Function at 0x40472c
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffee4
cmp dword [ebp + 0x10], 0
jge 0x40474b
mov dword [0x7e2047], 0x109ca
mov dword [0x7e203c], edi
lea edx, [0x7e20f2]
mov dword [edx], eax
dec dword [0x7e206b]
xchg dword [0x7e203f], ebx
and eax, 0x4e
mov dword [ebp - 4], 0x16079
mov dword [ebp - 8], 0x14ede
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
test eax, eax
je 0x4047c0
mov dword [0x7e2109], edx
mov dword [0x7e20fb], 0x11018
cmp byte [0x7e2038], 0
jge 0x4047b0
mov dword [0x7e20fb], eax
add edx, 0xbf
mov dword [0x7e20e4], 0x105b6
mov edi, dword [esp + 0xc]
mov dword [0x7e2023], ecx
mov dword [0x7e2013], eax
call fcn.00401ea0
mov dword [ebp - 0xc], 0x16c8c
mov dword [ebp - 0x10], 0x1096a
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0xc]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
test eax, eax
jne 0x404812
mov dword [0x7e20a6], ecx
mov dword [0x7e2088], 0x16bad
sub dword [0x7e2061], ecx
test edx, edx
je 0x40480c
mov ecx, 0x13
mov byte [0x7e2050], 0xf4
jmp 0x404812
mov edx, dword [0x7e2016]
mov dword [0x7e20d9], ecx
mov dword [esp - 0x18], eax
mov ecx, ebx
mov byte [ebp - 0x119], 0
sub dword [0x7e2023], edi
mov dword [0x7e202e], eax
mov dword [0x7e206e], ecx
mov ebx, dword [0x7e201c]
mov dword [ebp - 0x14], 0x1f790
mov byte [ebp - 0x15], 0x96
mov al, byte [ebp - 0x15]
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_IsDBCSLeadByteEx
test eax, eax
jne 0x404872
add dword [0x7e20b5], eax
mov dword [0x7e2024], 0x152c0
mov word [0x7e2035], 0x9b32
mov ebx, 0x44
mov dword [0x7e2013], 0x11422
xchg dword [0x7e20d1], eax
lea ecx, [0x7e204d]
mov dword [ecx + 0x1c], eax
inc byte [ebp - 0x119]
cmp byte [ebp - 0x119], 1
jne 0x404825
mov dword [ebp - 0x1c], 0x10b24
mov dword [ebp - 0x20], 0x157e0
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
test eax, eax
jne 0x4048ce
mov dword [0x7e20c2], ecx
mov eax, dword [esp + 0x20]
mov dword [0x7e205b], esi
mov byte [ebp - 0x119], 0
mov eax, dword [ebp - 0x24]
push eax
call sub.kernel32.dll_ConvertDefaultLocale
mov dword [esp - 4], ebx
mov dword [0x7e20eb], edi
mov dword [0x7e20fa], ebx
mov dword [0x7e2102], edx
mov dword [0x7e20bf], 0x15374
inc byte [ebp - 0x119]
cmp byte [ebp - 0x119], 3
jne 0x4048d5
cmp ecx, 0xffffffff
jle 0x40492c
mov dword [0x7e20f7], ebx
xchg dword [0x7e2067], eax
mov ebx, edx
mov dword [0x7e20fa], esi
mov dword [0x7e20de], ebx
mov eax, dword [0x7e20c1]
mov dword [0x7e2038], edx
sub dword [0x7e208b], ecx
mov dword [esp - 0x24], ebx
mov dword [ebp - 0x28], 0x124d5
mov dword [ebp - 0x2c], 0x17eab
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x28]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
mov dword [0x7e2104], edi
mov dword [0x7e2072], 0x13df1
xchg dword [0x7e2047], ecx
mov dword [0x7e20e4], edi
mov edx, 8
mov dword [ebp - 0x30], 0x1e984
mov dword [ebp - 0x34], 0x11088
mov eax, 0x4056c8
mov dword [ebp - 0x38], eax
mov eax, 0x4056e0
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x30]
push eax
