Function at 0x406382
Capabilities:
Get common file path

Disassembly:
push 0x59c
mov eax, 0x489398
call fcn.00458e5d
xor ebx, ebx
lea eax, [ebp - 0x560]
mov edi, ecx
mov dword [ebp - 0x568], ebx
call fcn.00401025
xor eax, eax
mov dword [ebp - 4], ebx
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
mov dword [ebp - 0x564], ebx
call fcn.004504c0
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
xor eax, eax
mov dword [ebp - 0x28c], 7
mov dword [ebp - 0x290], ebx
mov word [ebp - 0x2a0], ax
lea eax, [ebp - 0x218]
push eax
mov byte [ebp - 4], 1
call fcn.00450a1d
pop ecx
lea ecx, [ebp - 0x218]
lea esi, [ebp - 0x2a4]
call fcn.00401b92
mov eax, esi
push eax
lea esi, [ebp - 0x234]
call fcn.004017f2
mov esi, 0x49b660
push esi
lea eax, [ebp - 0x234]
push eax
mov byte [ebp - 4], 2
call fcn.00401817
push 0x49b990
lea eax, [ebp - 0x234]
push eax
call fcn.00401817
push esi
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x5a8]
push eax
call fcn.00401e38
add esp, 0xc
push str.TrendMicro_AntiThreat_Toolkit
push eax
lea eax, [ebp - 0x58c]
push eax
mov byte [ebp - 4], 3
call fcn.00401e38
add esp, 0xc
push str._submission
push eax
lea eax, [ebp - 0x2dc]
push eax
mov byte [ebp - 4], 4
call fcn.00401e38
add esp, 0xc
push ebx
push 1
lea esi, [ebp - 0x58c]
call fcn.004019bb
push ebx
mov byte [ebp - 4], 7
push 1
lea esi, [ebp - 0x5a8]
call fcn.004019bb
push str.dtascli.exe
lea eax, [ebp - 0x314]
call fcn.004017d2
lea eax, [ebp - 0x4d8]
push eax
mov byte [ebp - 4], 8
call fcn.0040321d
or dword [ebp - 0x570], 0xffffffff
lea eax, [ebp - 0x4d8]
mov dword [ebp - 0x56c], eax
mov esi, str.NONE
push esi
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0xa
call fcn.004017d2
push esi
lea eax, [ebp - 0x26c]
mov byte [ebp - 4], 0xb
call fcn.004017d2
push esi
lea eax, [ebp - 0x288]
mov byte [ebp - 4], 0xc
call fcn.004017d2
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x21c], 8
mov eax, dword [ebp - 0x230]
jae 0x406539
lea eax, [ebp - 0x230]
push eax
push str.ValidateActivation___wsIniPath_S
push 0x4d6
push ecx
call fcn.0041ef10
pop ecx
push eax
mov ebx, 0x800040
mov ecx, str..SupportWrapper.cpp
call fcn.0041f0d0
mov eax, dword [ebp - 0x230]
add esp, 0x10
cmp dword [ebp - 0x21c], 8
jae 0x406573
lea eax, [ebp - 0x230]
lea ebx, [ebp - 0x570]
call fcn.0040b342
test al, al
je 0x4066ef
or esi, 0xffffffff
cmp dword [ebp - 0x444], 0
je 0x4065a7
push esi
lea eax, [ebp - 0x250]
push eax
xor ebx, ebx
lea eax, [ebp - 0x458]
call fcn.0040191e
cmp dword [ebp - 0x428], 0
je 0x4065c5
push esi
lea eax, [ebp - 0x26c]
push eax
xor ebx, ebx
lea eax, [ebp - 0x43c]
call fcn.0040191e
cmp dword [ebp - 0x40c], 0
je 0x4065e3
push esi
lea eax, [ebp - 0x288]
push eax
xor ebx, ebx
lea eax, [ebp - 0x420]
call fcn.0040191e
cmp dword [ebp - 0x3f0], 0
je 0x406601
push esi
lea eax, [edi + 0x19c]
push eax
xor ebx, ebx
lea eax, [ebp - 0x404]
call fcn.0040191e
cmp dword [ebp - 0x3d4], 0
je 0x40661f
push esi
lea eax, [edi + 0x1b8]
push eax
xor ebx, ebx
lea eax, [ebp - 0x3e8]
call fcn.0040191e
cmp dword [ebp - 0x3b8], 0
je 0x40663d
push esi
lea eax, [edi + 0x1d4]
push eax
xor ebx, ebx
lea eax, [ebp - 0x3cc]
call fcn.0040191e
cmp dword [ebp - 0x39c], 0
je 0x40665b
push esi
lea eax, [edi + 0x1f0]
push eax
xor ebx, ebx
lea eax, [ebp - 0x3b0]
call fcn.0040191e
cmp dword [ebp - 0x380], 0
je 0x406679
push esi
lea eax, [edi + 0x20c]
push eax
xor ebx, ebx
lea eax, [ebp - 0x394]
call fcn.0040191e
mov eax, dword [ebp - 0x378]
test eax, eax
je 0x406689
mov dword [edi + 0x228], eax
cmp dword [ebp - 0x360], 0
je 0x4066a7
push esi
lea eax, [edi + 0x22c]
push eax
xor ebx, ebx
lea eax, [ebp - 0x374]
call fcn.0040191e
cmp dword [ebp - 0x344], 0
je 0x4066c5
push esi
