Function at 0x407560
Capabilities:
Get common file path

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44c211
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x8e8
mov eax, dword [0x46706c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x8ec], esi
xor eax, eax
mov dword [ebp - 0x8a0], 0
mov dword [ebp - 0x89c], 7
mov word [ebp - 0x8b0], ax
mov dword [ebp - 4], eax
mov dword [ebp - 0x8d0], eax
mov dword [ebp - 0x8cc], 7
mov word [ebp - 0x8e0], ax
mov byte [ebp - 4], 1
push 0x800
push eax
mov dword [ebp - 0x8f0], eax
mov dword [esi + 0xb9ed], eax
lea eax, [ebp - 0x898]
push eax
mov dword [ebp - 0x8f8], 0xffffffff
mov dword [ebp - 0x8f4], 0xffffffff
call fcn.0042d530
mov edi, dword [esi + 0x173bd]
lea eax, [ebp - 0x8e4]
add esp, 0xc
mov dword [ebp - 0x8e8], 0x400
mov dword [ebp - 0x8e4], 0
push eax
push 0x2001f
push 0
push str.SYSTEMSetup_
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x407671
mov eax, dword [edi]
test eax, eax
je 0x407662
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x8e4]
mov dword [edi], eax
mov dword [edi + 4], 0
mov ecx, dword [esi + 0x173bd]
lea eax, [ebp - 0x8e8]
push eax
lea eax, [ebp - 0x898]
push eax
push str.SystemPartition
call fcn.004116c0
lea eax, [ebp - 0x898]
push 0x400
push eax
call fcn.00437bdb
add esp, 8
test eax, eax
je 0x4076fa
lea ecx, [ebp - 0x898]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4076b0
sub ecx, edx
lea eax, [ebp - 0x898]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x8e0]
call fcn.00403c20
cmp dword [ebp - 0x8cc], 8
lea ecx, [ebp - 0x8f4]
push ecx
lea ecx, [ebp - 0x8f8]
lea eax, [ebp - 0x8e0]
cmovae eax, dword [ebp - 0x8e0]
push ecx
push eax
call fcn.00407b20
mov eax, dword [ebp - 0x8ec]
xor ecx, ecx
mov dword [ebp - 0x8e4], ecx
cmp dword [eax + 0x1d], ecx
jle 0x4079df
lea ecx, [eax + 0xb9f1]
lea edi, [eax + 0x21]
mov dword [ebp - 0x8f4], ecx
mov dword [ebp - 0x8e8], edi
nop word [eax + eax]
mov eax, dword [eax + 0x5d09]
cmp eax, dword [edi]
je 0x4079b8
push 0x80
lea eax, [ebp - 0x98]
push 0
push eax
call fcn.0042d530
mov esi, 7
mov dword [ebp - 0x8b8], 0
xor eax, eax
mov dword [ebp - 0x8b4], esi
add esp, 0xc
mov word [ebp - 0x8c8], ax
push 0x40
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 2
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
jne 0x4077a2
push eax
push 0x45cc3c
lea ecx, [ebp - 0x8c8]
call fcn.00403ae0
mov esi, dword [ebp - 0x8b4]
jmp 0x4077c3
mov ax, word [ebp - 0x98]
mov word [ebp - 0x8c8], ax
xor eax, eax
mov dword [ebp - 0x8b8], 1
mov word [ebp - 0x8c6], ax
push 0x45d61c
lea ecx, [ebp - 0x8c8]
call fcn.004044e0
test al, al
jne 0x40783e
push 0x45d620
lea ecx, [ebp - 0x8c8]
call fcn.004044e0
test al, al
jne 0x40783e
mov byte [ebp - 4], 1
cmp esi, 8
jb 0x407829
mov ecx, dword [ebp - 0x8c8]
lea esi, [esi*2 + 2]
mov eax, ecx
cmp esi, 0x1000
jb 0x40781f
mov ecx, dword [ecx - 4]
add esi, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407b13
push esi
push ecx
call fcn.004154b6
add esp, 8
mov eax, dword [ebp - 0x8f8]
cmp eax, 0xffffffff
je 0x40787c
cmp eax, dword [edi]
je 0x4079b8
jmp 0x40787c
mov byte [ebp - 4], 1
cmp esi, 8
jb 0x40787c
mov ecx, dword [ebp - 0x8c8]
lea esi, [esi*2 + 2]
mov eax, ecx
