Function at 0x40d262
Capabilities:
Contain obfuscated stackstrings
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x328
mov al, byte [0x446484]
push ebx
push esi
push edi
push 0x40
mov byte [ebp - 0x128], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x127]
xor ebx, ebx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
lea edi, [ebp - 0x13]
stosd dword es:[edi], eax
stosb byte es:[edi], al
xor eax, eax
lea edi, [ebp - 0xb]
stosd dword es:[edi], eax
stosb byte es:[edi], al
xor eax, eax
lea edi, [ebp - 0x1b]
stosd dword es:[edi], eax
lea eax, [ebp - 0x128]
push 0x105
push eax
mov byte [ebp - 0x14], 0x73
mov byte [ebp - 0x13], 0x73
mov byte [ebp - 0x12], 0x70
mov byte [ebp - 0x11], 0x72
mov byte [ebp - 0x10], 0x73
mov byte [ebp - 0xf], bl
mov byte [ebp - 0xc], 0x2e
mov byte [ebp - 0xb], 0x64
mov byte [ebp - 0xa], 0x6c
mov byte [ebp - 9], 0x6c
mov byte [ebp - 8], bl
mov byte [ebp - 7], bl
mov byte [ebp - 0x1c], 0x2e
mov byte [ebp - 0x1b], 0x74
mov byte [ebp - 0x1a], 0x67
mov byte [ebp - 0x19], 0x7a
mov byte [ebp - 0x18], bl
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov esi, 0x44767c
push 0x104
call fcn.0040330c
mov dword [esi], eax
add esi, 4
cmp esi, 0x447684
pop ecx
mov byte [eax], bl
jl 0x40d2f6
lea eax, [ebp - 0xc]
mov edi, 0x4278a4
push eax
lea eax, [ebp - 0x128]
push dword [ebp + 8]
mov esi, str._s_s_s_s
push edi
push eax
push esi
push dword [0x44767c]
call fcn.0040421a
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x128]
push dword [ebp + 0xc]
push edi
push eax
push esi
push dword [0x447680]
call fcn.0040421a
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x128]
push edi
push eax
lea eax, [ebp - 0x228]
push esi
push eax
call fcn.0040421a
add esp, 0x48
lea eax, [ebp - 0x228]
push ebx
push eax
call fcn.00411560
pop ecx
cmp eax, 0xffffffff
pop ecx
jne 0x40d4ac
lea eax, [ebp - 4]
push eax
push ebx
push ebx
push 0x44767c
push 1
push ebx
push ebx
push 1
push 1
call fcn.0040fba4
add esp, 0x24
test eax, eax
je 0x40d3b1
mov ebx, 0x400
jmp 0x40d4ac
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x128]
push edi
push eax
lea eax, [ebp - 0x328]
push esi
push eax
call fcn.0040421a
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0041123f
add esp, 0x24
cmp eax, 0x32d
jne 0x40d40d
lea eax, [ebp - 0x228]
push 0x41f088
push eax
call fcn.00418354
pop ecx
cmp eax, ebx
pop ecx
je 0x40d463
push eax
call fcn.004076c8
pop ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x20]
push ebx
push eax
call fcn.00410076
add esp, 0x20
test eax, eax
jne 0x40d463
push ebx
lea eax, [ebp - 0x24]
push 3
push eax
lea eax, [ebp - 0x228]
push 1
push eax
push dword [ebp - 0x20]
call fcn.004101f0
add esp, 0x18
test eax, eax
je 0x40d473
lea eax, [ebp - 0x20]
push eax
call fcn.004101c6
call fcn.0040d4b8
lea eax, [ebp - 4]
push eax
call fcn.0040fc1c
pop ecx
pop ecx
mov eax, 0x400
jmp 0x40d4b3
call fcn.0040d4b8
lea eax, [ebp - 4]
push eax
call fcn.0040fc1c
jmp 0x40d45b
push ebx
lea eax, [ebp - 0x24]
push 3
push eax
call fcn.004103e2
lea eax, [ebp - 0x20]
push eax
call fcn.004101c6
lea eax, [ebp - 0x128]
push ebx
push eax
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0040fc82
lea eax, [ebp - 4]
push eax
call fcn.0040fc1c
add esp, 0x24
call fcn.0040d4b8
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret