Function at 0x415ea0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x13dc
call fcn.004141f0
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_CharUpperBuffW]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, 0x3784fe
push 0
push 0
call esi
call edi
dec ebx
jne 0x415ec1
mov eax, dword [0x430fb0]
mov dword [0x32d4d80], eax
mov dword [ebp - 0xc0], 0x2bcfcc82
mov dword [ebp - 0x14c], 0x673196b1
mov dword [ebp - 0x164], 0x75e0cae9
mov dword [ebp - 0x12c], 0x6dab8e60
mov dword [ebp - 0xb8], 0x2cc5ed11
mov dword [ebp - 0x140], 0x1eab5e02
mov dword [ebp - 0xb0], 0x28cbd5df
mov dword [ebp - 0x1c], 0x4fa641e7
mov dword [ebp - 0x7c], 0x30315a5f
mov dword [ebp - 0x64], 0x396063ba
mov dword [ebp - 0x44], 0x495829e1
mov dword [ebp - 0x114], 0x33771c2a
mov dword [ebp - 0xa8], 0xe54b20c
mov dword [ebp - 0x13c], 0x4762ad7a
mov dword [ebp - 0xa0], 0x6af30bb4
mov dword [ebp - 0x144], 0x26b6d8d0
mov dword [ebp - 0x138], 0x4ccbff2a
mov dword [ebp - 0x94], 0x35af7d3b
mov dword [ebp - 0x3c], 0x3df9b597
mov dword [ebp - 0x78], 0x29747ee7
mov dword [ebp - 0x70], 0x763c05a
mov dword [ebp - 0x68], 0x52c0c272
mov dword [ebp - 0xd4], 0x48b62c94
mov dword [ebp - 0x104], 0x42d89a24
mov dword [ebp - 0x158], 0x76bcb073
mov dword [ebp - 0x18], 0x6ebbec3d
mov dword [ebp - 0x110], 0x7b08df9f
mov dword [ebp - 0x2c], 0x2bb78919
mov dword [ebp - 0x98], 0x6c684c6
mov dword [ebp - 0x14], 0x27710280
add dword [ebp - 0x164], 0x5e1af9db
mov eax, 0x68e7e679
mul dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc0]
mov eax, 0x3061eb7
mul dword [ebp - 0x14c]
mov eax, dword [ebp - 0x14c]
sub dword [ebp - 0x164], 0x7d2b96dc
add dword [ebp - 0x14c], 0x40b31b72
mov eax, 0x792b7a4e
mul dword [ebp - 0xb0]
mov eax, dword [ebp - 0xb0]
add dword [ebp - 0xb8], 0x3e8a2bba
sub dword [ebp - 0xb8], 0x6ec553a1
add dword [ebp - 0xb8], 0x661f97e2
sub dword [ebp - 0x1c], 0x232c02ce
mov eax, 0x58e6ab34
mul dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc0]
mov eax, 0x5127c8ba
mul dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, 0x10eae46e
mul dword [ebp - 0x140]
mov eax, dword [ebp - 0x140]
mov eax, 0x2a8ecc42
mul dword [ebp - 0xb0]
mov eax, dword [ebp - 0xb0]
add dword [ebp - 0x164], 0x4597b7ed
add dword [ebp - 0x164], 0xb54d957
mov eax, 0x2bae14bd
mul dword [ebp - 0x164]
mov eax, dword [ebp - 0x164]
mov eax, 0x79bd3a7
mul dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
add dword [ebp - 0x164], 0x57f33cdb
add dword [ebp - 0x44], 0x584b802d
sub dword [ebp - 0x44], 0x659ab47d
mov eax, 0x56427f23
mul dword [ebp - 0x114]
mov eax, dword [ebp - 0x114]
sub dword [ebp - 0x140], 0x53989b3c
add dword [ebp - 0x12c], 0x287e1c07
mov eax, 0x7e4b79b0
mul dword [ebp - 0x7c]
mov eax, dword [ebp - 0x7c]
sub dword [ebp - 0x14c], 0xe2e90b7
mov eax, 0x46d8feea
mul dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
add dword [ebp - 0x94], 0x1a281244
add dword [ebp - 0x140], 0x25dd4ade
mov eax, 0x7f52ef
mul dword [ebp - 0x12c]
mov eax, dword [ebp - 0x12c]
add dword [ebp - 0xb0], 0x18a23835
sub dword [ebp - 0x12c], 0x5028da4c
mov eax, 0x68dfeecd
mul dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, 0x38405d58
mul dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
sub dword [ebp - 0x44], 0x3f746347
