Function at 0x40bced
Capabilities:
Get common file path

Disassembly:
push 0x21c
mov eax, 0x430e97
call fcn.00430bca
mov edi, ecx
mov dword [ebp - 0x224], edi
xor eax, eax
mov dword [ebp - 0x228], edi
mov dword [edi], eax
mov dword [ebp - 4], eax
mov dword [edi + 4], eax
push 0x20a
push eax
xor ebx, ebx
lea eax, [ebp - 0x21c]
inc ebx
push eax
mov byte [ebp - 4], bl
call sub.msvcrt.dll_memset
add esp, 0xc
push 0x405e84
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
mov dword [ebp - 0x224], esi
test esi, esi
je 0x40bf69
push 0x405ea0
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x220], eax
test eax, eax
je 0x40be98
push 0x104
lea ecx, [ebp - 0x21c]
push ecx
mov ecx, eax
call dword [0x437364]
call dword [ebp - 0x220]
push dword [ebp - 0x224]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test esi, esi
je 0x40bdf8
lea eax, [ebp - 0x21c]
mov ecx, edi
push eax
call fcn.0040bcb0
push 0x405ebc
lea ecx, [ebp - 0x220]
call fcn.0040c185
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 2
push eax
mov ecx, edi
call fcn.0040c2af
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], bl
call fcn.0040a461
lea eax, [ebp - 0x21c]
lea esi, [edi + 4]
push eax
mov ecx, esi
call fcn.0040bcb0
push 0x405edc
lea ecx, [ebp - 0x220]
call fcn.0040c185
mov byte [ebp - 4], 3
jmp 0x40bf18
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x78
jne 0x40be8b
push 0x104
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x40be85
lea eax, [ebp - 0x21c]
mov ecx, edi
push eax
call fcn.0040bcb0
push 0x405ef8
lea ecx, [ebp - 0x220]
call fcn.0040c185
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 4
push eax
mov ecx, edi
call fcn.0040c2af
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], bl
call fcn.0040a461
lea eax, [ebp - 0x21c]
lea esi, [edi + 4]
push eax
mov ecx, esi
call fcn.0040bcb0
push 0x405f2c
lea ecx, [ebp - 0x220]
call fcn.0040c185
mov byte [ebp - 4], 5
jmp 0x40bf18
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x40bf7b
jmp 0x40bf73
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0x104
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x40be85
lea eax, [ebp - 0x21c]
mov ecx, edi
push eax
call fcn.0040bcb0
push 0x405ef8
lea ecx, [ebp - 0x220]
call fcn.0040c185
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 6
push eax
mov ecx, edi
call fcn.0040c2af
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], bl
call fcn.0040a461
lea eax, [ebp - 0x21c]
lea esi, [edi + 4]
push eax
mov ecx, esi
call fcn.0040bcb0
push 0x405f2c
lea ecx, [ebp - 0x220]
call fcn.0040c185
mov byte [ebp - 4], 7
lea eax, [ebp - 0x220]
mov ecx, esi
push eax
call fcn.0040c2af
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], bl
call fcn.0040a461
mov ecx, dword [edi]
test ecx, ecx
je 0x40bf43
xor eax, eax
cmp dword [ecx], eax
sete al
jmp 0x40bf45
mov eax, ebx
test al, al
jne 0x40bf62
mov eax, dword [esi]
test eax, eax
je 0x40bf56
xor ebx, ebx
cmp dword [eax], ebx
sete bl
test bl, bl
jne 0x40bf62
mov eax, edi
call fcn.00430b79
ret
mov ecx, 0x8007000e
jmp 0x40bf7d
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x40bf7b
movzx eax, ax
or eax, 0x80070000
mov ecx, eax
call fcn.0041b8a1
int3