cmp esi, 0x1000
jb 0x407872
mov ecx, dword [ecx - 4]
add esi, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407b13
push esi
push ecx
call fcn.004154b6
add esp, 8
lea edx, [edi + 4]
lea ecx, [ebp - 0x8c8]
call fcn.0040af50
mov esi, eax
lea eax, [ebp - 0x8b0]
cmp eax, esi
je 0x4078c7
mov ecx, eax
call fcn.00403740
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x8b0], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x8a0], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x8b4]
cmp edx, 8
jb 0x407907
mov ecx, dword [ebp - 0x8c8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4078fd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407b13
push edx
push ecx
call fcn.004154b6
add esp, 8
mov esi, dword [ebp - 0x89c]
lea ecx, [ebp - 0x8b0]
mov edx, dword [ebp - 0x8a0]
cmp esi, 8
push 7
cmovae ecx, dword [ebp - 0x8b0]
push str.SAMSUNG
push ecx
call fcn.00404130
add esp, 0xc
cmp eax, 0xffffffff
je 0x407963
mov edx, dword [ebp - 0x8a0]
lea ecx, [ebp - 0x8b0]
cmp esi, 8
push 3
cmovae ecx, dword [ebp - 0x8b0]
push 0x45d0f0
push ecx
call fcn.00404130
add esp, 0xc
cmp eax, 0xffffffff
jne 0x40798e
mov edx, dword [ebp - 0x8a0]
lea ecx, [ebp - 0x8b0]
cmp esi, 8
push 0xb
cmovae ecx, dword [ebp - 0x8b0]
push str.SAMSUNG_980
push ecx
call fcn.00404130
add esp, 0xc
cmp eax, 0xffffffff
je 0x4079b8
mov edx, dword [ebp - 0x8f4]
mov esi, edi
inc dword [ebp - 0x8f0]
mov edi, edx
mov ecx, 0x129
add edx, 0x4a5
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x8f4], edx
movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x8e8]
mov eax, dword [ebp - 0x8ec]
add edi, 0x4a5
inc dword [ebp - 0x8e4]
mov ecx, dword [ebp - 0x8e4]
mov dword [ebp - 0x8e8], edi
cmp ecx, dword [eax + 0x1d]
jl 0x407730
mov ecx, dword [ebp - 0x8f0]
push ecx
push str._INF__CDiskManager::iGetTargetDisk__target_disk_count_:__d
mov dword [eax + 0xb9ed], ecx
call fcn.00410b80
mov eax, dword [ebp - 0x8ec]
xor edi, edi
add esp, 8
cmp dword [eax + 0xb9ed], edi
jle 0x407a40
lea esi, [eax + 0xb9f5]
nop
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x407a1a
mov eax, dword [esi]
push eax
push dword [esi - 4]
push str._INF__CDiskManager::iGetTargetDisk__target_disk_num_:__d__model_:__s
call fcn.00410b80
mov eax, dword [ebp - 0x8ec]
inc edi
add esp, 0xc
add esi, 0x4a5
cmp edi, dword [eax + 0xb9ed]
jl 0x407a10
call fcn.00403470
mov edx, dword [ebp - 0x8cc]
xor eax, eax
cmp dword [ebp - 0x8f0], eax
setne al
mov dword [ebp - 0x8e8], eax
cmp edx, 8
jb 0x407a96
mov ecx, dword [ebp - 0x8e0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x407a8c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407b13
push edx
push ecx
call fcn.004154b6
add esp, 8
mov edx, dword [ebp - 0x89c]
xor eax, eax
mov dword [ebp - 0x8d0], 0
mov dword [ebp - 0x8cc], 7
mov word [ebp - 0x8e0], ax
cmp edx, 8
jb 0x407aef
mov ecx, dword [ebp - 0x8b0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x407ae5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407b18
push edx
push ecx
call fcn.004154b6
add esp, 8
mov eax, dword [ebp - 0x8e8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00414edc
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004376e0
call fcn.004376e0
int3