mov eax, 0x79f0348
mul dword [ebp - 0x13c]
mov eax, dword [ebp - 0x13c]
sub dword [ebp - 0xb0], 0x4e8d97cb
sub dword [ebp - 0x18], 0x73d0e8cd
add dword [ebp - 0x13c], 0x22f7d29f
mov eax, 0x7f7bca1e
mul dword [ebp - 0x7c]
mov eax, dword [ebp - 0x7c]
sub dword [ebp - 0x144], 0x4c93b590
add dword [ebp - 0x7c], 0x72f353a5
add dword [ebp - 0xb0], 0x317e29c7
mov eax, 0x6b0b2885
mul dword [ebp - 0x114]
mov eax, dword [ebp - 0x114]
sub dword [ebp - 0xb8], 0x3720a29
sub dword [ebp - 0x18], 0x17514662
sub dword [ebp - 0xc0], 0x5cadf727
mov eax, 0x6e3e104f
mul dword [ebp - 0xb0]
mov eax, dword [ebp - 0xb0]
add dword [ebp - 0x64], 0x9848243
mov eax, 0x72ae399c
mul dword [ebp - 0x13c]
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0xc4], 0x70b151f7
mov dword [ebp - 0x5c], 0x6a00f11d
mov dword [ebp - 0x130], 0x552a1b2e
mov dword [ebp - 0x50], 0x7c508d8d
mov dword [ebp - 0xf4], 0x1791d0a5
mov dword [ebp - 0x54], 0x73580e1d
mov dword [ebp - 0x74], 0x64356ef0
mov dword [ebp - 0x128], 0x2c11e8ee
mov dword [ebp - 0x108], 0x1a1b32b6
mov dword [ebp - 0xdc], 0x4e0c8cae
mov dword [ebp - 0x160], 0x78a83df7
mov dword [ebp - 0x150], 0x1d2a5894
mov dword [ebp - 0x30], 0x4042dd0c
mov dword [ebp - 0x48], 0x8da1e4b
mov dword [ebp - 0xc], 0x7a57f476
mov dword [ebp - 0x90], 0x39d6c714
mov dword [ebp - 0x168], 0x3d24a614
mov dword [ebp - 0xe0], 0x6f531184
mov dword [ebp - 0x88], 0x7f55d67e
mov dword [ebp - 0x148], 0x50364f7
mov dword [ebp - 0x100], 0x2824459b
mov dword [ebp - 0x6c], 0x6a3e9af3
mov dword [ebp - 0xe4], 0x2bc6984d
mov dword [ebp - 0xd8], 0x46ffec0c
mov dword [ebp - 0x4c], 0x5ab83da
mov dword [ebp - 0x120], 0x7967bdda
mov dword [ebp - 0x60], 0x4ad6fb77
mov dword [ebp - 0xbc], 0x1cd472b7
mov dword [ebp - 0xac], 0x7aa16a6d
mov dword [ebp - 0x40], 0x4a01b52f
mov dword [ebp - 0x118], 0x4a2b658d
mov dword [ebp - 0x11c], 0x2a41d767
mov dword [ebp - 0x15c], 0x3aa4a6ad
mov dword [ebp - 0xf8], 0x6ed3a80c
mov dword [ebp - 0xd0], 0x674af0fa
mov dword [ebp - 0xa4], 0x554d81f
mov dword [ebp - 0x8c], 0x551c44bc
mov dword [ebp - 0x24], 0x46f1d241
mov dword [ebp - 0xf0], 0x67bfee82
mov dword [ebp - 0x28], 0x30c188b7
mov dword [ebp - 0x10], 0x2fc511e3
mov dword [ebp - 0xc8], 0x6bd90084
mov dword [ebp - 0xec], 0x3891953a
mov dword [ebp - 0x124], 0x207b8896
mov dword [ebp - 0xcc], 0x146a67a6
mov dword [ebp - 0x134], 0xe06357a
mov dword [ebp - 0xb4], 0x75bcd311
mov dword [ebp - 8], 0x1e5c4be2
mov dword [ebp - 4], 0x331f85a5
mov dword [ebp - 0x80], 0x2d436e27
mov dword [ebp - 0x10c], 0x4a9c1073
mov dword [ebp - 0x154], 0x67fa4a10
mov dword [ebp - 0x38], 0x44ff522d
mov dword [ebp - 0x9c], 0x4584445
mov dword [ebp - 0x58], 0x69ec8938
mov dword [ebp - 0xe8], 0x4ad3b6ba
mov dword [ebp - 0x20], 0x51ae4c97
mov dword [ebp - 0x84], 0x7e3f36f0
mov dword [ebp - 0x34], 0x3e34cc1b
mov dword [ebp - 0xfc], 0x66ccbc28
mov eax, 0x1b5e1b66
mul dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc4]
mov eax, 0x9049f1d
mul dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
add dword [ebp - 0x5c], 0x2b7e746d
mov eax, 0x2ceeebb2
mul dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc4]
add dword [ebp - 0xc4], 0x42c25576
sub dword [ebp - 0xc4], 0x52ac9ade
add dword [ebp - 0x5c], 0x15698a0a
