Function at 0x43e710
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4caea1
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x50b3e0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0xc]
push 0x104
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x60], 0
call fcn.0048c62e
mov ebx, eax
push 0x104
push 0
push ebx
lea esi, [ebx + 0x104]
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x78], esi
call fcn.0048ee50
add esp, 0x10
mov dword [ebp - 0x7c], esi
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x104
push ebx
mov dword [ebp - 4], 0
call edi
mov esi, eax
cmp esi, 0x104
jbe 0x43e7b9
lea eax, [ebp - 0x59]
mov byte [ebp - 0x59], 0
push eax
push esi
lea ecx, [ebp - 0x80]
call fcn.0043cfb0
mov ebx, dword [ebp - 0x80]
push esi
push ebx
call edi
mov esi, dword [ebp - 0x78]
mov dword [ebp - 0x68], esi
mov edi, ebx
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x43e7d0
sub edi, ecx
cmp edi, 0xf
ja 0x43e7f3
push edi
lea eax, [ebp - 0x28]
mov dword [ebp - 0x18], edi
push ebx
push eax
call fcn.0048e8d0
mov byte [ebp + edi - 0x28], 0
jmp 0x43e843
cmp edi, 0x7fffffff
ja 0x43ea68
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x43e812
mov eax, 0x7fffffff
jmp 0x43e81c
mov ecx, 0x16
cmp eax, ecx
cmovb eax, ecx
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x28]
inc eax
push eax
call fcn.0040c8d0
push edi
mov esi, eax
mov dword [ebp - 0x18], edi
mov eax, dword [ebp - 0x60]
push ebx
push esi
mov dword [ebp - 0x14], eax
call fcn.0048e350
mov byte [esi + edi], 0
mov dword [ebp - 0x28], esi
add esp, 0xc
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x40]
inc eax
mov byte [ebp - 4], 2
push eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov dword [ebp - 0x60], 1
call fcn.0041a380
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x40]
push eax
call fcn.00415640
push 1
push 0x4dc674
lea ecx, [ebp - 0x40]
call fcn.00415640
push dword [ebp - 0x64]
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0040cd10
add esp, 0xc
push 4
push str..dll
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.00415640
mov edx, dword [eax + 0xc]
mov ecx, dword [eax + 8]
mov esi, dword [eax]
mov edi, dword [eax + 4]
mov dword [ebp - 0x60], edx
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x6c], edx
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x70], edx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x64], ecx
cmp edx, 0x10
jb 0x43e920
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e913
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43ea6d
push edx
push ecx
call fcn.0048c65e
mov ecx, dword [ebp - 0x64]
add esp, 8
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x14], eax
cmp edx, 0x10
jb 0x43e96f
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e965
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43ea6d
push edx
push ecx
call fcn.0048c65e
add esp, 8
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x43e9b5
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43e9ab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43ea6d
push edx
push ecx
call fcn.0048c65e
add esp, 8
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
jne 0x43e9cf
xor esi, esi
jmp 0x43e9db
push dword [ebp - 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43ea0b
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43ea01
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43ea72
push edx
push ecx
call fcn.0048c65e
add esp, 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
test ebx, ebx
je 0x43ea4a
mov ecx, dword [ebp - 0x68]
mov eax, ebx
sub ecx, ebx
cmp ecx, 0x1000
jb 0x43ea40
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43ea72
push ecx
push ebx
call fcn.0048c65e
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0048c66c
mov esp, ebp
pop ebp
ret
call fcn.00402cf0
call fcn.00497fa9
call fcn.00497fa9
int3