Function at 0x401620
Capabilities:
Get common file path

Disassembly:
sub esp, 0x290
lea eax, [esp]
push esi
push edi
push pe_nt_image_headers32
push eax
mov edi, str.Inf_
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov ecx, 0xffffffff
lea edi, [esp + 8]
sub eax, eax
repne scasb al, byte es:[edi]
dec edi
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push str.MmInf.dat
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [esp + 0xc]
push eax
call fcn.00401970
add esp, 8
test eax, eax
jne 0x4016e6
cmp dword [0x40cb54], 0
jne 0x4016a8
push 0
push 0x40a09c
push str.Could_not_copy_MmInf.dat
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
pop edi
pop esi
add esp, 0x290
ret
mov edi, str.Could_not_copy_MmInf.dat_n
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov ecx, 0xffffffff
mov edi, 0x40bb50
sub eax, eax
repne scasb al, byte es:[edi]
dec edi
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor eax, eax
pop edi
pop esi
add esp, 0x290
ret
lea eax, [esp + 8]
push pe_nt_image_headers32
push eax
mov edi, 0x40a140
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov ecx, 0xffffffff
lea edi, [esp + 8]
sub eax, eax
repne scasb al, byte es:[edi]
dec edi
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push str.Elocal32.exe
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [esp + 0x9c], 0
lea eax, [esp + 0xc]
push eax
call fcn.00401970
add esp, 8
test eax, eax
jne 0x40175b
lea eax, [esp + 0x98]
push eax
push str.Elocal32.exe
call fcn.00401f10
add esp, 8
lea eax, [esp + 8]
push str.Mminst.dll
push eax
call fcn.00401970
add esp, 8
test eax, eax
jne 0x401786
lea eax, [esp + 0x98]
push eax
push str.Mminst.dll
call fcn.00401f10
add esp, 8
lea eax, [esp + 8]
push str.Mminst.dll
push eax
call fcn.00401970
add esp, 8
test eax, eax
jne 0x4017b1
lea eax, [esp + 0x98]
push eax
push str.Mminst.dll
call fcn.00401f10
add esp, 8
lea eax, [esp + 8]
push str.Monmouse.cpl
push eax
call fcn.00401970
add esp, 8
test eax, eax
jne 0x4017dc
lea eax, [esp + 0x98]
push eax
push str.Monmouse.cpl
call fcn.00401f10
add esp, 8
lea eax, [esp + 8]
push str.Monmouse.hlp
push eax
call fcn.00401970
add esp, 8
test eax, eax
jne 0x401807
lea eax, [esp + 0x98]
push eax
push str.Monmouse.hlp
call fcn.00401f10
add esp, 8
lea eax, [esp + 8]
push str.Monmouse.vxd
push eax
call fcn.00401970
add esp, 8
test eax, eax
jne 0x401832
lea eax, [esp + 0x98]
push eax
push str.Monmouse.vxd
call fcn.00401f10
add esp, 8
lea eax, [esp + 8]
push str.Rbutton.exe
push eax
call fcn.00401970
add esp, 8
test eax, eax
jne 0x40185d
lea eax, [esp + 0x98]
push eax
push str.Rbutton.exe
call fcn.00401f10
add esp, 8
lea eax, [esp + 8]
push 0x40a0d8
push eax
call fcn.00401970
add esp, 8
test eax, eax
jne 0x401888
lea eax, [esp + 0x98]
push eax
push 0x40a0d8
call fcn.00401f10
add esp, 8
cmp byte [esp + 0x98], 0
je 0x40195f
lea eax, [esp + 0x98]
push eax
call fcn.00401fb0
add esp, 4
test eax, eax
je 0x40195f
mov esi, str.Unrecoverable_error_creating_nWinInit.ini__exiting_Setup
lea edi, [esp + 0x98]
mov ecx, 0xe
rep movsd dword es:[edi], dword [esi]
cmp dword [0x40cb54], 0
jne 0x4018ec
lea eax, [esp + 0x98]
push 0
push 0x40a09c
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
pop edi
pop esi
add esp, 0x290
ret
lea edi, [esp + 0x98]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov ecx, 0xffffffff
mov edi, 0x40bb50
sub eax, eax
repne scasb al, byte es:[edi]
dec edi
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x40a038
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov ecx, 0xffffffff
mov edi, 0x40bb50
sub eax, eax
repne scasb al, byte es:[edi]
dec edi
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor eax, eax
pop edi
pop esi
add esp, 0x290
ret
mov eax, 1
pop edi
pop esi
add esp, 0x290
ret