Function at 0x401876
Capabilities:
Get common file path
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x878
push ebx
push esi
mov dword [esp + 8], 0x1eea8e36
mov dword [esp + 0x10], 0x1563a1a7
mov dword [esp + 0x1c], 0x4ec57e6d
mov dword [esp + 0x14], 0xce8e116
mov dword [esp + 0x24], 0x521f0733
mov dword [esp + 0x20], 0x17e5c762
mov dword [esp + 0xc], 0x713b89a5
mov dword [esp + 0x28], 0x4c930d24
mov dword [esp + 0x18], 0x2fb89421
mov dword [esp + 0x30], 0x173eca99
mov dword [esp + 0x2c], 0x7f3ef4df
mov dword [esp + 0x34], 0x6c051a32
mov dword [esp + 0x3c], 0x1abc8703
mov dword [esp + 0x44], 0x64024ce1
mov dword [esp + 0x60], 0xd40bda
mov dword [esp + 0x38], 0x1ef28302
mov dword [esp + 0x68], 0x299d063d
mov dword [esp + 0x40], 0x48f6df9
mov dword [esp + 0x58], 0x878ae44
mov dword [esp + 0x7c], 0x3f93f343
mov dword [esp + 0x4c], 0x32ced513
mov dword [esp + 0x70], 0x70dc275d
mov dword [esp + 0x50], 0x89fbffd
mov dword [esp + 0x54], 0x251abc90
mov dword [esp + 0x5c], 0x7e0255e8
mov dword [esp + 0x64], 0xcbc0a93
sub dword [esp + 8], 0x4ae662c9
add dword [esp + 8], 0x3752729d
mov eax, 0x7cb57e80
mul dword [esp + 8]
mov eax, dword [esp + 8]
mov eax, 0x2393f09d
mul dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
sub dword [esp + 0x14], 0x547df628
mov eax, 0x1913598
mul dword [esp + 8]
mov eax, dword [esp + 8]
add dword [esp + 0x1c], 0x2cf7e7d3
add dword [esp + 8], 0x27e92c0c
sub dword [esp + 8], 0x12e309c0
mov eax, 0x5a8773b9
mul dword [esp + 0x20]
mov eax, dword [esp + 0x20]
sub dword [esp + 0x24], 0x204362c1
sub dword [esp + 8], 0x11ca3008
mov eax, 0x72fa8c97
mul dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, 0x2fabb480
mul dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
mov eax, 0x3324181e
mul dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, 0x208eaef1
mul dword [esp + 0x10]
mov eax, dword [esp + 0x10]
add dword [esp + 8], 0x67ae330d
add dword [esp + 0x1c], 0x1109fb94
mov eax, 0x144eaed3
mul dword [esp + 0x10]
mov eax, dword [esp + 0x10]
sub dword [esp + 0x24], 0x4896797c
sub dword [esp + 0xc], 0x17a94ed0
sub dword [esp + 8], 0x7d13cc0b
mov eax, 0x1d98ac37
mul dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
sub dword [esp + 0x14], 0x694980c4
mov eax, 0x793070fd
mul dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, 0x1440536f
mul dword [esp + 0xc]
mov eax, dword [esp + 0xc]
add dword [esp + 0x18], 0x78ca8061
sub dword [esp + 0x18], 0x4d2386e0
add dword [esp + 0x20], 0x76168b66
add dword [esp + 0x34], 0x55350d52
mov eax, 0x99de82b
mul dword [esp + 0x14]
mov eax, dword [esp + 0x14]
sub dword [esp + 0x10], 0x576d6b75
mov eax, 0x62f87f65
mul dword [esp + 0x34]
mov eax, dword [esp + 0x34]
sub dword [esp + 0x14], 0x1b37011a
add dword [esp + 0x3c], 0x836b165
add dword [esp + 0x28], 0x75793ef6
add dword [esp + 0x2c], 0x475f5602
add dword [esp + 0x44], 0x3f17bdd6
add dword [esp + 0x20], 0x369d5f12
mov eax, 0x5f48ea7b
mul dword [esp + 0x28]
mov eax, dword [esp + 0x28]
add dword [esp + 0x28], 0x63e5574d
sub dword [esp + 0x10], 0x3e258ae2
sub dword [esp + 0x30], 0x6d7ac3c3
sub dword [esp + 0x10], 0xd365152
mov eax, 0x6b9799d5
mul dword [esp + 8]
mov eax, dword [esp + 8]
add dword [esp + 0xc], 0x3b769c25
mov eax, 0x51afed81
mul dword [esp + 0x30]
mov eax, dword [esp + 0x30]
mov eax, 0x4b51b9cf
mul dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, 0x23142986
mul dword [esp + 8]
mov eax, dword [esp + 8]
mov eax, 0x6db5574
mul dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
mov eax, 0x131301dd
mul dword [esp + 0x24]
mov eax, dword [esp + 0x24]
mov eax, 0x37db4410
mul dword [esp + 8]
mov eax, dword [esp + 8]
sub dword [esp + 0xc], 0x2749e518
mov eax, 0x20f74480
mul dword [esp + 0x24]
mov eax, dword [esp + 0x24]
mov eax, 0x537579da
mul dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, 0x15ea0e6f
mul dword [esp + 0x18]
mov eax, dword [esp + 0x18]
sub dword [esp + 0xc], 0x10dce0b8
sub dword [esp + 0x14], 0x56f70c95
sub dword [esp + 0x2c], 0x66df052d
mov eax, 0x72390419
mul dword [esp + 0x38]
mov eax, dword [esp + 0x38]
add dword [esp + 0x20], 0x1bd77bd
mov eax, 0x3f20caa1
mul dword [esp + 0x40]
mov eax, dword [esp + 0x40]
mov eax, 0x4b3a52c7
mul dword [esp + 0x28]
mov eax, dword [esp + 0x28]
mov eax, 0x79cd4023
mul dword [esp + 0x30]
mov eax, dword [esp + 0x30]
xor ebx, ebx
cmp dword [0x1a18258], 0x400
jne 0x401c33
lea eax, [esp + 0x48]
mov dword [esp + 0x48], ebx
push eax
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0x7c]
push eax
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_BackupSeek]
push ebx
call fcn.004038bf
pop ecx
xorps xmm0, xmm0
call fcn.004010a7
push ebx
call fcn.00403936
pop ecx
push ebx
call fcn.004036b3
pop ecx
push ebx
call fcn.004036b3
pop ecx
mov esi, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp esi, 0x207138
jg 0x401c53
inc esi
cmp esi, 0x4f672
jl 0x401c35
mov esi, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_DebugSetProcessKillOnExit]
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalFindAtomA]
cmp esi, 0x2b157b
jg 0x401c74
inc esi
cmp esi, 0xa379e2
jl 0x401c55
mov esi, ebx
call dword [sym.imp.KERNEL32.dll_GetACP]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp esi, 0x58bc14
jle 0x401c9b
cmp dword [esp + 0x78], 0x7a45f535
jne 0x401ca4
inc esi
cmp esi, 0xe154
jl 0x401c76
mov eax, dword [0x418304]
mov dword [0x1a18258], eax
call fcn.00401669
mov esi, 0x3078f
cmp dword [0x1a18258], 0x51f
jne 0x401cde
push ebx
lea eax, [esp + 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push str.cuwusosuzolatalewuhen_datilenupawelexotok_ciwubexikeyavuraguwe
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
dec esi
jne 0x401cb8
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10