Function at 0x4d3964
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x4d396c
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x4d3c28
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0xff
call fcn.004027bc
mov dword [ebp - 4], eax
mov dl, 1
mov eax, dword [0x41828c]
call fcn.00403968
mov dword [ebp - 0xc], eax
mov dl, 1
mov eax, dword [0x43e9dc]
call fcn.0043eadc
mov dword [ebp - 0x24], eax
xor eax, eax
push ebp
push 0x4d3bf1
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xff
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_GetSystemDirectoryA
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 4]
call fcn.004049c4
mov edx, dword [ebp - 0x30]
lea eax, [ebp - 8]
mov ecx, 0x4d3c40
call fcn.00404ad8
xor eax, eax
push ebp
push 0x4d3bc1
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x68]
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x14]
call fcn.00408d8c
lea ecx, [ebp - 0x38]
mov edx, 0x4d3c5c
mov eax, dword [ebp - 0x14]
call fcn.004ce700
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x10]
call fcn.00408d8c
mov eax, dword [ebp - 0x10]
call fcn.0040c538
fstp qword [ebp - 0x20]
wait
mov edx, 0x80000001
mov eax, dword [ebp - 0x24]
call fcn.0043eb7c
lea eax, [ebp - 0x28]
mov edx, 0x4d3c90
call fcn.00404864
mov cl, 1
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
call fcn.0043ebe4
test al, al
je 0x4d3baf
lea ecx, [ebp - 0x2c]
mov edx, 0x4d3cb0
mov eax, dword [ebp - 0x24]
call fcn.0043f160
mov edx, dword [ebp - 0x2c]
mov eax, 0x4d3cc4
call fcn.00404dd0
test eax, eax
jle 0x4d3ae4
call fcn.0040affc
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call fcn.004b2c54
cmp eax, 0x16d
jl 0x4d3baf
push 0x30
mov ecx, 0x4d3cc8
mov edx, 0x4d3cd8
mov eax, dword [0x533210]
mov eax, dword [eax]
call fcn.0048e99c
mov eax, dword [0x533210]
mov eax, dword [eax]
call fcn.0048e8f8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404210
jmp 0x4d3bf8
mov edx, dword [ebp - 0x2c]
mov eax, 0x4d3cf0
call fcn.00404dd0
test eax, eax
jle 0x4d3b4d
call fcn.0040affc
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call fcn.004b2c54
cmp eax, 0x2da
jl 0x4d3baf
push 0x30
mov ecx, 0x4d3cc8
mov edx, 0x4d3cd8
mov eax, dword [0x533210]
mov eax, dword [eax]
call fcn.0048e99c
mov eax, dword [0x533210]
mov eax, dword [eax]
call fcn.0048e8f8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404210
jmp 0x4d3bf8
mov edx, dword [ebp - 0x2c]
mov eax, 0x4d3cfc
call fcn.00404dd0
test eax, eax
jle 0x4d3baf
call fcn.0040affc
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call fcn.004b2c54
cmp eax, 0x447
jl 0x4d3baf
push 0x30
mov ecx, 0x4d3cc8
mov edx, 0x4d3cd8
mov eax, dword [0x533210]
mov eax, dword [eax]
call fcn.0048e99c
mov eax, dword [0x533210]
mov eax, dword [eax]
call fcn.0048e8f8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404210
jmp 0x4d3bf8
mov eax, dword [ebp - 0x24]
call fcn.0043eb4c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4d3bcb
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d3bf8
mov eax, dword [ebp - 0x24]
call fcn.00403998
mov eax, dword [ebp - 4]
call fcn.004027dc
mov eax, dword [ebp - 0xc]
call fcn.00403998
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d3c2f
lea eax, [ebp - 0x38]
mov edx, 5
call fcn.004047f0
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004047f0
lea eax, [ebp - 8]
call fcn.004047cc
ret