Function at 0x418e6c
Capabilities:
Get common file path

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0x4b8
mov ebp, ecx
mov ebx, edx
mov dword [esp + 0x4b4], eax
lea eax, [esp + 0x250]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
jne 0x418ec4
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x418ea9
mov dword [eax], 0
test ebx, ebx
je 0x418eb3
mov dword [ebx], 0
test ebp, ebp
je 0x41976a
mov byte [ebp], 0x20
jmp 0x41976a
mov byte [esp + 0x353], 0
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x418ed7
lea edi, [esp + 0x10]
mov edx, 0x7e5254
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x418ef4
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00419b2c
test eax, eax
jl 0x419078
mov esi, 0x5f
mov word [esp + 0xc], si
mov eax, 4
mov edx, 2
xor ecx, ecx
call fcn.00419adf
mov dword [esp + 0x450], eax
mov dword [esp + 0x454], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jl 0x419777
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x418f70
mov dword [eax], 1
test ebx, ebx
je 0x418f7a
mov dword [ebx], 0
test ebp, ebp
je 0x418f82
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x448
mov word [esp + 0xc], si
mov eax, 4
mov edx, 3
xor ecx, ecx
call fcn.00419adf
mov dword [esp + 0x498], eax
mov dword [esp + 0x49c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jl 0x419002
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x418fe4
mov dword [eax], 2
test ebx, ebx
je 0x418fee
mov dword [ebx], 0
test ebp, ebp
je 0x418ff6
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x44
mov word [esp + 0xc], si
mov eax, 4
mov edx, 4
xor ecx, ecx
call fcn.00419adf
mov dword [esp + 0x4a0], eax
mov dword [esp + 0x4a4], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jl 0x419081
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x419058
mov dword [eax], 3
test ebx, ebx
je 0x419062
mov dword [ebx], 0
test ebp, ebp
je 0x41906a
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x419081
xor eax, eax
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x41908c
lea edi, [esp + 0x10]
mov edx, 0x7e5260
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x4190a9
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00419b2c
test eax, eax
jl 0x41913b
mov esi, 0x46
mov word [esp + 0xc], si
mov eax, 4
mov edx, 4
xor ecx, ecx
call fcn.00419adf
mov dword [esp + 0x458], eax
mov dword [esp + 0x45c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jl 0x41913b
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x41911d
mov dword [eax], 3
test ebx, ebx
je 0x419127
mov dword [ebx], 0
test ebp, ebp
je 0x41912f
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x419146
lea edi, [esp + 0x10]
mov edx, 0x7e5254
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x419163
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00419b2c
test eax, eax
jl 0x4192e1
mov esi, 0x9b
mov word [esp + 0xc], si
mov eax, 4
mov edx, 5
xor ecx, ecx
call fcn.00419adf
mov dword [esp + 0x460], eax
mov dword [esp + 0x464], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jl 0x4191f9
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4191db
mov dword [eax], 5
test ebx, ebx
je 0x4191e5
mov dword [ebx], 0
test ebp, ebp
je 0x4191ed
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x13e
mov word [esp + 0xc], si
mov eax, 4
mov edx, 6
xor ecx, ecx
call fcn.00419adf
mov dword [esp + 0x468], eax
mov dword [esp + 0x46c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jl 0x41926d
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x41924f
mov dword [eax], 6
test ebx, ebx
je 0x419259
mov dword [ebx], 0
test ebp, ebp
je 0x419261
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x1b4
mov word [esp + 0xc], si
mov eax, 4
mov edx, 6
xor ecx, ecx
call fcn.00419adf
mov dword [esp + 0x470], eax
mov dword [esp + 0x474], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jl 0x4192e1
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4192c3
mov dword [eax], 6
test ebx, ebx
je 0x4192cd
mov dword [ebx], 1
test ebp, ebp
je 0x4192d5
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4192ec
lea edi, [esp + 0x10]
mov edx, 0x7e5270
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x419309
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00419b2c
test eax, eax
jl 0x41939e
mov esi, 0x206
mov word [esp + 0xc], si
mov eax, 4
mov edx, 6
mov ecx, 3
call fcn.00419adf
mov dword [esp + 0x478], eax
mov dword [esp + 0x47c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jl 0x41939e
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x419380
mov dword [eax], 6
test ebx, ebx
je 0x41938a
mov dword [ebx], 1
test ebp, ebp
je 0x419392
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4193a9
lea edi, [esp + 0x10]
mov edx, 0x7e5254
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x4193c6
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00419b2c
test eax, eax
jl 0x419458
mov esi, 0x2bc
mov word [esp + 0xc], si
mov eax, 4
mov edx, 7
xor ecx, ecx
call fcn.00419adf
mov dword [esp + 0x480], eax
mov dword [esp + 0x484], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jl 0x419458
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x41943a
mov dword [eax], 7
test ebx, ebx
je 0x419444
mov dword [ebx], 0
test ebp, ebp
je 0x41944c
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x419463
lea edi, [esp + 0x10]
mov edx, 0x7e527c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x419480
