Function at 0x43a270
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x440
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x43e4d0
mov dword [ebp - 0x48], ecx
lea eax, [ebp - 0x18]
mov edx, 0x200
xor edi, edi
mov dword [ebp - 0x28], 2
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x2c], 0
cmp edx, 0x201
jae 0x43a2f0
jmp 0x43a2de
jbe 0x43a382
cmp edx, 0x201
jae 0x43a2f0
mov dword [ebp - 0x20], 0x200
lea ebx, [ebp - 0x44c]
mov esi, edx
jmp 0x43a31f
sub edx, edi
je 0x43a314
mov eax, edx
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0x34]
mov edx, edi
push eax
call fcn.0044ab20
add esp, 4
mov edi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x28]
mov esi, edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x20], edi
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov edx, eax
test eax, eax
jne 0x43a34d
mov dword [ebp - 0x38], ebx
mov ebx, edi
mov edi, edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, edi
mov edi, ebx
mov ebx, dword [ebp - 0x38]
test eax, eax
jne 0x43a3c1
cmp edx, esi
jne 0x43a2d0
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x43a5e6
lea edx, [esi + esi]
test esi, esi
mov eax, 0xffffffff
cmovs edx, eax
cmp edx, 0x201
jb 0x43a2de
jmp 0x43a2f0
mov eax, dword [ebp - 0x20]
cmp edx, eax
ja 0x43a603
test edx, edx
mov dword [ebp - 0x24], edx
je 0x43a3f8
lea edi, [edx + edx]
cmp edx, 0x3fffffff
ja 0x43a61b
movzx eax, byte [0x510121]
push 2
push edi
call fcn.0040ad40
add esp, 8
test eax, eax
je 0x43a61f
mov esi, eax
jmp 0x43a3ff
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x43a3e0
add eax, eax
push 2
push eax
push dword [ebp - 0x30]
call fcn.0040ad50
add esp, 0xc
mov eax, dword [ebp - 0x48]
mov dword [eax + 4], 0
mov dword [eax + 8], esi
mov dword [eax], 0x80000000
jmp 0x43a5d2
mov esi, 2
xor edi, edi
push edi
push ebx
push esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x43a421
add eax, eax
push 2
push eax
push dword [ebp - 0x30]
call fcn.0040ad50
add esp, 0xc
mov edx, dword [ebp - 0x24]
mov edi, 0x508c7e
xor ebx, ebx
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x3c], edx
jmp 0x43a44e
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x20]
mov word [esi + edx*2], ax
inc edx
mov dword [ebp - 0x3c], edx
test edi, edi
je 0x43a510
mov eax, dword [ebp - 0x28]
test ax, ax
je 0x43a4a0
xor ecx, ecx
cmp edx, dword [ebp - 0x44]
mov dword [ebp - 0x20], eax
jne 0x43a440
mov eax, 0x508c7e
mov esi, edx
mov edx, 0xaaaaaaab
mov dword [ebp - 0x10], 1
sub eax, edi
add eax, 0xa
mul edx
mov eax, edx
mov edx, ebx
shr eax, 1
cmp cx, 1
mov dword [ebp - 0x28], ecx
adc edx, 0xffffffff
sub eax, edx
mov edx, esi
inc eax
jmp 0x43a538
lea eax, [0x508c86]
cmp edi, eax
je 0x43a510
movzx ecx, byte [edi]
movzx eax, cl
test cl, cl
js 0x43a4b9
inc edi
xor ecx, ecx
jmp 0x43a460
mov dword [ebp - 0x24], edx
movzx edx, byte [edi + 1]
and eax, 0x1f
and edx, 0x3f
cmp cl, 0xdf
jbe 0x43a566
mov dword [ebp - 0x20], eax
movzx eax, byte [edi + 2]
shl edx, 6
and eax, 0x3f
or eax, edx
cmp cl, 0xf0
jb 0x43a578
movzx ecx, byte [edi + 3]
mov edx, dword [ebp - 0x20]
shl eax, 6
and ecx, 0x3f
and edx, 7
or ecx, eax
shl edx, 0x12
mov eax, ecx
or eax, edx
mov edx, dword [ebp - 0x24]
cmp eax, 0x110000
jne 0x43a5af
nop
cmp ebx, 1
je 0x43a5c0
cmp edx, dword [ebp - 0x44]
mov ebx, 1
mov edi, 0
mov eax, 0
mov dword [ebp - 0x20], 0
jne 0x43a443
inc eax
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x10], 1
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x24], edx
push eax
call fcn.0044ab20
add esp, 4
mov esi, dword [ebp - 0x40]
mov edx, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x38]
mov edi, dword [ebp - 0x4c]
jmp 0x43a443
shl eax, 6
add edi, 2
xor ecx, ecx
or eax, edx
mov edx, dword [ebp - 0x24]
jmp 0x43a460
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
add edi, 3
shl ecx, 0xc
or ecx, eax
mov eax, ecx
cmp eax, 0xffff
jbe 0x43a5b9
mov ecx, eax
add eax, 0xff0000
shr eax, 0xa
and ecx, 0x3ff
or eax, 0xd800
or ecx, 0xdc00
jmp 0x43a460
add edi, 4
cmp eax, 0xffff
ja 0x43a58f
xor ecx, ecx
jmp 0x43a460
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x48]
movsd xmm0, qword [ebp - 0x44]
mov dword [ecx + 8], eax
movsd qword [ecx], xmm0
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
add esp, 0x440
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x10], 0
push 0x509030
push 0x28
push 0x507148
call fcn.0044b5f0
add esp, 0xc
jmp 0x43a635
mov dword [ebp - 0x10], 0
push 0x509020
push eax
push edx
call fcn.0044b8c0
add esp, 0xc
jmp 0x43a635
xor eax, eax
jmp 0x43a624
mov eax, 2
mov dword [ebp - 0x10], 0
push edi
push eax
call fcn.0044b440
add esp, 8
ud2