Function at 0x425820
Capabilities:
Get common file path
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x4848a0
push 0x457800
mov eax, dword fs:[0]
push eax
sub esp, 0x868
mov eax, dword [0x488e40]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [ebp - 0x82c], ebx
mov dword [ebp - 0x840], ebx
mov dword [ebp - 0x824], ebx
mov dword [ebp - 0x830], ebx
mov dword [ebp - 0x83c], ebx
mov dword [ebp - 0x848], ebx
mov dword [ebp - 0x828], ebx
mov dword [ebp - 4], ebx
mov eax, 0x1000
call fcn.00416a70
mov dword [ebp - 0x86c], eax
mov dword [ebp - 0x824], eax
mov eax, dword [0x48d6a8]
cmp eax, ebx
jne 0x4258bc
push str.ntdll.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x48d6a8], eax
cmp eax, ebx
je 0x425cf2
push str.NtClose
push eax
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call esi
mov dword [ebp - 0x840], eax
cmp eax, ebx
je 0x425cf2
push str.NtOpenDirectoryObject
mov eax, dword [0x48d6a8]
push eax
call esi
mov edi, eax
cmp edi, ebx
je 0x425cf2
push str.NtQueryDirectoryObject
mov ecx, dword [0x48d6a8]
push ecx
call esi
mov dword [ebp - 0x84c], eax
cmp eax, ebx
je 0x425cf2
push str.NtOpenSymbolicLinkObject
mov edx, dword [0x48d6a8]
push edx
call esi
mov dword [ebp - 0x870], eax
cmp eax, ebx
je 0x425cf2
push str.NtQuerySymbolicLinkObject
mov eax, dword [0x48d6a8]
push eax
call esi
mov dword [ebp - 0x868], eax
cmp eax, ebx
je 0x425cf2
mov eax, str.KnownDlls
mov dword [ebp - 0x834], eax
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x425950
sub eax, edx
sar eax, 1
lea ecx, [eax + eax]
mov word [ebp - 0x838], cx
mov edx, dword [ebp - 0x838]
add edx, 2
mov word [ebp - 0x836], dx
mov dword [ebp - 0x864], 0x18
mov dword [ebp - 0x860], ebx
mov dword [ebp - 0x858], 0x40
lea eax, [ebp - 0x838]
mov dword [ebp - 0x85c], eax
mov dword [ebp - 0x854], ebx
mov dword [ebp - 0x850], ebx
lea ecx, [ebp - 0x864]
push ecx
push 1
lea edx, [ebp - 0x830]
push edx
call edi
test eax, eax
jl 0x425cf2
push 0x1000
push ebx
mov eax, dword [ebp - 0x86c]
push eax
call fcn.004579a0
push 0x800
push ebx
lea ecx, [ebp - 0x820]
push ecx
call fcn.004579a0
add esp, 0x18
lea esp, [esp]
mov edi, dword [ebp - 0x828]
cmp edi, ebx
jne 0x425bff
lea edx, [ebp - 0x874]
push edx
lea eax, [ebp - 0x848]
push eax
push ebx
push ebx
push 0x800
mov esi, dword [ebp - 0x824]
push esi
mov ecx, dword [ebp - 0x830]
push ecx
call dword [ebp - 0x84c]
test eax, eax
jl 0x425bb3
mov dword [ebp - 0x844], esi
cmp edi, ebx
jne 0x425b99
cmp word [esi], bx
je 0x425b99
push str.KnownDllPath
mov edx, dword [esi + 4]
push edx
call fcn.00456a96
add esp, 8
test eax, eax
jne 0x425b91
push str.SymbolicLink
mov eax, dword [esi + 0xc]
push eax
call fcn.00456a96
add esp, 8
test eax, eax
jne 0x425b91
mov dword [ebp - 0x864], 0x18
mov ecx, dword [ebp - 0x830]
mov dword [ebp - 0x860], ecx
mov dword [ebp - 0x858], 0x40
mov dword [ebp - 0x85c], esi