call sub.user32.dll_FindWindowExA
test eax, eax
jne 0x4049cb
mov dword [0x7e2031], 0x16c7b
mov dword [0x7e2094], edi
mov dword [0x7e2048], eax
mov word [0x7e204e], 0x7963
mov word [0x7e20d9], 0xf7f7
mov dword [0x7e208f], ebx
mov dword [esp - 0x1c], ecx
mov eax, dword [ebp - 0x40]
push eax
call sub.kernel32.dll_ConvertDefaultLocale
test eax, eax
jne 0x404a1e
mov byte [0x7e2023], 0x28
lea ebx, [0x7e205a]
mov dword [ebx + 0x1c], eax
mov dword [0x7e20bb], 0x13980
mov dword [0x7e20be], 0x15493
sub dword [0x7e2070], eax
mov dword [0x7e20ec], esi
mov dword [0x7e2035], edx
lea ebx, [0x7e2089]
mov dword [ebx + 0x10], edi
add dword [0x7e2077], esi
mov dword [ebp - 0x44], 0x15840
mov dword [ebp - 0x48], 0x1a78d
mov eax, 0x4056f0
mov dword [ebp - 0x4c], eax
mov eax, 0x40570c
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
push eax
mov eax, dword [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x48]
push eax
mov eax, dword [ebp - 0x44]
push eax
call sub.user32.dll_FindWindowExA
test eax, eax
jne 0x404a93
mov byte [0x7e2042], 4
sub dword [0x7e2055], edx
mov dword [0x7e20f4], 0x14479
mov dword [0x7e2054], esi
mov dword [0x7e206b], eax
push ecx
push esi
call fcn.004033b4
inc dword [0x7e2064]
cmp word [0x7e20e7], 0
jge 0x404abf
lea ecx, [0x7e2014]
mov dword [ecx + 0xc], 0x52
sub dword [0x7e202d], edx
jmp 0x404ae1
mov dword [0x7e205a], 0x16a5d
xchg dword [0x7e2063], edx
mov dword [0x7e2106], edi
sub dword [0x7e20cd], edx
mov dword [0x7e2085], ebx
mov dword [0x7e202a], esi
mov edx, 0xb0
mov dword [ebp - 0x54], 0x151ae
mov dword [ebp - 0x58], 0x1701a
mov eax, 0x405720
mov dword [ebp - 0x5c], eax
mov eax, 0x405730
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
push eax
mov eax, dword [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x54]
push eax
call sub.user32.dll_FindWindowExA
test eax, eax
jne 0x404b50
sub esi, dword [0x7e20c0]
cmp eax, 0xffffffff
jg 0x404b34
mov dword [0x7e2024], edx
mov word [0x7e205d], 0x9461
mov byte [0x7e20de], 0xdf
mov dword [esp - 0x24], ecx
mov dword [0x7e2011], eax
mov ebx, ecx
mov dword [0x7e2098], 0x17824
mov word [0x7e207d], 0xc0be
mov dword [0x7e202b], edx
mov dword [0x7e202a], 0x1253a
mov eax, dword [ebp - 0x64]
push eax
call sub.kernel32.dll_ConvertDefaultLocale
mov dword [0x7e209b], edi
test al, al
jne 0x404b99
lea ebx, [0x7e203e]
mov dword [ebx + 0x20], 0x83
xchg dword [0x7e2030], esi
sub edx, dword [0x7e20f5]
mov dword [0x7e20de], eax
mov edi, ebx
and ecx, 0x74
call fcn.00401ea0
push 0x7e203b
push ebx
call fcn.00402afc
mov eax, dword [ebp - 0x68]
push eax
call sub.kernel32.dll_ConvertDefaultLocale
test eax, eax
jne 0x404bf1
sub edx, dword [0x7e2034]
mov dword [esp - 0xc], esi
cmp dword [0x7e205a], 0
jl 0x404bea
mov dword [0x7e2109], 0x11322
mov dword [0x7e201e], edi
mov byte [0x7e2084], 0xe1
call fcn.00402198
mov dword [0x7e2065], 0x17920
mov word [0x7e2014], 0x4b79
mov dword [0x7e2026], eax
mov word [0x7e2072], 0x2163
mov byte [0x7e2012], 0x75
push 1
mov ecx, 0x7e20cf
call fcn.00402afc
