Function at 0x408580
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x55c
mov eax, dword [0x46f074]
xor eax, esp
mov dword [esp + 0x558], eax
push ebx
push esi
mov esi, dword [ebp + 0x10]
push edi
mov edi, dword [ebp + 8]
push 0xa
mov dword [esp + 0x28], 0xa0
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
test eax, eax
jne 0x4085c4
mov dword [esp + 0x24], 0xc000001d
jmp case.default.0x408646
push dword [esp + 0x24]
mov edx, dword [0x4728a8]
push ecx
mov ecx, dword [0x4728a4]
mov dword [0x4728a0], 0
call fcn.0040fa10
mov eax, dword [0x4728a4]
add esp, 8
mov dword [0x4728a8], eax
mov word [0x4728b0], 0
mov byte [0x4728b2], 0
call fcn.004072b0
call fcn.00405130
test al, al
jne 0x40861c
mov dword [esp + 0x24], 8
jmp case.default.0x408646
mov ecx, dword [0x4728a0]
call fcn.00404e80
test al, al
jne 0x408638
mov dword [esp + 0x24], 2
jmp case.default.0x408646
mov eax, dword [0x4728a0]
cmp eax, 0xa
ja case.default.0x408646
jmp dword [eax*4 + 0x4090e0]
push 0xb0
lea eax, [esp + 0xa4]
push 0
push eax
call fcn.00437410
add esp, 8
lea ecx, [esp + 0xa4]
call fcn.00409a60
cmp dword [0x472898], 8
lea ecx, [esp + 0xa4]
mov eax, 0x472884
cmovae eax, dword [0x472884]
sub esp, 8
push eax
call fcn.0040c320
test eax, eax
lea ecx, [esp + 0xa0]
mov eax, dword [esp + 0xa0]
push 0
mov eax, dword [eax + 4]
jne 0x4086be
mov edx, dword [ecx + eax + 0xc]
add ecx, eax
or edx, 2
mov eax, edx
or eax, 4
cmp dword [ecx + 0x38], 0
jmp 0x4086ca
add ecx, eax
xor edx, edx
mov eax, 4
cmp dword [ecx + 0x38], edx
cmovne eax, edx
push eax
call fcn.00402c20
cmp dword [esp + 0xf0], 0
je 0x408bcb
mov edx, str.aswOfferTool_log:
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esi]
push 0xa
mov ecx, dword [eax + 4]
add ecx, esi
call fcn.0040dbc0
movzx eax, ax
mov ecx, esi
push eax
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
cmp byte [0x4728b1], 0
mov esi, 1
je 0x40875a
lea edx, [esp + 0x24]
mov esi, 2
call fcn.00407c70
test eax, eax
jne 0x40875a
cmp dword [esp + 0x24], eax
jne 0x40877a
lea eax, [esp + 0x24]
mov edx, esi
push eax
call fcn.00405950
add esp, 4
cmp dword [esp + 0x24], 0
jne 0x40877a
mov edx, str.Google_Chrome_may_be_offered_to_this_user.
jmp 0x4088e1
mov edx, str.Google_Chrome_cannot_be_offered_due_to_these_reasons:
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esp + 0x24]
test al, 1
je 0x4087ec
mov edx, str.___GCCC_ERROR_USERLEVELALREADYPRESENT
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esp + 0x24]
test al, 2
je 0x408827
mov edx, str.___GCCC_ERROR_SYSTEMLEVELALREADYPRESENT
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esp + 0x24]
test al, 4
je 0x408862
mov edx, str.___GCCC_ERROR_ACCESSDENIED
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esp + 0x24]
test al, 8
je 0x40889d
mov edx, str.___GCCC_ERROR_OSNOTSUPPORTED
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esp + 0x24]
test al, 0x10
je 0x4088d8
mov edx, str.___GCCC_ERROR_ALREADYOFFERED
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esp + 0x24]
test al, 0x20
je 0x40890f
mov edx, str.___GCCC_ERROR_INTEGRITYLEVEL
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esp + 0xa0]
lea ecx, [esp + 0xa0]
push 0xa
mov eax, dword [eax + 4]
add ecx, eax
call fcn.0040dbc0
movzx eax, ax
lea ecx, [esp + 0xa0]
push eax
call fcn.0040f050
lea ecx, [esp + 0xa0]
call fcn.0040ef60
cmp byte [0x4728b1], 0
je 0x40895b
lea ecx, [esp + 0x24]
call fcn.00408380
test eax, eax
je 0x40896a
lea eax, [esp + 0x24]
xor edx, edx
push eax
call fcn.00405f60
add esp, 4
cmp dword [esp + 0x24], 0
lea ecx, [esp + 0xa0]
jne 0x408982
mov edx, str.Google_Toolbar_may_be_offered_to_this_user.