mov dword [ebp - 0x854], ebx
mov dword [ebp - 0x850], ebx
lea edx, [ebp - 0x864]
push edx
push 1
lea eax, [ebp - 0x83c]
push eax
call dword [ebp - 0x870]
test eax, eax
jl 0x425b8d
push 0x1000
push ebx
mov ecx, dword [ebp - 0x824]
push ecx
call fcn.004579a0
add esp, 0xc
mov edx, dword [ebp - 0x824]
mov dword [ebp - 0x834], edx
mov word [ebp - 0x838], bx
mov word [ebp - 0x836], 0x1000
push ebx
lea eax, [ebp - 0x838]
push eax
mov ecx, dword [ebp - 0x83c]
push ecx
call dword [ebp - 0x868]
test eax, eax
jl 0x425b7a
movzx edx, word [ebp - 0x838]
shr edx, 1
mov eax, dword [ebp - 0x834]
mov word [eax + edx*2], bx
push 0x800
mov ecx, dword [ebp - 0x834]
push ecx
lea edx, [ebp - 0x820]
push edx
call fcn.00456474
add esp, 0xc
cmp eax, 0x800
jae 0x425b7a
push 0x800
lea eax, [ebp - 0x820]
call fcn.00416c20
add esp, 4
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x425b60
sub eax, edx
lea eax, [ebp + eax - 0x820]
mov dword [ebp - 0x828], eax
mov edi, eax
mov ecx, dword [ebp - 0x83c]
push ecx
call dword [ebp - 0x840]
mov dword [ebp - 0x83c], ebx
cmp edi, ebx
je 0x425b99
add esi, 0x10
jmp 0x425a2f
push 0x1000
push ebx
mov edx, dword [ebp - 0x824]
push edx
call fcn.004579a0
add esp, 0xc
jmp 0x4259f0
cmp edi, ebx
jne 0x425bff
push 0x800
lea eax, [ebp - 0x820]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
je 0x425cf2
push 0x800
lea eax, [ebp - 0x820]
call fcn.00416c20
add esp, 4
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x425be7
sub eax, edx
lea ecx, [ebp + eax - 0x820]
mov dword [ebp - 0x828], ecx
lea edi, [ebp - 0x20]
sub edi, dword [ebp - 0x828]
mov dword [ebp - 0x848], ebx
mov edi, edi
lea edx, [ebp - 0x874]
push edx
lea eax, [ebp - 0x848]
push eax
push ebx
push ebx
push 0x800
mov esi, dword [ebp - 0x824]
push esi
mov ecx, dword [ebp - 0x830]
push ecx
call dword [ebp - 0x84c]
test eax, eax
jl 0x425cb7
mov dword [ebp - 0x844], esi
cmp word [esi], bx
je 0x425c9d
push str.Section
mov edx, dword [esi + 0xc]
push edx
call fcn.00456a96
add esp, 8
test eax, eax
jne 0x425c98
push edi
mov eax, dword [esi + 4]
push eax
mov ecx, dword [ebp - 0x828]
push ecx
call fcn.00456474
add esp, 0xc
cmp eax, edi
jae 0x425c98
push ebx
lea edx, [ebp - 0x820]
push edx
push 4
mov eax, dword [ebp - 0x82c]
push eax
call fcn.00424f20
add esp, 0x10
mov dword [ebp - 0x82c], eax
add esi, 0x10
jmp 0x425c41
push 0x1000
push ebx
mov ecx, dword [ebp - 0x824]
push ecx
call fcn.004579a0
add esp, 0xc
jmp 0x425c10
push 0x800
lea edx, [ebp - 0x820]
push edx
mov eax, dword [0x48d6a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x425cf2
push ebx
lea ecx, [ebp - 0x820]
push ecx
push 4
mov edx, dword [ebp - 0x82c]
push edx
call fcn.00424f20
add esp, 0x10
mov dword [ebp - 0x82c], eax
mov dword [ebp - 4], 0xfffffffe
call fcn.00425d22
mov eax, dword [ebp - 0x82c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.00454016
mov esp, ebp
pop ebp
ret