Function at 0x427410
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5bdb4e
mov eax, dword fs:[0]
push eax
sub esp, 0x240
mov eax, dword [0x634274]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 4], 2
call fcn.0046068d
test al, al
je 0x42746a
cmp dword [ebp + 0x2c], esp
mov fs, ecx
hlt
call fcn.0046023d
test al, al
je 0x42748c
lodsb al, byte [esi]
cmp al, 0xd2
mov al, 0xc4
pop edx
jnp 0x427477
les ebx, [edx + 0x7b]
cld
lahf
test al, 0xca
cwde
mov edi, 0xb6f30737
nop
inc edi
movsb byte es:[edi], byte [esi]
jl 0x4274f5
das
adc al, ch
iretd
call fcn.00427060
mov ecx, eax
mov edx, dword [eax]
mov eax, dword [edx + 0x44]
call eax
test al, al
je 0x427710
call fcn.004606d2
test al, al
je 0x4274c6
insb byte es:[edi], dx
in eax, 0xd5
adc eax, 0xba913045
push cs
pop ss
int 0xb4
aam 0xf
ljmp 0xf493
call fcn.004604aa
test al, al
je 0x4274e0
mov dword [ecx - 0x43], esi
cld
jnp 0x427485
fldcw word [ebx]
sbb eax, 0x955f564f
push 0xbce8fd61
xchg edx, eax
add eax, dword [eax]
call fcn.004607a1
test al, al
je 0x4274f9
jmp 0x1c3679b6
sub eax, 0x6845bbee
or byte [edx], al
add byte [eax], al
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00486960
add esp, 0xc
lea eax, [ebp - 0x218]
push 0
push 0x10
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x427710
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x248]
call fcn.004023b0
push 1
push 0x625fd4
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 3
call fcn.00404190
push 0xffffffffffffffff
push 0
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x248]
call fcn.004042c0
push 4
push 0x5c8470
lea ecx, [ebp - 0x248]
call fcn.00404190
call fcn.004604ef
test al, al
je 0x427595
std
invalid
ljmp 0x2b4:0x2c59ddc5
call fcn.00460465
test al, al
je 0x4275bc
adc esi, dword [eax - 0x7c79acd1]
scasd eax, dword es:[edi]
cmp eax, 0xd0f4bda3
mov ch, byte [edi]
sbb dword [esi], eax
cdq
adc eax, 0xa3f8234c
rcl dword [edx + 0x46]
movsd dword es:[edi], dword [esi]
cmpsd dword [esi], dword es:[edi]
outsb dx, byte [esi]
test dword [esi + 0x39156e8], 0x74c08400
and byte [edx + ebp - 0x78], dh
dec esp
lodsb al, byte fs:[esi]
call fcn.00460717
test al, al
je 0x4275e5
je 0x4275f1
mov byte [esp - 0x54], cl
pop ds
add al, 0x8f
loope 0x42755d
invalid
call fcn.00409250
mov ecx, eax
call fcn.004617b1
push eax
lea ecx, [ebp - 0x230]
call fcn.004023b0
push 0xc
push str.SWConfig.exe
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 4
call fcn.00404190
call fcn.004607a1
test al, al
je 0x427639
out dx, al
push es
mov bl, 0xe9
mov fs, word [edx + esi*2 + 0x4e2a5248]
pop ecx
mov ebx, 0x336d0805
arpl word [eax + 0x41d49eb5], si
jmp 0x3ddfeca3
call fcn.00460579
test al, al
je 0x42765e
sbb byte [ebx], ch
nop
dec byte [esi - 0x7e18657]
bound eax, qword [edx + 0x39]
in eax, 0xb9
pushal
aaa
jae 0x42769f
ret 0xa237
cmp dword [ebp + 0x34], 8
lea esi, [ebp + 0x20]
lea edx, [ebp + 0x38]
cmovae esi, dword [ebp + 0x20]
lea ecx, [ebp - 0x230]
cmp dword [ebp + 0x4c], 8
lea eax, [ebp - 0x248]
push esi
cmovae edx, dword [ebp + 0x38]
cmp dword [ebp - 0x21c], 8
push 0
cmovae ecx, dword [ebp - 0x230]
cmp dword [ebp - 0x234], 8
push 0
cmovae eax, dword [ebp - 0x248]
push 1
push edx
push 0
push ecx
mov ecx, dword [ebp - 0x24c]
push eax
call fcn.004277a0
mov esi, eax
mov eax, dword [ebp - 0x21c]
cmp eax, 8
jb 0x4276d3
invalid
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402610
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x220], 0
cmp eax, 8
jb 0x427712
inc eax
lea ecx, [ebp - 0x248]
push eax
push dword [ebp - 0x248]
call fcn.00402610
jmp 0x427712
xor esi, esi
mov eax, dword [ebp + 0x1c]
cmp eax, 8
jb 0x427727
inc eax
lea ecx, [ebp + 8]
push eax
push dword [ebp + 8]
call fcn.00402610
xor eax, eax
mov dword [ebp + 0x1c], 7
mov word [ebp + 8], ax
mov eax, dword [ebp + 0x34]
mov dword [ebp + 0x18], 0
cmp eax, 8
jb 0x427750
inc eax
lea ecx, [ebp + 0x20]
push eax
push dword [ebp + 0x20]
call fcn.00402610
mov ecx, dword [ebp + 0x4c]
xor eax, eax
mov dword [ebp + 0x34], 7
mov dword [ebp + 0x30], 0
mov word [ebp + 0x20], ax
cmp ecx, 8
jb 0x427779
inc ecx
push ecx
push dword [ebp + 0x38]
lea ecx, [ebp + 0x38]
call fcn.00402610
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00455afe
mov esp, ebp
pop ebp
ret 0x48