Function at 0x407c60
Capabilities:
Get common file path

Disassembly:
sub esp, 0x9c0
call fcn.0042e290
cmp eax, 1
jne 0x408178
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push edi
lea eax, [esp + 0x3c0]
xor bl, bl
push 0x104
push eax
mov byte [esp + 0x18], bl
mov byte [esp + 0x19], bl
mov byte [esp + 0x17], bl
mov byte [esp + 0x16], bl
mov byte [esp + 0x1b], bl
mov byte [esp + 0x1a], bl
call esi
lea ecx, [esp + 0x4c4]
push 0x104
push ecx
call esi
lea edx, [esp + 0x6c8]
push 0x104
push edx
call esi
lea edi, [esp + 0x3c0]
or ecx, 0xffffffff
xor eax, eax
mov edx, dword [0x4625c4]
repne scasb al, byte es:[edi]
mov eax, dword [str._vncdrv.dll]
mov ecx, dword [0x4625c0]
dec edi
mov esi, str.Drivers_vnccom.SYS
push 0xfe
mov dword [edi], eax
xor eax, eax
mov dword [edi + 4], ecx
or ecx, 0xffffffff
mov dword [edi + 8], edx
lea edi, [esp + 0x4c8]
repne scasb al, byte es:[edi]
dec edi
mov ecx, 5
rep movsd dword es:[edi], dword [esi]
lea edi, [esp + 0x6cc]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
dec edi
mov ecx, 5
mov esi, str.Drivers_vncdrv.SYS
lea eax, [esp + 0x5cc]
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x3c4]
push eax
push ecx
call fcn.00407bb0
lea edx, [esp + 0x8d8]
push 0xfe
lea eax, [esp + 0x4d4]
push edx
push eax
call fcn.00407bb0
lea ecx, [esp + 0x7e4]
push 0xfe
lea edx, [esp + 0x6e4]
push ecx
push edx
call fcn.00407bb0
add esp, 0x24
mov edi, str.1.00.18
lea esi, [esp + 0x5c8]
mov ecx, 8
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x407d8e
mov bl, 1
mov byte [esp + 0x10], bl
mov edi, str.1.00.19
lea esi, [esp + 0x5c8]
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x407dab
mov bl, 1
mov byte [esp + 0x10], bl
mov edi, str.1.0.0.17
lea esi, [esp + 0x8cc]
mov ecx, 9
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x407dc7
mov byte [esp + 0x11], 1
mov edi, str.1.00.17
lea esi, [esp + 0x7cc]
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x407de3
mov byte [esp + 0xf], 1
call fcn.00407ad0
test al, al
je 0x407df1
mov byte [esp + 0xe], 1
test bl, bl
je 0x407e29
mov al, byte [esp + 0x11]
test al, al
je 0x407e29
mov al, byte [esp + 0xf]
test al, al
je 0x407e29
mov al, byte [esp + 0xe]
test al, al
je 0x407e29
call fcn.004079d0
test eax, eax
je 0x407e1b
mov byte [esp + 0x13], 1
call fcn.00407980
test al, al
je 0x407e29
mov byte [esp + 0x12], 1
mov al, byte [esp + 0x9d0]
test al, al
je 0x408150
xor eax, eax
mov cl, byte [esp + eax + 0x3c0]
mov byte [esp + eax + 0x18], cl
inc eax
test cl, cl
jne 0x407e3a
or ecx, 0xffffffff
lea edi, [esp + 0x18]
xor eax, eax
push ebp
repne scasb al, byte es:[edi]
mov ebp, dword [str._Version:]
mov eax, dword [0x462568]
mov ecx, dword [0x46256c]
dec edi
lea edx, [esp + 0x1c]
mov dword [edi], ebp
mov dword [edi + 4], eax
xor eax, eax
mov dword [edi + 8], ecx
or ecx, 0xffffffff
lea edi, [esp + 0x5cc]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
or ecx, 0xffffffff
mov edi, edx
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
mov dx, word [0x461c54]
and ecx, 3
lea ebx, [esp + 0x1c]
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x1c]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
or ecx, 0xffffffff
mov word [edi - 1], dx
lea edi, [esp + 0x4c8]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
mov ebx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea ebx, [esp + 0x1c]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x1c]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov eax, dword [0x462568]
mov ecx, dword [0x46256c]
dec edi
mov dword [edi], ebp
mov dword [edi + 4], eax
xor eax, eax
mov dword [edi + 8], ecx
lea edi, [esp + 0x8d0]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov dword [esp + 0x18], eax
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov ebx, dword [esp + 0x18]
mov ecx, ebx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea ebx, [esp + 0x1c]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
or ecx, 0xffffffff
lea edi, [esp + 0x1c]
repne scasb al, byte es:[edi]
or ecx, 0xffffffff
mov word [edi - 1], dx
lea edi, [esp + 0x6cc]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
mov ebx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea ebx, [esp + 0x1c]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x1c]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov eax, dword [0x462568]
mov ecx, dword [0x46256c]
dec edi
mov dword [edi], ebp
mov dword [edi + 4], eax
xor eax, eax
mov dword [edi + 8], ecx
lea edi, [esp + 0x7d0]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebp, ecx
mov edi, ebx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebp
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebp
pop ebp
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x18]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
or ecx, 0xffffffff
mov word [edi - 1], dx
lea edi, [esp + 0x18]
repne scasb al, byte es:[edi]
mov al, byte [esp + 0xe]
or ecx, 0xffffffff
mov word [edi - 1], dx
lea edi, [esp + 0x18]
test al, al
je 0x408003
xor eax, eax
mov esi, str.The_driver_is_present
repne scasb al, byte es:[edi]
mov ecx, 5
jmp 0x408011
xor eax, eax
mov esi, str.The_driver_is_NOT_present
repne scasb al, byte es:[edi]
mov ecx, 6
dec edi
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x18]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov al, byte [esp + 0x12]
or ecx, 0xffffffff
mov word [edi - 1], dx
lea edi, [esp + 0x18]
test al, al
je 0x408045
xor eax, eax
mov esi, str.The_communication_service_is_present
repne scasb al, byte es:[edi]
mov ecx, 9
jmp 0x408053
xor eax, eax
mov esi, str.The_communication_service_is_NOT_present
repne scasb al, byte es:[edi]
mov ecx, 0xa
dec edi
xor eax, eax
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edi, [esp + 0x18]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov al, byte [esp + 0x13]
or ecx, 0xffffffff
mov word [edi - 1], dx
lea edi, [esp + 0x18]
test al, al
je 0x408099
xor eax, eax
mov esi, str.The_driver_is_currently_ACTIVE
repne scasb al, byte es:[edi]
dec edi
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
lea edi, [esp + 0x18]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov word [edi - 1], dx
jmp 0x408138
xor eax, eax
mov esi, str.The_driver_is_NOT_active
repne scasb al, byte es:[edi]
dec edi
mov ecx, 6
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edx, [esp + 0x324]
mov ecx, 0x27
lea edi, [esp + 0x324]
push edx
push 0xffffffffffffffff
push eax
rep stosd dword es:[edi], eax
mov word [esp + 0x354], 0x9c
mov word [esp + 0x356], ax
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
mov eax, dword [esp + 0x38c]
cmp eax, 8
je 0x408122
cmp eax, 0x10
je 0x408122
cmp eax, 0x20
je 0x408122
lea edi, [esp + 0x18]
or ecx, 0xffffffff
xor eax, eax
mov esi, str.Color_depth_NOT_supported__have_to_be_8_16_32
repne scasb al, byte es:[edi]
dec edi
mov ecx, 0xb
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edi, [esp + 0x18]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ax, word [0x461c54]
mov word [edi - 1], ax
jmp 0x408138
lea edi, [esp + 0x18]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov cx, word [0x461c54]
mov word [edi - 1], cx
push 0
lea edx, [esp + 0x1c]
push str.Driver_Test
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov bl, byte [esp + 0x10]
pop edi
pop esi
test bl, bl
pop ebx
je 0x408178
mov al, byte [esp + 5]
test al, al
je 0x408178
mov al, byte [esp + 3]
test al, al
je 0x408178
mov al, byte [esp + 2]
test al, al
je 0x408178
mov al, 1
add esp, 0x9c0
ret
xor al, al
add esp, 0x9c0
ret