Function at 0x1005b026
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
mov eax, 0x2af8
call fcn.10087c20
mov ecx, dword [ebp + 8]
mov eax, dword [0x100c51b8]
xor eax, ebp
mov dword [esp + 0x2af0], eax
xor eax, eax
mov dword [ecx], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
lea esi, [esp + 0x28e8]
mov dword [esp + 0xc], esi
mov ecx, dword [esp + 0xc]
push 0x208
push eax
push dword [esp + 0x14]
call fcn.1008c000
add esp, 0xc
push 0x104
push esi
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push str.iphlpapi.dll
push esi
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [esp + 0x10], eax
mov eax, 0x2da549fe
cmp eax, 0x197432cd
jg 0x1005b0e1
cmp eax, 0xbeeea5e6
jle 0x1005b11a
cmp eax, 0xc64998e7
jle 0x1005b173
cmp eax, 0xc64998e8
je 0x1005b284
cmp eax, 0xe2b3cc96
je 0x1005b2a1
cmp eax, 0xf9104f69
jne 0x1005b0a4
mov eax, 0x65dce3a9
jmp 0x1005b0a4
cmp eax, 0x389cd362
jle 0x1005b140
cmp eax, 0x4bb831a0
jle 0x1005b1cc
cmp eax, 0x5edaaade
je 0x1005b2af
cmp eax, 0x65dce3a9
jne 0x1005b3e3
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 0x9f8ab985
jmp 0x1005b0a4
cmp eax, 0x9f9fdad1
jg 0x1005b1fd
cmp eax, 0x80aec0a1
je 0x1005b37c
cmp eax, 0x9f8ab985
je 0x1005b27a
jmp 0x1005b0a4
cmp eax, 0x2da549fd
jg 0x1005b23d
cmp eax, 0x197432ce
je 0x1005b386
cmp eax, 0x25488b99
jne 0x1005b0a4
mov ecx, dword [ebp + 8]
call fcn.100087f0
mov eax, 0x4bb831a1
jmp 0x1005b0a4
cmp eax, 0xbeeea5e7
je 0x1005b27a
cmp eax, 0xbffcab59
jne 0x1005b0a4
lea ecx, [esp + 0x68]
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x2c]
mov dword [esp + 0x1c], edx
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x2c], 0x2880
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x14]
push edx
push dword [esp + 0x24]
call eax
test eax, eax
mov eax, 0x389cd363
mov ecx, 0x197432ce
cmove eax, ecx
jmp 0x1005b0a4
cmp eax, 0x389cd363
je 0x1005b394
cmp eax, 0x3f23f75b
jne 0x1005b0a4
mov dword [esp + 4], edi
cmp dword [esp + 4], 0
mov eax, 0x336adf3c
mov ecx, 0x80aec0a1
cmove eax, ecx
jmp 0x1005b0a4
cmp eax, 0x9f9fdad2
je 0x1005b3a6
cmp eax, 0xa98fa2a4
jne 0x1005b0a4
push str.GetAdaptersInfo
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0x14], eax
cmp dword [esp + 0x14], 0
mov eax, 0xbffcab59
mov ecx, 0xf9104f69
cmove eax, ecx
jmp 0x1005b0a4
cmp eax, 0x2da549fe
je 0x1005b3cc
cmp eax, 0x336adf3c
jne 0x1005b0a4
lea eax, [esp + 0x30]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x30], 0
mov word [esp + 0x34], 0
xor esi, esi
mov eax, 0xc64998e8
jmp 0x1005b0a4
mov eax, 0xe2b3cc96
jmp 0x1005b0a4
mov dword [esp + 8], esi
mov eax, dword [esp + 8]
cmp eax, 6
mov eax, 0x5edaaade
mov ecx, 0x9f9fdad2
cmovl eax, ecx
jmp 0x1005b0a4
mov eax, dword [esp + 0xc]
mov eax, 0x4bb831a1
jmp 0x1005b0a4
mov edi, dword [esp + 4]
mov eax, 0x10c
add edi, eax
push edi
call fcn.1009ee80
add esp, 4
mov ecx, dword [ebp + 8]
push eax
push edi
call fcn.10008e94
mov ecx, eax
xor ebx, ebx
inc ebx
push ebx
mov eax, 0x100be59e
push eax
call fcn.10008e94
mov edi, eax
mov eax, dword [esp + 4]
push dword [eax + 0x1a0]
lea ebx, [esp + 0x54]
push ebx
call fcn.1005b59b
add esp, 8
mov dword [esp + 0x28], esi
mov esi, dword [esp + 0x60]
mov ecx, ebx
call fcn.10007bca
mov ecx, edi
push esi
push eax
call fcn.10008e94
mov ecx, eax
xor eax, eax
inc eax
push eax
mov eax, 0x100be59e
push eax
call fcn.10008e94
mov edi, eax
lea ecx, [esp + 0x30]
lea ebx, [esp + 0x38]
push ebx
call fcn.1005b408
mov esi, dword [esp + 0x48]
mov ecx, ebx
call fcn.10007bca
mov ecx, edi
push esi
mov esi, dword [esp + 0x2c]
push eax
call fcn.10008e94
mov ecx, eax
xor eax, eax
inc eax
push eax
push 0x100be460
call fcn.10008e94
mov ecx, ebx
call fcn.100087f0
lea ecx, [esp + 0x50]
call fcn.100087f0
mov eax, dword [esp + 4]
mov edi, dword [eax]
mov eax, dword [esp + 0x24]
mov eax, 0x3f23f75b
jmp 0x1005b0a4
mov eax, 0x389cd363
jmp 0x1005b0a4
mov eax, 0x3f23f75b
mov edi, dword [esp + 0x20]
jmp 0x1005b0a4
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
mov eax, 0xf9104f69
jmp 0x1005b0a4
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov al, byte [eax + ecx + 0x194]
mov ecx, dword [esp + 8]
mov byte [esp + ecx + 0x30], al
mov esi, dword [esp + 8]
inc esi
mov eax, 0xc64998e8
jmp 0x1005b0a4
cmp dword [esp + 0x10], 0
mov eax, 0xa98fa2a4
mov ecx, 0xbeeea5e7
cmove eax, ecx
jmp 0x1005b0a4
cmp eax, 0x4bb831a1
jne 0x1005b0a4
mov ecx, dword [esp + 0x2af0]
xor ecx, ebp
call fcn.100879aa
mov eax, dword [ebp + 8]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret