Function at 0x496e70
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x1034
call fcn.00428730
mov eax, dword [0x4d3094]
xor eax, esp
mov dword [esp + 0x1030], eax
push ebx
push esi
push edi
push 0x800
lea eax, [esp + 0x83c]
mov bl, cl
push 0
push eax
call fcn.00441690
add esp, 0xc
lea eax, [esp + 0x38]
push 0x800
push 0
push eax
call fcn.00441690
add esp, 0xc
lea eax, [esp + 0x838]
push 0x800
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0x800
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push 0
push 0
push 0
lea eax, [esp + 0x34]
mov dword [esp + 0x3c], 0
push eax
lea eax, [esp + 0x48]
mov word [esp + 0x44], 0
xorps xmm0, xmm0
push eax
movq qword [esp + 0x3c], xmm0
call fcn.0044ef49
lea edi, [esp + 0x3c]
add esp, 0x14
add edi, 0xfffffffe
nop dword [eax + eax]
mov ax, word [edi + 2]
lea edi, [edi + 2]
test ax, ax
jne 0x496f20
mov eax, dword [0x4be748]
mov dword [edi], eax
lea eax, [esp + 0x18]
push eax
call fcn.00449bc0
mov eax, dword [esp + 0x1c]
add esp, 4
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x20]
push eax
call fcn.004513df
movsd xmm2, qword [0x4c0520]
mov edx, eax
add esp, 4
mov dword [esp + 0x14], edx
xorps xmm0, xmm0
test edx, edx
jne 0x496f7a
movaps xmm1, xmm0
jmp 0x497050
mov edi, dword [edx + 0x14]
add edi, 0x76c
cmp edi, 0x64
jge 0x496f8d
cmp edi, 0x1e
jge 0x496f95
lea eax, [edi - 0x65]
cmp eax, 0x62
ja 0x496f9d
add edi, 0x76c
jmp 0x496fa8
cmp edi, 0x1e
jge 0x496fa8
add edi, 0x7d0
mov esi, dword [edx + 0x10]
inc esi
cmp esi, 2
jle 0x496fbb
mov dword [esp + 0x10], 1
jmp 0x496fc4
dec edi
mov dword [esp + 0x10], 0xd
mov ecx, dword [edx + 8]
mov eax, dword [edx + 4]
movd xmm0, dword [edx]
shl ecx, 4
sub ecx, dword [edx + 8]
cvtdq2pd xmm0, xmm0
lea eax, [eax + ecx*4]
mov ecx, eax
shl ecx, 4
sub ecx, eax
mov eax, dword [esp + 0x10]
shl ecx, 2
add eax, esi
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
imul ecx, eax, 0x132
mov eax, 0x66666667
addsd xmm1, xmm0
imul ecx
divsd xmm1, xmm2
mov eax, 0x51eb851f
sar edx, 2
mov esi, edx
shr esi, 0x1f
add esi, edx
imul ecx, edi, 0x8ead
imul ecx
mov eax, dword [esp + 0x14]
sar edx, 5
mov ecx, edx
add esi, edx
shr ecx, 0x1f
mov eax, dword [eax + 0xc]
add ecx, esi
add eax, 0xfff568ea
add eax, ecx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm1, xmm0
xorps xmm0, xmm0
addsd xmm1, qword [0x4c04b8]
test bl, bl
je 0x497069
movzx eax, bl
imul eax, eax, 0xe10
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movaps xmm3, xmm0
lea ecx, [esp + 0x838]
movaps xmm2, xmm1
mov dl, 1
call fcn.00411192
test al, al
jne 0x497345
lea eax, [esp + 0x20]
push eax
call fcn.00449bc0
mov eax, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x18]
push eax
call fcn.004513df
mov edx, eax
add esp, 4
mov dword [esp + 0x14], edx
test edx, edx
jne 0x4970c9
movsd xmm2, qword [0x4c0520]
xorps xmm1, xmm1
jmp 0x4971a4
mov edi, dword [edx + 0x14]
add edi, 0x76c
cmp edi, 0x64
jge 0x4970dc
cmp edi, 0x1e
jge 0x4970e4
lea eax, [edi - 0x65]
cmp eax, 0x62
ja 0x4970ec
add edi, 0x76c
jmp 0x4970f7
cmp edi, 0x1e
jge 0x4970f7
