Function at 0x41f8a0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov dword [ebp - 0x58], 0xe1c1d
mov dword [ebp - 0x40], 0x56b19
mov dword [ebp - 0x10], 0x5d01a
mov dword [ebp - 0x28], 0x890e2
mov dword [ebp - 0x48], 0x42ea7
mov dword [ebp - 0x60], 0xad50f
mov dword [ebp - 8], 0xbeadd
mov dword [ebp - 0x30], 0xc5e8c
mov dword [ebp - 0x50], 0x37fc3
mov dword [ebp - 0x5c], 0x2a29
mov dword [ebp - 0x54], 0x7c7d3
mov dword [ebp - 0x20], 0x854a3
mov dword [ebp - 0x34], 0x61dfe
mov dword [ebp - 4], 0x6e05e
mov dword [ebp - 0x44], 0xb7912
mov dword [ebp - 0x38], 0xada58
mov dword [ebp - 0x68], 0xefb74
mov dword [ebp - 0x14], 0x3ad
mov dword [ebp - 0x3c], 0x2d3a9
mov dword [ebp - 0x1c], 0x4287e
mov dword [ebp - 0x4c], 0xc1ae2
mov dword [ebp - 0x2c], 0x432b3
mov dword [ebp - 0x18], 0x9c684
mov dword [ebp - 0x24], 0x1528a
mov dword [ebp - 0xc], 0x5b474
cmp dword [ebp - 0x30], 0xc5e8d
jge 0x41faa7
mov eax, dword [ebp - 0x1c]
or eax, 0x6ab37
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x3c]
add ecx, 0xd1cea
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x20]
and edx, dword [ebp + 0x18]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 4]
and eax, 0x30139
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x10]
and ecx, 0xc204
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x24], 0xbc9e3
jge 0x41f9fe
mov edx, dword [ebp + 0xc]
and edx, dword [ebp - 0x2c]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x28]
and eax, 0x6c571
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x24]
and ecx, dword [ebp + 0x20]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x44]
xor edx, 0x71422
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x40]
and eax, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp + 0x1c]
and edx, 0x5b62f
mov dword [ebp + 0x1c], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x3c]
add ecx, 0x7184f
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x14]
xor eax, dword [ebp + 0x18]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
add ecx, 0xefa7b
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x44]
or edx, dword [ebp - 0x10]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x2c]
add eax, 0x3a113
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x48], 0xa338e
jne 0x41faa2
mov ecx, dword [ebp - 0x50]
xor ecx, dword [ebp + 0x1c]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x9e8b1
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 4]
or eax, dword [ebp - 0x48]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 8]
xor edx, 0x1e123
mov dword [ebp - 8], edx
cmp dword [ebp + 0x18], 0xf1288
jne 0x41faa2
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp + 0x20]
sub ecx, dword [ebp - 0x50]
mov dword [ebp + 0x20], ecx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov edx, dword [ebp - 0x50]
sub edx, 0xec3eb
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
jmp 0x41f955
cmp dword [ebp - 0x4c], 0xc1ae3
jge 0x41fbb6
mov ecx, dword [ebp + 8]
or ecx, dword [ebp - 0x48]
mov dword [ebp + 8], ecx
mov edx, dword [ebp - 0x18]
xor edx, 0x8278f
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 8]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp + 0x18]
or ecx, dword [ebp - 0x4c]
mov dword [ebp + 0x18], ecx
mov edx, dword [ebp + 0xc]
add edx, 0xa1ed5
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0xc]
or eax, dword [ebp - 0x24]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x60]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 8], 0x7af08
jne 0x41fb35
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, dword [ebp - 0x10]
xor edx, dword [ebp - 0x30]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp + 0xc]
xor eax, dword [ebp - 8]
mov dword [ebp + 0xc], eax
mov ecx, dword [ebp - 0x14]
or ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp + 0x1c]
add edx, dword [ebp + 0x10]
mov dword [ebp + 0x1c], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x4c]
add ecx, 1
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp + 8]
and edx, dword [ebp - 0x10]
mov dword [ebp + 8], edx
mov eax, dword [ebp - 8]
sub eax, 0x245d8
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
and edx, dword [ebp - 0x14]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp + 8]
xor eax, 0xbfdf2
mov dword [ebp + 8], eax
cmp dword [ebp + 0x1c], 0xc957e
jne 0x41fbb1
mov ecx, dword [ebp + 0x20]
and ecx, 0x30df6
mov dword [ebp + 0x20], ecx
mov edx, dword [ebp - 0x10]
xor edx, dword [ebp - 0x3c]
mov dword [ebp - 0x10], edx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
mov eax, dword [ebp - 0x5c]
xor eax, dword [ebp - 0x54]
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x48]
and ecx, 0xdbc23
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x14]
sub edx, 1
mov dword [ebp - 0x14], edx
jmp 0x41faa7
mov dword [ebp - 0x64], 0
jmp 0x41fbc8
mov eax, dword [ebp - 0x64]
add eax, 1
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp + 0x1c]
sub ecx, 0x19601
cmp dword [ebp - 0x64], ecx
jge 0x41fc63
mov edx, dword [ebp - 0x48]
sub edx, dword [ebp - 8]
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x34]
xor eax, 0xcdcd1
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x28]
add ecx, 0xcb663
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x38]
or edx, 0x3fd0f
mov dword [ebp - 0x38], edx
mov eax, dword [ebp + 0x18]
add eax, dword [ebp - 0x54]
mov dword [ebp + 0x18], eax
cmp dword [ebp - 0x58], 0x6909c
jne 0x41fc5e
mov ecx, dword [ebp - 8]
sub ecx, 0x5173a
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x24]
and edx, 0x50952
mov dword [ebp - 0x24], edx
mov eax, dword [ebp + 0x10]
and eax, dword [ebp - 0x20]
mov dword [ebp + 0x10], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x64992
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp + 0xc]
or edx, dword [ebp - 0x1c]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x40]
add eax, 1
mov dword [ebp - 0x40], eax
call dword [sym.imp.USER32.dll_FrameRect]
nop
jmp 0x41fbbf
cmp dword [ebp - 0x1c], 0x29403
jge 0x41fd2e
mov ecx, dword [ebp - 0x34]
sub ecx, 0x1371d
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x44]
add edx, dword [ebp - 0x54]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x18]
add eax, 0x4bee5
mov dword [ebp - 0x18], eax
cmp dword [ebp - 8], 0xe43ff
je 0x41fcd1
mov ecx, dword [ebp - 0x28]
add ecx, 0xa973e
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x38]
and edx, 0x19035
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x14]
and eax, 0xeebb
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x34]
or ecx, 0x4e762
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x3c]
and edx, dword [ebp - 0x38]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp + 0x18]
add ecx, 0xd70d9
mov dword [ebp + 0x18], ecx
mov edx, dword [ebp + 8]
or edx, 0xc4b5b
mov dword [ebp + 8], edx
mov eax, dword [ebp - 0x2c]
add eax, 0x179f1
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0xc]
or ecx, 0x63224
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x40]
and edx, dword [ebp - 0x40]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp + 0x14]
add eax, 0x372d4
mov dword [ebp + 0x14], eax
mov ecx, dword [ebp + 0x20]
add ecx, 0xe630a
mov dword [ebp + 0x20], ecx
jmp 0x41fc63
cmp dword [ebp - 0x4c], 0xc1ae4
jge 0x41fecb
mov edx, dword [ebp - 0x5c]
or edx, dword [ebp - 0x10]
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0x28]
sub eax, 0xf6f5
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 8]
and ecx, dword [ebp + 0x14]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x24]
or edx, 0xa23c0
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x7143
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x30]
and ecx, 0x1c54
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x18]
and edx, 0x86ec6
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0xc]
xor ecx, 0x1a534
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, 0x53c59
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x60]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x34], 0x2f3e0
je 0x41fec6
mov ecx, dword [ebp - 0x54]
sub ecx, 0x8c0f
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x10]
or edx, dword [ebp + 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x2c]
xor eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp + 8]
add ecx, 0xb1693
mov dword [ebp + 8], ecx
cmp dword [ebp - 0x24], 0xb1769
jne 0x41fec6
mov edx, dword [ebp - 0x30]
and edx, 0x4bf0c
mov dword [ebp - 0x30], edx
mov eax, dword [ebp + 0x10]
and eax, 0x770df
mov dword [ebp + 0x10], eax
cmp dword [ebp - 0x2c], 0x6187
jle 0x41fec6
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x20]
or edx, 0x75850
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x68]
or eax, 0x44aa9
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x559b6
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp + 0xc]
and edx, dword [ebp + 0x10]
mov dword [ebp + 0xc], edx
cmp dword [ebp - 0x34], 0xad408
je 0x41fec6
mov eax, dword [ebp - 0x60]
and eax, 0x81b91
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x20]
or ecx, dword [ebp - 0x18]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x18]
and edx, 0x6a0ec
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x24], 0xf3a23
jle 0x41fec6
mov eax, dword [ebp - 4]
xor eax, 0x2bc8c
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0xe6039
mov dword [ebp - 0x20], ecx
call dword [sym.imp.KERNEL32.dll_TlsFree]
mov edx, dword [ebp + 0x1c]
add edx, dword [ebp - 0x24]
mov dword [ebp + 0x1c], edx
mov eax, dword [ebp - 0x58]
add eax, 0xc1427
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x34]
xor ecx, 0xbc2f4
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 4]
and edx, dword [ebp - 0x3c]
mov dword [ebp - 4], edx
jmp 0x41fd2e
mov esp, ebp
pop ebp
ret