Function at 0x440010
Capabilities:
Get common file path

Disassembly:
sub esp, 0x83c
mov eax, dword [0x52e144]
xor eax, esp
mov dword [esp + 0x838], eax
push ebp
mov ebp, dword [esp + 0x848]
push esi
mov esi, dword [esp + 0x848]
push edi
push esi
call fcn.0043d1a0
mov edi, eax
push 0x3ff
lea eax, [esp + 0x44d]
push 0
push eax
mov dword [esp + 0x1c], edi
mov byte [esp + 0x454], 0
call fcn.004b6dc0
add esp, 0x10
call fcn.00491fb0
test al, al
jne 0x440086
pop edi
pop esi
mov eax, 1
pop ebp
mov ecx, dword [esp + 0x838]
xor ecx, esp
call fcn.004b6da3
add esp, 0x83c
ret
push ebx
push 0x220
lea ecx, [esp + 0x1c]
push 0
push ecx
mov dword [esp + 0x20], 0
call fcn.004b6dc0
push 0x21c
push 0
push ebp
call fcn.004b6dc0
add esp, 0x18
push esi
push 8
call dword [0x548d20]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x4400d5
test edi, edi
je 0x4400cb
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 2
jmp 0x44062c
push 0x400
lea edx, [esp + 0x44c]
push edx
push edi
mov dword [esp + 0x20], 0x224
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x44010c
push 4
lea eax, [esp + 0x44c]
push 0x51a19c
push eax
call fcn.004bac70
add esp, 0xc
lea ecx, [esp + 0x14]
push ecx
push ebx
call dword [0x548d2c]
test eax, eax
je 0x440480
push 0x51a18c
call fcn.00404690
push eax
lea edx, [esp + 0x3c]
push edx
call fcn.004bab59
add esp, 0xc
test eax, eax
jne 0x440316
push 0x51a178
call fcn.00404690
add esp, 4
push eax
mov eax, dword [esp + 0x34]
push eax
push edi
call fcn.00410130
test eax, eax
je 0x440316
push 0x51a160
call fcn.00404690
mov ecx, dword [esp + 0x34]
add esp, 4
push eax
push ecx
push edi
call fcn.00410130
test eax, eax
je 0x440316
cmp dword [0x54a138], 0x4e48
jb 0x4401b1
push 0x51a14c
call fcn.00404690
push eax
lea edx, [esp + 0x450]
push edx
call fcn.00404270
add esp, 0xc
test eax, eax
jne 0x440316
cmp dword [0x5378d0], 0
je 0x4403e2
cmp dword [0x54a138], 0x4e48
jb 0x4403e2
push 0x104
lea eax, [esp + 0x345]
push 0
push eax
mov byte [esp + 0x34c], 0
call fcn.004b6dc0
push 0x104
lea ecx, [esp + 0x249]
push 0
push ecx
mov byte [esp + 0x250], 0
call fcn.004b6dc0
add esp, 0x18
push 0x104
lea edx, [esp + 0x23c]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
je 0x440316
xor eax, eax
jmp 0x440230
mov cl, byte [esp + eax + 0x238]
mov byte [esp + eax + 0x340], cl
inc eax
test cl, cl
jne 0x440230
push 0x51a130
call fcn.00404690
add esp, 4
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x440252
lea edi, [esp + 0x238]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x440263
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [esp + 0x238]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call fcn.004ba189
push 0x51a114
call fcn.00404690
add esp, 8
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x440297
lea edi, [esp + 0x340]
sub eax, ecx
mov esi, ecx
dec edi
lea ebx, [ebx]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4402b0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x340]
push ecx
call fcn.004ba189
lea edx, [esp + 0x23c]
push edx
lea eax, [esp + 0x13c]
push eax
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x44030b
lea ecx, [esp + 0x340]
push ecx
lea edx, [esp + 0x138]
push edx
call fcn.004b9929
add esp, 8
test eax, eax
je 0x44036d
mov edi, dword [esp + 0x10]
mov esi, dword [esp + 0x850]
push 0x51a10c
call fcn.00404690
add esp, 4
push eax
mov eax, dword [esp + 0x34]
push eax
push edi
call fcn.00410130
test eax, eax
je 0x440354
push 0x51a0f8
call fcn.00404690
mov ecx, dword [esp + 0x34]
add esp, 4
push eax
push ecx
push edi
call fcn.00410130
test eax, eax
jne 0x44042b
lea edx, [esp + 0x14]