add edi, 0x7d0
mov esi, dword [edx + 0x10]
inc esi
cmp esi, 2
jle 0x49710a
mov dword [esp + 0x10], 1
jmp 0x497113
dec edi
mov dword [esp + 0x10], 0xd
mov ecx, dword [edx + 8]
mov eax, dword [edx + 4]
movd xmm0, dword [edx]
shl ecx, 4
sub ecx, dword [edx + 8]
movsd xmm2, qword [0x4c0520]
cvtdq2pd xmm0, xmm0
lea eax, [eax + ecx*4]
mov ecx, eax
shl ecx, 4
sub ecx, eax
mov eax, dword [esp + 0x10]
shl ecx, 2
add eax, esi
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
imul ecx, eax, 0x132
mov eax, 0x66666667
addsd xmm1, xmm0
imul ecx
divsd xmm1, xmm2
mov eax, 0x51eb851f
sar edx, 2
mov esi, edx
shr esi, 0x1f
add esi, edx
imul ecx, edi, 0x8ead
imul ecx
mov eax, dword [esp + 0x14]
sar edx, 5
mov ecx, edx
add esi, edx
shr ecx, 0x1f
mov eax, dword [eax + 0xc]
add ecx, esi
add eax, 0xfff568ea
add eax, ecx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm1, xmm0
addsd xmm1, qword [0x4c04b8]
test bl, bl
je 0x4971bf
movzx eax, bl
imul eax, eax, 0xe10
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
jmp 0x4971c2
xorps xmm0, xmm0
movaps xmm3, xmm0
lea ecx, [esp + 0x38]
movaps xmm2, xmm1
xor dl, dl
call fcn.00411192
test al, al
jne 0x497345
lea eax, [esp + 0x20]
push eax
call fcn.00449bc0
mov eax, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x18]
push eax
call fcn.004513df
mov edx, eax
add esp, 4
mov dword [esp + 0x14], edx
test edx, edx
jne 0x497222
movsd xmm2, qword [0x4c0520]
xorps xmm0, xmm0
movaps xmm1, xmm0
jmp 0x497300
mov edi, dword [edx + 0x14]
add edi, 0x76c
cmp edi, 0x64
jge 0x497235
cmp edi, 0x1e
jge 0x49723d
lea eax, [edi - 0x65]
cmp eax, 0x62
ja 0x497245
add edi, 0x76c
jmp 0x497250
cmp edi, 0x1e
jge 0x497250
add edi, 0x7d0
mov esi, dword [edx + 0x10]
inc esi
cmp esi, 2
jle 0x497263
mov dword [esp + 0x10], 1
jmp 0x49726c
dec edi
mov dword [esp + 0x10], 0xd
mov ecx, dword [edx + 8]
mov eax, dword [edx + 4]
movd xmm0, dword [edx]
shl ecx, 4
sub ecx, dword [edx + 8]
movsd xmm2, qword [0x4c0520]
cvtdq2pd xmm0, xmm0
lea eax, [eax + ecx*4]
mov ecx, eax
shl ecx, 4
sub ecx, eax
mov eax, 0x66666667
shl ecx, 2
movd xmm1, ecx
mov ecx, dword [esp + 0x10]
cvtdq2pd xmm1, xmm1
add ecx, esi
imul ecx, ecx, 0x132
addsd xmm1, xmm0
imul ecx
divsd xmm1, xmm2
mov eax, 0x51eb851f
sar edx, 2
mov esi, edx
shr esi, 0x1f
add esi, edx
imul ecx, edi, 0x8ead
imul ecx
mov eax, dword [esp + 0x14]
sar edx, 5
mov ecx, edx
add esi, edx
shr ecx, 0x1f
mov eax, dword [eax + 0xc]
add ecx, esi
add eax, 0xfff568ea
add eax, ecx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm1, xmm0
xorps xmm0, xmm0
addsd xmm1, qword [0x4c04b8]
test bl, bl
je 0x497319
movzx eax, bl
imul eax, eax, 0xe10
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movaps xmm3, xmm0
lea ecx, [esp + 0x28]
movaps xmm2, xmm1
xor dl, dl
call fcn.00411192
test al, al
jne 0x497345
mov al, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1030]
xor ecx, esp
call fcn.00427425
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x103c]
xor al, al
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00427425
mov esp, ebp
pop ebp
ret