Function at 0x496e65
Capabilities:
Get common file path

Disassembly:
push 0x2e4
mov eax, 0x5218e1
call fcn.005066d0
mov esi, 0x104
push esi
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x561c2c
lea eax, [ebp - 0x124]
push esi
push eax
call fcn.0050444b
add esp, 0xc
lea eax, [ebp - 0x124]
mov esi, 0x59f0b8
push eax
mov ecx, esi
call fcn.0040c9a9
call fcn.0042112a
xor ebx, ebx
cmp eax, ebx
je 0x496ec1
push 0x561c38
jmp 0x496ec6
push 0x561c48
push esi
call fcn.0044b10a
cmp dword [0x59f0d0], 0x10
mov eax, dword [0x59f0bc]
jae 0x496edf
mov eax, 0x59f0bc
push 3
push eax
lea eax, [ebp - 0x2f0]
lea ecx, [ebp - 0x2ec]
push eax
mov dword [ebp - 0x2f0], ecx
call fcn.00417fbb
mov dword [ebp - 4], ebx
push dword [ebp - 0x2f0]
lea esi, [ebp - 0x15c]
call fcn.0040b812
lea eax, [ebp - 0x2ec]
mov byte [ebp - 4], 2
cmp dword [ebp - 0x2f0], eax
je 0x496f2c
push dword [ebp - 0x2f0]
call fcn.00500055
pop ecx
call fcn.0040dbda
cmp byte [eax], bl
jne 0x496fbb
lea eax, [ebp - 0x1ec]
push eax
call fcn.0040d9e1
lea eax, [ebp - 0x15c]
push eax
push ecx
push 0x543368
push ecx
lea eax, [ebp - 0x1e4]
push str.CDriverHelper::SetPath___path
push eax
mov byte [ebp - 4], 3
call fcn.0040c0a0
add esp, 0xc
push eax
call fcn.0040c0a0
add esp, 0xc
push eax
call fcn.0040b612
pop ecx
pop ecx
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0x1ec]
call fcn.0040bf31
lea edi, [ebp - 0x140]
mov byte [ebp - 4], 4
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
lea eax, [ebp - 0x1ec]
mov byte [ebp - 4], 2
call fcn.0040c22b
jmp 0x497102
lea eax, [ebp - 0x1e4]
push eax
mov byte [ebp - 4], 5
call fcn.0040b935
mov byte [ebp - 4], 6
call fcn.0040dbda
lea ecx, [ebp - 0x140]
call fcn.0040b84b
mov byte [ebp - 4], 7
cmp dword [eax + 0x18], 8
jb 0x496fee
mov esi, dword [eax + 4]
jmp 0x496ff1
lea esi, [eax + 4]
lea eax, [ebp - 0x1e4]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.CDriverHelper::SetPath___path
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543368
push eax
call fcn.0040c0a0
pop ecx
pop ecx
lea ecx, [ebp - 0x15c]
push ecx
push eax
call fcn.0040b612
pop ecx
pop ecx
push ebx
push 1
lea esi, [ebp - 0x140]
mov byte [ebp - 4], 6
call fcn.0040dac5
lea eax, [ebp - 0x164]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 8
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
cmp al, bl
je 0x4970b6
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0x1e4]
call fcn.0040b831
push 0x112
push str..DriverHelper.cpp
push eax
push esi
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 9
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push ebx
push 1
lea esi, [ebp - 0x140]
call fcn.0040dac5
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x1e4]
mov byte [ebp - 4], 5
call fcn.0040b8a0
jmp 0x497102
push ebx
push 1
lea esi, [ebp - 0x15c]
call fcn.0040dac5
call fcn.0050672c
ret