Function at 0x40d100
Capabilities:
Get common file path
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x46dc07
mov eax, dword fs:[0]
push eax
sub esp, 0x6c4
mov eax, dword [0x487fb0]
xor eax, esp
mov dword [esp + 0x6c0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x487fb0]
xor eax, esp
push eax
lea eax, [esp + 0x6d8]
mov dword fs:[0], eax
xor eax, eax
xor ebp, ebp
push 0x54
mov dword [esp + 0x2a9], eax
mov dword [esp + 0x2ad], eax
mov dword [esp + 0x2b1], eax
mov dword [esp + 0x2b5], eax
mov dword [esp + 0x2b9], eax
mov dword [esp + 0x2bd], eax
mov dword [esp + 0x2c1], eax
mov word [esp + 0x2c5], ax
mov byte [esp + 0x2c7], al
lea eax, [esp + 0x24]
push ebp
push eax
mov edi, ecx
mov byte [esp + 0x2b0], 0
mov dword [esp + 0x28], ebp
call fcn.00453a00
add esp, 0xc
lea ecx, [esp + 0xfc]
call fcn.0041a76d
lea ecx, [esp + 0x184]
mov dword [esp + 0x6e0], ebp
call fcn.0041a76d
lea ecx, [esp + 0x208]
mov byte [esp + 0x6e0], 1
call fcn.0041a76d
push 1
mov byte [esp + 0x6e4], 2
call fcn.0040df90
push edi
call fcn.0040f870
test eax, eax
je 0x40d89e
push 0x208
lea ecx, [esp + 0x2c8]
push ebp
push ecx
call fcn.00453a00
add esp, 0xc
push 0x208
lea edx, [esp + 0x4d0]
push ebp
push edx
call fcn.00453a00
add esp, 0xc
lea eax, [esp + 0x4cc]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov ecx, dword [edi + 4]
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x2c4]
lea eax, [esp + 0x4cc]
push ecx
mov dword [esp + 0x20], 0x58
mov dword [esp + 0x2c], str..ini
mov dword [esp + 0x38], 1
mov dword [esp + 0x3c], edx
mov dword [esp + 0x40], 0x208
mov dword [esp + 0x4c], eax
mov dword [esp + 0x54], 0x806
mov dword [esp + 0x5c], 0x47f20c
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
test eax, eax
je 0x40d89e
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea edx, [esp + 0x2c4]
push edx
lea eax, [edi + 0xa96]
push eax
push str.ComputerName
push str.systeminfo
call esi
lea ecx, [esp + 0x2c4]
push ecx
lea edx, [edi + 0xab6]
push edx
push str.ProductId
push str.systeminfo
call esi
lea eax, [esp + 0x2c4]
push eax
lea ecx, [edi + 0xae6]
push ecx
push str.ProductKey
push str.systeminfo
call esi
mov edx, dword [edi + 0xb22]
push edx
lea eax, [esp + 0x4d0]
push 0x47e484
push eax
mov edx, 0x208
call fcn.00401360
add esp, 0xc
lea ecx, [esp + 0x2c4]
push ecx
lea edx, [esp + 0x4d0]
push edx
push str.InstallDate
push str.systeminfo
call esi
mov ecx, dword [edi + 0x7c0]
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
lea edx, [esp + 0x78]
push edx
call eax
push eax
lea ecx, [esp + 0x100]
mov byte [esp + 0x6e4], 3
call fcn.0041a8ef
lea ecx, [esp + 0x78]
mov byte [esp + 0x6e0], 2
call fcn.0041a792
lea ecx, [esp + 0x2c4]
push ecx
lea ecx, [esp + 0x100]
call fcn.0041a64a
push eax
push str.SystemBios
push str.systeminfo
call esi
mov edx, dword [edi + 0xcb8]
push edx
lea eax, [esp + 0x4d0]
push str._08X
push eax
mov edx, 0x208
call fcn.00401360
add esp, 0xc
lea ecx, [esp + 0x2c4]
push ecx
lea edx, [esp + 0x4d0]
push edx
push str.SerialNumber
push str.Partition
call esi
mov ecx, dword [edi + 0x838]
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
lea edx, [esp + 0x78]
push edx
call eax
push eax
lea ecx, [esp + 0x100]
mov byte [esp + 0x6e4], 4
call fcn.0041a8ef
lea ecx, [esp + 0x78]
