Function at 0x4305d0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ab4a1
mov eax, dword fs:[0]
push eax
sub esp, 0x44c
mov eax, dword [0x61cff8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
xor eax, eax
mov byte [ebp - 0x249], 0
mov dword [ebp - 0x21c], 7
mov dword [ebp - 0x220], 0
mov word [ebp - 0x230], ax
mov dword [ebp - 4], eax
xorps xmm0, xmm0
mov ecx, str.Caption
movq qword [ebp - 0x290], xmm0
mov byte [ebp - 0x298], 3
call fcn.00407d00
mov dword [ebp - 0x290], eax
lea eax, [ebp - 0x298]
mov dword [ebp - 0x288], eax
mov byte [ebp - 0x284], 1
mov byte [ebp - 4], 1
xorps xmm0, xmm0
mov ecx, 0x5f3b78
movq qword [ebp - 0x278], xmm0
mov byte [ebp - 0x280], 3
call fcn.00407d00
mov dword [ebp - 0x278], eax
lea eax, [ebp - 0x280]
mov dword [ebp - 0x270], eax
mov byte [ebp - 0x26c], 1
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x298]
push eax
push ecx
lea ecx, [ebp - 0x458]
call fcn.004056e0
push 0x4031a0
push 2
push 0x18
lea eax, [ebp - 0x298]
mov byte [ebp - 4], 4
push eax
call fcn.0057e30f
xorps xmm0, xmm0
mov byte [ebp - 0x2c8], 3
mov ecx, 0x5f6c98
movq qword [ebp - 0x2c0], xmm0
call fcn.00407d00
mov dword [ebp - 0x2c0], eax
lea eax, [ebp - 0x2c8]
mov dword [ebp - 0x2b8], eax
mov byte [ebp - 0x2b4], 1
mov byte [ebp - 4], 5
xorps xmm0, xmm0
mov ecx, 0x5f3b78
movq qword [ebp - 0x2a8], xmm0
mov byte [ebp - 0x2b0], 3
call fcn.00407d00
mov dword [ebp - 0x2a8], eax
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x2a0], eax
mov byte [ebp - 0x29c], 1
lea eax, [ebp - 0x298]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2c8]
push eax
push ecx
lea ecx, [ebp - 0x440]
call fcn.004056e0
push 0x4031a0
push 2
push 0x18
lea eax, [ebp - 0x2c8]
mov byte [ebp - 4], 8
push eax
call fcn.0057e30f
xorps xmm0, xmm0
mov byte [ebp - 0x2f8], 3
mov ecx, 0x5f7100
movq qword [ebp - 0x2f0], xmm0
call fcn.00407d00
mov dword [ebp - 0x2f0], eax
lea eax, [ebp - 0x2f8]
mov dword [ebp - 0x2e8], eax
mov byte [ebp - 0x2e4], 1
mov byte [ebp - 4], 9
xorps xmm0, xmm0
mov ecx, 0x5f3b78
movq qword [ebp - 0x2d8], xmm0
mov byte [ebp - 0x2e0], 3
call fcn.00407d00
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x2d0], eax
mov byte [ebp - 0x2cc], 1
lea eax, [ebp - 0x2c8]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2f8]
push eax
push ecx
lea ecx, [ebp - 0x428]
call fcn.004056e0
push 0x4031a0
push 2
push 0x18
lea eax, [ebp - 0x2f8]
mov byte [ebp - 4], 0xc
push eax
call fcn.0057e30f
xorps xmm0, xmm0
mov byte [ebp - 0x328], 3
mov ecx, 0x5f7110
movq qword [ebp - 0x320], xmm0
call fcn.00407d00
mov dword [ebp - 0x320], eax
lea eax, [ebp - 0x328]
mov dword [ebp - 0x318], eax
mov byte [ebp - 0x314], 1
mov byte [ebp - 4], 0xd
xorps xmm0, xmm0
mov ecx, 0x5f3b78
movq qword [ebp - 0x308], xmm0
mov byte [ebp - 0x310], 3
call fcn.00407d00
mov dword [ebp - 0x308], eax
lea eax, [ebp - 0x310]
mov dword [ebp - 0x300], eax
mov byte [ebp - 0x2fc], 1
lea eax, [ebp - 0x2f8]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x328]
push eax
push ecx
lea ecx, [ebp - 0x410]
call fcn.004056e0
push 0x4031a0
push 2
push 0x18
lea eax, [ebp - 0x328]
mov byte [ebp - 4], 0x10
push eax
call fcn.0057e30f
xorps xmm0, xmm0
mov byte [ebp - 0x358], 3
mov ecx, str.windir
movq qword [ebp - 0x350], xmm0
call fcn.00407d00
mov dword [ebp - 0x350], eax
lea eax, [ebp - 0x358]
mov dword [ebp - 0x348], eax
mov byte [ebp - 0x344], 1
mov byte [ebp - 4], 0x11
xorps xmm0, xmm0
mov ecx, 0x5f3b78
movq qword [ebp - 0x338], xmm0
mov byte [ebp - 0x340], 3
call fcn.00407d00
mov dword [ebp - 0x338], eax
lea eax, [ebp - 0x340]
mov dword [ebp - 0x330], eax
mov byte [ebp - 0x32c], 1
lea eax, [ebp - 0x328]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x358]
push eax
push ecx
lea ecx, [ebp - 0x3f8]
call fcn.004056e0
push 0x4031a0
push 2
push 0x18
