Function at 0x427d30
Capabilities:
Get common file path

Disassembly:
sub esp, 0x30c
mov al, byte [0x456160]
push ebx
push ebp
push esi
push edi
mov byte [esp + 0x10], al
mov ecx, pe_nt_image_headers32
xor eax, eax
lea edi, [esp + 0x11]
xor ebp, ebp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, dword [esp + 0x320]
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
jne 0x427fc0
lea ecx, [esp + 0x10]
push 0x104
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea edx, [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov cl, byte [esp + eax + 0xf]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp cl, 0x5c
je 0x427da3
lea eax, [esp + 0x10]
push 0x445344
push eax
call ebx
lea ecx, [esp + 0x10]
push edi
push ecx
call ebx
lea edx, [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
jne 0x427fc0
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
mov ebp, eax
lea eax, [esp + 0x10]
push ebp
push eax
lea ecx, [esp + 0x11c]
push 0x4514f0
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
call edi
lea edx, [esp + 0x114]
push eax
push edx
call fcn.004243e0
lea eax, [esp + 0x18]
push 0x104
push eax
mov byte [esp + 0x20], 0
call fcn.00427cb0
add esp, 0x10
lea ecx, [esp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp byte [esp + eax + 0xf], 0x5c
je 0x427e2b
lea edx, [esp + 0x10]
push 0x445344
push edx
call ebx
mov eax, dword [esp + 0x320]
lea ecx, [esp + 0x10]
push eax
push ecx
call ebx
lea edx, [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
jne 0x427fc0
call edi
mov ebp, eax
lea eax, [esp + 0x10]
push ebp
push eax
lea ecx, [esp + 0x11c]
push 0x4514bc
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
call edi
lea edx, [esp + 0x114]
push eax
push edx
call fcn.004243e0
push esi
call fcn.00427fe0
add esp, 0xc
test eax, eax
je 0x427fc0
mov eax, dword [esp + 0x320]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
jne 0x427fb6
call edi
lea ecx, [esp + 0x10]
push 0x104
push ecx
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea edx, [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp byte [esp + eax + 0xf], 0x5c
je 0x427eda
lea eax, [esp + 0x10]
push 0x445344
push eax
call ebx
mov ecx, dword [esp + 0x320]
lea edx, [esp + 0x10]
push ecx
push edx
call ebx
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
jne 0x427fb6
call edi
mov ebp, eax
lea ecx, [esp + 0x10]
push ebp
push ecx
lea edx, [esp + 0x11c]
push 0x45146c
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
call edi
push eax
lea eax, [esp + 0x118]
push eax
call fcn.004243e0
lea ecx, [esp + 0x18]
push 0x104
push ecx
mov byte [esp + 0x20], 0
call fcn.00427cb0
add esp, 0x10
lea edx, [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp byte [esp + eax + 0xf], 0x5c
je 0x427f63
lea eax, [esp + 0x10]
push 0x445344
push eax
call ebx
mov ecx, dword [esp + 0x320]
lea edx, [esp + 0x10]
push ecx
push edx
call ebx
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
test esi, esi
jne 0x427fb6
call edi
mov ebp, eax
lea ecx, [esp + 0x10]
push ebp
push ecx
lea edx, [esp + 0x11c]
push 0x451438
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
call edi
push eax
lea eax, [esp + 0x118]
push eax
call fcn.004243e0
add esp, 8
push 1
call fcn.00427fe0
add esp, 4
push ebp
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30c
ret