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00419b2c
test eax, eax
jl 0x419512
mov esi, 0x2cc
mov word [esp + 0xc], si
mov eax, 4
mov edx, 7
xor ecx, ecx
call fcn.00419adf
mov dword [esp + 0x488], eax
mov dword [esp + 0x48c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jl 0x419512
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4194f4
mov dword [eax], 7
test ebx, ebx
je 0x4194fe
mov dword [ebx], 0
test ebp, ebp
je 0x419506
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x41951d
lea edi, [esp + 0x10]
mov edx, 0x7e5254
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x41953a
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00419b2c
test eax, eax
jl 0x419572
movzx esi, word [esp + 0x4ae]
cmp esi, 4
je 0x419a86
cmp esi, 5
je 0x419a06
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x41957d
lea edi, [esp + 0x10]
mov edx, 0x7e5288
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x41959a
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00419b2c
test eax, eax
jl 0x4195e4
movzx esi, word [esp + 0x4ae]
cmp esi, 4
je 0x4199b5
cmp esi, 5
je 0x41992d
cmp esi, 4
je 0x4198e0
cmp esi, 5
je 0x419860
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4195ef
lea edi, [esp + 0x10]
mov edx, 0x7e5294
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x41960c
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00419b2c
test eax, eax
jl 0x4196a1
mov esi, 0x375
mov word [esp + 0xc], si
mov eax, 6
mov edx, 3
mov ecx, 1
call fcn.00419adf
mov dword [esp + 0x490], eax
mov dword [esp + 0x494], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jl 0x4196a1
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x419683
mov dword [eax], 8
test ebx, ebx
je 0x41968d
mov dword [ebx], 1
test ebp, ebp
je 0x419695
mov byte [ebp], 0x62
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4196ac
lea edi, [esp + 0x10]
mov edx, 0x7e52a4
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x4196c9
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00419b2c
test eax, eax
jl 0x419701
movzx esi, word [esp + 0x4ae]
cmp esi, 4
je 0x419816
cmp esi, 5
je 0x419796
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x41970c
lea edi, [esp + 0x10]
mov edx, 0x7e52b0
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x419729
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00419b2c
test eax, eax
jl 0x419785
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x419758
mov dword [eax], 9
test ebx, ebx
je 0x419762
mov dword [ebx], 0
test ebp, ebp
je 0x41976a
mov byte [ebp], 0x20
xor eax, eax
add esp, 0x4b8
pop ebx
pop ebp
pop esi
pop edi
ret
xor eax, eax
mov dword [esp + 0x4b0], eax
jmp 0x418f8e
mov eax, dword [esp + 0x4b0]
test eax, eax
je 0x418e98
jmp 0x41976a
mov esi, 0x86
mov word [esp + 0xc], si
mov eax, 5
mov edx, 2
mov ecx, 0xe5d
call fcn.00419adf
mov dword [esp + 0x228], eax
mov dword [esp + 0x22c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jl 0x419701
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4197f3
mov dword [eax], 8
test ebx, ebx
je 0x4197fd
mov dword [ebx], 2
test ebp, ebp
je 0x419805
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x419701
mov edi, 0x86
mov word [esp + 0xc], di
mov eax, 4
mov edx, 9
xor ecx, ecx
call fcn.00419adf
mov dword [esp + 0x248], eax
mov dword [esp + 0x24c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jge 0x4197e2
jmp 0x4196f8
mov esi, 0x385
mov word [esp + 0xc], si
mov eax, 5
mov edx, 1
mov ecx, 0xa28
call fcn.00419adf
mov dword [esp + 0x210], eax
mov dword [esp + 0x214], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jl 0x4195e4
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4198bd
mov dword [eax], 8
test ebx, ebx
je 0x4198c7
mov dword [ebx], 1
test ebp, ebp
je 0x4198cf
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x4195e4
mov edi, 0x385
mov word [esp + 0xc], di
mov eax, 4
mov edx, 8
mov ecx, 1
call fcn.00419adf
mov dword [esp + 0x230], eax
mov dword [esp + 0x234], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jge 0x4198ac
jmp 0x4195db
mov edi, 0x371
mov word [esp + 0xc], di
mov eax, 5
mov edx, 1
mov ecx, 0xa28
call fcn.00419adf
mov dword [esp + 0x220], eax
mov dword [esp + 0x224], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jl 0x4195d2
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x41998a
mov dword [eax], 8
test ebx, ebx
je 0x419994
mov dword [ebx], 1
test ebp, ebp
je 0x41999c
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
movzx esi, word [esp + 0x4ae]
jmp 0x4195d2
mov edi, 0x371
mov word [esp + 0xc], di
mov eax, 4
mov edx, 8
mov ecx, 1
call fcn.00419adf
mov dword [esp + 0x240], eax
mov dword [esp + 0x244], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jge 0x419979
jmp 0x4195c9
mov esi, 0x190
mov word [esp + 0xc], si
mov eax, 5
mov edx, 1
mov ecx, 0x8d2
call fcn.00419adf
mov dword [esp + 0x218], eax
mov dword [esp + 0x21c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jl 0x419572
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x419a63
mov dword [eax], 8
test ebx, ebx
je 0x419a6d
mov dword [ebx], 0
test ebp, ebp
je 0x419a75
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x419572
mov edi, 0x190
mov word [esp + 0xc], di
mov eax, 4
mov edx, 8
xor ecx, ecx
call fcn.00419adf
mov dword [esp + 0x238], eax
mov dword [esp + 0x23c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00419af8
add esp, 0x10
test eax, eax
jge 0x419a52
jmp 0x419569