Function at 0x4fd560
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59e52d
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x62d12c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x154], 0xf
mov dword [ebp - 0x158], ebx
mov byte [ebp - 0x168], bl
lea eax, [ebp - 0x130]
push eax
mov dword [ebp - 4], ebx
call fcn.004ef7b0
add esp, 4
mov byte [ebp - 4], 1
lea edi, [ebx + 0x10]
cmp dword [ebp - 0x120], ebx
je 0x4fd64d
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x11c], edi
jae 0x4fd5e1
lea eax, [ebp - 0x130]
push ebx
push str.DbgHelp.dll
push eax
lea ecx, [ebp - 0x14c]
push ecx
call fcn.004eec60
add esp, 0x10
push eax
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 2
call fcn.0041fd30
cmp dword [ebp - 0x138], edi
jb 0x4fd61e
mov edx, dword [ebp - 0x14c]
push edx
call fcn.00558723
add esp, 4
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x154], edi
jae 0x4fd632
lea eax, [ebp - 0x168]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
call fcn.004fb920
test al, al
jne 0x4fd64d
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor esi, esi
mov byte [ebp - 4], bl
cmp dword [ebp - 0x11c], edi
jb 0x4fd667
mov eax, dword [ebp - 0x130]
push eax
call fcn.00558723
add esp, 4
cmp esi, ebx
jne 0x4fd930
push 0x104
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
je 0x4fd760
push ebx
push str._system32DbgHelp.dll
lea edx, [ebp - 0x114]
push edx
lea eax, [ebp - 0x14c]
push eax
call fcn.004eec60
add esp, 0x10
mov eax, dword [ebp - 0x14c]
mov byte [ebp - 4], 3
cmp dword [ebp - 0x138], edi
jae 0x4fd6bd
lea eax, [ebp - 0x14c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
call fcn.004fb920
test al, al
jne 0x4fd6d8
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x4fd6dc
cmp esi, ebx
jne 0x4fd73e
push ebx
push str._systemDbgHelp.dll
lea ecx, [ebp - 0x114]
push ecx
lea edx, [ebp - 0x130]
push edx
call fcn.004eec60
mov eax, dword [ebp - 0x130]
add esp, 0x10
cmp dword [ebp - 0x11c], edi
jae 0x4fd70c
lea eax, [ebp - 0x130]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
call fcn.004fb920
test al, al
jne 0x4fd727
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor esi, esi
cmp dword [ebp - 0x11c], edi
jb 0x4fd73e
mov eax, dword [ebp - 0x130]
push eax
call fcn.00558723
add esp, 4
mov byte [ebp - 4], bl
cmp dword [ebp - 0x138], edi
jb 0x4fd758
mov ecx, dword [ebp - 0x14c]
push ecx
call fcn.00558723
add esp, 4
cmp esi, ebx
jne 0x4fd930
mov eax, 0xf
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1b0], ebx
mov byte [ebp - 0x1c0], bl
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x194], ebx
mov byte [ebp - 0x1a4], bl
mov byte [ebp - 0x188], bl
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1c4], esp
push 7
mov dword [ecx + 0x14], eax
mov dword [ecx + 0x10], ebx
push str.unknown
mov byte [ebp - 4], 4
mov byte [ecx], bl
call fcn.00422130
lea edx, [ebp - 0x1c0]
push edx
push ebx
call fcn.004f1030
add esp, 0x24
cmp al, bl
je 0x4fd8ec
mov eax, 0xf
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x120], ebx
mov byte [ebp - 0x130], bl
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x13c], ebx
mov byte [ebp - 0x14c], bl
mov eax, dword [ebp - 0x1a4]
mov byte [ebp - 4], 6
cmp dword [ebp - 0x190], edi
jae 0x4fd80b
lea eax, [ebp - 0x1a4]
lea ecx, [ebp - 0x14c]
push ecx
lea edx, [ebp - 0x130]
push edx
push eax
call fcn.004eee50
mov eax, dword [ebp - 0x130]
add esp, 0xc
cmp dword [ebp - 0x11c], edi
jae 0x4fd836
lea eax, [ebp - 0x130]
push ebx
push str.DbgHelp.dll
push eax
lea eax, [ebp - 0x184]
push eax
call fcn.004eec60
mov eax, dword [ebp - 0x184]
add esp, 0x10
cmp dword [ebp - 0x170], edi
jae 0x4fd860
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
call fcn.004fb920
test al, al
jne 0x4fd87b
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor esi, esi
cmp dword [ebp - 0x170], edi
jb 0x4fd892
mov ecx, dword [ebp - 0x184]
push ecx
call fcn.00558723
add esp, 4
mov dword [ebp - 0x170], 0xf
mov dword [ebp - 0x174], ebx
mov byte [ebp - 0x184], bl
cmp dword [ebp - 0x138], edi
jb 0x4fd8bf
mov edx, dword [ebp - 0x14c]
push edx
call fcn.00558723
add esp, 4
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], ebx
mov byte [ebp - 0x14c], bl
cmp dword [ebp - 0x11c], edi
jb 0x4fd8ec
mov eax, dword [ebp - 0x130]
push eax
call fcn.00558723
add esp, 4
cmp dword [ebp - 0x190], edi
jb 0x4fd903
mov ecx, dword [ebp - 0x1a4]
push ecx
call fcn.00558723
add esp, 4
mov dword [ebp - 0x190], 0xf
mov dword [ebp - 0x194], ebx
mov byte [ebp - 0x1a4], bl
cmp dword [ebp - 0x1ac], edi
jb 0x4fd930
mov edx, dword [ebp - 0x1c0]
push edx
call fcn.00558723
add esp, 4
cmp dword [ebp - 0x154], edi
jb 0x4fd947
mov eax, dword [ebp - 0x168]
push eax
call fcn.00558723
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00558b78
mov esp, ebp
pop ebp
ret