lea eax, [ebp - 0x358]
mov byte [ebp - 4], 0x14
push eax
call fcn.0057e30f
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x3e0]
xorps xmm0, xmm0
mov byte [ebp - 0x248], 0
push ecx
lea ecx, [ebp - 0x458]
movq qword [ebp - 0x240], xmm0
call fcn.00408940
add esp, 4
test al, al
je 0x4309df
push 1
lea ecx, [ebp - 0x268]
mov byte [ebp - 0x248], 1
call fcn.00405fe0
mov eax, dword [ebp - 0x268]
lea edx, [ebp - 0x3e0]
mov dword [ebp - 0x240], eax
lea ecx, [ebp - 0x458]
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x248]
mov dword [ebp - 0x234], eax
lea eax, [ebp - 0x234]
push eax
call fcn.004089c0
add esp, 4
jmp 0x430a15
lea eax, [ebp - 0x3e0]
mov byte [ebp - 0x248], 2
mov dword [ebp - 0x234], eax
lea edx, [ebp - 0x234]
lea eax, [ebp - 0x458]
lea ecx, [ebp - 0x264]
mov dword [ebp - 0x264], eax
call fcn.00407c20
mov dword [ebp - 0x240], eax
push 0x4031a0
push 5
push 0x18
lea eax, [ebp - 0x458]
mov byte [ebp - 4], 0x18
push eax
call fcn.0057e30f
push 0
push str.Win32_OperatingSystem
mov ecx, ebx
call fcn.00419f60
test eax, eax
jne 0x430f16
mov ecx, ebx
call fcn.0041a160
test al, al
je 0x430f16
lea eax, [ebp - 0x230]
mov ecx, ebx
push eax
push 0x5f4aac
call fcn.0041a280
test eax, eax
js 0x430b3b
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
lea ecx, [ebp - 0x3dc]
cmovae eax, dword [ebp - 0x230]
push 0xfde9
mov dword [ebp - 0x3e0], ecx
lea ecx, [ebp - 0x3e0]
push eax
call fcn.00406eb0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x264]
mov eax, dword [ebp - 0x3e0]
xorps xmm0, xmm0
mov dword [ebp - 0x264], eax
movq qword [ebp - 0x258], xmm0
mov byte [ebp - 0x260], 3
call fcn.00409220
mov edi, eax
mov dword [ebp - 0x258], edi
push str.Caption
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x1a
call fcn.00407a80
mov esi, eax
mov eax, dword [ebp - 0x254]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x260], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x258], ecx
lea ecx, [ebp - 0x260]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x254], edx
call fcn.00405930
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3dc]
mov eax, dword [ebp - 0x3e0]
cmp eax, ecx
je 0x430b3b
push eax
call fcn.00586a7b
add esp, 4
lea eax, [ebp - 0x230]
mov ecx, ebx
push eax
push str.Version
call fcn.0041a280
test eax, eax
js 0x430c23
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
lea ecx, [ebp - 0x3dc]
cmovae eax, dword [ebp - 0x230]
push 0xfde9
mov dword [ebp - 0x3e0], ecx
lea ecx, [ebp - 0x3e0]
push eax
call fcn.00406eb0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x264]
mov eax, dword [ebp - 0x3e0]
xorps xmm0, xmm0
mov dword [ebp - 0x264], eax
movq qword [ebp - 0x258], xmm0
mov byte [ebp - 0x260], 3
call fcn.00409220
mov edi, eax
mov dword [ebp - 0x258], edi
push 0x5f6c98
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x1c
call fcn.00407a80
mov esi, eax
mov eax, dword [ebp - 0x254]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x260], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x258], ecx
lea ecx, [ebp - 0x260]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x254], edx
call fcn.00405930
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3dc]
mov eax, dword [ebp - 0x3e0]
cmp eax, ecx
je 0x430c23
push eax
call fcn.00586a7b
add esp, 4
lea eax, [ebp - 0x230]
mov ecx, ebx
push eax
push str.OSArchitecture
call fcn.0041a280
test eax, eax
js 0x430d0b
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
lea ecx, [ebp - 0x3dc]
cmovae eax, dword [ebp - 0x230]
push 0xfde9
mov dword [ebp - 0x3e0], ecx
lea ecx, [ebp - 0x3e0]
push eax
call fcn.00406eb0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x264]
mov eax, dword [ebp - 0x3e0]
xorps xmm0, xmm0
mov dword [ebp - 0x264], eax
movq qword [ebp - 0x258], xmm0
mov byte [ebp - 0x260], 3
call fcn.00409220
mov edi, eax