mov eax, 0x23ab461c
mul dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
mov eax, 0x4d6b9658
mul dword [ebp - 0x130]
mov eax, dword [ebp - 0x130]
add dword [ebp - 0xc4], 0x6be7112
add dword [ebp - 0xc4], 0x42cfaca7
sub dword [ebp - 0xc4], 0x47528df7
add dword [ebp - 0xc4], 0x59fa41d2
sub dword [ebp - 0x54], 0x318e7889
sub dword [ebp - 0xdc], 0x9698ffe
add dword [ebp - 0xc4], 0x3e3ebb9
mov eax, 0x4137a6bf
mul dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
add dword [ebp - 0x150], 0xfd9bc80
add dword [ebp - 0x50], 0x73b4a1e6
add dword [ebp - 0xc4], 0x1747ecca
sub dword [ebp - 0xc4], 0x6bfdf068
add dword [ebp - 0x5c], 0x2d6e3008
mov eax, 0x5852883
mul dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov eax, 0x21caac13
mul dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
add dword [ebp - 0x108], 0x283d0f04
mov eax, 0x2a973360
mul dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
sub dword [ebp - 0x48], 0xbd391a9
sub dword [ebp - 0x30], 0x23020afa
add dword [ebp - 0xdc], 0x377ff554
add dword [ebp - 0x74], 0x72c8622c
add dword [ebp - 0x48], 0x5da6bda
add dword [ebp - 0x50], 0x54fe1869
mov eax, 0x308dbdfb
mul dword [ebp - 0x130]
mov eax, dword [ebp - 0x130]
sub dword [ebp - 0x90], 0x676ca44d
add dword [ebp - 0x108], 0x7c055fcf
sub dword [ebp - 0xe0], 0x1d3a5af
add dword [ebp - 0x5c], 0x762281ec
sub dword [ebp - 0x108], 0xf58e073
add dword [ebp - 0xe0], 0x1657b4c4
sub dword [ebp - 0x128], 0x9242292
add dword [ebp - 0xc], 0x2b632b03
add dword [ebp - 0xdc], 0x56fb21aa
add dword [ebp - 0x160], 0x6ed7f41f
mov eax, 0x1a2460fe
mul dword [ebp - 0x150]
mov eax, dword [ebp - 0x150]
sub dword [ebp - 0xe0], 0x628b5896
sub dword [ebp - 0x30], 0x12e99d70
add dword [ebp - 0x48], 0xf8a6422
sub dword [ebp - 0x128], 0x65058c6f
mov eax, 0x50dde405
mul dword [ebp - 0x128]
mov eax, dword [ebp - 0x128]
sub dword [ebp - 0x4c], 0x439c08e0
add dword [ebp - 0x130], 0x13e810de
add dword [ebp - 0x48], 0x3b0f29b2
add dword [ebp - 0x48], 0x183b96e6
add dword [ebp - 0x128], 0x48b89ff4
add dword [ebp - 0x74], 0xbe419b2
add dword [ebp - 0x88], 0x293cfa25
sub dword [ebp - 0x160], 0xbd585d8
mov eax, 0xdc68608
mul dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
sub dword [ebp - 0xf4], 0xb72e8be
sub dword [ebp - 0xd8], 0x2395af16
add dword [ebp - 0x90], 0x7e9fddc8
add dword [ebp - 0x40], 0x757c938
sub dword [ebp - 0x108], 0x65c73d77
mov eax, 0x32dcd81b
mul dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
sub dword [ebp - 0x120], 0x29ee0f39
add dword [ebp - 0x5c], 0x14dce3f2
add dword [ebp - 0x11c], 0x51d3b6b4
mov eax, 0x7b10b001
mul dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
add dword [ebp - 0x50], 0x21624792
mov eax, 0x5f0b3168
mul dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, 0x6de3add3
mul dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, 0x7a924eeb
mul dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
mov eax, 0x3ab84f5f
mul dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
sub dword [ebp - 0x5c], 0x5fa2b923
add dword [ebp - 0x128], 0x2d994624
mov eax, 0x9adf313
mul dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
sub dword [ebp - 0x128], 0x35018f7e
add dword [ebp - 0xc4], 0x7bd8e33e