jmp 0x408b5f
mov edx, str.Google_Toolbar_cannot_be_offered_due_to_these_reasons:
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esp + 0x24]
test al, 1
je 0x4089ed
mov edx, str.___TCC_ERROR_TOOLBARPRESENT
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esp + 0x24]
test al, 2
je 0x408a28
mov edx, str.___TCC_ERROR_ACCESSDENIED
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esp + 0x24]
test al, 4
je 0x408a63
mov edx, str.___TCC_ERROR_IENOTDEFAULTBROWSER
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esp + 0x24]
test al, 8
je 0x408a9e
mov edx, str.___TCC_ERROR_BHODISABLED
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esp + 0x24]
test al, 0x10
je 0x408ad9
mov edx, str.___TCC_ERROR_IEBELOWMINVERSION
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esp + 0x24]
test al, 0x20
je 0x408b14
mov edx, str.___TCC_ERROR_OSNOTSUPPORTED
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esp + 0x24]
test al, 0x40
je 0x408b4f
mov edx, str.___TCC_ERROR_USERDECLINED
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
mov eax, dword [esp + 0x24]
test al, al
jns 0x408b86
mov edx, str.___TCC_ERROR_INTEGRITYLEVEL
lea ecx, [esp + 0xa0]
call fcn.0040e750
mov esi, eax
push 0xa
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.0040dbc0
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.0040f050
mov ecx, esi
call fcn.0040ef60
lea ecx, [esp + 0xa4]
call fcn.0040c250
test eax, eax
jne 0x408bc3
mov eax, dword [esp + 0xa0]
lea ecx, [esp + 0xa0]
push 0
mov eax, dword [eax + 4]
add ecx, eax
mov edx, dword [ecx + 0xc]
or edx, 2
mov eax, edx
or eax, 4
cmp dword [ecx + 0x38], 0
cmovne eax, edx
push eax
call fcn.00402c20
mov dword [esp + 0x24], 0
lea ecx, [esp + 0xa0]
call fcn.00409110
jmp case.default.0x408646
lea eax, [esp + 0x24]
mov edx, 2
push eax
call fcn.00405950
add esp, 4
jmp case.default.0x408646
lea eax, [esp + 0x24]
mov ecx, 0x4728a4
push eax
call fcn.00405a00
add esp, 4
jmp case.default.0x408646
lea eax, [esp + 0x24]
mov ecx, 0x4728a4
push eax
call fcn.00405b80
add esp, 4
jmp case.default.0x408646
cmp byte [0x4728b1], 0
je 0x408e1a
push esi
lea ecx, [esp + 0x44]
xor bh, bh
call fcn.004097e0
xor ecx, ecx
mov eax, 9
cmp word [str._elevated], cx
cmove eax, ecx
push eax
push ecx
push str._elevated
lea ecx, [esp + 0x4c]
call fcn.0040b100
test eax, eax
je 0x408de7
push 0
push 0x465008
push 9
push eax
lea ecx, [esp + 0x50]
call fcn.0040b1f0
push 0
push 0x2e
lea eax, [esp + 0x158]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x408de7
lea eax, [esp + 0x150]
push eax
lea ecx, [esp + 0x5c]
call fcn.004097e0
push 0x208
lea eax, [esp + 0x154]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
mov dword [esp + 0x3c], 7
mov word [esp + 0x28], ax
lea ecx, [esp + 0xc]
lea eax, [esp + 0x150]
mov dword [esp + 0x38], 0
push eax
call fcn.004097e0
lea edx, [esp + 0xc]
lea ecx, [esp + 0x70]
call fcn.00415320
lea ecx, [esp + 0xc]
call fcn.00409720
push ecx
lea eax, [esp + 0x74]
push eax
lea edx, [esp + 0x60]
lea ecx, [esp + 0x30]
call fcn.00415470
add esp, 8
lea eax, [esp + 0x40]
lea edx, [esp + 0x28]
lea ecx, [esp + 0xc]
push eax
push 0x465198
call fcn.0040e350
add esp, 4
lea ecx, [esp + 0x8c]
mov edx, eax
call fcn.0040e4d0
add esp, 4
lea ecx, [esp + 0x40]
push eax
call fcn.00409760
lea ecx, [esp + 0x88]
call fcn.00409720
lea ecx, [esp + 0xc]
call fcn.00409720
lea eax, [esp + 0x150]
push eax
lea ecx, [esp + 0x10]
call fcn.004097e0
cmp dword [esp + 0x3c], 8
lea edx, [esp + 0x28]
lea ecx, [esp + 0xc]
cmovae edx, dword [esp + 0x28]
cmp dword [esp + 0x20], 8
cmovae ecx, dword [esp + 0xc]
sub esp, 8
call fcn.004156b0
add esp, 8
lea ecx, [esp + 0xc]
mov bl, al
call fcn.00409720
test bl, bl
je 0x408dc8
cmp dword [esp + 0x54], 8
