Function at 0x40efcd
Capabilities:
Get common file path

Disassembly:
push 0x20
mov eax, 0x4a067e
call fcn.00475cc9
mov ebx, ecx
call fcn.0044bc9f
push eax
lea ecx, [ebp - 0x14]
call fcn.0044be7a
xor edi, edi
mov dword [ebp - 4], edi
call fcn.0044bc9f
push eax
lea ecx, [ebp - 0x10]
call fcn.0044be7a
lea esi, [ebx + 0x78]
mov ecx, esi
mov byte [ebp - 4], 1
call fcn.00404c7a
lea ecx, [ebp - 0x14]
push ecx
push eax
mov ecx, esi
mov dword [ebp - 0x1c], eax
call fcn.004549a6
mov eax, dword [ebx + 0x74]
mov eax, dword [eax + 4]
xor esi, esi
cmp dword [eax + 0xf8abea], edi
jle 0x40ef45
lea eax, [edi + eax + 0xf8a8ea]
push eax
push dword [ebp - 0x14]
call fcn.004755e6
test eax, eax
pop ecx
pop ecx
je 0x40ef42
mov eax, dword [ebx + 0x74]
mov eax, dword [eax + 4]
inc esi
add edi, 0x20
cmp esi, dword [eax + 0xf8abea]
jl 0x40ef18
jmp 0x40ef45
mov dword [ebp - 0x1c], esi
push 1
mov ecx, ebx
call fcn.0044f066
lea edi, [ebx + 0xcc]
mov eax, dword [edi]
mov eax, dword [eax - 0xc]
test eax, eax
mov esi, str..str
jne 0x40efac
push esi
lea ecx, [ebp - 0x18]
call fcn.004041b8
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 2
call fcn.00406c99
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 3
call fcn.004015a6
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004010ea
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
mov byte [ebp - 4], 1
call fcn.004010ea
jmp 0x40efb5
push edi
lea ecx, [ebp - 0x10]
call fcn.004015a6
push 0x4a8cb0
push dword [ebp - 0x10]
call fcn.00478a96
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x18], eax
je 0x40f009
push 0
push 0x23
push str.Do_you_want_to_overwrite_existing_module_file_
call fcn.004535b7
cmp eax, 7
push dword [ebp - 0x18]
jne 0x40efec
call fcn.00478828
pop ecx
jmp 0x40f164
cmp eax, 2
jne 0x40f003
call fcn.00478828
pop ecx
mov ecx, ebx
call fcn.0044c37c
jmp 0x40f164
call fcn.00478828
pop ecx
push dword [ebp - 0x1c]
lea eax, [ebp - 0x10]
push ecx
mov dword [ebp - 0x2c], esp
mov ecx, esp
push eax
call fcn.004013f7
mov eax, dword [ebx + 0x74]
mov ecx, dword [eax + 4]
call fcn.0041d972
test eax, eax
jne 0x40f15d
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
jne 0x40f11d
push 0x400
call fcn.00476994
pop ecx
mov edi, eax
push edi
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push edi
lea ecx, [ebp - 0x20]
call fcn.00401835
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 4
call fcn.004015a6
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 1
call fcn.004010ea
push edi
call fcn.00478435
pop ecx
push esi
lea ecx, [ebp - 0x20]
call fcn.004041b8
push 0x4a8c48
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.004041b8
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 6
call fcn.00406c99
lea ecx, [ebp - 0x14]
push ecx
push eax
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 7
call fcn.00406c99
lea ecx, [ebp - 0x20]
push ecx
push eax
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 8
call fcn.00406c99
add esp, 0x24
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 9
call fcn.004015a6
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.004010ea
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.004010ea
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.004010ea
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.004010ea
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
mov byte [ebp - 4], 1
call fcn.004010ea
push str.Extracted_Successfully
lea ecx, [ebp - 0x18]
call fcn.00401835
push dword [ebp - 0x10]
lea eax, [ebp - 0x18]
push 0x4a8bf8
push eax
mov byte [ebp - 4], 0xa
call fcn.00401ccf
add esp, 0xc
push 0
push 0x40
push dword [ebp - 0x18]
call fcn.004535b7
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
mov byte [ebp - 4], 1
call fcn.004010ea
mov ecx, ebx
call fcn.0044c363
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.004010ea
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.004010ea
call fcn.00475d68
ret