Function at 0x417024
Capabilities:
Get common file path

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0x4b8
mov ebp, ecx
mov ebx, edx
mov dword [esp + 0x4b4], eax
lea eax, [esp + 0x250]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
jne 0x41707c
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417061
mov dword [eax], 0
test ebx, ebx
je 0x41706b
mov dword [ebx], 0
test ebp, ebp
je 0x417922
mov byte [ebp], 0x20
jmp 0x417922
mov byte [esp + 0x353], 0
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x41708f
lea edi, [esp + 0x10]
mov edx, 0x87833c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x4170ac
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417ce4
test eax, eax
jl 0x417230
mov esi, 0x5f
mov word [esp + 0xc], si
mov eax, 4
mov edx, 2
xor ecx, ecx
call fcn.00417c97
mov dword [esp + 0x450], eax
mov dword [esp + 0x454], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jl 0x41792f
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417128
mov dword [eax], 1
test ebx, ebx
je 0x417132
mov dword [ebx], 0
test ebp, ebp
je 0x41713a
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x448
mov word [esp + 0xc], si
mov eax, 4
mov edx, 3
xor ecx, ecx
call fcn.00417c97
mov dword [esp + 0x498], eax
mov dword [esp + 0x49c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jl 0x4171ba
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x41719c
mov dword [eax], 2
test ebx, ebx
je 0x4171a6
mov dword [ebx], 0
test ebp, ebp
je 0x4171ae
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x44
mov word [esp + 0xc], si
mov eax, 4
mov edx, 4
xor ecx, ecx
call fcn.00417c97
mov dword [esp + 0x4a0], eax
mov dword [esp + 0x4a4], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jl 0x417239
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417210
mov dword [eax], 3
test ebx, ebx
je 0x41721a
mov dword [ebx], 0
test ebp, ebp
je 0x417222
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x417239
xor eax, eax
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x417244
lea edi, [esp + 0x10]
mov edx, 0x878348
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x417261
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417ce4
test eax, eax
jl 0x4172f3
mov esi, 0x46
mov word [esp + 0xc], si
mov eax, 4
mov edx, 4
xor ecx, ecx
call fcn.00417c97
mov dword [esp + 0x458], eax
mov dword [esp + 0x45c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jl 0x4172f3
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4172d5
mov dword [eax], 3
test ebx, ebx
je 0x4172df
mov dword [ebx], 0
test ebp, ebp
je 0x4172e7
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4172fe
lea edi, [esp + 0x10]
mov edx, 0x87833c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x41731b
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417ce4
test eax, eax
jl 0x417499
mov esi, 0x9b
mov word [esp + 0xc], si
mov eax, 4
mov edx, 5
xor ecx, ecx
call fcn.00417c97
mov dword [esp + 0x460], eax
mov dword [esp + 0x464], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jl 0x4173b1
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417393
mov dword [eax], 5
test ebx, ebx
je 0x41739d
mov dword [ebx], 0
test ebp, ebp
je 0x4173a5
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x13e
mov word [esp + 0xc], si
mov eax, 4
mov edx, 6
xor ecx, ecx
call fcn.00417c97
mov dword [esp + 0x468], eax
mov dword [esp + 0x46c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jl 0x417425
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417407
mov dword [eax], 6
test ebx, ebx
je 0x417411
mov dword [ebx], 0
test ebp, ebp
je 0x417419
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x1b4
mov word [esp + 0xc], si
mov eax, 4
mov edx, 6
xor ecx, ecx
call fcn.00417c97
mov dword [esp + 0x470], eax
mov dword [esp + 0x474], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jl 0x417499
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x41747b
mov dword [eax], 6
test ebx, ebx
je 0x417485
mov dword [ebx], 1
test ebp, ebp
je 0x41748d
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4174a4
lea edi, [esp + 0x10]
mov edx, 0x878358
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x4174c1
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417ce4
test eax, eax
jl 0x417556
mov esi, 0x206
mov word [esp + 0xc], si
mov eax, 4
mov edx, 6
mov ecx, 3
call fcn.00417c97
mov dword [esp + 0x478], eax
mov dword [esp + 0x47c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jl 0x417556
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417538
mov dword [eax], 6
test ebx, ebx
je 0x417542
mov dword [ebx], 1
test ebp, ebp
je 0x41754a
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x417561
lea edi, [esp + 0x10]
mov edx, 0x87833c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x41757e
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417ce4
test eax, eax
jl 0x417610
mov esi, 0x2bc
mov word [esp + 0xc], si
mov eax, 4
mov edx, 7
xor ecx, ecx
call fcn.00417c97
mov dword [esp + 0x480], eax
mov dword [esp + 0x484], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jl 0x417610
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4175f2
mov dword [eax], 7
test ebx, ebx
je 0x4175fc
mov dword [ebx], 0
test ebp, ebp
je 0x417604
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x41761b
lea edi, [esp + 0x10]
mov edx, 0x878364
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x417638
