Function at 0x4092b6
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
push esi
push edi
mov dword [ebp - 8], 0
mov dword [ebp - 0x34], 0
mov dword [0x5c3430], 0
jmp 0x4092e2
inc dword [0x5c3430]
cmp dword [0x5c3430], 0x3000
jge 0x409303
mov eax, dword [0x5c3430]
mov byte [eax + 0x5c3440], 0
jmp 0x4092dc
push 0x200
push 0x5c6860
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push 0x4b43fc
push 0x5c6860
call fcn.004202e0
add esp, 8
push 0x5c9ca0
push 0x5c3440
push 0x5c6860
call fcn.0040c503
add esp, 0xc
cmp eax, 0xffffffff
jne 0x40934f
mov eax, 0xffffffff
jmp 0x40956d
mov ax, word [0x5c9ca0]
mov word [ebp - 0x30], ax
push 0x5c6a66
mov ax, word [0x5c9ca0]
push eax
push 0x5c3440
push 0x4b4408
call fcn.00409ec8
add esp, 0x10
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x40938b
mov dword [ebp - 0x34], 1
push 0x5c6a66
mov ax, word [0x5c9ca0]
push eax
push 0x5c3440
push 0x4b4418
call fcn.00409ec8
add esp, 0x10
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x40954b
or dword [ebp - 8], 1
push 0x5c6a66
mov ax, word [0x5c9ca0]
push eax
push 0x5c3440
push 0x4b4424
call fcn.00409ec8
add esp, 0x10
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x4093ee
or dword [ebp - 8], 2
jmp 0x409546
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xc], eax
inc dword [ebp - 0x20]
push 0x4b442c
call fcn.00420150
add esp, 4
push eax
push 0x4b4434
mov eax, dword [ebp - 0x20]
push eax
call fcn.00420f00
add esp, 0xc
test eax, eax
jne 0x4093f4
push 0x4b443c
call fcn.00420150
add esp, 4
inc eax
add dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x20]
mov al, byte [eax]
mov ecx, dword [ebp - 0x1c]
mov byte [ebp + ecx - 0x18], al
inc dword [ebp - 0x20]
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov cl, byte [eax]
cmp ecx, 0xd
jne 0x409436
mov eax, dword [ebp - 0x1c]
mov byte [ebp + eax - 0x18], 0
lea eax, [ebp - 0x18]
push eax
push 0x5c9cb0
call fcn.004202d0
add esp, 8
push 0x4b4444
lea eax, [ebp - 0x18]
push eax
call fcn.00420970
add esp, 8
test eax, eax
jge 0x40949d
cmp dword [ebp - 0x34], 1
jne 0x409498
or dword [ebp - 8], 2
jmp 0x409546
push 0x4b444c
lea eax, [ebp - 0x18]
push eax
call fcn.00420970
add esp, 8
test eax, eax
jg 0x4094bf
or dword [ebp - 8], 2
jmp 0x409546
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x20]
push 0x4b4454
call fcn.00420150
add esp, 4
push eax
push 0x4b445c
mov eax, dword [ebp - 0x20]
push eax
call fcn.00420f00
add esp, 0xc
test eax, eax
jne 0x4094c5
push 0x4b4464
call fcn.00420150
add esp, 4
inc eax
add dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x20]
mov al, byte [eax]
mov ecx, dword [ebp - 0x1c]
mov byte [ebp + ecx - 0x2c], al
inc dword [ebp - 0x20]
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov cl, byte [eax]
cmp ecx, 0xd
jne 0x409507
lea eax, [ebp - 0x2c]
push eax
call fcn.00420569
add esp, 4
mov dword [ebp - 4], eax
test byte [ebp - 4], 2
je 0x409546
or dword [ebp - 8], 2
jmp 0x409565
cmp dword [ebp - 0x34], 1
jne 0x40955e
or dword [ebp - 8], 2
jmp 0x409565
mov dword [ebp - 8], 0
mov eax, dword [ebp - 8]
jmp 0x40956d
pop edi
pop esi
pop ebx
leave
ret