mov byte [esp + 0x6e0], 2
call fcn.0041a792
lea ecx, [esp + 0x2c4]
push ecx
lea ecx, [esp + 0x100]
call fcn.0041a64a
push eax
push str.PartitionGuid
push str.Partition
call esi
lea edx, [esp + 0x2c4]
push edx
lea eax, [edi + 0xccc]
push eax
push str.SymbolicLink
push str.Partition
call esi
push 1
lea ebx, [edi + 0xf3c]
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x40d4a1
push eax
push eax
push 0xffffffffffffffff
push ebx
push 1
push eax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [esp + 0x18], eax
test eax, eax
je 0x40d4a1
lea ebp, [eax + 2]
xor ecx, ecx
mov eax, ebp
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0041206b
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x40d4a1
mov eax, dword [esp + 0x18]
add eax, 2
push eax
push 0
push ebp
call fcn.00453a00
mov eax, dword [esp + 0x24]
add esp, 0xc
push eax
push ebp
push 0xffffffffffffffff
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 1
push 0
call ebx
jmp 0x40d4a7
mov ebx, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ecx, [esp + 0x2c4]
push ecx
push ebp
push str.SerialNumber
push str.HardDisk
call esi
lea eax, [edi + 0xf51]
push 1
push eax
xor ebp, ebp
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x40d535
push eax
push eax
push 0xffffffffffffffff
lea eax, [edi + 0xf51]
push eax
push 1
push ebp
call ebx
mov dword [esp + 0x18], eax
test eax, eax
je 0x40d535
lea ebp, [eax + 2]
xor ecx, ecx
mov eax, ebp
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0041206b
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x40d535
mov eax, dword [esp + 0x18]
add eax, 2
push eax
push 0
push ebp
call fcn.00453a00
mov eax, dword [esp + 0x24]
add esp, 0xc
push eax
push ebp
push 0xffffffffffffffff
lea eax, [edi + 0xf51]
push eax
push 1
push 0
call ebx
lea ecx, [esp + 0x2c4]
push ecx
push ebp
push str.FirmwareVersion
push str.HardDisk
call esi
lea eax, [edi + 0xf5a]
push 1
push eax
xor ebp, ebp
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x40d5c3
push eax
push eax
push 0xffffffffffffffff
lea eax, [edi + 0xf5a]
push eax
push 1
push ebp
call ebx
mov dword [esp + 0x18], eax
test eax, eax
je 0x40d5c3
lea ebp, [eax + 2]
xor ecx, ecx
mov eax, ebp
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0041206b
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x40d5c3
mov eax, dword [esp + 0x18]
add eax, 2
push eax
push 0
push ebp
call fcn.00453a00
mov eax, dword [esp + 0x24]
add esp, 0xc
push eax
push ebp
push 0xffffffffffffffff
lea eax, [edi + 0xf5a]
push eax
push 1
push 0
call ebx
lea ecx, [esp + 0x2c4]
push ecx
push ebp
push str.ModelNumber
push str.HardDisk
call esi
mov edx, dword [edi + 0xef8]
mov eax, dword [edi + 0xef4]
push edx
push eax
lea ecx, [esp + 0x4d4]
push str._I64d
push ecx
mov edx, 0x208
call fcn.00401360
add esp, 0x10
lea edx, [esp + 0x2c4]
push edx
lea eax, [esp + 0x4d0]
push eax
push str.DiskSize
push str.HardDisk
call esi
movzx ecx, byte [edi + 0x11ae]
movzx edx, byte [edi + 0x11ad]
movzx eax, byte [edi + 0x11ac]
push ecx
movzx ecx, byte [edi + 0x11ab]
push edx
movzx edx, byte [edi + 0x11aa]
push eax
movzx eax, byte [edi + 0x11a9]
push ecx
push edx
push eax
lea ecx, [esp + 0x2bc]
push str._02X__02X__02X__02X__02X__02X
push ecx
call fcn.0045261f
add esp, 0x20
push 1
