Function at 0x41b760
Capabilities:
Get common file path

Disassembly:
push ebx
push ebp
mov ebp, ecx
xor ebx, ebx
or eax, 0xffffffff
push esi
mov dword [ebp + 0x20], ebx
mov dword [ebp + 0x48], eax
mov dword [ebp + 0x4c], eax
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x54], eax
push edi
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x9e0], ebx
mov ecx, 9
xor eax, eax
lea edi, [ebp + 0xa14]
mov dword [ebp], 0x61cf80
rep stosd dword es:[edi], eax
mov ecx, 0x2c
lea edi, [ebp + 0x928]
rep stosd dword es:[edi], eax
lea ecx, [ebp + 0x107c]
push 0x40000000
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov ecx, ebp
mov dword [ebp + 0x60], ebx
call fcn.00421a50
push ebx
mov ecx, ebp
call fcn.00421a40
push ebx
mov ecx, ebp
call fcn.00421a90
push ebx
mov ecx, ebp
call fcn.00421aa0
mov esi, 1
mov ecx, ebp
push esi
call fcn.00421ab0
push ebx
mov ecx, ebp
call fcn.00421ad0
push 8
push 0x60
push 0x60
mov ecx, ebp
call fcn.00421af0
push ebx
mov ecx, ebp
call fcn.00421b20
push esi
mov ecx, ebp
call fcn.00421b30
push esi
mov ecx, ebp
call fcn.00421b50
push esi
mov ecx, ebp
call fcn.00421b60
push 0x3fc00000
mov ecx, ebp
call fcn.00421cc0
push 0x3fc00000
mov ecx, ebp
call fcn.00421cb0
mov ecx, ebp
call fcn.00421d10
mov ecx, ebp
call fcn.00421d20
push ebx
mov ecx, ebp
call fcn.00421b80
push 2
mov ecx, ebp
call fcn.00421c00
xor edi, edi
push ebx
push edi
mov ecx, ebp
call fcn.00421be0
push ebx
push edi
mov ecx, ebp
call fcn.00421b90
push ebx
push edi
mov ecx, ebp
call fcn.00421bb0
push esi
push edi
mov ecx, ebp
call fcn.00421c10
inc edi
cmp edi, 9
jl 0x41b85c
push 2
mov ecx, ebp
call fcn.00421c30
push 2
mov ecx, ebp
call fcn.00421c40
push 4
mov ecx, ebp
call fcn.00421b70
push 0x6619f0
mov ecx, ebp
call fcn.00421a60
mov edx, dword [esp + 0x14]
mov dword [0x6633d4], ebp
mov dword [ebp + 0x28], edx
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x30], ebx
mov dword [ebp + 0x34], esi
mov dword [ebp + 0x38], ebx
mov dword [ebp + 0x40], ebx
mov dword [0x663320], ebx
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x64], ebx
mov dword [ebp + 0x68], ebx
mov dword [ebp + 0x6c], ebx
mov dword [ebp + 0x70], ebx
mov byte [ebp + 0x74], 2
mov dword [ebp + 0x78], ebx
mov dword [ebp + 0x80], ebx
mov dword [ebp + 0x84], ebx
mov dword [ebp + 0x88], ebx
mov word [ebp + 0x8c], bx
mov dword [ebp + 0x90], ebx
mov dword [ebp + 0x94], ebx
lea ecx, [ebp + 0xb54]
lea eax, [ebp + 0x1068]
mov edx, 5
mov dword [eax], ebx
mov byte [ecx], bl
add eax, 4
add ecx, 0x104
dec edx
jne 0x41b91b
mov byte [ebp + 0x98], bl
mov dword [ebp + 0x9c], ebx
mov dword [ebp + 0xa0], ebx
mov dword [ebp + 0xa4], ebx
mov byte [ebp + 0xa8], bl
mov dword [ebp + 0x1ac], ebx
mov dword [ebp + 0x1b0], ebx
mov dword [ebp + 0x1b4], ebx
mov dword [0x66331c], ebx
mov dword [ebp + 0x1cc], ebx
mov dword [ebp + 0x1d0], ebx
mov dword [ebp + 0x1d4], ebx
mov dword [ebp + 0x1b8], ebx
mov dword [ebp + 0x1c0], ebx
mov dword [ebp + 0x1c4], ebx
mov dword [ebp + 0x1c8], esi
mov dword [ebp + 0x1bc], ebx
mov dword [ebp + 0xb48], ebx
mov dword [ebp + 0x1d8], ebx
