Function at 0x4142c0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x454
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x436480
mov esi, ecx
lea eax, [ebp - 0x18]
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
lea eax, [ebp - 0x460]
push 1
push 0x28
push eax
push 0
call sub.SHELL32.dll_SHGetSpecialFolderPathW
cmp eax, 1
jne 0x41434c
mov ecx, 0xfffffc00
mov eax, 1
mov dword [ebp - 0x54], esi
nop word cs:[eax + eax]
test ecx, ecx
je 0x414357
movzx edx, word [ebp + ecx - 0x60]
add ecx, 2
dec eax
test dx, dx
jne 0x414320
cmp dx, 1
mov cl, 1
mov dword [ebp - 0x10], 0xffffffff
adc cl, 0
movzx esi, cl
and esi, 1
sub esi, eax
jmp 0x41435c
mov dword [esi], 0
jmp 0x41445a
mov esi, 0x200
mov dword [ebp - 0x10], 0xffffffff
lea ecx, [ebp - 0x60]
lea edx, [ebp - 0x460]
push esi
call fcn.00423870
add esp, 4
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x60]
test ecx, ecx
mov dword [ebp - 0x34], eax
mov eax, ecx
mov dword [ebp - 0x24], ecx
je 0x41441f
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x34]
xor edi, edi
lea esi, [ecx + eax]
mov eax, ecx
jmp 0x4143a8
mov eax, ecx
add edi, edx
cmp eax, esi
je 0x41441f
movzx ebx, byte [eax]
lea ecx, [eax + 1]
mov edx, 1
test bl, bl
jns 0x4143a0
add eax, 2
cmp bl, 0xe0
jae 0x4143d1
cmp ecx, esi
mov edx, 2
cmove eax, ecx
add edi, edx
cmp eax, esi
jne 0x4143a8
jmp 0x41441f
cmp bl, 0xed
jne 0x4143f3
cmp ecx, esi
cmove eax, ecx
cmp eax, esi
je 0x41441f
inc eax
cmp ecx, esi
mov edx, 3
je 0x4143a2
cmp byte [ecx], 0x9f
jbe 0x4143a2
jmp 0x4144b8
cmp ecx, esi
mov edx, eax
cmove edx, ecx
lea eax, [edx + 1]
cmp edx, esi
cmove eax, edx
cmp bl, 0xf0
mov edx, 3
jb 0x4143a2
lea ecx, [eax + 1]
cmp eax, esi
mov edx, 4
cmovne eax, ecx
add edi, edx
cmp eax, esi
jne 0x4143a8
mov ecx, dword [ebp - 0x34]
mov edi, dword [ebp - 0x24]
xor eax, eax
test eax, eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x38], esi
je 0x41446e
mov ebx, ecx
cmp dword [ebp - 0x5c], 0
je 0x41444f
call sub.KERNEL32.dll_GetProcessHeap
push dword [ebp - 0x34]
push 0
push eax
call sub.KERNEL32.dll_HeapFree
mov eax, dword [ebp - 0x54]
mov dword [eax], ebx
mov dword [eax + 4], edi
mov dword [eax + 8], esi
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
add esp, 0x454
pop esi
pop edi
pop ebx
pop ebp
ret
test edi, edi
js 0x41483c
je 0x41449e
mov esi, ecx
call sub.KERNEL32.dll_GetProcessHeap
push edi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov ecx, esi
mov ebx, eax
test eax, eax
jne 0x4144a3
mov ecx, edi
mov edx, 1
call fcn.0040dcf0
ud2
mov ebx, 1
push edi
push ecx
push ebx
call fcn.00438b50
add esp, 0xc
mov esi, edi
cmp dword [ebp - 0x5c], 0
jne 0x41443f
jmp 0x41444f
mov ebx, dword [ebp - 0x24]
test ebx, ebx
js 0x414858
call sub.KERNEL32.dll_GetProcessHeap
push ebx
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x41484a
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], ebx
sub ebx, edi
mov dword [ebp - 0x3c], 0
jb 0x414866
mov dword [ebp - 0x3c], edi
push edi
push dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
push eax
call fcn.00438b50
add esp, 0xc
cmp ebx, 3
jae 0x414553
mov ecx, edi
add ecx, 3
jb 0x414879
mov eax, dword [ebp - 0x24]
lea ebx, [eax + eax]
cmp ebx, ecx
cmovbe ebx, ecx
test ebx, ebx
js 0x414879
mov dword [ebp - 0x30], ecx
call sub.KERNEL32.dll_GetProcessHeap
push ebx
push dword [ebp - 0x2c]
push 0
push eax
call sub.KERNEL32.dll_HeapReAlloc
test eax, eax
je 0x41484a
mov dword [ebp - 0x44], eax
mov ecx, eax
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x40], ebx
jmp 0x41455f
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
lea edx, [edi + 3]
mov dword [ebp - 0x20], eax
mov bl, byte [0x448552]
mov dword [ebp - 0x3c], edx
cmp edx, eax
mov byte [ecx + edi + 2], bl
movzx ebx, word [str....]
