Function at 0x40730f
Capabilities:
Get common file path

Disassembly:
push 0xd38
mov eax, 0x458a75
call fcn.00438b84
mov eax, 0x490924
xor ebx, ebx
mov ecx, eax
mov dword [ebp - 0xd44], eax
call fcn.00405b77
push 0x490908
mov dword [ebp - 4], ebx
call dword [sym.imp.ole32.dll_CoCreateGuid]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0xd40]
push eax
call fcn.00407147
pop ecx
push eax
mov ecx, section..data
call fcn.00402bb4
lea ecx, [ebp - 0xd40]
call fcn.0040221a
xor eax, eax
mov edi, 0x400
mov word [ebp - 0xc10], ax
lea eax, [ebp - 0xc10]
push edi
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0xc10]
mov ecx, 0x48f018
push eax
call fcn.00406c61
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x490918], eax
xor eax, eax
mov word [ebp - 0xc10], ax
lea eax, [ebp - 0xc10]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
lea eax, [ebp - 0xc10]
mov ecx, 0x48f030
push eax
call fcn.00406c61
push 0x110
lea eax, [ebp - 0xd24]
mov byte [0x49091c], 1
push ebx
push eax
call fcn.00439fe0
push 0x475790
mov dword [ebp - 0xd28], 0x114
call fcn.00422358
push eax
call fcn.00426a5f
mov esi, eax
add esp, 0x14
test esi, esi
je 0x40745f
push 0x4757ac
call fcn.0042228f
push eax
push esi
call fcn.0042683a
add esp, 0xc
test eax, eax
je 0x40745f
lea ecx, [ebp - 0xd28]
push ecx
call eax
test eax, eax
jne 0x40745f
mov ecx, dword [ebp - 0xd24]
mov al, byte [ebp - 0xd20]
mov byte [0x49091d], cl
mov byte [0x49091e], al
cmp cl, 0xa
jne 0x40745f
cmp dword [ebp - 0xd1c], 0x55f0
jb 0x40745f
mov byte [0x49091d], 0xb
lea eax, [ebp - 0x410]
push edi
push eax
call fcn.004271d5
pop ecx
pop ecx
test eax, eax
jne 0x407659
lea ecx, [ebp - 0x410]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40747f
sub ecx, edx
lea eax, [ebp - 0x410]
push ecx
push eax
mov ecx, 0x48f060
call fcn.00406c18
lea eax, [ebp - 0x410]
push eax
call fcn.0042717d
pop ecx
push ebx
push 0x47578d
mov ecx, 0x48f048
mov esi, eax
call fcn.00406c18
test esi, esi
je 0x407659
mov eax, dword [esi + 0xc]
mov edi, ebx
cmp dword [eax], ebx
je 0x407659
mov ecx, ebx
mov ebx, dword [ecx + eax]
test edi, edi
je 0x4074e8
push 1
push 0x4757c0
mov ecx, 0x48f048
call fcn.00406bbf
movzx eax, byte [ebx]
push eax
lea eax, [ebp - 0xd40]
push eax
call fcn.0040696b
pop ecx
pop ecx
cmp dword [ebp - 0xd2c], 0xf
lea eax, [ebp - 0xd40]
push dword [ebp - 0xd30]
cmova eax, dword [ebp - 0xd40]
mov ecx, 0x48f048
push eax
mov byte [ebp - 4], 1
call fcn.00406bbf
lea ecx, [ebp - 0xd40]
mov byte [ebp - 4], 0
call fcn.004021f4
push 1
push 0x4757c4
mov ecx, 0x48f048
call fcn.00406bbf
movzx eax, byte [ebx + 1]
push eax
lea eax, [ebp - 0xd40]
push eax
call fcn.0040696b
pop ecx
pop ecx
cmp dword [ebp - 0xd2c], 0xf
lea eax, [ebp - 0xd40]
push dword [ebp - 0xd30]
cmova eax, dword [ebp - 0xd40]
mov ecx, 0x48f048
push eax
mov byte [ebp - 4], 2
call fcn.00406bbf
lea ecx, [ebp - 0xd40]
mov byte [ebp - 4], 0
call fcn.004021f4
push 1
push 0x4757c8
mov ecx, 0x48f048
call fcn.00406bbf
movzx eax, byte [ebx + 2]
push eax
lea eax, [ebp - 0xd40]
push eax
call fcn.0040696b
pop ecx
pop ecx
cmp dword [ebp - 0xd2c], 0xf
lea eax, [ebp - 0xd40]
push dword [ebp - 0xd30]
cmova eax, dword [ebp - 0xd40]
mov ecx, 0x48f048
push eax
mov byte [ebp - 4], 3
call fcn.00406bbf
lea ecx, [ebp - 0xd40]
mov byte [ebp - 4], 0
call fcn.004021f4
push 1
push 0x4757cc
mov ecx, 0x48f048
call fcn.00406bbf
movzx eax, byte [ebx + 3]
push eax
lea eax, [ebp - 0xd40]
push eax
call fcn.0040696b
pop ecx
pop ecx
cmp dword [ebp - 0xd2c], 0xf
lea eax, [ebp - 0xd40]
mov byte [ebp - 4], 4
cmova eax, dword [ebp - 0xd40]
push dword [ebp - 0xd30]
mov ecx, 0x48f048
push eax
call fcn.00406bbf
xor ebx, ebx
lea ecx, [ebp - 0xd40]
mov byte [ebp - 4], bl
call fcn.004021f4
mov eax, dword [esi + 0xc]
inc edi
mov ecx, edi
shl ecx, 2
cmp dword [ecx + eax], ebx
jne 0x4074d0
push 0x4757d0
push 0x4757e0
mov byte [0x490920], bl
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call fcn.0042683a
pop ecx
pop ecx
xor ecx, ecx
mov esi, eax
inc ecx
mov dword [ebp - 0xc14], ecx
test esi, esi
je 0x40769c
lea eax, [ebp - 0xc14]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call esi
mov ecx, dword [ebp - 0xc14]
test ecx, ecx
push 0x490924
setne byte [0x49091f]
call fcn.00436fc7
pop ecx
mov al, 1
call fcn.00438b33
ret