Function at 0x4179e0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x513823
mov eax, dword fs:[0]
push eax
sub esp, 0x444
mov eax, dword [0x55d198]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea eax, [ebp - 0x420]
push 0x104
push eax
call esi
push 0x5458bc
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x417a42
push str.SetDefaultDllDirectories
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x562d18], eax
jmp 0x417a47
mov eax, dword [0x562d18]
test eax, eax
je 0x417a52
push 0x800
call eax
push 0x544088
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
push 0x104
lea eax, [ebp - 0x218]
push eax
call esi
xor eax, eax
mov dword [ebp - 0x424], 7
mov dword [ebp - 0x428], 0
mov word [ebp - 0x438], ax
cmp word [ebp - 0x218], ax
jne 0x417a95
xor ecx, ecx
jmp 0x417aaf
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x417aa0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.00403800
push 0xc
push str._version.dll
lea ecx, [ebp - 0x438]
mov dword [ebp - 4], 0
call fcn.00403070
cmp dword [eax + 0x14], 8
jb 0x417ae3
mov eax, dword [eax]
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x424]
cmp eax, 8
jb 0x417b11
inc eax
lea ecx, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
call fcn.00403a50
xor eax, eax
mov dword [ebp - 0x424], 7
mov dword [ebp - 0x428], 0
mov word [ebp - 0x438], ax
cmp word [ebp - 0x218], ax
jne 0x417b3b
xor ecx, ecx
jmp 0x417b53
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x417b44
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.00403800
push 0xb
push str.ws2_32.dll
lea ecx, [ebp - 0x438]
mov dword [ebp - 4], 1
call fcn.00403070
cmp dword [eax + 0x14], 8
jb 0x417b87
mov eax, dword [eax]
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x424]
cmp eax, 8
jb 0x417baf
inc eax
lea ecx, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
call fcn.00403a50
xor eax, eax
mov dword [ebp - 0x424], 7
mov dword [ebp - 0x428], 0
mov word [ebp - 0x438], ax
cmp word [ebp - 0x218], ax
jne 0x417bd9
xor ecx, ecx
jmp 0x417bf1
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x417be2
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.00403800
push 8
push str._sxs.dll
lea ecx, [ebp - 0x438]
mov dword [ebp - 4], 2
call fcn.00403070
cmp dword [eax + 0x14], 8
jb 0x417c25
mov eax, dword [eax]
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x424]
cmp eax, 8
jb 0x417c4d
inc eax
lea ecx, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
call fcn.00403a50
xor eax, eax
mov dword [ebp - 0x424], 7
mov dword [ebp - 0x428], 0
mov word [ebp - 0x438], ax
cmp word [ebp - 0x218], ax
jne 0x417c77
xor ecx, ecx
jmp 0x417c8f
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x417c80
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.00403800
push 0xb
push str.dwmapi.dll
lea ecx, [ebp - 0x438]
mov dword [ebp - 4], 3
call fcn.00403070
cmp dword [eax + 0x14], 8
jb 0x417cc3
mov eax, dword [eax]
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x424]
cmp eax, 8
jb 0x417ceb
inc eax
lea ecx, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
call fcn.00403a50
xor eax, eax
mov dword [ebp - 0x424], 7
mov dword [ebp - 0x428], 0
mov word [ebp - 0x438], ax
cmp word [ebp - 0x218], ax
jne 0x417d15
xor ecx, ecx
jmp 0x417d2f
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x417d20
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.00403800
push 0xc
push str.msimg32.dll
lea ecx, [ebp - 0x438]
mov dword [ebp - 4], 4
call fcn.00403070
cmp dword [eax + 0x14], 8
jb 0x417d63
mov eax, dword [eax]
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x424]
cmp eax, 8
jb 0x417d8b
inc eax
lea ecx, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
call fcn.00403a50
xor eax, eax
mov dword [ebp - 0x424], 7
mov dword [ebp - 0x428], 0
mov word [ebp - 0x438], ax
cmp word [ebp - 0x218], ax
jne 0x417db5
xor ecx, ecx
jmp 0x417dcf
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x417dc0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.00403800
push 0xa
push str.d3d8.dll_
lea ecx, [ebp - 0x438]
mov dword [ebp - 4], 5
call fcn.00403070
cmp dword [eax + 0x14], 8
jb 0x417e03
mov eax, dword [eax]
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x424]
cmp eax, 8
jb 0x417e2b
inc eax
lea ecx, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
call fcn.00403a50
xor eax, eax
mov dword [ebp - 0x424], 7
mov dword [ebp - 0x428], 0
mov word [ebp - 0x438], ax
cmp word [ebp - 0x218], ax
jne 0x417e55
xor ecx, ecx
jmp 0x417e6f
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x417e60
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.00403800
push 0xc
push str.ieframe.dll
lea ecx, [ebp - 0x438]
mov dword [ebp - 4], 6
call fcn.00403070
cmp dword [eax + 0x14], 8
jb 0x417ea3
mov eax, dword [eax]
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x424]
cmp eax, 8
jb 0x417ecb
inc eax
lea ecx, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
call fcn.00403a50
xor eax, eax
mov dword [ebp - 0x424], 7
mov dword [ebp - 0x428], 0
mov word [ebp - 0x438], ax
cmp word [ebp - 0x218], ax
jne 0x417ef5
xor ecx, ecx
jmp 0x417f0f
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x417f00
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.00403800
push 0xc
push str.ws2help.dll
lea ecx, [ebp - 0x438]
mov dword [ebp - 4], 7
call fcn.00403070
cmp dword [eax + 0x14], 8
jb 0x417f43
mov eax, dword [eax]
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x424]
cmp eax, 8
jb 0x417f6b
inc eax
lea ecx, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
call fcn.00403a50
xor eax, eax
mov dword [ebp - 0x43c], 7
mov dword [ebp - 0x440], 0
mov word [ebp - 0x450], ax
cmp word [ebp - 0x218], ax
jne 0x417f95
xor ecx, ecx
jmp 0x417faf
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x417fa0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x450]
call fcn.00403800
push 0x12
push str.WindowsCodecs.dll
lea ecx, [ebp - 0x450]
mov dword [ebp - 4], 8
call fcn.00403070
cmp dword [eax + 0x14], 8
jb 0x417fe3
mov eax, dword [eax]
push eax
call esi
mov eax, dword [ebp - 0x43c]
cmp eax, 8
jb 0x418004
inc eax
lea ecx, [ebp - 0x450]
push eax
push dword [ebp - 0x450]
call fcn.00403a50
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004d1626
mov esp, ebp
pop ebp
ret