Function at 0x438533
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cdc83
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x130
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x4388fb
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp + 0x4c]
mov dword [ebp - 0xd8], eax
lea eax, [ebp + 0x48]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp + 0x44]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0xd0], eax
lea eax, [ebp + 0x50]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x118]
movzx eax, byte [eax]
test eax, eax
je 0x4388a0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x110]
movzx eax, byte [eax]
test eax, eax
je 0x438864
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0x18]
call fcn.0040bec0
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx]
cmp dword [eax], ecx
jle 0x438740
mov dword [ebp - 0x50], 1
jmp 0x438744
and dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0x18]
call fcn.0040bec0
cmp dword [eax], 0
je 0x4387d4
push 2
mov ecx, dword [ebp - 0x18]
call fcn.0040bec0
cmp dword [eax], 3
ja 0x43876e
mov dword [ebp - 0x2c], 1
jmp 0x438772
and dword [ebp - 0x2c], 0
push 0
mov ecx, dword [ebp - 0x6c]
call fcn.0040bec0
mov ecx, dword [ebp - 0x2c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2c]
neg eax
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
cmp dword [eax], 9
jne 0x43879c
mov dword [ebp - 0x30], 1
jmp 0x4387a0
and dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x30]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x30]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
mov esi, dword [eax]
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0x18]
call fcn.0040bec0
cmp esi, dword [eax]
jg 0x4387d4
mov dword [ebp - 0x40], 1
jmp 0x4387d8
and dword [ebp - 0x40], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x40]
sub ecx, dword [eax]
neg ecx
cmp dword [ebp - 0x50], ecx
je 0x4387f0
mov dword [ebp - 0x38], 1
jmp 0x4387f4
and dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0x18]
call fcn.0040bec0
mov ecx, dword [ebp - 0x38]
add ecx, dword [eax]
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x4c]
mov ecx, dword [ecx]
cmp dword [eax], ecx
jle 0x438829
mov eax, 0xfff6
test eax, eax
je 0x438829
mov dword [ebp - 0x44], 1
jmp 0x43882d
and dword [ebp - 0x44], 0
push 3
mov ecx, dword [ebp - 0x18]
call fcn.0040bec0
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [eax]
jle 0x438847
mov dword [ebp - 0x7c], 1
jmp 0x43884b
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x84]
mov dword [eax], 0xf9f3b06d
jmp 0x43889e
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
movzx eax, byte [eax]
test eax, eax
je 0x43889e
push 1
push 0
push 1
push 0x5ec2
push 1
call fcn.00428b50
add esp, 0x14
jmp 0x4388f6
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xcc], eax
push 0x4b51
push 0x19b0
push 0
push dword [ebp - 0xbc]
push 0x7ab3
push dword [ebp - 0xc4]
push 0
push 0x1807
push dword [ebp - 0xcc]
call fcn.00428537
add esp, 0x24
jmp 0x438ace
lea eax, [ebp + 0x20]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp + 0x54]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0xe4], eax
lea eax, [ebp + 0x2c]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x54], 0x1a6a
mov dword [ebp - 0x12c], str.snv_aqopinecy_xjrt_ggjnr_mgwdqlhb
cmp dword [ebp - 0x54], 0x1b89
jle 0x4389d2
and dword [ebp - 0x24], 0
jmp 0x43894a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x5604
jge 0x4389d2
and dword [ebp - 0x1c], 0
jmp 0x438960
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x6c1d
jge 0x4389cd
and dword [ebp - 0x28], 0
jmp 0x438976
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x2cf8
jge 0x4389cb
and dword [ebp - 0x20], 0
jmp 0x43898c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x7124
jge 0x4389c9
mov eax, dword [ebp - 0x24]
cdq
idiv dword [ebp - 0x1c]
sub edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x20]
mov eax, edx
cdq
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], edx
push dword [ebp - 0x134]
push dword [ebp - 0x138]
mov ecx, 0xaa47f8
call fcn.0040bbab
jmp 0x438985
jmp 0x43896f
jmp 0x438959
jmp 0x438943
mov eax, dword [ebp - 0xd4]
movzx eax, byte [eax]
test eax, eax
je 0x438a7d
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xf4]
movzx eax, byte [eax]
test eax, eax
je 0x438a48
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
movzx eax, byte [eax]
test eax, eax
je 0x438a46
push 0x1889
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
jmp 0x438a7b
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
movzx eax, byte [eax]
test eax, eax
je 0x438a7b
push 0x3150
push 0
call fcn.00430d69
pop ecx
pop ecx
jmp 0x438a8b
push 0
push 0x1926
call fcn.0043154b
pop ecx
pop ecx
and dword [ebp - 4], 0
cmp dword [ebp - 0x54], 0x194e
jge 0x438aa8
mov edx, dword [ebp - 0x12c]
mov ecx, 0xaa47f8
call fcn.0040e430
jmp 0x438ac4
or dword [ebp - 4], 0xffffffff
jmp 0x438ace
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret