Function at 0x60d780
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x60da23
push dword fs:[eax]
mov dword fs:[eax], esp
test dl, dl
je 0x60d9b3
cmp byte [ebx + 0x34], 0
jne 0x60da08
cmp dword [ebx + 0x3c], 0
je 0x60da08
lea edx, [ebp - 4]
mov eax, dword [ebx + 0x3c]
call fcn.0041f9d0
cmp dword [ebp - 4], 0
jne 0x60d817
lea eax, [ebp - 4]
mov edx, 0x12c
call fcn.00407bcc
mov eax, dword [ebp - 4]
call fcn.00407a50
push eax
push 0x12c
call sub.kernel32.dll_GetCurrentDirectoryW
mov eax, dword [ebp - 4]
call fcn.00407a50
call fcn.0041fc88
mov edx, eax
lea eax, [ebp - 4]
call fcn.00407bcc
lea edx, [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00425584
mov edx, dword [ebp - 8]
lea eax, [ebx + 0x3c]
mov ecx, dword [ebx + 0x3c]
call fcn.00407ca4
mov dl, 1
mov eax, dword [ebx + 0x3c]
call fcn.0041f53c
test al, al
je 0x60d931
cmp byte [ebx + 0x58], 0
je 0x60d845
mov byte [ebx + 0x59], 1
mov edx, 0x40
mov eax, dword [ebx + 0x3c]
call fcn.0041f1b8
mov dword [ebx + 0x50], eax
jmp 0x60d859
mov byte [ebx + 0x59], 0
mov edx, 0x22
mov eax, dword [ebx + 0x3c]
call fcn.0041f1b8
mov dword [ebx + 0x50], eax
mov eax, dword [ebx + 0x50]
test eax, eax
jbe 0x60d865
cmp eax, 0xffffffff
jne 0x60d88f
mov byte [ebx + 0x59], 1
mov edx, 0x40
mov eax, dword [ebx + 0x3c]
call fcn.0041f1b8
mov dword [ebx + 0x50], eax
mov eax, dword [ebx + 0x50]
test eax, eax
jbe 0x60d885
cmp eax, 0xffffffff
jne 0x60d88f
xor eax, eax
mov dword [ebx + 0x50], eax
jmp 0x60da08
cmp dword [ebx + 0x38], 0
je 0x60d8f0
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x60d8a1
sub eax, 4
mov eax, dword [eax]
mov esi, eax
mov eax, esi
call fcn.004044b8
mov edi, eax
mov edx, edi
mov ecx, esi
mov eax, dword [ebx + 0x50]
call fcn.0041f274
lea eax, [ebx + 0x38]
call fcn.00407254
mov ecx, esi
mov edx, edi
call fcn.0041e288
test al, al
jne 0x60d8e7
mov eax, dword [ebx + 0x50]
push eax
call sub.kernel32.dll_CloseHandle
xor eax, eax
mov dword [ebx + 0x50], eax
mov eax, edi
call fcn.004044d4
jmp 0x60da08
mov eax, edi
call fcn.004044d4
jmp 0x60d8f2
xor esi, esi
lea edx, [ebx + 0x44]
mov ecx, 4
mov eax, dword [ebx + 0x50]
call fcn.0041f274
lea eax, [esi + 4]
mov dword [ebx + 0x54], eax
mov dword [ebx + 0x4c], eax
xor eax, eax
mov dword [ebx + 0x48], eax
mov ecx, 2
xor edx, edx
mov eax, dword [ebx + 0x50]
call fcn.0041f2cc
mov dword [ebx + 0x40], eax
xor ecx, ecx
mov edx, dword [ebx + 0x4c]
mov eax, dword [ebx + 0x50]
call fcn.0041f2cc
jmp 0x60d9ad
mov byte [ebx + 0x59], 0
mov eax, dword [ebp - 4]
call fcn.0060c320
mov eax, dword [ebx + 0x3c]
call fcn.0041f210
mov esi, eax
mov dword [ebx + 0x50], esi
test esi, esi
ja 0x60d958
xor eax, eax
mov dword [ebx + 0x50], eax
jmp 0x60da08
cmp dword [ebx + 0x38], 0
je 0x60d982
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x60d96a
sub eax, 4
mov eax, dword [eax]
mov esi, eax
lea eax, [ebx + 0x38]
call fcn.00407254
mov edx, eax
mov ecx, esi
mov eax, dword [ebx + 0x50]
call fcn.0041f2a0
jmp 0x60d984
xor esi, esi
xor eax, eax
mov dword [ebx + 0x44], eax
lea edx, [ebx + 0x44]
mov ecx, 4
mov eax, dword [ebx + 0x50]
call fcn.0041f2a0
lea eax, [esi + 4]
mov dword [ebx + 0x54], eax
mov dword [ebx + 0x4c], eax
xor eax, eax
mov dword [ebx + 0x48], eax
mov eax, dword [ebx + 0x54]
mov dword [ebx + 0x40], eax
mov byte [ebx + 0x34], 1
jmp 0x60da08
mov byte [ebx + 0x59], 0
cmp byte [ebx + 0x34], 0
je 0x60da08
mov edx, dword [ebx + 0x54]
sub edx, 4
xor ecx, ecx
mov eax, dword [ebx + 0x50]
call fcn.0041f2cc
lea edx, [ebx + 0x44]
mov ecx, 4
mov eax, dword [ebx + 0x50]
call fcn.0041f2a0
ret
sbb cl, ah
dec dword [ebx - 0x17afafbd]
out dx, al
invalid
inc esi
inc ebx
xor al, 0
xor eax, eax
mov dword [ebx + 0x40], eax
xor eax, eax
mov dword [ebx + 0x44], eax
xor eax, eax
mov dword [ebx + 0x48], eax
xor eax, eax
mov dword [ebx + 0x4c], eax
xor eax, eax
mov dword [ebx + 0x50], eax
xor eax, eax
mov dword [ebx + 0x54], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x60da2a
lea eax, [ebp - 8]
mov edx, 2
call fcn.00406cb8
ret