Function at 0x440c30
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x560871
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x5ab3e8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0xc]
push 0x104
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x60], 0
call fcn.0048b6ab
mov ebx, eax
push 0x104
push 0
push ebx
lea esi, [ebx + 0x104]
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x78], esi
call fcn.0048deb0
add esp, 0x10
mov dword [ebp - 0x7c], esi
mov edi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x104
push ebx
mov dword [ebp - 4], 0
call edi
mov esi, eax
cmp esi, 0x104
jbe 0x440cd9
lea eax, [ebp - 0x59]
mov byte [ebp - 0x59], 0
push eax
push esi
lea ecx, [ebp - 0x80]
call fcn.0043f6a0
mov ebx, dword [ebp - 0x80]
push esi
push ebx
call edi
mov esi, dword [ebp - 0x78]
mov dword [ebp - 0x68], esi
mov edi, ebx
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x440cf0
sub edi, ecx
cmp edi, 0xf
ja 0x440d13
push edi
lea eax, [ebp - 0x28]
mov dword [ebp - 0x18], edi
push ebx
push eax
call fcn.0048d930
mov byte [ebp + edi - 0x28], 0
jmp 0x440d63
cmp edi, 0x7fffffff
ja 0x440f88
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x440d32
mov eax, 0x7fffffff
jmp 0x440d3c
mov ecx, 0x16
cmp eax, ecx
cmovb eax, ecx
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x28]
inc eax
push eax
call fcn.0040c380
push edi
mov esi, eax
mov dword [ebp - 0x18], edi
mov eax, dword [ebp - 0x60]
push ebx
push esi
mov dword [ebp - 0x14], eax
call fcn.0048d3b0
mov byte [esi + edi], 0
mov dword [ebp - 0x28], esi
add esp, 0xc
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x40]
inc eax
mov byte [ebp - 4], 2
push eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov dword [ebp - 0x60], 1
call fcn.00419950
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x40]
push eax
call fcn.00415100
push 1
push 0x571934
lea ecx, [ebp - 0x40]
call fcn.00415100
push dword [ebp - 0x64]
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0040c7c0
add esp, 0xc
push 4
push str..dll
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.00415100
mov edx, dword [eax + 0xc]
mov ecx, dword [eax + 8]
mov esi, dword [eax]
mov edi, dword [eax + 4]
mov dword [ebp - 0x60], edx
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x6c], edx
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x70], edx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x64], ecx
cmp edx, 0x10
jb 0x440e40
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x440e33
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440f8d
push edx
push ecx
call fcn.0048b6db
mov ecx, dword [ebp - 0x64]
add esp, 8
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x14], eax
cmp edx, 0x10
jb 0x440e8f
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x440e85
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440f8d
push edx
push ecx
call fcn.0048b6db
add esp, 8
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x440ed5
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x440ecb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440f8d
push edx
push ecx
call fcn.0048b6db
add esp, 8
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
jne 0x440eef
xor esi, esi
jmp 0x440efb
push dword [ebp - 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x440f2b
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x440f21
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440f92
push edx
push ecx
call fcn.0048b6db
add esp, 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
test ebx, ebx
je 0x440f6a
mov ecx, dword [ebp - 0x68]
mov eax, ebx
sub ecx, ebx
cmp ecx, 0x1000
jb 0x440f60
mov ebx, dword [ebx - 4]
add ecx, 0x23
sub eax, ebx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440f92
push ecx
push ebx
call fcn.0048b6db
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0048b6e9
mov esp, ebp
pop ebp
ret
call fcn.004027a0
call fcn.00497009
call fcn.00497009
int3