Function at 0x4089c6
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
push esi
push edi
mov dword [ebp - 8], 0
mov dword [ebp - 0x34], 0
mov dword [0x42d8c0], 0
jmp 0x4089f2
inc dword [0x42d8c0]
cmp dword [0x42d8c0], 0x3000
jge 0x408a13
mov eax, dword [0x42d8c0]
mov byte [eax + 0x42d8d0], 0
jmp 0x4089ec
push 0x200
push 0x430ce0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push 0x49fffc
push 0x430ce0
call fcn.0041d138
add esp, 8
push 0x434100
push 0x42d8d0
push 0x430ce0
call fcn.0040bc13
add esp, 0xc
cmp eax, 0xffffffff
jne 0x408a5f
mov eax, 0xffffffff
jmp 0x408c7d
mov ax, word [0x434100]
mov word [ebp - 0x30], ax
push 0x430ee6
mov ax, word [0x434100]
push eax
push 0x42d8d0
push 0x4a0008
call fcn.004095d8
add esp, 0x10
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x408a9b
mov dword [ebp - 0x34], 1
push 0x430ee6
mov ax, word [0x434100]
push eax
push 0x42d8d0
push 0x4a0018
call fcn.004095d8
add esp, 0x10
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x408c5b
or dword [ebp - 8], 1
push 0x430ee6
mov ax, word [0x434100]
push eax
push 0x42d8d0
push 0x4a0024
call fcn.004095d8
add esp, 0x10
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x408afe
or dword [ebp - 8], 2
jmp 0x408c56
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xc], eax
inc dword [ebp - 0x20]
push 0x4a002c
call fcn.0041d0c4
add esp, 4
push eax
push 0x4a0034
mov eax, dword [ebp - 0x20]
push eax
call fcn.0041d814
add esp, 0xc
test eax, eax
jne 0x408b04
push 0x4a003c
call fcn.0041d0c4
add esp, 4
inc eax
add dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x20]
mov al, byte [eax]
mov ecx, dword [ebp - 0x1c]
mov byte [ebp + ecx - 0x18], al
inc dword [ebp - 0x20]
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov cl, byte [eax]
cmp ecx, 0xd
jne 0x408b46
mov eax, dword [ebp - 0x1c]
mov byte [ebp + eax - 0x18], 0
lea eax, [ebp - 0x18]
push eax
push 0x434110
call fcn.0041d13c
add esp, 8
push 0x4a0044
lea eax, [ebp - 0x18]
push eax
call fcn.0041d434
add esp, 8
test eax, eax
jge 0x408bad
cmp dword [ebp - 0x34], 1
jne 0x408ba8
or dword [ebp - 8], 2
jmp 0x408c56
push 0x4a004c
lea eax, [ebp - 0x18]
push eax
call fcn.0041d434
add esp, 8
test eax, eax
jg 0x408bcf
or dword [ebp - 8], 2
jmp 0x408c56
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x20]
push 0x4a0054
call fcn.0041d0c4
add esp, 4
push eax
push 0x4a005c
mov eax, dword [ebp - 0x20]
push eax
call fcn.0041d814
add esp, 0xc
test eax, eax
jne 0x408bd5
push 0x4a0064
call fcn.0041d0c4
add esp, 4
inc eax
add dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x20]
mov al, byte [eax]
mov ecx, dword [ebp - 0x1c]
mov byte [ebp + ecx - 0x2c], al
inc dword [ebp - 0x20]
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov cl, byte [eax]
cmp ecx, 0xd
jne 0x408c17
lea eax, [ebp - 0x2c]
push eax
call fcn.0041d2df
add esp, 4
mov dword [ebp - 4], eax
test byte [ebp - 4], 2
je 0x408c56
or dword [ebp - 8], 2
jmp 0x408c75
cmp dword [ebp - 0x34], 1
jne 0x408c6e
or dword [ebp - 8], 2
jmp 0x408c75
mov dword [ebp - 8], 0
mov eax, dword [ebp - 8]
jmp 0x408c7d
pop edi
pop esi
pop ebx
leave
ret