mov dword [ebp + 0x1dc], ebx
mov dword [ebp + 0x1e0], ebx
mov dword [ebp + 0x1e4], ebx
mov dword [ebp + 0x1e8], ebx
mov dword [ebp + 0x1ec], ebx
mov dword [ebp + 0x1f0], ebx
mov dword [ebp + 0x1f4], ebx
push 0x7f00
mov dword [ebp + 0x1f8], esi
push ebx
mov dword [ebp + 0x1fc], esi
call dword [sym.imp.USER32.dll_LoadCursorA]
mov dword [ebp + 0x200], eax
lea eax, [ebp + 0x214]
mov word [ebp + 0x20c], bx
push eax
mov dword [ebp + 0x210], ebx
push 0x105
mov dword [ebp + 0x1c], 0xa
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
mov edi, str.language.dll
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp + 0x319]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [ebp + 0x55c]
and ecx, 3
or edx, 0xffffffff
rep movsb byte es:[edi], byte [esi]
mov esi, 1
mov dword [ebp + 0x420], ebx
mov dword [ebp + 0x424], esi
mov word [ebp + 0x428], dx
mov word [ebp + 0x42a], bx
mov byte [ebp + 0x42c], bl
mov word [ebp + 0x42e], dx
mov word [ebp + 0x430], dx
mov word [ebp + 0x432], si
mov byte [ebp + 0x434], bl
mov dword [ebp + 0x534], ebx
mov dword [ebp + 0x538], ebx
mov dword [ebp + 0x53c], ebx
mov dword [ebp + 0x540], ebx
mov dword [ebp + 0x544], ebx
mov dword [ebp + 0x548], ebx
mov dword [ebp + 0x54c], ebx
mov dword [ebp + 0x550], ebx
mov dword [ebp + 0x554], ebx
mov dword [ebp + 0x924], ebx
mov ecx, 0x1e
mov dword [eax - 4], ebx
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], ebx
mov dword [eax + 0x18], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
add eax, 0x20
dec ecx
jne 0x41babd
mov dword [ebp + 0x918], ebx
mov dword [ebp + 0x91c], ebx
mov dword [ebp + 0x920], ebx
mov dword [ebp + 0x9e4], esi
mov dword [ebp + 0x44], ebx
mov dword [0x668368], ebx
mov ecx, dword [ebp + 0x28]
mov eax, dword [ecx + 0x410]
mov dword [0x663338], ebx
mov dword [0x66333c], eax
mov dword [0x663334], ebx
mov dword [0x663330], ebx
mov dword [0x66332c], ebx
mov dword [0x663328], ebx
mov dword [0x663324], ebx
mov dword [ebp + 0x24], ebx
xor eax, eax
lea ecx, [ebp + 0x9e8]
mov dword [ecx], ebx
mov byte [eax + ebp + 0x1099], bl
inc eax
add ecx, 4
cmp eax, 9
jl 0x41bb38
mov dword [ebp + 8], edx
mov ecx, ebp
mov dword [ebp + 0xc], edx
mov dword [ebp + 0x10], edx
mov dword [ebp + 0x14], edx
mov dword [ebp + 0x18], edx
mov dword [ebp + 0xb3c], ebx
mov dword [ebp + 0xb4c], esi
mov dword [ebp + 0x10a4], ebx
mov dword [ebp + 0x1090], 0x3fc00000
mov dword [ebp + 0x1094], 3
call fcn.0041dc50
test eax, eax
jne 0x41bb9a
pop edi
mov dword [ebp + 0x64], 0xe
mov eax, ebp
pop esi
pop ebp
pop ebx
ret 8
mov ecx, dword [ebp + 0x1d8]
mov dword [0x66332c], ecx
mov ecx, ebp
call fcn.0041dcc0
test eax, eax
jne 0x41bbc1
pop edi
mov dword [ebp + 0x64], 0xf
mov eax, ebp
pop esi
pop ebp
pop ebx
ret 8
mov eax, dword [esp + 0x18]
mov edx, dword [ebp + 0x1cc]
cmp eax, ebx
mov dword [0x668368], edx
je 0x41bbe8
mov ecx, ebp
call fcn.0041bc90
test eax, eax
jne 0x41bbe8
cmp dword [ebp + 0x64], ebx
jne 0x41bbe8
mov dword [ebp + 0x64], esi
pop edi
mov dword [ebp + 0xa0c], ebx
mov dword [ebp + 0xa10], ebx
mov byte [ebp + 4], 0xff
mov eax, ebp
pop esi
pop ebp
pop ebx
ret 8