lea ecx, [esp + 0x40]
lea edx, [esp + 0x24]
cmovae ecx, dword [esp + 0x40]
call fcn.00406fb0
cmp dword [esp + 0x3c], 8
lea ecx, [esp + 0x28]
mov bh, al
cmovae ecx, dword [esp + 0x28]
call fcn.004157f0
lea ecx, [esp + 0x70]
call fcn.00409720
lea ecx, [esp + 0x28]
call fcn.00409720
lea ecx, [esp + 0x58]
call fcn.00409720
test bh, bh
jne 0x408df9
lea eax, [esp + 0x24]
mov ecx, 0x4728a4
push eax
call fcn.00405d30
add esp, 4
mov eax, dword [esp + 0x54]
cmp eax, 8
jb case.default.0x408646
inc eax
lea ecx, [esp + 0x40]
push eax
push dword [esp + 0x44]
call fcn.0040ca00
jmp case.default.0x408646
lea eax, [esp + 0x24]
mov ecx, 0x4728a4
push eax
call fcn.00405d30
add esp, 4
jmp case.default.0x408646
cmp byte [0x4728b1], 0
je 0x40902e
push esi
lea ecx, [esp + 0x44]
xor bh, bh
call fcn.004097e0
xor ecx, ecx
mov eax, 9
cmp word [str._elevated], cx
cmove eax, ecx
push eax
push ecx
push str._elevated
lea ecx, [esp + 0x4c]
call fcn.0040b100
test eax, eax
je 0x408ffe
push 0
push 0x465008
push 9
push eax
lea ecx, [esp + 0x50]
call fcn.0040b1f0
push 0
push 0x2e
lea eax, [esp + 0x158]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x408ffe
lea eax, [esp + 0x150]
push eax
lea ecx, [esp + 0x8c]
call fcn.004097e0
push 0x208
lea eax, [esp + 0x154]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
mov dword [esp + 0x3c], 7
mov word [esp + 0x28], ax
lea ecx, [esp + 0x58]
lea eax, [esp + 0x150]
mov dword [esp + 0x38], 0
push eax
call fcn.004097e0
lea edx, [esp + 0x58]
lea ecx, [esp + 0x70]
call fcn.00415320
lea ecx, [esp + 0x58]
call fcn.00409720
push ecx
lea eax, [esp + 0x74]
push eax
lea edx, [esp + 0x90]
lea ecx, [esp + 0x30]
call fcn.00415470
add esp, 8
lea eax, [esp + 0x40]
lea edx, [esp + 0x28]
lea ecx, [esp + 0xc]
push eax
push 0x465198
call fcn.0040e350
add esp, 4
lea ecx, [esp + 0x5c]
mov edx, eax
call fcn.0040e4d0
add esp, 4
lea ecx, [esp + 0x40]
push eax
call fcn.00409760
lea ecx, [esp + 0x58]
call fcn.00409720
lea ecx, [esp + 0xc]
call fcn.00409720
lea eax, [esp + 0x150]
push eax
lea ecx, [esp + 0x10]
call fcn.004097e0
cmp dword [esp + 0x3c], 8
lea edx, [esp + 0x28]
lea ecx, [esp + 0xc]
cmovae edx, dword [esp + 0x28]
cmp dword [esp + 0x20], 8
cmovae ecx, dword [esp + 0xc]
sub esp, 8
call fcn.004156b0
add esp, 8
lea ecx, [esp + 0xc]
mov bl, al
call fcn.00409720
test bl, bl
je 0x408fd8
cmp dword [esp + 0x54], 8
lea ecx, [esp + 0x40]
lea edx, [esp + 0x24]
cmovae ecx, dword [esp + 0x40]
call fcn.00406fb0
cmp dword [esp + 0x3c], 8
lea ecx, [esp + 0x28]
mov bh, al
cmovae ecx, dword [esp + 0x28]
call fcn.004157f0
lea ecx, [esp + 0x70]
call fcn.00409720
lea ecx, [esp + 0x28]
call fcn.00409720
lea ecx, [esp + 0x88]
call fcn.00409720
test bh, bh
jne 0x408df9
lea eax, [esp + 0x24]
mov edx, 1
push eax
mov ecx, 0x4728a4
call fcn.00405e60
add esp, 4
lea eax, [esp + 0x24]
mov edx, 2
mov ecx, 0x4728a4
push eax
call fcn.00405e60
jmp 0x408df6
lea eax, [esp + 0x24]
mov edx, 1
push eax
mov ecx, 0x4728a4
call fcn.00405e60
add esp, 4
lea eax, [esp + 0x24]
mov edx, 2
mov ecx, 0x4728a4
push eax
call fcn.00405e60
add esp, 4
jmp case.default.0x408646
lea eax, [esp + 0x24]
xor edx, edx
push eax
call fcn.00405f60
add esp, 4
jmp case.default.0x408646
lea ecx, [esp + 0x24]
call fcn.00406010
jmp case.default.0x408646
mov dl, byte [0x4728b0]
push ecx
mov cl, byte [0x4728b2]
call fcn.00406220
add esp, 4
jmp 0x4090ba
mov ecx, 0x4728a4
call fcn.004063c0
jmp 0x4090ba
mov dl, byte [0x4728b0]
mov ecx, 0x4728a4
push 0x4728b4
push 0x4728cc
call fcn.00406850
add esp, 8
mov dword [esp + 0x24], eax
call fcn.00404fb0
mov ecx, dword [esp + 0x564]
mov eax, dword [esp + 0x24]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0041d21a
mov esp, ebp
pop ebp
ret 0x10