Function at 0x404f85
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x130
mov dword [ebp - 0x130], ecx
mov eax, dword [ebp - 0x130]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x130]
call dword [edx + 8]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov ecx, dword [ebp - 0x130]
mov dword [ecx + 0x17c], eax
mov edx, dword [ebp - 0x130]
cmp dword [edx + 0x17c], 0
jne 0x404fe6
mov eax, dword [ebp - 0x130]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x130]
call dword [edx + 0xc]
xor eax, eax
jmp 0x4051e1
mov dword [ebp - 0x20], 0
lea eax, [ebp - 0x20]
push eax
push 0x1000066
mov ecx, dword [ebp - 0x130]
call fcn.00404019
mov ecx, dword [ebp - 0x20]
and ecx, 1
test ecx, ecx
je 0x405028
mov edx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax + 0x17c]
mov dword [edx + 0x178], ecx
jmp 0x405131
call fcn.004089a0
cmp eax, 1
jne 0x4050f5
push 0x104
lea edx, [ebp - 0x128]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push str.kernel32.dll
lea eax, [ebp - 0x128]
push eax
call fcn.004099a0
add esp, 8
lea ecx, [ebp - 0x128]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x40508a
mov edx, dword [ebp - 0x130]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x130]
call dword [eax + 0xc]
xor eax, eax
jmp 0x4051e1
push str.OpenVxDHandle
mov ecx, dword [ebp - 0x24]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jne 0x4050ca
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x130]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x130]
call dword [edx + 0xc]
xor eax, eax
jmp 0x4051e1
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax + 0x17c]
push ecx
call dword [ebp - 0x12c]
mov edx, dword [ebp - 0x130]
mov dword [edx + 0x178], eax
mov eax, dword [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x405131
call fcn.004089a0
cmp eax, 2
jne 0x405119
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp - 0x130]
mov eax, dword [edx + 0x17c]
mov dword [ecx + 0x178], eax
jmp 0x405131
mov ecx, dword [ebp - 0x130]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x130]
call dword [edx + 0xc]
xor eax, eax
jmp 0x4051e1
mov eax, dword [ebp - 0x130]
cmp dword [eax + 0x178], 0
jne 0x405158
mov ecx, dword [ebp - 0x130]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x130]
call dword [edx + 0xc]
xor eax, eax
jmp 0x4051e1
mov dword [ebp - 0x1c], 0x100000a
mov dword [ebp - 0x18], 0x100025c
mov dword [ebp - 0x14], 0x1000258
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax + 0x5c]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x130]
mov eax, dword [edx + 0x178]
mov dword [ebp - 8], eax
mov dword [ebp - 4], 0
push 0
push 0
push 0
push 0x1c
lea ecx, [ebp - 0x1c]
push ecx
push 0x8000a008
mov ecx, dword [ebp - 0x130]
call fcn.004032d3
test eax, eax
jne 0x4051cb
mov edx, dword [ebp - 0x130]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x130]
call dword [eax + 0xc]
xor eax, eax
jmp 0x4051e1
mov ecx, dword [ebp - 0x130]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x130]
call dword [edx + 0xc]
mov eax, 1
mov esp, ebp
pop ebp
ret