mov dword [ebp - 0x258], edi
push 0x5f7100
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x1e
call fcn.00407a80
mov esi, eax
mov eax, dword [ebp - 0x254]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x260], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x258], ecx
lea ecx, [ebp - 0x260]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x254], edx
call fcn.00405930
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3dc]
mov eax, dword [ebp - 0x3e0]
cmp eax, ecx
je 0x430d0b
push eax
call fcn.00586a7b
add esp, 4
lea eax, [ebp - 0x230]
mov ecx, ebx
push eax
push str.CSName
call fcn.0041a280
test eax, eax
js 0x430df3
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
lea ecx, [ebp - 0x3dc]
cmovae eax, dword [ebp - 0x230]
push 0xfde9
mov dword [ebp - 0x3e0], ecx
lea ecx, [ebp - 0x3e0]
push eax
call fcn.00406eb0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x264]
mov eax, dword [ebp - 0x3e0]
xorps xmm0, xmm0
mov dword [ebp - 0x264], eax
movq qword [ebp - 0x258], xmm0
mov byte [ebp - 0x260], 3
call fcn.00409220
mov edi, eax
mov dword [ebp - 0x258], edi
push 0x5f7110
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x20
call fcn.00407a80
mov esi, eax
mov eax, dword [ebp - 0x254]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x260], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x258], ecx
lea ecx, [ebp - 0x260]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x254], edx
call fcn.00405930
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3dc]
mov eax, dword [ebp - 0x3e0]
cmp eax, ecx
je 0x430df3
push eax
call fcn.00586a7b
add esp, 4
push 0x104
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
cmp word [ebp - 0x218], 0
jne 0x430e13
xor eax, eax
jmp 0x430e2f
lea eax, [ebp - 0x218]
lea edx, [eax + 2]
nop dword [eax]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x430e20
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x230]
call fcn.0040f000
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
lea ecx, [ebp - 0x3dc]
cmovae eax, dword [ebp - 0x230]
push 0xfde9
mov dword [ebp - 0x3e0], ecx
lea ecx, [ebp - 0x3e0]
push eax
call fcn.00406eb0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x264]
mov eax, dword [ebp - 0x3e0]
xorps xmm0, xmm0
mov dword [ebp - 0x264], eax
movq qword [ebp - 0x258], xmm0
mov byte [ebp - 0x260], 3
call fcn.00409220
mov edi, eax
mov dword [ebp - 0x258], edi
push str.windir
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x22
call fcn.00407a80
mov esi, eax
mov eax, dword [ebp - 0x254]
mov cl, byte [esi]
mov byte [esi], 3
mov edx, dword [esi + 0xc]
mov byte [ebp - 0x260], cl
mov ecx, dword [esi + 8]
mov dword [ebp - 0x258], ecx
lea ecx, [ebp - 0x260]
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [ebp - 0x254], edx
call fcn.00405930
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3dc]
mov eax, dword [ebp - 0x3e0]
cmp eax, ecx
je 0x430f0f
push eax
call fcn.00586a7b
add esp, 4
mov byte [ebp - 0x249], 1
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x260]
call fcn.004075f0
push 0x5f6c5c
lea ecx, [ebx + 0x10]
mov byte [ebp - 4], 0x23
call fcn.00407a80
mov cl, byte [ebp - 0x260]
mov esi, eax
mov dl, byte [esi]
mov byte [esi], cl
mov eax, dword [ebp - 0x258]
mov byte [ebp - 0x260], dl
mov ecx, dword [esi + 8]
mov edx, dword [esi + 0xc]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x254]
mov dword [esi + 0xc], eax
mov dword [ebp - 0x258], ecx
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x254], edx
call fcn.00405930
lea ecx, [ebp - 0x248]
call fcn.00405930
mov ecx, dword [ebp - 0x21c]
cmp ecx, 8
jb 0x430fa3
inc ecx
push ecx
push dword [ebp - 0x230]
lea ecx, [ebp - 0x230]
call fcn.0040b950
mov al, byte [ebp - 0x249]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0057e2f0
mov esp, ebp
pop ebp
ret