Function at 0x43202c
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x214
cmp byte [ebp + 0xc], 0
push ebx
push esi
push edi
mov ebx, eax
jne 0x43206a
cmp dword [ebx + 8], 8
jne 0x43206a
mov eax, dword [ebx + 4]
mov eax, dword [eax + 0x1c]
call fcn.00412431
test eax, eax
je 0x43206a
mov eax, dword [ebx + 4]
mov eax, dword [eax + 0x1c]
mov byte [esp + 0x13], 1
call fcn.00412431
jmp 0x432071
mov byte [esp + 0x13], 0
xor eax, eax
mov ecx, eax
lea eax, [esp + 0x60]
call fcn.00411164
push 0x44
pop esi
push esi
xor edi, edi
lea eax, [esp + 0x8c]
push edi
push eax
call fcn.00451700
xor eax, eax
inc eax
add esp, 0xc
cmp dword [ebx + 8], 7
mov dword [esp + 0x88], esi
mov dword [esp + 0xb4], eax
jb 0x4320b5
mov eax, dword [ebx + 4]
mov eax, dword [eax + 0x18]
call fcn.00412431
mov word [esp + 0xb8], ax
mov eax, dword [ebx + 4]
mov esi, dword [eax]
call fcn.00412336
push eax
call fcn.0040f3a1
mov dword [esp + 0x18], eax
mov eax, dword [ebx + 4]
mov esi, dword [eax + 4]
pop ecx
call fcn.00412336
push eax
call fcn.0040f3a1
mov dword [esp + 0x1c], eax
mov eax, dword [ebx + 4]
mov esi, dword [eax + 8]
pop ecx
call fcn.00412336
push eax
call fcn.0040f3a1
mov dword [esp + 0x20], eax
mov eax, dword [ebx + 4]
mov esi, dword [eax + 0x10]
pop ecx
call fcn.00412336
push eax
call fcn.0040f3a1
cmp dword [ebx + 8], 6
pop ecx
mov dword [esp + 0x20], eax
jb 0x432132
mov eax, dword [ebx + 4]
mov esi, dword [eax + 0x14]
call fcn.00412336
push eax
call fcn.0040f3a1
pop ecx
mov dword [esp + 0x24], eax
jmp 0x43215e
mov esi, dword [sym.imp.KERNEL32.DLL_GetSystemDirectoryW]
push edi
push edi
call esi
mov edi, eax
xor ecx, ecx
push 2
pop edx
lea eax, [edi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0044f8e7
pop ecx
push edi
push eax
mov dword [esp + 0x2c], eax
call esi
mov eax, dword [ebx + 4]
mov edi, dword [eax]
mov esi, 0x46bf80
push esi
call fcn.004129d9
mov eax, dword [ebx + 4]
mov edi, dword [eax + 4]
push esi
call fcn.004129d9
mov eax, dword [ebx + 4]
mov edi, dword [eax + 8]
push esi
call fcn.004129d9
xor edi, edi
cmp byte [esp + 0x13], 0
je 0x43233b
lea esi, [esp + 0x2c]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], edi
mov dword [esp + 0x4c], edi
call fcn.00402bb5
test al, al
je 0x432397
lea esi, [esp + 0x38]
call fcn.004352d0
test al, al
je 0x432397
lea esi, [esp + 0x44]
call fcn.004352ff
test al, al
je 0x432397
lea esi, [esp + 0x2c]
call fcn.00402bb5
test al, al
mov eax, dword [esp + 0x34]
jne 0x4321f4
mov eax, 0x4353a3
lea ecx, [esp + 0x28]
push ecx
push edi
push 2
push dword [esp + 0x28]
push dword [esp + 0x28]
push dword [esp + 0x28]
call eax
cmp dword [esp + 0x28], edi
jne 0x432267
push edi
push 3
mov eax, dword [ebp + 8]
call fcn.0041c783
push edi
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
mov eax, dword [ebp + 8]
call fcn.0041c7b6
mov esi, dword [ebp + 0x10]
push edi
call fcn.00412914
cmp dword [esp + 0x44], edi
mov esi, dword [sym.imp.KERNEL32.DLL_FreeLibrary]
je 0x432246
push dword [esp + 0x44]
call esi
cmp dword [esp + 0x38], edi
je 0x432252
push dword [esp + 0x38]
call esi
cmp dword [esp + 0x2c], edi
je 0x4324d9
push dword [esp + 0x2c]
call esi
jmp 0x4324d9
lea esi, [esp + 0x38]
call fcn.004352d0
test al, al
mov eax, dword [esp + 0x40]
jne 0x43227d
mov eax, 0x406029
push dword [esp + 0x28]
call eax
