Function at 0x492030
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2ab8
call fcn.00492d40
mov eax, dword [0x4ae248]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
mov word [ebp - 0x220], ax
push 0x206
push 0
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ecx
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x104
lea edx, reloc.NETAPI32.dll_NetApiBufferFree
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push eax
call dword [sym.imp.MSVCR100.dll_wcslen]
add esp, 4
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
cmp dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], 0
jle 0x4920cd
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
movzx edx, word [ebp + ecx*2 - 0x222]
cmp edx, 0x5c
je 0x4920cd
mov eax, 0x5c
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov word [ebp + ecx*2 - 0x220], ax
xor edx, edx
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov word [ebp + eax*2 - 0x21e], dx
push 0x104
push str.iphlpapi.dll
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ecx
call dword [sym.imp.MSVCR100.dll_wcsncat]
add esp, 0xc
lea edx, reloc.NETAPI32.dll_NetApiBufferFree
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
cmp dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], 0
jne 0x49210a
xor al, al
jmp 0x492291
mov dword [ebp - 0x18], 0
push 0x497248
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x492260
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], 0x2880
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ecx
lea edx, reloc.NETAPI32.dll_NetApiBufferFree
push edx
call dword [ebp - 0x18]
test eax, eax
jne 0x492260
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], 3
cmp dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], 0
je 0x492260
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
add ecx, 8
push ecx
call fcn.004922a0
add esp, 4
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
lea ecx, [ebp - 0xc]
call fcn.0048ef10
push eax
mov ecx, dword [ebp + 8]
call fcn.00492550
movzx edx, al
test edx, edx
jne 0x4921d6
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
cmp dword [eax + reloc.NETAPI32.dll_NetApiBufferFree], 6
je 0x4921c8
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
cmp dword [ecx + reloc.NETAPI32.dll_NetApiBufferFree], 0x17
jne 0x49224d
mov edx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
cmp edx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
jle 0x49224d
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dl, byte [ecx + 0x194]
mov byte [eax], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dl, byte [ecx + 0x195]
mov byte [eax + 1], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dl, byte [ecx + 0x196]
mov byte [eax + 2], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dl, byte [ecx + 0x197]
mov byte [eax + 3], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dl, byte [ecx + 0x198]
mov byte [eax + 4], dl
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dl, byte [ecx + 0x199]
mov byte [eax + 5], dl
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov edx, dword [ecx]
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], edx
jmp 0x492169
cmp dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], 0
je 0x492280
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], 0
lea ecx, [ebp - 0x14]
call fcn.0048ef10
push eax
mov ecx, dword [ebp + 8]
call fcn.00492520
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00492cee
mov esp, ebp
pop ebp
ret