Function at 0x441290
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x560c21
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x5ab3e8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0xc]
push 0x104
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x60], 0
call fcn.0048ba7e
mov ebx, eax
push 0x104
push 0
push ebx
lea esi, [ebx + 0x104]
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x78], esi
call fcn.0048e280
add esp, 0x10
mov dword [ebp - 0x7c], esi
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x104
push ebx
mov dword [ebp - 4], 0
call edi
mov esi, eax
cmp esi, 0x104
jbe 0x441339
lea eax, [ebp - 0x59]
mov byte [ebp - 0x59], 0
push eax
push esi
lea ecx, [ebp - 0x80]
call fcn.0043fd00
mov ebx, dword [ebp - 0x80]
push esi
push ebx
call edi
mov esi, dword [ebp - 0x78]
mov dword [ebp - 0x68], esi
mov edi, ebx
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x441350
sub edi, ecx
cmp edi, 0xf
ja 0x441373
push edi
lea eax, [ebp - 0x28]
mov dword [ebp - 0x18], edi
push ebx
push eax
call fcn.0048dd00
mov byte [ebp + edi - 0x28], 0
jmp 0x4413c3
cmp edi, 0x7fffffff
ja 0x4415e8
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x441392
mov eax, 0x7fffffff
jmp 0x44139c
mov ecx, 0x16
cmp eax, ecx
cmovb eax, ecx
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x28]
inc eax
push eax
call fcn.0040c380
push edi
mov esi, eax
mov dword [ebp - 0x18], edi
mov eax, dword [ebp - 0x60]
push ebx
push esi
mov dword [ebp - 0x14], eax
call fcn.0048d780
mov byte [esi + edi], 0
mov dword [ebp - 0x28], esi
add esp, 0xc
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x40]
inc eax
mov byte [ebp - 4], 2
push eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov dword [ebp - 0x60], 1
call fcn.00419fc0
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x40]
push eax
call fcn.00415100
push 1
push 0x571934
lea ecx, [ebp - 0x40]
call fcn.00415100
push dword [ebp - 0x64]
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0040c7c0
add esp, 0xc
push 4
push str..dll
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.00415100
mov edx, dword [eax + 0xc]
mov ecx, dword [eax + 8]
mov esi, dword [eax]
mov edi, dword [eax + 4]
mov dword [ebp - 0x60], edx
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x6c], edx
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x70], edx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x64], ecx
cmp edx, 0x10
jb 0x4414a0
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x441493
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4415ed
push edx
push ecx
call fcn.0048baae
mov ecx, dword [ebp - 0x64]
add esp, 8
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x14], eax
cmp edx, 0x10
jb 0x4414ef
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4414e5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4415ed
push edx
push ecx
call fcn.0048baae
add esp, 8
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x441535
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44152b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4415ed
push edx
push ecx
call fcn.0048baae
add esp, 8
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
jne 0x44154f
xor esi, esi
jmp 0x44155b
push dword [ebp - 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44158b
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x441581
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4415f2
push edx
push ecx
call fcn.0048baae
add esp, 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
test ebx, ebx
je 0x4415ca
mov ecx, dword [ebp - 0x68]
mov eax, ebx
sub ecx, ebx
cmp ecx, 0x1000
jb 0x4415c0
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4415f2
push ecx
push ebx
call fcn.0048baae
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0048babc
mov esp, ebp
pop ebp
ret
call fcn.004027a0
call fcn.004973d9
call fcn.004973d9
int3