lea edx, [esp + 0x2a8]
push edx
xor ebp, ebp
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x40d6dd
push eax
push eax
push 0xffffffffffffffff
lea eax, [esp + 0x2b0]
push eax
push 1
push ebp
call ebx
mov dword [esp + 0x18], eax
test eax, eax
je 0x40d6dd
lea ebp, [eax + 2]
xor ecx, ecx
mov eax, ebp
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0041206b
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x40d6dd
mov eax, dword [esp + 0x18]
add eax, 2
push eax
push 0
push ebp
call fcn.00453a00
mov eax, dword [esp + 0x24]
add esp, 0xc
push eax
push ebp
push 0xffffffffffffffff
lea ecx, [esp + 0x2b0]
push ecx
push 1
push 0
call ebx
lea edx, [esp + 0x2c4]
push edx
push ebp
push str.PhysicalAddress
push str.NetworkCard
call esi
movzx eax, byte [edi + 0x119e]
movzx ecx, byte [edi + 0x119d]
movzx edx, byte [edi + 0x119c]
push eax
movzx eax, byte [edi + 0x119b]
push ecx
movzx ecx, byte [edi + 0x119a]
push edx
movzx edx, byte [edi + 0x1199]
push eax
push ecx
push edx
lea eax, [esp + 0x2bc]
push str._02X__02X__02X__02X__02X__02X
push eax
call fcn.0045261f
add esp, 0x20
push 1
lea ecx, [esp + 0x2a8]
push ecx
xor ebp, ebp
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x40d7b3
push eax
push eax
push 0xffffffffffffffff
lea edx, [esp + 0x2b0]
push edx
push 1
push eax
call ebx
mov dword [esp + 0x18], eax
test eax, eax
je 0x40d7b3
lea ebp, [eax + 2]
xor ecx, ecx
mov eax, ebp
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0041206b
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x40d7b3
mov eax, dword [esp + 0x18]
add eax, 2
push eax
push 0
push ebp
call fcn.00453a00
mov eax, dword [esp + 0x24]
add esp, 0xc
push eax
push ebp
push 0xffffffffffffffff
lea ecx, [esp + 0x2b0]
push ecx
push 1
push 0
call ebx
lea edx, [esp + 0x2c4]
push edx
push ebp
push str.SystemAddress
push str.NetworkCard
call esi
movzx eax, byte [edi + 0x11a6]
movzx ecx, byte [edi + 0x11a5]
movzx edx, byte [edi + 0x11a4]
push eax
movzx eax, byte [edi + 0x11a3]
push ecx
movzx ecx, byte [edi + 0x11a2]
push edx
movzx edx, byte [edi + 0x11a1]
push eax
push ecx
push edx
lea eax, [esp + 0x2bc]
push str._02X__02X__02X__02X__02X__02X
push eax
call fcn.0045261f
add esp, 0x20
push 1
lea ecx, [esp + 0x2a8]
push ecx
xor ebp, ebp
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x40d889
push eax
push eax
push 0xffffffffffffffff
lea edx, [esp + 0x2b0]
push edx
push 1
push eax
call ebx
mov dword [esp + 0x18], eax
test eax, eax
je 0x40d889
lea ebp, [eax + 2]
xor ecx, ecx
mov eax, ebp
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0041206b
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x40d889
mov eax, dword [esp + 0x18]
add eax, 2
push eax
push 0
push ebp
call fcn.00453a00
mov eax, dword [esp + 0x24]
add esp, 0xc
push eax
push ebp
push 0xffffffffffffffff
lea ecx, [esp + 0x2b0]
push ecx
push 1
push 0
call ebx
lea edx, [esp + 0x2c4]
push edx
push ebp
push str.CutrrentAddress
push str.NetworkCard
call esi
push 0
call fcn.0040df90
lea ecx, [esp + 0x184]
mov byte [esp + 0x6e0], 0
call fcn.0040ced0
lea ecx, [esp + 0xfc]
mov dword [esp + 0x6e0], 0xffffffff
call fcn.0041a792
mov ecx, dword [esp + 0x6d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x6c0]
xor ecx, esp
call fcn.00451380
add esp, 0x6d0
ret