add dword [ebp - 0x134], 0x298306df
mov eax, 0x7d43ebe3
mul dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
sub dword [ebp - 0xe4], 0xea04aa4
sub dword [ebp - 0x134], 0x2d9d743
sub dword [ebp - 0xb4], 0x5dbbb6b5
add dword [ebp - 0x118], 0x624c3e1b
sub dword [ebp - 0xf0], 0x5bc1ed6e
add dword [ebp - 0xe0], 0x51fc2b3c
add dword [ebp - 0x24], 0x45c0ca29
sub dword [ebp - 0x100], 0x72572780
sub dword [ebp - 0x60], 0x28e5ab70
add dword [ebp - 0xb4], 0xc51a405
mov eax, 0x1102e4e5
mul dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
sub dword [ebp - 0x28], 0xf925920
add dword [ebp - 0x10], 0x3b67ec40
mov eax, 0x4124d4b6
mul dword [ebp - 0x108]
mov eax, dword [ebp - 0x108]
add dword [ebp - 0xcc], 0x43f16b66
mov eax, 0x46eaf0be
mul dword [ebp - 0xc8]
mov eax, dword [ebp - 0xc8]
add dword [ebp - 0x148], 0x18d1f9d3
mov eax, 0x4a9c176d
mul dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
add dword [ebp - 0x148], 0x10f5efae
mov eax, 0x927bc83
mul dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, 0x9a5983d
mul dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf0]
add dword [ebp - 0x124], 0x49e4d4d7
add dword [ebp - 0xf8], 0x3e494f46
add dword [ebp - 0xc4], 0x6fc8cda
mov eax, 0x5b7a3134
mul dword [ebp - 0x154]
mov eax, dword [ebp - 0x154]
sub dword [ebp - 0x134], 0xddbd3a1
sub dword [ebp - 0x54], 0xe4bf1dd
sub dword [ebp - 0x154], 0x1adabe98
mov eax, 0x358ccdb0
mul dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
add dword [ebp - 0x6c], 0x4111506d
mov eax, 0x89d450c
mul dword [ebp - 0x100]
mov eax, dword [ebp - 0x100]
mov eax, 0x3d93c48e
mul dword [ebp - 0x130]
mov eax, dword [ebp - 0x130]
sub dword [ebp - 0x80], 0x77d4d826
mov eax, 0x2e0cc98d
mul dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
mov eax, 0x76adefd9
mul dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
add dword [ebp - 0xf8], 0x2481610a
sub dword [ebp - 0xf8], 0x4132f93d
sub dword [ebp - 0xe0], 0x59390127
mov eax, 0x32745b69
mul dword [ebp - 0x150]
mov eax, dword [ebp - 0x150]
sub dword [ebp - 0x30], 0x3baa0a97
mov ecx, dword [0x430fa4]
mov dword [0x32d4d84], ecx
call fcn.00415670
cmp dword [0x32d4d80], 0xc30
jne 0x4169e7
lea edx, [ebp - 0x29c]
push edx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetCPInfoExA]
push 0x4040f8
call dword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
lea eax, [ebp - 0x3dc]
push eax
push 0x404114
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push ebx
call dword [sym.imp.KERNEL32.dll_DebugActiveProcessStop]
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x404124
call esi
mov edi, dword [sym.imp.KERNEL32.dll_WriteConsoleA]
push ebx
lea ecx, [ebp - 0x16c]
push ecx
push ebx
push ebx
push ebx
call edi
push ebx
lea edx, [ebp - 0xbdc]
push edx
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0x178]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
push ebx
call esi
push ebx
lea ecx, [ebp - 0x170]
push ecx
push ebx
push ebx
push ebx
call edi
push ebx
push ebx
push ebx
push 0x40413c
push 0x404168
push ebx
call dword [sym.imp.KERNEL32.dll_UpdateResourceW]
lea edx, [ebp - 0x13dc]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
call dword [0x436c7c]
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10