Function at 0x476780
Capabilities:
Get common file path
Link many functions at runtime

Disassembly:
sub esp, 0x414
mov eax, dword [0x4b39fc]
xor eax, esp
mov dword [esp + 0x410], eax
mov eax, dword [esp + 0x418]
push ebx
push ebp
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push edi
push 0x497d80
xor ebp, ebp
mov dword [0x4bb244], eax
call esi
push 0x497d94
mov edi, eax
call esi
mov ebx, eax
test edi, edi
je 0x4767ca
test ebx, ebx
jne 0x476932
call fcn.00463810
push 0x208
lea ecx, [esp + 0x14]
push 0
push ecx
call fcn.00477820
push 0x208
lea edx, [esp + 0x228]
push 0
push edx
call fcn.00477820
add esp, 0x18
push 0x104
lea eax, [esp + 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
call fcn.00463390
lea ecx, [esp + 0x218]
lea edx, [esp + 0x10]
push ecx
test eax, eax
je 0x47689a
push 0x497dac
push 0x104
push edx
call fcn.00463bb0
lea eax, [esp + 0x20]
push eax
push 0x497de4
push 0x43
call fcn.004638d0
lea ecx, [esp + 0x234]
push ecx
push str._sSysWOW64wpcap.dll
lea edx, [esp + 0x34]
push 0x104
push edx
call fcn.00463bb0
lea eax, [esp + 0x3c]
push eax
push 0x497e20
push 0x40
call fcn.004638d0
lea ecx, [esp + 0x250]
push ecx
push str._sSysWOW64Packet.dll
lea edx, [esp + 0x50]
push 0x104
push edx
call fcn.00463bb0
add esp, 0x48
lea eax, [esp + 0x10]
push eax
push 0x497e60
push 0x3f
jmp 0x476913
push str._sSystem32wpcap.dll
push 0x104
push edx
call fcn.00463bb0
lea eax, [esp + 0x20]
push eax
push 0x497e9c
push 0x3d
call fcn.004638d0
lea ecx, [esp + 0x234]
push ecx
push str._sSystem32Packet.dll
lea edx, [esp + 0x34]
push 0x104
push edx
call fcn.00463bb0
lea eax, [esp + 0x3c]
push eax
push 0x497edc
push 0x3c
call fcn.004638d0
lea ecx, [esp + 0x250]
push ecx
push str._sSystem32drivers_npf.sys
lea edx, [esp + 0x50]
push 0x104
push edx
call fcn.00463bb0
add esp, 0x48
lea eax, [esp + 0x10]
push eax
push str.RC_DATA
push 0x3e
call fcn.004638d0
add esp, 0xc
call fcn.00463870
push 0x497f34
call esi
push str.Packet.dll
mov edi, eax
call esi
mov ebx, eax
test edi, edi
je 0x476abc
test ebx, ebx
je 0x476abc
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x497f60
push edi
call esi
mov dword [0x4bb248], eax
test eax, eax
je 0x476abc
push 0x497f74
push edi
call esi
mov dword [0x4bb24c], eax
test eax, eax
je 0x476abc
push 0x497f80
push edi
call esi
mov dword [0x4bb250], eax
test eax, eax
je 0x476abc
push 0x497f90
push edi
call esi
mov dword [0x4bb254], eax
test eax, eax
je 0x476abc
push 0x497fa0
push edi
call esi
mov dword [0x4bb258], eax
test eax, eax
je 0x476abc
push 0x497fb0
push edi
call esi
mov dword [0x4bb25c], eax
test eax, eax
je 0x476abc
push 0x497fc0
push edi
call esi
mov dword [0x4bb260], eax
test eax, eax
je 0x476abc
push 0x497fd4
push edi
call esi
mov dword [0x4bb264], eax
test eax, eax
je 0x476abc
push 0x497fe0
push ebx
call esi
mov dword [0x4bb268], eax
test eax, eax
je 0x476abc
push 0x497ff4
push ebx
call esi
mov dword [0x4bb26c], eax
test eax, eax
je 0x476abc
push 0x498008
push ebx
call esi
mov dword [0x4bb270], eax
test eax, eax
je 0x476abc
push 0x49801c
push ebx
call esi
mov dword [0x4bb274], eax
test eax, eax
je 0x476abc
push 0x498034
push ebx
call esi
mov dword [0x4bb278], eax
test eax, eax
je 0x476abc
push 0x498048
push ebx
call esi
mov dword [0x4bb27c], eax
test eax, eax
je 0x476abc
push 0x498058
push ebx
call esi
mov dword [0x4bb280], eax
test eax, eax
je 0x476abc
push 0x498070
push ebx
call esi
mov dword [0x4bb284], eax
test eax, eax
je 0x476abc
push 0x498084
push ebx
call esi
mov dword [0x4bb288], eax
test eax, eax
je 0x476abc
push 0x498098
push ebx
call esi
mov dword [0x4bb28c], eax
test eax, eax
je 0x476abc
push 0x4980ac
push ebx
call esi
mov dword [0x4bb290], eax
test eax, eax
je 0x476abc
mov ebp, 1
mov ecx, dword [esp + 0x420]
pop edi
pop esi
mov eax, ebp
pop ebp
pop ebx
xor ecx, esp
call fcn.004771de
add esp, 0x414
ret