mov dword [0x7e20af], esi
lea ebx, [0x7e20aa]
mov dword [ebx + 4], 0x2d
lea ecx, [0x7e20fd]
mov dword [ecx + 0xc], 0x98
and dword [0x7e20fd], eax
mov dword [ebp - 0x6c], 0x13ae3
mov byte [ebp - 0x6d], 0xc2
mov al, byte [ebp - 0x6d]
push eax
mov eax, dword [ebp - 0x6c]
push eax
call sub.kernel32.dll_IsDBCSLeadByteEx
test eax, eax
jne 0x404c93
xchg dword [0x7e202f], ebx
mov dword [0x7e205d], edx
mov byte [0x7e2030], 0x67
mov dword [0x7e20d5], 0x15bf8
mov word [0x7e203e], 0xf970
call fcn.00402198
mov word [0x7e20e5], 0xa56b
mov word [0x7e2051], 0xe67f
mov dword [esp - 0x20], eax
cmp edi, 0xffffffff
je 0x404cc5
mov dword [0x7e2063], 0x149dd
inc dword [0x7e206b]
jmp 0x404ccb
mov dword [0x7e20a8], ebx
mov eax, dword [ebp - 0x74]
push eax
call sub.kernel32.dll_ConvertDefaultLocale
test eax, eax
jne 0x404cf8
mov dword [esp - 0x28], edi
mov dword [0x7e2106], ecx
add edi, 0xb1
mov dword [0x7e2045], 0x133ab
dec dword [0x7e20e7]
call fcn.00402198
mov dword [esp - 4], ebx
mov dword [0x7e20eb], edi
mov dword [0x7e20fa], ebx
mov dword [0x7e2102], edx
mov dword [0x7e20bf], 0x15374
call fcn.00402afc
mov eax, dword [ebp - 0x78]
push eax
call sub.kernel32.dll_ConvertDefaultLocale
test eax, eax
jne 0x404d47
mov dword [0x7e20ce], edx
mov dword [0x7e2052], ebx
mov dword [0x7e20c2], edx
dec dword [0x7e2104]
test ebx, ebx
je 0x404d51
mov dword [0x7e201d], edi
mov dword [0x7e2040], 0x10d38
mov byte [0x7e205a], 0x5c
mov eax, edi
cmp word [0x7e20a2], bx
jne 0x404d93
mov dword [0x7e20c2], edx
mov eax, 0x1e2
mov dword [0x7e210a], 0x17e2f
mov dword [0x7e20d3], eax
mov word [0x7e203b], 0x8f77
jmp 0x404d98
add edx, ecx
and ecx, 4
and dword [0x7e2040], ebx
mov dword [ebp - 0x7c], 0x1c1db
mov dword [ebp - 0x80], 0x13b17
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp - 0x7c]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
test eax, eax
je 0x404deb
mov dword [0x7e204b], esi
test eax, eax
jne 0x404dd3
mov dword [0x7e2011], edi
mov dword [0x7e2104], ebx
mov dword [0x7e206f], eax
mov dword [0x7e2047], edx
mov dword [0x7e206a], eax
mov dword [0x7e20a0], edx
call fcn.00401ea0
mov byte [0x7e2060], 0x73
mov dword [0x7e20f6], ebx
mov edi, dword [0x7e2017]
mov dword [0x7e2106], eax
mov dword [ebp - 0x84], 0x16fb8
mov byte [ebp - 0x85], 0x21
mov al, byte [ebp - 0x85]
push eax
mov eax, dword [ebp - 0x84]
push eax
call sub.kernel32.dll_IsDBCSLeadByteEx
test eax, eax
je 0x404e51
mov dword [0x7e2091], 0x12f3f
xchg dword [0x7e20f8], ecx
mov dword [0x7e20fd], edx
mov dword [0x7e2090], 0x139ca
mov dword [0x7e2065], 0x17920
mov word [0x7e2014], 0x4b79
mov dword [0x7e2026], eax
mov word [0x7e2072], 0x2163
mov byte [0x7e2012], 0x75
mov dword [ebp - 0x8c], 0x10d29
mov dword [ebp - 0x90], 0x1e50b
mov eax, dword [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x8c]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
test eax, eax
jne 0x404eb8
xchg dword [0x7e201a], edx
mov dword [0x7e20fe], edi
inc ecx
mov dword [0x7e207b], esi
mov dword [ebp - 0x94], 0x12d43
