Function at 0x409d67
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1948
call fcn.00413fd0
push ebx
push esi
push edi
lea edi, [ebp - 0x1948]
mov ecx, 0x652
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov eax, dword [0x41f01c]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 9], 0
mov byte [ebp - 0x15], 0
call fcn.004128b7
movzx eax, al
test eax, eax
je 0x409daf
mov al, byte [ebp - 9]
jmp 0x40a12d
push 0x400
lea eax, [ebp - 0x820]
push eax
call fcn.00408494
pop ecx
pop ecx
test eax, eax
je 0x409e07
push 0x400
lea eax, [ebp - 0x1028]
push eax
call fcn.0040827d
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x409e07
mov esi, esp
lea eax, [ebp - 0x1028]
push eax
lea eax, [ebp - 0x820]
push eax
call dword [sym.imp.MSVCR120.dll__wcsicmp]
pop ecx
pop ecx
cmp esi, esp
call fcn.00413f7e
test eax, eax
je 0x409e07
mov byte [ebp - 0x15], 1
call fcn.004126a0
test eax, eax
jne 0x409e1c
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x40a11a
xor eax, eax
mov word [ebp - 0x1238], ax
push 0x206
push 0
lea eax, [ebp - 0x1236]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
xor eax, eax
mov word [ebp - 0x1448], ax
push 0x206
push 0
lea eax, [ebp - 0x1446]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov esi, esp
push 0x104
lea eax, [ebp - 0x1448]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp esi, esp
call fcn.00413f7e
cmp eax, 0x104
jb 0x409e86
mov al, byte [ebp - 9]
jmp 0x40a12d
mov byte [ebp - 0x1451], 0
mov esi, esp
push 0x104
lea eax, [ebp - 0x1448]
push eax
call dword [sym.imp.MSVCR120.dll__wcslwr_s]
pop ecx
pop ecx
cmp esi, esp
call fcn.00413f7e
push str.adelrcp.exe
lea eax, [ebp - 0x1448]
push eax
call fcn.00401a33
pop ecx
pop ecx
test eax, eax
jne 0x409ed0
mov byte [ebp - 0x1451], 1
mov al, byte [ebp - 9]
jmp 0x40a12d
movzx eax, byte [0x41f398]
test eax, eax
je 0x409ee2
mov al, 1
jmp 0x40a12d
lea eax, [ebp - 0x1238]
push eax
lea eax, [ebp - 0x1448]
push eax
call fcn.00411a7b
pop ecx
pop ecx
test eax, eax
jne 0x409f03
mov al, byte [ebp - 9]
jmp 0x40a12d
and dword [ebp - 0x1460], 0
push str.7AD7
lea eax, [ebp - 0x1238]
push eax
call fcn.00401a33
pop ecx
pop ecx
test eax, eax
je 0x409f2b
mov dword [ebp - 0x1460], 1
push 0x104
lea eax, [ebp - 0x1448]
push eax
call fcn.00411ca3
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x409f5f
push 0x104
lea eax, [ebp - 0x1448]
push eax
call fcn.00411ca3
pop ecx
pop ecx
movzx eax, al
test eax, eax
jne 0x409f67
mov al, byte [ebp - 9]
jmp 0x40a12d
cmp dword [ebp - 0x1460], 0
je 0x409f95
mov esi, esp
push str.ESLAiodlite.dll__CreateReaderUserSettings
push 0x104
lea eax, [ebp - 0x1448]
push eax
call dword [sym.imp.MSVCR120.dll_wcscat_s]
add esp, 0xc
cmp esi, esp
call fcn.00413f7e
jmp 0x409fb8
mov esi, esp
push str.ESLAiod.dll__CreateAcroUserSettings
push 0x104
lea eax, [ebp - 0x1448]
push eax
call dword [sym.imp.MSVCR120.dll_wcscat_s]
add esp, 0xc
cmp esi, esp
call fcn.00413f7e
xor eax, eax
mov word [ebp - 0x1670], ax
push 0x206
push 0
lea eax, [ebp - 0x166e]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov esi, esp
push 0x104
lea eax, [ebp - 0x1670]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
cmp esi, esp
call fcn.00413f7e
cmp eax, 0x104
jb 0x40a001
mov al, byte [ebp - 9]
jmp 0x40a12d
mov esi, esp
push str._rundll32.exe
push 0x104
lea eax, [ebp - 0x1670]
push eax
call dword [sym.imp.MSVCR120.dll_wcscat_s]
add esp, 0xc
cmp esi, esp
call fcn.00413f7e
test eax, eax
je 0x40a030
mov al, byte [ebp - 9]
jmp 0x40a12d
xor eax, eax
mov word [ebp - 0x1880], ax
push 0x206
push 0
lea eax, [ebp - 0x187e]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov esi, esp
push 0x416df4
push 0x104
lea eax, [ebp - 0x1880]
push eax
call dword [sym.imp.MSVCR120.dll_wcscpy_s]
add esp, 0xc
cmp esi, esp
call fcn.00413f7e
mov esi, esp
lea eax, [ebp - 0x1670]
push eax
push 0x104
lea eax, [ebp - 0x1880]
push eax
call dword [sym.imp.MSVCR120.dll_wcscat_s]
add esp, 0xc
cmp esi, esp
call fcn.00413f7e
mov esi, esp
push 0x4184b8
push 0x104
lea eax, [ebp - 0x1880]
push eax
call dword [sym.imp.MSVCR120.dll_wcscat_s]
add esp, 0xc
cmp esi, esp
call fcn.00413f7e
mov esi, esp
lea eax, [ebp - 0x1448]
push eax
push 0x104
lea eax, [ebp - 0x1880]
push eax
call dword [sym.imp.MSVCR120.dll_wcscat_s]
add esp, 0xc
cmp esi, esp
call fcn.00413f7e
lea eax, [ebp - 0x1880]
push eax
call fcn.004129ce
pop ecx
test eax, eax
je 0x40a0f9
mov byte [ebp - 0x1945], 1
jmp 0x40a100
mov byte [ebp - 0x1945], 0
mov al, byte [ebp - 0x1945]
mov byte [ebp - 9], al
movzx eax, byte [ebp - 9]
test eax, eax
je 0x40a118
mov byte [0x41f398], 1
jmp 0x40a12a
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004017bd
pop ecx
pop ecx
mov byte [ebp - 9], al
mov al, byte [ebp - 9]
push edx
mov ecx, ebp
push eax
lea edx, [0x40a15f]
call fcn.00413f26
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00413fa1
add esp, 0x1948
cmp ebp, esp
call fcn.00413f7e
mov esp, ebp
pop ebp
ret