfa7
mov ecx, dword [eax + 0x20]
push 0
push 1
push 0xf1
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
mov ecx, esi
call fcn.00409d1f
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop edi
call fcn.004fa984
mov esp, ebp
pop ebp
ret