Function at 0x409d6f
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1948
call fcn.004140c0
push ebx
push esi
push edi
lea edi, [ebp - 0x1948]
mov ecx, 0x652
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x41f01c]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 9], 0
mov byte [ebp - 0x15], 0
call fcn.00412983
movzx eax, al
test eax, eax
je 0x409db7
mov al, byte [ebp - 9]
jmp 0x40a135
push 0x400
lea eax, [ebp - 0x820]
push eax
call fcn.00408494
pop ecx
pop ecx
test eax, eax
je 0x409e0f
push 0x400
lea eax, [ebp - 0x1028]
push eax
call fcn.0040827d
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x409e0f
mov esi, esp
lea eax, [ebp - 0x1028]
push eax
lea eax, [ebp - 0x820]
push eax
call dword [sym.imp.MSVCR120.dll__wcsicmp]
pop ecx
pop ecx
cmp esi, esp
call fcn.00414070
test eax, eax
je 0x409e0f
mov byte [ebp - 0x15], 1
call fcn.0041276c
test eax, eax
jne 0x409e24
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x40a122
xor eax, eax
mov word [ebp - 0x1238], ax
push 0x206
push 0
lea eax, [ebp - 0x1236]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
xor eax, eax
mov word [ebp - 0x1448], ax
push 0x206
push 0
lea eax, [ebp - 0x1446]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov esi, esp
push 0x104
lea eax, [ebp - 0x1448]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp esi, esp
call fcn.00414070
cmp eax, 0x104
jb 0x409e8e
mov al, byte [ebp - 9]
jmp 0x40a135
mov byte [ebp - 0x1451], 0
mov esi, esp
push 0x104
lea eax, [ebp - 0x1448]
push eax
call dword [sym.imp.MSVCR120.dll__wcslwr_s]
pop ecx
pop ecx
cmp esi, esp
call fcn.00414070
push str.adelrcp.exe
lea eax, [ebp - 0x1448]
push eax
call fcn.00401a68
pop ecx
pop ecx
test eax, eax
jne 0x409ed8
mov byte [ebp - 0x1451], 1
mov al, byte [ebp - 9]
jmp 0x40a135
movzx eax, byte [0x41f398]
test eax, eax
je 0x409eea
mov al, 1
jmp 0x40a135
lea eax, [ebp - 0x1238]
push eax
lea eax, [ebp - 0x1448]
push eax
call fcn.00411b3b
pop ecx
pop ecx
test eax, eax
jne 0x409f0b
mov al, byte [ebp - 9]
jmp 0x40a135
and dword [ebp - 0x1460], 0
push str.7AD7
lea eax, [ebp - 0x1238]
push eax
call fcn.00401a68
pop ecx
pop ecx
test eax, eax
je 0x409f33
mov dword [ebp - 0x1460], 1
push 0x104
lea eax, [ebp - 0x1448]
push eax
call fcn.00411d63
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x409f67
push 0x104
lea eax, [ebp - 0x1448]
push eax
call fcn.00411d63
pop ecx
pop ecx
movzx eax, al
test eax, eax
jne 0x409f6f
mov al, byte [ebp - 9]
jmp 0x40a135
cmp dword [ebp - 0x1460], 0
je 0x409f9d
mov esi, esp
push str.ESLAiodlite.dll__CreateReaderUserSettings
push 0x104
lea eax, [ebp - 0x1448]
push eax
call dword [sym.imp.MSVCR120.dll_wcscat_s]
add esp, 0xc
cmp esi, esp
call fcn.00414070
jmp 0x409fc0
mov esi, esp
push str.ESLAiod.dll__CreateAcroUserSettings
push 0x104
lea eax, [ebp - 0x1448]
push eax
call dword [sym.imp.MSVCR120.dll_wcscat_s]
add esp, 0xc
cmp esi, esp
call fcn.00414070
xor eax, eax
mov word [ebp - 0x1670], ax
push 0x206
push 0
lea eax, [ebp - 0x166e]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov esi, esp
push 0x104
lea eax, [ebp - 0x1670]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
cmp esi, esp
call fcn.00414070
cmp eax, 0x104
jb 0x40a009
mov al, byte [ebp - 9]
jmp 0x40a135
mov esi, esp
push str._rundll32.exe
push 0x104
lea eax, [ebp - 0x1670]
push eax
call dword [sym.imp.MSVCR120.dll_wcscat_s]
add esp, 0xc
cmp esi, esp
call fcn.00414070
test eax, eax
je 0x40a038
mov al, byte [ebp - 9]
jmp 0x40a135
xor eax, eax
mov word [ebp - 0x1880], ax
push 0x206
push 0
lea eax, [ebp - 0x187e]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov esi, esp
push 0x416df4
push 0x104
lea eax, [ebp - 0x1880]
push eax
call dword [sym.imp.MSVCR120.dll_wcscpy_s]
add esp, 0xc
cmp esi, esp
call fcn.00414070
mov esi, esp
lea eax, [ebp - 0x1670]
push eax
push 0x104
lea eax, [ebp - 0x1880]
push eax
call dword [sym.imp.MSVCR120.dll_wcscat_s]
add esp, 0xc
cmp esi, esp
call fcn.00414070
mov esi, esp
push 0x4184b8
push 0x104
lea eax, [ebp - 0x1880]
push eax
call dword [sym.imp.MSVCR120.dll_wcscat_s]
add esp, 0xc
cmp esi, esp
call fcn.00414070
mov esi, esp
lea eax, [ebp - 0x1448]
push eax
push 0x104
lea eax, [ebp - 0x1880]
push eax
call dword [sym.imp.MSVCR120.dll_wcscat_s]
add esp, 0xc
cmp esi, esp
call fcn.00414070
lea eax, [ebp - 0x1880]
push eax
call fcn.00412a9a
pop ecx
test eax, eax
je 0x40a101
mov byte [ebp - 0x1945], 1
jmp 0x40a108
mov byte [ebp - 0x1945], 0
mov al, byte [ebp - 0x1945]
mov byte [ebp - 9], al
movzx eax, byte [ebp - 9]
test eax, eax
je 0x40a120
mov byte [0x41f398], 1
jmp 0x40a132
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004017bd
pop ecx
pop ecx
mov byte [ebp - 9], al
mov al, byte [ebp - 9]
push edx
mov ecx, ebp
push eax
lea edx, [0x40a167]
call fcn.00414018
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00414093
add esp, 0x1948
cmp ebp, esp
call fcn.00414070
mov esp, ebp
pop ebp
ret