push edx
push ebx
call dword [0x548d30]
test eax, eax
jne 0x440120
jmp 0x440480
mov dword [ebp + 0x108], 2
mov dword [ebp], 0x77fd32bd
mov eax, dword [0x51a0e0]
mov dword [ebp + 4], eax
mov ecx, dword [0x51a0e4]
mov dword [ebp + 8], ecx
mov edx, dword [0x51a0e8]
mov dword [ebp + 0xc], edx
mov eax, dword [0x51a0ec]
mov dword [ebp + 0x10], eax
mov ecx, dword [0x51a0f0]
push 0x400
lea eax, [esp + 0x44c]
mov dword [ebp + 0x14], ecx
mov dx, word [0x51a0f4]
push eax
lea ecx, [ebp + 0x10c]
push 0x100
push ecx
mov word [ebp + 0x18], dx
call fcn.004baf9b
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x860]
jmp 0x44047d
mov dword [ebp + 0x108], 2
mov dword [ebp], 0x77fd32be
mov edx, dword [0x51a0e0]
mov dword [ebp + 4], edx
mov eax, dword [0x51a0e4]
mov dword [ebp + 8], eax
mov ecx, dword [0x51a0e8]
mov dword [ebp + 0xc], ecx
mov edx, dword [0x51a0ec]
mov dword [ebp + 0x10], edx
mov eax, dword [0x51a0f0]
mov dword [ebp + 0x14], eax
mov cx, word [0x51a0f4]
mov word [ebp + 0x18], cx
jmp 0x44045f
mov dword [ebp + 0x108], 2
mov dword [ebp], 0x77fd32bf
mov ecx, dword [0x51a0d0]
mov dword [ebp + 4], ecx
mov edx, dword [0x51a0d4]
mov dword [ebp + 8], edx
mov eax, dword [0x51a0d8]
mov dword [ebp + 0xc], eax
mov ecx, dword [0x51a0dc]
mov dword [ebp + 0x10], ecx
push 0x400
lea edx, [esp + 0x44c]
push edx
lea eax, [ebp + 0x10c]
push 0x100
push eax
call fcn.004baf9b
add esp, 0x10
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp], 0
jne 0x440617
push 1
push esi
call fcn.00488270
add esp, 8
mov dword [ebp], eax
test eax, eax
je 0x44051c
lea ecx, [esp + 0x448]
push ecx
mov ecx, dword [0x53c038]
push esi
call fcn.00408840
lea edx, [esp + 0x448]
push edx
mov dword [ebp + 0x108], 2
call fcn.00493840
push 0x1c
push 0x51a0b4
mov dword [ebp + 0x104], eax
lea eax, [ebp + 4]
push 0x100
push eax
call fcn.004bb3bf
lea eax, [esp + 0x45c]
add esp, 0x14
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4404f6
sub eax, edx
push eax
lea ecx, [esp + 0x44c]
push ecx
lea edx, [ebp + 0x10c]
push 0x100
push edx
call fcn.004bb3bf
add esp, 0x10
cmp dword [ebp], 0
jne 0x440617
push esi
push edi
call fcn.0043d7d0
mov ecx, dword [0x53bc7c]
add esp, 8
test ecx, ecx
je 0x440599
test eax, eax
je 0x440599
push eax
push edi
call ecx
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x440566
mov eax, dword [ebx]
add eax, 0x2710
mov ecx, 0x87
mov esi, ebx
mov edi, ebp
mov dword [ebp], eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x10]
jmp 0x44056d
mov dword [ebp], 0
mov esi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push ebx
push 0
call esi
push eax
call dword [sym.imp.KERNEL32.dll_HeapValidate]
push ebx
test eax, eax
je 0x440591
push 0
call esi
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x440599
call fcn.004b8a69
add esp, 4
mov eax, dword [ebp]
test eax, eax
je 0x440617
mov ecx, dword [ebp + 0x108]
test ecx, 0x800
jne 0x4405f5
mov esi, 0x51a0b0
test cl, cl
js 0x4405bc
mov esi, 0x50d147
push eax
lea ecx, [ebp + 0x10c]
push ecx
lea edx, [ebp + 4]
push edx
call fcn.004048a0
add esp, 4
push eax
mov eax, dword [esp + 0x85c]
push eax
push esi
push 0x51a08c
call fcn.00404690
add esp, 4
push eax
push 0x527e20
call fcn.00401350
add esp, 0x1c
push 0
push ebp
push edi
push 1
call fcn.0043bf20
add esp, 0x10
cmp al, 1
jne 0x440617
push 0x21c
push 0
push ebp
call fcn.004b6dc0
add esp, 0xc
test edi, edi
je 0x440622
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp]
neg eax
sbb eax, eax
neg eax
dec eax
mov ecx, dword [esp + 0x848]
pop ebx
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.004b6da3
add esp, 0x83c
ret