Function at 0x40c0a0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5453a6
mov eax, dword fs:[0]
push eax
sub esp, 0x8b4
mov eax, dword [0x5ec938]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x8c0], ecx
mov dword [ebp - 0x8b4], edi
cmp edi, ebx
jne 0x40c0ea
xor eax, eax
jmp 0x40c3a4
lea edx, [ebp - 0x8b8]
push edx
lea edx, [ebp - 0x898]
push edx
add ecx, 0x65c
mov dword [edi], ebx
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
push str.DOCICON
push str._DOCICON_
mov dword [ebp - 0x898], ebx
mov dword [ebp - 0x8b8], ebx
mov dword [ebp - 0x8a8], ebx
mov dword [ebp - 0x8ac], ebx
call eax
push 0x206
lea edx, [ebp - 0x216]
xor ecx, ecx
push ebx
push edx
mov esi, eax
mov word [ebp - 0x218], cx
call fcn.0052c850
add esp, 0xc
push 0x104
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
cmp esi, ebx
je 0x40c39e
mov ecx, dword [ebp - 0x898]
cmp dword [ecx], ebx
jle 0x40c39e
call fcn.00436219
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x40c18b
push 0x80004005
call fcn.00401ed0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea ebx, [eax + 0x10]
mov dword [ebp - 0x89c], ebx
mov eax, dword [ebp - 0x898]
xor ecx, ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x8b0], ecx
cmp dword [eax], ecx
jle 0x40c373
xor edi, edi
xor esi, esi
mov dword [ebp - 0x8a4], edi
mov dword [ebp - 0x8a0], esi
jmp 0x40c1d6
mov esi, dword [ebp - 0x8a0]
mov ecx, dword [esi + eax + 0x290]
push ecx
lea edx, [ebp - 0x894]
push 0x32
push edx
call fcn.0052cd4a
mov eax, dword [ebp - 0x898]
mov ecx, dword [esi + eax + 0x294]
add esp, 0xc
test ecx, ecx
jne 0x40c204
xor eax, eax
jmp 0x40c21f
mov eax, ecx
lea esi, [eax + 2]
lea esp, [esp]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x40c210
sub eax, esi
sar eax, 1
push eax
push ecx
lea ecx, [ebp - 0x89c]
call fcn.004026f0
lea ecx, [ebp - 0x218]
push ecx
push str._SysFolder_
lea ecx, [ebp - 0x89c]
call fcn.0040a2e0
mov ecx, dword [ebp - 0x8c0]
lea edx, [ebp - 0x8bc]
push edx
call fcn.00409a70
mov eax, dword [eax]
push eax
push str._InsFolder_
lea ecx, [ebp - 0x89c]
mov byte [ebp - 4], 1
call fcn.0040a2e0
mov eax, dword [ebp - 0x8bc]
add eax, 0xfffffff0
mov byte [ebp - 4], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c292
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ebx, dword [ebp - 0x89c]
push ebx
lea ecx, [ebp - 0x628]
push 0x104
push ecx
call fcn.0052cd4a
lea edx, [ebp - 0x628]
push edx
lea eax, [ebp - 0x420]
push 0x104
push eax
call fcn.0052cd4a
lea ecx, [ebp - 0x894]
push ecx
push str.File._s
lea edx, [ebp - 0x830]
push 0x104
push edx
call fcn.0052d99b
mov eax, dword [ebp - 0x8ac]
add esp, 0x28
test eax, eax
jne 0x40c302
push 0x67c
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
jmp 0x40c319
lea ecx, [edi + 0x67c]
push ecx
push eax
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
test eax, eax
je 0x40c348
inc dword [ebp - 0x8a8]
add edi, eax
add dword [ebp - 0x8a4], 0x67c
mov ecx, 0x19f
lea esi, [ebp - 0x894]
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x8a4]
mov dword [ebp - 0x8ac], eax
mov ecx, dword [ebp - 0x8b0]
mov eax, dword [ebp - 0x898]
add dword [ebp - 0x8a0], 0x71c
inc ecx
mov dword [ebp - 0x8b0], ecx
cmp ecx, dword [eax]
jl 0x40c1d0
mov edi, dword [ebp - 0x8b4]
mov edx, dword [ebp - 0x8ac]
lea eax, [ebx - 0x10]
mov dword [edi], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40c39e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x8a8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0052c2ec
mov esp, ebp
pop ebp
ret 4