mov byte [ebp - 0x95], 0x4e
mov al, byte [ebp - 0x95]
push eax
mov eax, dword [ebp - 0x94]
push eax
call sub.kernel32.dll_IsDBCSLeadByteEx
test eax, eax
je 0x404f1a
mov dword [esp - 0x1c], ebx
cmp dword [0x7e20aa], ecx
jl 0x404ef9
mov byte [0x7e2015], 0xe1
mov dword [0x7e205b], edi
add dword [0x7e2083], ecx
mov word [0x7e206a], 0x5bf2
sub edx, dword [0x7e20aa]
xchg dword [0x7e20fe], edi
mov dword [0x7e20f3], eax
mov dword [0x7e20fe], 0x118f9
mov dword [0x7e2050], eax
mov dword [0x7e208c], esi
xchg dword [0x7e2054], edi
mov dword [0x7e202a], ecx
mov dword [0x7e2063], eax
mov dword [0x7e2109], 0x16f8b
mov edx, 0x7e20b7
push edx
call fcn.00402afc
mov dword [ebp - 0x9c], 0x1cb75
mov dword [ebp - 0xa0], 0x1f96b
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
test eax, eax
jne 0x404f90
mov word [0x7e20c9], 0xb728
mov dword [esp - 0x20], esi
dec edx
mov dword [0x7e2065], 0x17920
mov word [0x7e2014], 0x4b79
mov dword [0x7e2026], eax
mov word [0x7e2072], 0x2163
mov byte [0x7e2012], 0x75
mov dword [ebp - 0xa4], 0x1bce2
mov dword [ebp - 0xa8], 0x193b5
mov eax, dword [ebp - 0xa8]
push eax
mov eax, dword [ebp - 0xa4]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
test eax, eax
je 0x404ffc
mov dword [0x7e2093], edx
mov dword [0x7e2032], ebx
mov dword [0x7e209c], eax
xchg dword [0x7e208e], edi
call fcn.004040f0
mov dword [0x7e20ab], edx
mov dword [0x7e2055], eax
mov byte [0x7e2080], 0x2a
mov dword [0x7e20ab], edx
mov dword [0x7e2055], eax
mov byte [0x7e2080], 0x2a
push 0
mov edx, 0x7e20ba
call fcn.004033b4
mov dword [0x7e2068], ecx
mov dword [0x7e205a], esi
xchg dword [0x7e203d], edx
mov eax, dword [ebp - 0xac]
push eax
call sub.kernel32.dll_ConvertDefaultLocale
test eax, eax
jne 0x40506a
mov esi, dword [0x7e2028]
lea eax, [0x7e2087]
and dword [eax + 0x12], edi
mov dword [0x7e2062], eax
cmp ecx, 0xffffffff
jne 0x405075
xchg dword [0x7e20c7], ebx
mov dword [0x7e20da], eax
mov dword [0x7e20cb], esi
mov word [0x7e202e], 0x9501
xchg ebp, eax
mov dword [0x7e2029], ecx
cmp ebx, 0xffffffff
jge 0x40509c
dec ecx
mov dword [esp - 0x20], esi
jmp 0x4050ad
add eax, 0xc8
sub dword [0x7e20f8], esi
mov dword [0x7e2092], edx
mov dword [0x7e209e], edi
mov dword [0x7e2020], eax
mov dword [0x7e20df], edx
mov dword [ebp - 0xb0], 0x14d0d
mov byte [ebp - 0xb1], 0x83
mov al, byte [ebp - 0xb1]
push eax
mov eax, dword [ebp - 0xb0]
push eax
call sub.kernel32.dll_IsDBCSLeadByteEx
test eax, eax
jne 0x405104
mov dword [0x7e2092], eax
mov word [0x7e206c], 0x2cf2
dec byte [0x7e20ff]
mov dword [0x7e202e], edi
mov edx, ebx
call fcn.00402198
mov byte [ebp - 0x119], 0
cmp eax, dword [0x7e2106]
jge 0x405125
lea edx, [0x7e2075]
sub dword [edx], 0x7c
mov dword [esp - 0x28], edi
mov dword [0x7e20ee], edx
lea eax, [0x7e201b]
sub dword [eax + 0x1c], ebx
and dword [0x7e2108], ecx
lea eax, [0x7e20d8]
mov dword [eax + 0x10], 0xc2
xchg dword [esp - 0xc], edx
inc edi
xchg dword [0x7e20b8], ebx
mov dword [ebp - 0xb8], 0x1d
mov eax, dword [0x7f3684]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