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417ce4
test eax, eax
jl 0x4176ca
mov esi, 0x2cc
mov word [esp + 0xc], si
mov eax, 4
mov edx, 7
xor ecx, ecx
call fcn.00417c97
mov dword [esp + 0x488], eax
mov dword [esp + 0x48c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jl 0x4176ca
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4176ac
mov dword [eax], 7
test ebx, ebx
je 0x4176b6
mov dword [ebx], 0
test ebp, ebp
je 0x4176be
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4176d5
lea edi, [esp + 0x10]
mov edx, 0x87833c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x4176f2
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417ce4
test eax, eax
jl 0x41772a
movzx esi, word [esp + 0x4ae]
cmp esi, 4
je 0x417c3e
cmp esi, 5
je 0x417bbe
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x417735
lea edi, [esp + 0x10]
mov edx, 0x878370
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x417752
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417ce4
test eax, eax
jl 0x41779c
movzx esi, word [esp + 0x4ae]
cmp esi, 4
je 0x417b6d
cmp esi, 5
je 0x417ae5
cmp esi, 4
je 0x417a98
cmp esi, 5
je 0x417a18
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4177a7
lea edi, [esp + 0x10]
mov edx, 0x87837c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x4177c4
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417ce4
test eax, eax
jl 0x417859
mov esi, 0x375
mov word [esp + 0xc], si
mov eax, 6
mov edx, 3
mov ecx, 1
call fcn.00417c97
mov dword [esp + 0x490], eax
mov dword [esp + 0x494], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jl 0x417859
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x41783b
mov dword [eax], 8
test ebx, ebx
je 0x417845
mov dword [ebx], 1
test ebp, ebp
je 0x41784d
mov byte [ebp], 0x62
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x417864
lea edi, [esp + 0x10]
mov edx, 0x87838c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x417881
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417ce4
test eax, eax
jl 0x4178b9
movzx esi, word [esp + 0x4ae]
cmp esi, 4
je 0x4179ce
cmp esi, 5
je 0x41794e
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4178c4
lea edi, [esp + 0x10]
mov edx, 0x878398
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x4178e1
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417ce4
test eax, eax
jl 0x41793d
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417910
mov dword [eax], 9
test ebx, ebx
je 0x41791a
mov dword [ebx], 0
test ebp, ebp
je 0x417922
mov byte [ebp], 0x20
xor eax, eax
add esp, 0x4b8
pop ebx
pop ebp
pop esi
pop edi
ret
xor eax, eax
mov dword [esp + 0x4b0], eax
jmp 0x417146
mov eax, dword [esp + 0x4b0]
test eax, eax
je 0x417050
jmp 0x417922
mov esi, 0x86
mov word [esp + 0xc], si
mov eax, 5
mov edx, 2
mov ecx, 0xe5d
call fcn.00417c97
mov dword [esp + 0x228], eax
mov dword [esp + 0x22c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jl 0x4178b9
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4179ab
mov dword [eax], 8
test ebx, ebx
je 0x4179b5
mov dword [ebx], 2
test ebp, ebp
je 0x4179bd
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x4178b9
mov edi, 0x86
mov word [esp + 0xc], di
mov eax, 4
mov edx, 9
xor ecx, ecx
call fcn.00417c97
mov dword [esp + 0x248], eax
mov dword [esp + 0x24c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jge 0x41799a
jmp 0x4178b0
mov esi, 0x385
mov word [esp + 0xc], si
mov eax, 5
mov edx, 1
mov ecx, 0xa28
call fcn.00417c97
mov dword [esp + 0x210], eax
mov dword [esp + 0x214], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jl 0x41779c
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417a75
mov dword [eax], 8
test ebx, ebx
je 0x417a7f
mov dword [ebx], 1
test ebp, ebp
je 0x417a87
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x41779c
mov edi, 0x385
mov word [esp + 0xc], di
mov eax, 4
mov edx, 8
mov ecx, 1
call fcn.00417c97
mov dword [esp + 0x230], eax
mov dword [esp + 0x234], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jge 0x417a64
jmp 0x417793
mov edi, 0x371
mov word [esp + 0xc], di
mov eax, 5
mov edx, 1
mov ecx, 0xa28
call fcn.00417c97
mov dword [esp + 0x220], eax
mov dword [esp + 0x224], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jl 0x41778a
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417b42
mov dword [eax], 8
test ebx, ebx
je 0x417b4c
mov dword [ebx], 1
test ebp, ebp
je 0x417b54
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
movzx esi, word [esp + 0x4ae]
jmp 0x41778a
mov edi, 0x371
mov word [esp + 0xc], di
mov eax, 4
mov edx, 8
mov ecx, 1
call fcn.00417c97
mov dword [esp + 0x240], eax
mov dword [esp + 0x244], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jge 0x417b31
jmp 0x417781
mov esi, 0x190
mov word [esp + 0xc], si
mov eax, 5
mov edx, 1
mov ecx, 0x8d2
call fcn.00417c97
mov dword [esp + 0x218], eax
mov dword [esp + 0x21c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jl 0x41772a
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417c1b
mov dword [eax], 8
test ebx, ebx
je 0x417c25
mov dword [ebx], 0
test ebp, ebp
je 0x417c2d
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x41772a
mov edi, 0x190
mov word [esp + 0xc], di
mov eax, 4
mov edx, 8
xor ecx, ecx
call fcn.00417c97
mov dword [esp + 0x238], eax
mov dword [esp + 0x23c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417cb0
add esp, 0x10
test eax, eax
jge 0x417c0a
jmp 0x417721