lea esi, [esp + 0x60]
call fcn.00411259
cmp eax, 0xffffffff
mov dword [esp + 0xc4], eax
jne 0x43229d
mov byte [esp + 0x13], 0
lea esi, [esp + 0x60]
call fcn.00411315
cmp eax, 0xffffffff
mov dword [esp + 0xc8], eax
jne 0x4322b7
mov byte [esp + 0x13], 0
lea eax, [esp + 0x78]
push eax
lea ecx, [esp + 0x80]
lea eax, [esp + 0x64]
call fcn.0041159d
cmp eax, 0xffffffff
mov dword [esp + 0xc0], eax
jne 0x4322dd
mov byte [esp + 0x13], 0
cmp byte [esp + 0x13], 0
je 0x4322ef
or dword [esp + 0xb4], 0x100
lea esi, [esp + 0x44]
call fcn.004352ff
test al, al
mov eax, dword [esp + 0x4c]
jne 0x432305
mov eax, fcn.004296d7
call eax
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp dword [esp + 0x44], edi
mov esi, dword [sym.imp.KERNEL32.DLL_FreeLibrary]
je 0x432323
push dword [esp + 0x44]
call esi
cmp dword [esp + 0x38], edi
je 0x43232f
push dword [esp + 0x38]
call esi
cmp dword [esp + 0x2c], edi
je 0x43233b
push dword [esp + 0x2c]
call esi
lea eax, [esp + 0xd0]
call fcn.00401d17
mov eax, dword [ebx + 4]
mov eax, dword [eax + 0xc]
call fcn.00412431
mov esi, eax
lea eax, [esp + 0xd0]
push eax
call fcn.00401f6f
test al, al
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x8c]
push eax
push dword [esp + 0x2c]
push dword [esp + 0x2c]
push esi
push dword [esp + 0x30]
push dword [esp + 0x30]
je 0x43239f
mov eax, dword [esp + 0x30]
lea edi, [esp + 0xec]
call fcn.00402110
xor edi, edi
jmp 0x4323af
push edi
push 2
jmp 0x432213
push dword [esp + 0x30]
lea eax, [esp + 0xf0]
call fcn.00402537
push dword [esp + 0x14]
mov bl, al
call fcn.0045177a
cmp eax, edi
pop ecx
mov ecx, dword [esp + 0x14]
je 0x4323ca
mov byte [ecx], 0
inc ecx
dec eax
jne 0x4323c3
push dword [esp + 0x18]
call fcn.0045177a
cmp eax, edi
pop ecx
mov ecx, dword [esp + 0x18]
je 0x4323e3
mov byte [ecx], 0
inc ecx
dec eax
jne 0x4323dc
push dword [esp + 0x1c]
call fcn.0045177a
cmp eax, edi
pop ecx
mov ecx, dword [esp + 0x1c]
je 0x4323fc
mov byte [ecx], 0
inc ecx
dec eax
jne 0x4323f5
push dword [esp + 0x14]
call fcn.0044f951
pop ecx
push dword [esp + 0x18]
call fcn.0044f951
pop ecx
push dword [esp + 0x1c]
call fcn.0044f951
pop ecx
push dword [esp + 0x20]
call fcn.0044f951
pop ecx
push dword [esp + 0x24]
call fcn.0044f951
test bl, bl
pop ecx
jne 0x432458
mov eax, dword [ebp + 8]
push edi
push 1
call fcn.0041c783
push edi
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
mov eax, dword [ebp + 8]
call fcn.0041c7b6
mov esi, dword [ebp + 0x10]
push edi
call fcn.00412914
jmp 0x4324cd
push dword [esp + 0x54]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp byte [esp + 0x13], 0
je 0x43248f
lea edi, [esp + 0x60]
call fcn.0041147f
mov eax, dword [esp + 0x58]
mov dword [esp + 0x64], eax
call fcn.0041149a
mov esi, dword [ebp + 8]
add esi, 0x57c
mov eax, edi
call fcn.0043532e
cmp byte [ebp + 0xc], 0
je 0x4324a4
mov eax, dword [esp + 0x50]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x554], eax
jmp 0x4324cd
mov eax, dword [esp + 0x58]
fild dword [esp + 0x58]
test eax, eax
jge 0x4324b6
fadd qword [0x4726a8]
mov esi, dword [ebp + 0x10]
push ecx
push ecx
fstp qword [esp]
call fcn.004129c0
push dword [esp + 0x50]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
lea eax, [esp + 0xd0]
call fcn.00401e18
lea eax, [esp + 0x60]
call fcn.0041120d
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0xc