mov word [ecx + edi], bx
ja 0x414887
mov eax, edx
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], ecx
cmp eax, edi
je 0x414835
mov edi, eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x28], edi
add eax, edi
mov dword [ebp - 0x50], eax
jmp 0x4145bc
mov eax, ecx
add edi, edx
cmp eax, esi
je 0x414797
movzx ebx, byte [eax]
lea ecx, [eax + 1]
mov edx, 1
test bl, bl
jns 0x4145b0
add eax, 2
cmp bl, 0xe0
jae 0x4145e8
cmp ecx, esi
mov edx, 2
cmove eax, ecx
add edi, edx
cmp eax, esi
jne 0x4145bc
jmp 0x414797
cmp bl, 0xed
jne 0x41460b
cmp ecx, esi
cmove eax, ecx
cmp eax, esi
je 0x414797
inc eax
cmp ecx, esi
mov edx, 3
je 0x4145b2
cmp byte [ecx], 0x9f
jbe 0x4145b2
jmp 0x41463c
cmp ecx, esi
mov edx, eax
cmove edx, ecx
lea eax, [edx + 1]
cmp edx, esi
cmove eax, edx
cmp bl, 0xf0
mov edx, 3
jb 0x4145b2
lea ecx, [eax + 1]
cmp eax, esi
mov edx, 4
cmovne eax, ecx
add edi, edx
cmp eax, esi
jne 0x4145bc
jmp 0x414797
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x30]
mov ebx, edi
sub ebx, ecx
jb 0x41489c
cmp edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
ja 0x4148ac
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x4c], ebx
sub ecx, edx
cmp ecx, ebx
jae 0x4146ac
add edx, ebx
mov ebx, dword [ebp - 0x20]
jb 0x4148bf
lea eax, [ebx + ebx]
cmp eax, edx
cmovbe eax, edx
test eax, eax
mov dword [ebp - 0x48], eax
js 0x4148bf
mov dword [ebp - 0x28], edx
call sub.KERNEL32.dll_GetProcessHeap
test ebx, ebx
je 0x4146b4
mov ebx, dword [ebp - 0x48]
push ebx
push dword [ebp - 0x2c]
push 0
push eax
call sub.KERNEL32.dll_HeapReAlloc
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x28]
test eax, eax
jne 0x4146ce
jmp 0x41484a
lea ecx, [ebx + edx]
mov ebx, dword [ebp - 0x20]
jmp 0x4146d4
mov ebx, dword [ebp - 0x48]
push ebx
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x28]
test eax, eax
je 0x41484a
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x2c], eax
add edx, eax
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push edx
call fcn.00438b50
mov ecx, dword [ebp - 0x28]
add esp, 0xc
mov eax, ebx
sub eax, ecx
cmp eax, 2
ja 0x41473e
add ecx, 3
jb 0x4148d0
lea eax, [ebx + ebx]
cmp eax, ecx
cmova ecx, eax
test ecx, ecx
js 0x4148d0
mov dword [ebp - 0x20], ecx
call sub.KERNEL32.dll_GetProcessHeap
test ebx, ebx
je 0x414748
mov ebx, dword [ebp - 0x20]
push ebx
push dword [ebp - 0x2c]
push 0
push eax
call sub.KERNEL32.dll_HeapReAlloc
mov ecx, eax
mov al, byte [0x448552]
test ecx, ecx
jne 0x414763
jmp 0x41484a
mov ecx, dword [ebp - 0x2c]
mov al, byte [0x448552]
jmp 0x414769
mov ebx, dword [ebp - 0x20]
push ebx
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov ecx, eax
mov al, byte [0x448552]
test ecx, ecx
je 0x41484a
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x28]
add edi, 3
cmp edi, dword [ebp - 0x24]
lea edx, [ebx + 3]
mov dword [ebp - 0x3c], edx
mov byte [ecx + ebx + 2], al
movzx eax, word [str....]
mov word [ecx + ebx], ax
mov eax, edi
jbe 0x414581
jmp 0x414889
mov edi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x20]
sub edi, eax
mov dword [ebp - 0x28], eax
sub esi, edx
cmp esi, edi
jae 0x4147ea
mov eax, dword [ebp - 0x20]
mov esi, edx
add esi, edi
jb 0x4148e1
lea ebx, [eax + eax]
cmp ebx, esi
cmovbe ebx, esi
test ebx, ebx
js 0x4148e1
mov dword [ebp - 0x20], eax
call sub.KERNEL32.dll_GetProcessHeap
cmp dword [ebp - 0x20], 0
je 0x4147f2
push ebx
push dword [ebp - 0x2c]
push 0
push eax
call sub.KERNEL32.dll_HeapReAlloc
jmp 0x4147fb
mov eax, dword [ebp - 0x28]
lea esi, [edi + edx]
jmp 0x414810
push ebx
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov ecx, eax
test eax, eax
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
je 0x41484a
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x20], ebx
add eax, dword [ebp - 0x34]
mov ebx, eax
mov eax, ecx
add eax, edx
push edi
push ebx
push eax
mov edi, ecx
call fcn.00438b50
mov ecx, edi
add esp, 0xc
mov edi, dword [ebp - 0x20]
mov eax, 1
jmp 0x414427
mov eax, edi
jmp 0x4147a3
mov dword [ebp - 0x10], 1
call fcn.0041e940
ud2
mov ecx, ebx
mov edx, 1
call fcn.0040dcf0
ud2
mov dword [ebp - 0x10], 0
call fcn.0041e940
jmp 0x414848
mov edx, dword [ebp - 0x24]
mov ecx, edi
mov dword [ebp - 0x10], 2
call fcn.0040ff00
jmp 0x414848
mov dword [ebp - 0x10], 2
call fcn.0040dd00
jmp 0x414848
mov edi, edx
mov edx, dword [ebp - 0x24]
mov ecx, edi
mov dword [ebp - 0x10], 2
call fcn.00410500
jmp 0x414848
mov edx, edi
mov dword [ebp - 0x10], 2
call fcn.00410500
jmp 0x414848
mov edx, dword [ebp - 0x24]
mov ecx, edi
mov dword [ebp - 0x10], 2
call fcn.0040ff00
jmp 0x414848
mov dword [ebp - 0x10], 2
call fcn.0040dd00
jmp 0x414848
mov dword [ebp - 0x10], 2
call fcn.0040dd00
jmp 0x414848
mov dword [ebp - 0x10], 2
call fcn.0040dd00
jmp 0x414848