Function at 0x43f030
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d1ef1
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x5153e8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0xc]
push 0x104
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x60], 0
call fcn.004920ee
mov ebx, eax
push 0x104
push 0
push ebx
lea esi, [ebx + 0x104]
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x78], esi
call fcn.00494910
add esp, 0x10
mov dword [ebp - 0x7c], esi
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x104
push ebx
mov dword [ebp - 4], 0
call edi
mov esi, eax
cmp esi, 0x104
jbe 0x43f0d9
lea eax, [ebp - 0x59]
mov byte [ebp - 0x59], 0
push eax
push esi
lea ecx, [ebp - 0x80]
call fcn.0043d8d0
mov ebx, dword [ebp - 0x80]
push esi
push ebx
call edi
mov esi, dword [ebp - 0x78]
mov dword [ebp - 0x68], esi
mov edi, ebx
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x43f0f0
sub edi, ecx
cmp edi, 0xf
ja 0x43f113
push edi
lea eax, [ebp - 0x28]
mov dword [ebp - 0x18], edi
push ebx
push eax
call fcn.00494390
mov byte [ebp + edi - 0x28], 0
jmp 0x43f163
cmp edi, 0x7fffffff
ja 0x43f388
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x43f132
mov eax, 0x7fffffff
jmp 0x43f13c
mov ecx, 0x16
cmp eax, ecx
cmovb eax, ecx
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x28]
inc eax
push eax
call fcn.0040ca20
push edi
mov esi, eax
mov dword [ebp - 0x18], edi
mov eax, dword [ebp - 0x60]
push ebx
push esi
mov dword [ebp - 0x14], eax
call fcn.00493e10
mov byte [esi + edi], 0
mov dword [ebp - 0x28], esi
add esp, 0xc
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x40]
inc eax
mov byte [ebp - 4], 2
push eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov dword [ebp - 0x60], 1
call fcn.0041a880
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x40]
push eax
call fcn.004159a0
push 1
push 0x4e3954
lea ecx, [ebp - 0x40]
call fcn.004159a0
push dword [ebp - 0x64]
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0040ce60
add esp, 0xc
push 4
push str..dll
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.004159a0
mov edx, dword [eax + 0xc]
mov ecx, dword [eax + 8]
mov esi, dword [eax]
mov edi, dword [eax + 4]
mov dword [ebp - 0x60], edx
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x6c], edx
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x70], edx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x64], ecx
cmp edx, 0x10
jb 0x43f240
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43f233
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f38d
push edx
push ecx
call fcn.0049211e
mov ecx, dword [ebp - 0x64]
add esp, 8
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x14], eax
cmp edx, 0x10
jb 0x43f28f
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43f285
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f38d
push edx
push ecx
call fcn.0049211e
add esp, 8
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x43f2d5
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43f2cb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f38d
push edx
push ecx
call fcn.0049211e
add esp, 8
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
jne 0x43f2ef
xor esi, esi
jmp 0x43f2fb
push dword [ebp - 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43f32b
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43f321
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f392
push edx
push ecx
call fcn.0049211e
add esp, 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
test ebx, ebx
je 0x43f36a
mov ecx, dword [ebp - 0x68]
mov eax, ebx
sub ecx, ebx
cmp ecx, 0x1000
jb 0x43f360
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43f392
push ecx
push ebx
call fcn.0049211e
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049212c
mov esp, ebp
pop ebp
ret
call fcn.00402d90
call fcn.0049da69
call fcn.0049da69
int3