push eax
mov eax, dword [ebp - 0xb8]
push eax
call sub.kernel32.dll_GetCurrentDirectoryW
test eax, eax
jne 0x4051a7
mov dword [0x7e20e5], edi
mov dword [0x7e204a], esi
mov dword [0x7e20cd], eax
test esi, esi
jne 0x4051a1
mov dword [0x7e2062], ebx
dec edi
mov dword [0x7e2089], eax
dec dword [0x7e2045]
call fcn.00402918
inc byte [ebp - 0x119]
cmp byte [ebp - 0x119], 1
jne 0x405110
mov eax, dword [ebp - 0xc0]
push eax
call sub.kernel32.dll_ConvertDefaultLocale
xchg dword [0x7e2061], ebx
mov dword [0x7e20e0], edx
mov ecx, 0x92
call fcn.00401ea0
push eax
push 0x7e20f9
call fcn.00402afc
mov dword [ebp - 0xc4], 0x154b9
mov byte [ebp - 0xc5], 0x6d
mov al, byte [ebp - 0xc5]
push eax
mov eax, dword [ebp - 0xc4]
push eax
call sub.kernel32.dll_IsDBCSLeadByteEx
test eax, eax
je 0x405232
mov dword [0x7e2057], edx
mov dword [0x7e2079], ecx
mov dword [0x7e20ec], edx
mov dword [0x7e20d1], ebx
mov dword [0x7e20cd], edx
mov dword [0x7e20fe], 0x118f9
mov dword [0x7e2050], eax
mov dword [0x7e208c], esi
mov word [0x7e20e5], 0xa56b
mov word [0x7e2051], 0xe67f
mov dword [esp - 0x20], eax
cmp edi, 0xffffffff
je 0x405275
mov dword [0x7e2063], 0x149dd
inc dword [0x7e206b]
jmp 0x40527b
mov dword [0x7e20a8], ebx
call fcn.004033b4
xchg dword [0x7e2054], edi
mov dword [0x7e202a], ecx
mov dword [0x7e2063], eax
mov dword [0x7e2109], 0x16f8b
call fcn.004033b4
mov dword [ebp - 0xcc], 0x1dc57
mov dword [ebp - 0xd0], 0x172a3
mov eax, dword [ebp - 0xd0]
push eax
mov eax, dword [ebp - 0xcc]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
test eax, eax
jne 0x405304
mov dword [0x7e20a7], 0x15db4
mov dword [0x7e208f], 0x14112
mov dword [0x7e20ad], 0x1286e
test eax, eax
je 0x4052f4
mov dword [0x7e20d8], edi
mov dword [0x7e20bd], 0x178a5
mov dword [0x7e20f2], esi
test edi, edi
jne 0x405310
add dword [0x7e205d], edx
jmp 0x405326
mov dword [0x7e2054], eax
mov dword [esp - 0x1c], edx
mov dword [0x7e20fc], edi
sub dword [0x7e20a4], edx
mov word [0x7e20e5], 0xa4ad
mov dword [0x7e2095], ecx
mov dword [ebp - 0xd4], 0x13517
mov dword [ebp - 0xd8], 0x1bc59
mov eax, 0x405750
mov dword [ebp - 0xdc], eax
mov eax, 0x405760
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
push eax
mov eax, dword [ebp - 0xdc]
push eax
mov eax, dword [ebp - 0xd8]
push eax
mov eax, dword [ebp - 0xd4]
push eax
call sub.user32.dll_FindWindowExA
test eax, eax
je 0x4053a2
xchg dword [0x7e2031], esi
mov dword [0x7e2084], ebx
mov ecx, 0x18d
lea eax, [0x7e20c8]
mov dword [eax + 0x10], 0xf4
mov esi, dword [0x7e2021]
cmp dword [0x7e2105], 0
jle 0x4053cc
mov dword [0x7e20c6], 0x16092
mov word [0x7e203e], 0xa959
mov dword [0x7e20ad], eax
jmp 0x4053d2
mov dword [0x7e2064], edi
and ebx, 0xc7
mov byte [0x7e2086], 2
cmp edi, 0xffffffff
jg 0x405404
mov byte [0x7e20c6], 0xe
mov word [0x7e20ba], 0x7904
mov dword [esp - 0x20], ebx
mov dword [0x7e20d9], ecx
mov dword [0x7e2069], esi
mov dword [0x7e2055], edi
mov dword [0x7e203e], edx
mov byte [0x7e2054], 0x82
mov dword [ebp - 0xe4], 0x196bf
