Function at 0x65e4b0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1e0
cmp dword [0x7eb470], 1
push ebx
push ebp
push esi
push edi
je 0x65ea2d
xor eax, eax
mov ecx, 0x5a
lea edi, [esp + 0x80]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x16a
lea eax, [esp + 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
je 0x65ea2d
lea eax, [esp + 0x80]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x65e504
sub eax, edx
cmp eax, 1
jl 0x65ea2d
cmp eax, 0x104
jg 0x65ea2d
mov byte [esp + eax + 0x80], 0x5c
inc eax
mov edx, 0x16a
sub edx, eax
lea eax, [esp + eax + 0x80]
mov ecx, eax
mov dword [esp + 0x7c], edx
mov dword [esp + 0x78], eax
call fcn.00659fa0
lea ecx, [esp + 0x80]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x65e5c1
mov edx, 0x66
lea ecx, [esp + 0x10]
call fcn.0065a320
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea edx, [esp + 0x10]
push edx
push edi
call esi
mov ebx, eax
test ebx, ebx
je 0x65e5c1
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb3cc], ebx
call fcn.0065a450
lea eax, [esp + 0x10]
push eax
push edi
call esi
mov esi, eax
test esi, esi
je 0x65e5c1
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb3d0], esi
call fcn.0065a5b0
lea ecx, [esp + 0x10]
push ecx
push edi
call esi
mov ebp, eax
test ebp, ebp
jne 0x65e5ce
mov eax, 0x363
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb3d4], ebp
call fcn.0065a6c0
lea edx, [esp + 0x10]
push edx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb3d8], eax
call fcn.0065a7f0
lea eax, [esp + 0x10]
push eax
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb3dc], eax
call fcn.0065a920
lea ecx, [esp + 0x10]
push ecx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb3e0], eax
call fcn.0065aaf0
lea edx, [esp + 0x10]
push edx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb3e4], eax
call fcn.0065acb0
lea eax, [esp + 0x10]
push eax
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb3e8], eax
call fcn.0065ade0
lea ecx, [esp + 0x10]
push ecx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb3ec], eax
call fcn.0065af30
lea edx, [esp + 0x10]
push edx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb3f0], eax
call fcn.0065b0f0
lea eax, [esp + 0x10]
push eax
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb3f4], eax
call fcn.0065b2d0
lea ecx, [esp + 0x10]
push ecx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb3f8], eax
call fcn.0065b4b0
lea edx, [esp + 0x10]
push edx
push edi
call esi
mov dword [0x7eb3fc], eax
mov edx, 0x66
lea ecx, [esp + 0x10]
call fcn.0065b680
lea eax, [esp + 0x10]
push eax
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb400], eax
call fcn.0065b7d0
lea ecx, [esp + 0x10]
push ecx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb404], eax
call fcn.0065b9d0
lea edx, [esp + 0x10]
push edx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb408], eax
call fcn.0065bb30
lea eax, [esp + 0x10]
push eax
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb40c], eax
call fcn.0065bc80
lea ecx, [esp + 0x10]
push ecx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb410], eax
call fcn.0065bd70
lea edx, [esp + 0x10]
push edx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb414], eax
call fcn.0065bf90
lea eax, [esp + 0x10]
push eax
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb418], eax
call fcn.0065c170
lea ecx, [esp + 0x10]
push ecx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb41c], eax
call fcn.0065c300
lea edx, [esp + 0x10]
push edx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb420], eax
call fcn.0065c510
lea eax, [esp + 0x10]
push eax
push edi
call esi
mov dword [0x7eb424], eax
mov edx, 0x66
lea ecx, [esp + 0x10]
call fcn.0065c6f0
lea ecx, [esp + 0x10]
push ecx
push edi
call esi
mov edx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
mov dword [0x7eb428], eax
call fcn.0065a0d0
lea edx, [esp + 0x80]
push edx
call ebx
mov edi, eax
test edi, edi
jne 0x65e835
mov eax, 0x364
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, 0x66
lea ecx, [esp + 0x10]
call fcn.0065c900
lea eax, [esp + 0x10]
push eax
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb42c], eax
call fcn.0065ca50
lea ecx, [esp + 0x10]
push ecx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb430], eax
call fcn.0065cbd0
lea edx, [esp + 0x10]
push edx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb434], eax
call fcn.0065ccf0
lea eax, [esp + 0x10]
push eax
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb438], eax
call fcn.0065ce40
lea ecx, [esp + 0x10]
push ecx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb43c], eax
call fcn.0065cf90
lea edx, [esp + 0x10]
push edx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb440], eax
call fcn.0065d0e0
lea eax, [esp + 0x10]
push eax
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb444], eax
call fcn.0065d270
lea ecx, [esp + 0x10]
push ecx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb448], eax
call fcn.0065da50
lea edx, [esp + 0x10]
push edx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb458], eax
call fcn.0065dc30
lea eax, [esp + 0x10]
push eax
push edi
call esi
mov dword [0x7eb45c], eax
mov edx, 0x66
lea ecx, [esp + 0x10]
call fcn.0065de00
lea ecx, [esp + 0x10]
push ecx
push edi
call esi
mov dword [0x7eb460], eax
call ebp
test eax, eax
js 0x65e9b5
mov edx, 0x66
lea ecx, [esp + 0x10]
call fcn.0065d3d0
lea edx, [esp + 0x10]
push edx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb44c], eax
call fcn.0065d570
lea eax, [esp + 0x10]
push eax
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb450], eax
call fcn.0065d800
lea ecx, [esp + 0x10]
push ecx
push edi
call esi
mov dword [0x7eb454], eax
mov edx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
call fcn.0065a200
lea edx, [esp + 0x80]
push edx
call ebx
mov edi, eax
test edi, edi
je 0x65ea23
mov edx, 0x66
lea ecx, [esp + 0x10]
call fcn.0065df60
lea eax, [esp + 0x10]
push eax
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb464], eax
call fcn.0065e180
lea ecx, [esp + 0x10]
push ecx
push edi
call esi
mov edx, 0x66
lea ecx, [esp + 0x10]
mov dword [0x7eb468], eax
call fcn.0065e350
lea edx, [esp + 0x10]
push edx
push edi
call esi
mov dword [0x7eb46c], eax
mov dword [0x7eb470], 1
pop edi
xor eax, eax
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret