Function at 0x435d30
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b82b3
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x4f9004]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0xc]
push 0x104
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x60], 0
call fcn.00405960
mov ebx, eax
push 0x104
push 0
push ebx
lea esi, [ebx + 0x104]
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x78], esi
call fcn.00402780
add esp, 0x10
mov dword [ebp - 0x7c], esi
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x104
push ebx
mov dword [ebp - 4], 0
call edi
mov esi, eax
cmp esi, 0x104
jbe 0x435dd9
lea eax, [ebp - 0x59]
mov byte [ebp - 0x59], 0
push eax
push esi
lea ecx, [ebp - 0x80]
call fcn.0043452f
mov ebx, dword [ebp - 0x80]
push esi
push ebx
call edi
mov esi, dword [ebp - 0x78]
mov dword [ebp - 0x68], esi
mov edi, ebx
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x435df0
sub edi, ecx
cmp edi, 0xf
ja 0x435e13
push edi
lea eax, [ebp - 0x28]
mov dword [ebp - 0x18], edi
push ebx
push eax
call fcn.00405020
mov byte [ebp + edi - 0x28], 0
jmp 0x435e63
cmp edi, 0x7fffffff
ja 0x436088
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x435e32
mov eax, 0x7fffffff
jmp 0x435e3c
mov ecx, 0x16
cmp eax, ecx
cmovb eax, ecx
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x28]
inc eax
push eax
call fcn.0040fc9b
push edi
mov esi, eax
mov dword [ebp - 0x18], edi
mov eax, dword [ebp - 0x60]
push ebx
push esi
mov dword [ebp - 0x14], eax
call fcn.00403170
mov byte [esi + edi], 0
mov dword [ebp - 0x28], esi
add esp, 0xc
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x40]
inc eax
mov byte [ebp - 4], 2
push eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov dword [ebp - 0x60], 1
call fcn.00435bd6
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x40]
push eax
call fcn.0043496e
push 1
push 0x4d0d6c
lea ecx, [ebp - 0x40]
call fcn.0043496e
push dword [ebp - 0x64]
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.004344c3
add esp, 0xc
push 4
push 0x4d0d64
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.0043496e
mov edx, dword [eax + 0xc]
mov ecx, dword [eax + 8]
mov esi, dword [eax]
mov edi, dword [eax + 4]
mov dword [ebp - 0x60], edx
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x6c], edx
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x70], edx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x64], ecx
cmp edx, 0x10
jb 0x435f40
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x435f33
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43608d
push edx
push ecx
call fcn.0040660b
mov ecx, dword [ebp - 0x64]
add esp, 8
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x14], eax
cmp edx, 0x10
jb 0x435f8f
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x435f85
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43608d
push edx
push ecx
call fcn.0040660b
add esp, 8
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x435fd5
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x435fcb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43608d
push edx
push ecx
call fcn.0040660b
add esp, 8
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
jne 0x435fef
xor esi, esi
jmp 0x435ffb
push dword [ebp - 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x43602b
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x436021
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436092
push edx
push ecx
call fcn.0040660b
add esp, 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
test ebx, ebx
je 0x43606a
mov ecx, dword [ebp - 0x68]
mov eax, ebx
sub ecx, ebx
cmp ecx, 0x1000
jb 0x436060
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x436092
push ecx
push ebx
call fcn.0040660b
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00402c9b
mov esp, ebp
pop ebp
ret
call fcn.004275dd
call fcn.0047c5cb
call fcn.0047c5cb
int3