Function at 0x261cfe0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push esi
mov eax, 0xcccccccc
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov dword [ebp - 4], eax
mov ecx, 0x23e51ea
call fcn.026a74de
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov esi, esp
push 0x23ec5fc
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
cmp esi, esp
call fcn.026a5ffe
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x261d040
xor eax, eax
jmp 0x261d1fb
mov esi, esp
push 0x23ec610
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp esi, esp
call fcn.026a5ffe
mov dword [ebp - 8], eax
push 0x23ec620
mov ecx, dword [ebp + 8]
push ecx
call fcn.026e5768
add esp, 8
test eax, eax
je 0x261d0b0
cmp dword [ebp - 8], 0
je 0x261d08f
mov esi, esp
push 8
push 0
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 8]
cmp esi, esp
call fcn.026a5ffe
mov dword [ebp - 0x1c], eax
jmp 0x261d0a5
mov esi, esp
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
cmp esi, esp
call fcn.026a5ffe
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 4], ecx
jmp 0x261d1f8
cmp dword [ebp - 8], 0
je 0x261d0f1
mov esi, esp
push 0x23ec628
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp esi, esp
call fcn.026a5ffe
test eax, eax
je 0x261d0f1
mov esi, esp
push 0x800
push 0
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 8]
cmp esi, esp
call fcn.026a5ffe
mov dword [ebp - 4], eax
jmp 0x261d1f8
mov esi, esp
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
cmp esi, esp
call fcn.026a5ffe
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x261d1f8
mov ecx, dword [ebp + 8]
push ecx
call fcn.026e454a
add esp, 4
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
lea ecx, [eax + edx + 1]
shl ecx, 1
mov esi, esp
push ecx
call dword [0x23ea098]
add esp, 4
cmp esi, esp
call fcn.026a5ffe
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x261d1e1
mov esi, esp
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
cmp esi, esp
call fcn.026a5ffe
test eax, eax
je 0x261d1e1
push 0x23ec638
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.026e454a
add esp, 4
mov edx, dword [ebp - 0x18]
lea eax, [edx + eax*2]
push eax
call fcn.026e1dad
add esp, 8
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x18]
push edx
call fcn.026e454a
add esp, 4
mov ecx, dword [ebp - 0x18]
lea edx, [ecx + eax*2]
push edx
call fcn.026e1dad
add esp, 8
cmp dword [ebp - 8], 0
je 0x261d1c5
mov esi, esp
push 8
push 0
mov eax, dword [ebp - 0x18]
push eax
call dword [ebp - 8]
cmp esi, esp
call fcn.026a5ffe
mov dword [ebp - 0x20], eax
jmp 0x261d1db
mov esi, esp
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
cmp esi, esp
call fcn.026a5ffe
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x20]
mov dword [ebp - 4], edx
mov esi, esp
mov eax, dword [ebp - 0x18]
push eax
call dword [0x23ea09c]
add esp, 4
cmp esi, esp
call fcn.026a5ffe
nop
mov eax, dword [ebp - 4]
pop esi
add esp, 0x20
cmp ebp, esp
call fcn.026a5ffe
mov esp, ebp
pop ebp
ret