lea eax, [edi + 0x248]
push eax
xor ebx, ebx
lea eax, [ebp - 0x358]
call fcn.0040191e
cmp dword [ebp - 0x328], 0
je 0x4066e3
push esi
lea eax, [edi + 0x264]
push eax
xor ebx, ebx
lea eax, [ebp - 0x33c]
call fcn.0040191e
mov eax, dword [ebp - 0x320]
mov dword [edi + 0x280], eax
cmp dword [ebp - 0x270], 8
mov edx, dword [ebp - 0x284]
jae 0x406704
lea edx, [ebp - 0x284]
cmp dword [ebp - 0x254], 8
mov ecx, dword [ebp - 0x268]
jae 0x406719
lea ecx, [ebp - 0x268]
cmp dword [ebp - 0x238], 8
mov eax, dword [ebp - 0x24c]
jae 0x40672e
lea eax, [ebp - 0x24c]
push edx
push ecx
push eax
push str.ValidateActivation___ActivationCode_S__DTAS_Host_S__ApiKey_S
push 0x4ea
push ecx
call fcn.0041ef10
pop ecx
push eax
mov ebx, 0x800040
mov ecx, str..SupportWrapper.cpp
call fcn.0041f0d0
lea esi, [edi + 0x64]
add esp, 0x18
cmp dword [esi + 0x18], 8
jb 0x406763
mov eax, dword [esi + 4]
jmp 0x406766
lea eax, [esi + 4]
push eax
push str.ValidateActivation___Package_Type:__S
push 0x4ed
push ecx
call fcn.0041ef10
pop ecx
push eax
mov ecx, str..SupportWrapper.cpp
call fcn.0041f0d0
add esp, 0x10
push str.TMSFC
call fcn.00407f4e
test eax, eax
je 0x4067a2
xor ebx, ebx
inc ebx
mov dword [ebp - 0x568], ebx
jmp 0x406843
push str._TEMP_
lea eax, [ebp - 0x58c]
call fcn.004017d2
lea eax, [ebp - 0x564]
push eax
lea ecx, [ebp - 0x58c]
lea edi, [ebp - 0x560]
mov byte [ebp - 4], 0xe
call fcn.004010ab
push 0
push 1
lea esi, [ebp - 0x58c]
mov byte [ebp - 4], 0xd
call fcn.004019bb
cmp dword [ebp - 0x238], 8
mov edx, dword [ebp - 0x24c]
jae 0x4067f6
lea edx, [ebp - 0x24c]
lea eax, [ebp - 0x564]
push eax
lea ebx, [ebp - 0x560]
call fcn.0040136b
test al, al
je 0x406816
mov dword [ebp - 0x568], 1
push dword [ebp - 0x564]
push str.ValidateActivation___CheckActivationCode:__d
push 0x4f8
push ecx
call fcn.0041ef10
pop ecx
push eax
mov ebx, 0x800040
mov ecx, str..SupportWrapper.cpp
call fcn.0041f0d0
xor ebx, ebx
add esp, 0x10
inc ebx
push 0x49b660
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x5a8]
push eax
call fcn.00401e38
add esp, 0xc
lea ecx, [ebp - 0x314]
push ecx
push eax
lea eax, [ebp - 0x2c0]
push eax
mov byte [ebp - 4], 0xf
call fcn.0040b38b
add esp, 0xc
xor edi, edi
push edi
push ebx
lea esi, [ebp - 0x5a8]
mov byte [ebp - 4], 0x11
call fcn.004019bb
push str.config.ini
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x2f8]
push eax
call fcn.00401e38
add esp, 0xc
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x2a8], 8
mov eax, dword [ebp - 0x2bc]
jae 0x4068c0
lea eax, [ebp - 0x2bc]
call fcn.00426200
test eax, eax
je 0x4068e3
lea eax, [ebp - 0x288]
push eax
lea edx, [ebp - 0x26c]
lea ecx, [ebp - 0x2f8]
call fcn.00406122
jmp 0x406908
push str.ValidateActivation___Skip_DropDDAConfigFile__
push 0x504
call fcn.0041ef10
push eax
mov ebx, 0x800040
mov ecx, str..SupportWrapper.cpp
call fcn.0041f0d0
xor ebx, ebx
add esp, 0xc
inc ebx
push edi
push ebx
lea esi, [ebp - 0x2f8]
call fcn.004019bb
push edi
push ebx
lea esi, [ebp - 0x2c0]
call fcn.004019bb
push edi
push ebx
lea esi, [ebp - 0x288]
call fcn.004019bb
push edi
push ebx
lea esi, [ebp - 0x26c]
call fcn.004019bb
push edi
push ebx
lea esi, [ebp - 0x250]
call fcn.004019bb
cmp dword [ebp - 0x570], 0xffffffff
je 0x40695e
push dword [ebp - 0x570]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edi, [ebp - 0x4d8]
call fcn.00403ade
xor edi, edi
push edi
push ebx
lea esi, [ebp - 0x314]
call fcn.004019bb
push edi
push ebx
lea esi, [ebp - 0x2dc]
call fcn.004019bb
push edi
push ebx
lea esi, [ebp - 0x234]
call fcn.004019bb
push edi
push ebx
lea esi, [ebp - 0x2a4]
call fcn.004019bb
push edi
push ebx
lea esi, [ebp - 0x560]
call fcn.004019bb
mov eax, dword [ebp - 0x568]
call fcn.00458ee0
ret