mov byte [ebp - 0xe5], 0xa2
mov al, byte [ebp - 0xe5]
push eax
mov eax, dword [ebp - 0xe4]
push eax
call sub.kernel32.dll_IsDBCSLeadByteEx
test eax, eax
je 0x405455
mov dword [0x7e2085], eax
mov dword [0x7e2054], ecx
mov dword [0x7e20e0], 0x14932
mov dword [ebp - 0xec], 0x1809f
mov dword [ebp - 0xf0], 0x1229c
mov eax, dword [ebp - 0xf0]
push eax
mov eax, dword [ebp - 0xec]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
test eax, eax
je 0x4054a2
mov dword [0x7e20b6], 0x1429c
xchg dword [0x7e2044], edx
mov dword [0x7e2085], ecx
and dword [0x7e20f6], edi
mov dword [0x7e205e], edx
cmp ecx, 0xffffffff
jg 0x4054c9
mov dword [0x7e2080], esi
mov dword [0x7e20fb], edi
mov dword [0x7e20ff], edx
mov dword [0x7e20ea], eax
mov dword [0x7e20a0], 0x12ef5
mov dword [0x7e2044], eax
mov dword [0x7e2059], 0x13ee8
mov ebx, 0x4a
cmp edx, dword [0x7e203d]
jle 0x4054ff
sub dword [0x7e2086], eax
mov dword [0x7e2072], edi
mov byte [0x7e209f], 0x5e
mov dword [0x7e2055], esi
mov byte [0x7e205d], 0xc5
mov dword [0x7e2038], 0x1243c
mov dword [0x7e20c4], 0x17eb5
mov dword [0x7e20c0], edx
mov edi, eax
mov dword [ebp - 0xf4], 0x13ecb
mov dword [ebp - 0xf8], 0x1fa91
mov eax, 0x405780
mov dword [ebp - 0xfc], eax
mov eax, 0x4057a4
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
push eax
mov eax, dword [ebp - 0xfc]
push eax
mov eax, dword [ebp - 0xf8]
push eax
mov eax, dword [ebp - 0xf4]
push eax
call sub.user32.dll_FindWindowExA
test eax, eax
je 0x40558d
mov word [0x7e20e6], 0xf7fb
mov dword [0x7e20a5], esi
inc byte [0x7e20f3]
mov byte [0x7e2036], 0xe3
mov dword [0x7e2033], ecx
mov esi, edi
mov dword [0x7e2095], edx
mov dword [ebp - 0x104], 0xd
mov eax, dword [0x7f3684]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
push eax
mov eax, dword [ebp - 0x104]
push eax
call sub.kernel32.dll_GetCurrentDirectoryW
test eax, eax
jne 0x4055e1
mov dword [0x7e20cb], ebx
lea edi, [0x7e20b8]
add dword [edi + 0x24], 0xd1
mov dword [esp - 8], eax
sub edi, 0x7a
mov dword [0x7e20d9], ecx
mov dword [esp - 0x18], eax
mov ecx, ebx
call fcn.004014e4
mov byte [ebp - 0x119], 0
mov dword [esp - 0x28], esi
mov dword [0x7e204b], 0x1448f
lea edi, [0x7e2048]
mov dword [edi + 8], 3
inc byte [0x7e20b0]
mov dword [ebp - 0x10c], 0x10517
mov dword [ebp - 0x110], 0x19cea
mov eax, dword [ebp - 0x110]
push eax
mov eax, dword [ebp - 0x10c]
push eax
call sub.advapi32.dll_AreAllAccessesGranted
test eax, eax
je 0x40565a
mov dword [0x7e209c], ebx
mov dword [0x7e2025], eax
mov word [0x7e20da], 0x8670
inc byte [ebp - 0x119]
cmp byte [ebp - 0x119], 3
jne 0x4055f9
mov dword [0x7e20e1], 0x14e07
sub ecx, ebx
mov dword [0x7e2075], edi
mov dword [ebp - 0x114], 0x19
mov eax, dword [0x7f3684]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
push eax
mov eax, dword [ebp - 0x114]
push eax
call sub.kernel32.dll_GetCurrentDirectoryW
test eax, eax
jne 0x4056c3
xchg dword [0x7e204c], ecx
add dword [0x7e20ab], ebx
mov dword [0x7e208c], 0x102b7
mov dword [0x7e20e2], ecx
mov esp, ebp
pop ebp
ret