Function at 0x41c25c
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffeac
push ebx
push esi
push edi
lea esi, [ebp - 0x3c]
mov eax, 0x4b29d4
call fcn.0049b8c0
mov dword [esi + 0x1c], 2
lea edx, [ebp + 0x10]
lea eax, [ebp + 0x10]
call fcn.004a73ec
inc dword [esi + 0x1c]
lea edx, [ebp + 0xc]
mov word [esi + 0x10], 8
lea eax, [ebp + 0xc]
call fcn.004a73ec
inc dword [esi + 0x1c]
mov edx, 0x4b2ad4
mov word [esi + 0x10], 0x14
mov ecx, dword [ebp + 8]
mov dword [ecx], edx
xor edx, edx
mov eax, dword [ebp + 8]
xor ecx, ecx
add eax, 4
mov dword [eax], edx
xor edx, edx
inc dword [esi + 0x1c]
mov eax, dword [ebp + 8]
add eax, 8
mov dword [eax], edx
xor edx, edx
inc dword [esi + 0x1c]
mov eax, dword [ebp + 8]
add eax, 0xc
mov dword [eax], edx
xor edx, edx
inc dword [esi + 0x1c]
mov eax, dword [ebp + 8]
add eax, 0x10
mov dword [eax], edx
xor edx, edx
inc dword [esi + 0x1c]
mov eax, dword [ebp + 8]
add eax, 0x14
mov dword [eax], edx
lea edx, [ebp - 4]
inc dword [esi + 0x1c]
mov word [esi + 0x10], 0x20
mov dword [ebp - 4], ecx
inc dword [esi + 0x1c]
xor eax, eax
call fcn.00442f64
lea eax, [ebp - 4]
mov eax, dword [eax]
xor edx, edx
mov dword [ebp - 8], edx
lea edx, [ebp - 8]
inc dword [esi + 0x1c]
call fcn.00432024
lea edx, [ebp - 8]
mov eax, dword [ebp + 8]
add eax, 4
call fcn.004a74b4
dec dword [esi + 0x1c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004a7484
dec dword [esi + 0x1c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004a7484
mov edi, dword [ebp + 8]
mov ebx, dword [ebp + 8]
add edi, 4
add ebx, 4
cmp dword [edi], 0
je 0x41c362
mov eax, dword [edi]
mov edx, dword [eax - 4]
jmp 0x41c364
xor edx, edx
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x40]
push eax
push ebx
call fcn.004a7330
add esp, 8
mov eax, ebx
call fcn.004a76e0
mov edx, dword [ebp - 0x40]
add edx, dword [ebx]
dec edx
movsx ecx, byte [edx]
cmp ecx, 0x5c
je 0x41c3bd
mov word [esi + 0x10], 0x2c
mov edx, 0x4b289b
lea eax, [ebp - 0xc]
call fcn.004a73b4
inc dword [esi + 0x1c]
lea edx, [ebp - 0xc]
mov eax, dword [ebp + 8]
add eax, 4
call fcn.004a74c8
dec dword [esi + 0x1c]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004a7484
mov word [esi + 0x10], 0x38
mov edx, str.zrdat_
lea eax, [ebp - 0x10]
call fcn.004a73b4
inc dword [esi + 0x1c]
xor eax, eax
mov dword [ebp - 0x14], eax
lea edx, [ebp - 0x10]
inc dword [esi + 0x1c]
lea ecx, [ebp - 0x14]
mov eax, dword [ebp + 8]
add eax, 4
call fcn.004a74dc
lea eax, [ebp - 0x14]
xor edx, edx
mov dword [ebp - 0x18], edx
lea ecx, [ebp - 0x18]
inc dword [esi + 0x1c]
lea edx, [ebp + 0x10]
call fcn.004a74dc
lea edx, [ebp - 0x18]
mov eax, dword [ebp + 8]
add eax, 8
call fcn.004a74b4
dec dword [esi + 0x1c]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004a7484
dec dword [esi + 0x1c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004a7484
dec dword [esi + 0x1c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004a7484
lea edx, [ebp + 0xc]
mov eax, dword [ebp + 8]
add eax, 4
call fcn.004a74c8
push 0x104
lea ecx, [ebp - 0x144]
push ecx
call sub.KERNEL32.DLL_GetSystemDirectoryA
lea eax, [ebp - 0x144]
push eax
push str._szrsn31.flb
mov edx, dword [ebp + 8]
add edx, 0xc
push edx
call fcn.004a76a8
add esp, 0xc
push esi
mov esi, 0x4b284b
lea edi, [ebp - 0x154]
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
pop esi
mov word [esi + 0x10], 0x14
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
call fcn.00431f94
test al, al
je 0x41c507
push 0x4b28b2
mov eax, dword [ebp + 8]
add eax, 8
cmp dword [eax], 0
je 0x41c4b7
mov edx, dword [eax]
jmp 0x41c4bc
mov edx, 0x4b28b4
push edx
call fcn.0049d538
add esp, 8
mov ebx, eax
test ebx, ebx
je 0x41c4e4
push ebx
push 0x10
lea eax, [ebp - 0x154]
push eax
call fcn.0049d1c0
add esp, 0xc
push ebx
call fcn.0049d090
pop ecx
lea edx, [ebp - 0x154]
push edx
call fcn.0049b64c
pop ecx
cmp eax, 1
jae 0x41c507
push esi
lea edi, [ebp - 0x154]
mov eax, edi
mov esi, str.1234
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop esi
lea edx, [ebp - 0x154]
push edx
push 0x4b28ba
mov ecx, dword [ebp + 8]
add ecx, 0x14
push ecx
call fcn.004a76a8
add esp, 0xc
mov eax, dword [ebp + 8]
push eax
call fcn.0041c734
pop ecx
dec dword [esi + 0x1c]
lea eax, [ebp + 0xc]
mov edx, 2
call fcn.004a7484
dec dword [esi + 0x1c]
lea eax, [ebp + 0x10]
mov edx, 2
call fcn.004a7484
mov ecx, dword [esi]
mov dword fs:[0], ecx
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret