Function at 0x416f4c
Capabilities:
Get common file path

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0x4b8
mov ebp, ecx
mov ebx, edx
mov dword [esp + 0x4b4], eax
lea eax, [esp + 0x250]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
jne 0x416fa4
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x416f89
mov dword [eax], 0
test ebx, ebx
je 0x416f93
mov dword [ebx], 0
test ebp, ebp
je 0x41784a
mov byte [ebp], 0x20
jmp 0x41784a
mov byte [esp + 0x353], 0
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x416fb7
lea edi, [esp + 0x10]
mov edx, 0x87933c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x416fd4
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c0c
test eax, eax
jl 0x417158
mov esi, 0x5f
mov word [esp + 0xc], si
mov eax, 4
mov edx, 2
xor ecx, ecx
call fcn.00417bbf
mov dword [esp + 0x450], eax
mov dword [esp + 0x454], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jl 0x417857
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417050
mov dword [eax], 1
test ebx, ebx
je 0x41705a
mov dword [ebx], 0
test ebp, ebp
je 0x417062
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x448
mov word [esp + 0xc], si
mov eax, 4
mov edx, 3
xor ecx, ecx
call fcn.00417bbf
mov dword [esp + 0x498], eax
mov dword [esp + 0x49c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jl 0x4170e2
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4170c4
mov dword [eax], 2
test ebx, ebx
je 0x4170ce
mov dword [ebx], 0
test ebp, ebp
je 0x4170d6
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x44
mov word [esp + 0xc], si
mov eax, 4
mov edx, 4
xor ecx, ecx
call fcn.00417bbf
mov dword [esp + 0x4a0], eax
mov dword [esp + 0x4a4], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jl 0x417161
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417138
mov dword [eax], 3
test ebx, ebx
je 0x417142
mov dword [ebx], 0
test ebp, ebp
je 0x41714a
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x417161
xor eax, eax
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x41716c
lea edi, [esp + 0x10]
mov edx, 0x879348
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x417189
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c0c
test eax, eax
jl 0x41721b
mov esi, 0x46
mov word [esp + 0xc], si
mov eax, 4
mov edx, 4
xor ecx, ecx
call fcn.00417bbf
mov dword [esp + 0x458], eax
mov dword [esp + 0x45c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jl 0x41721b
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4171fd
mov dword [eax], 3
test ebx, ebx
je 0x417207
mov dword [ebx], 0
test ebp, ebp
je 0x41720f
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x417226
lea edi, [esp + 0x10]
mov edx, 0x87933c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x417243
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c0c
test eax, eax
jl 0x4173c1
mov esi, 0x9b
mov word [esp + 0xc], si
mov eax, 4
mov edx, 5
xor ecx, ecx
call fcn.00417bbf
mov dword [esp + 0x460], eax
mov dword [esp + 0x464], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jl 0x4172d9
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4172bb
mov dword [eax], 5
test ebx, ebx
je 0x4172c5
mov dword [ebx], 0
test ebp, ebp
je 0x4172cd
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x13e
mov word [esp + 0xc], si
mov eax, 4
mov edx, 6
xor ecx, ecx
call fcn.00417bbf
mov dword [esp + 0x468], eax
mov dword [esp + 0x46c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jl 0x41734d
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x41732f
mov dword [eax], 6
test ebx, ebx
je 0x417339
mov dword [ebx], 0
test ebp, ebp
je 0x417341
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x1b4
mov word [esp + 0xc], si
mov eax, 4
mov edx, 6
xor ecx, ecx
call fcn.00417bbf
mov dword [esp + 0x470], eax
mov dword [esp + 0x474], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jl 0x4173c1
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4173a3
mov dword [eax], 6
test ebx, ebx
je 0x4173ad
mov dword [ebx], 1
test ebp, ebp
je 0x4173b5
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4173cc
lea edi, [esp + 0x10]
mov edx, 0x879358
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x4173e9
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c0c
test eax, eax
jl 0x41747e
mov esi, 0x206
mov word [esp + 0xc], si
mov eax, 4
mov edx, 6
mov ecx, 3
call fcn.00417bbf
mov dword [esp + 0x478], eax
mov dword [esp + 0x47c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jl 0x41747e
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417460
mov dword [eax], 6
test ebx, ebx
je 0x41746a
mov dword [ebx], 1
test ebp, ebp
je 0x417472
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x417489
lea edi, [esp + 0x10]
mov edx, 0x87933c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x4174a6
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c0c
test eax, eax
jl 0x417538
mov esi, 0x2bc
mov word [esp + 0xc], si
mov eax, 4
mov edx, 7
xor ecx, ecx
call fcn.00417bbf
mov dword [esp + 0x480], eax
mov dword [esp + 0x484], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jl 0x417538
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x41751a
mov dword [eax], 7
test ebx, ebx
je 0x417524
mov dword [ebx], 0
test ebp, ebp
je 0x41752c
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x417543
lea edi, [esp + 0x10]
mov edx, 0x879364
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x417560
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c0c
test eax, eax
jl 0x4175f2
mov esi, 0x2cc
mov word [esp + 0xc], si
mov eax, 4
mov edx, 7
xor ecx, ecx
call fcn.00417bbf
mov dword [esp + 0x488], eax
mov dword [esp + 0x48c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jl 0x4175f2
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4175d4
mov dword [eax], 7
test ebx, ebx
je 0x4175de
mov dword [ebx], 0
test ebp, ebp
je 0x4175e6
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4175fd
lea edi, [esp + 0x10]
mov edx, 0x87933c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x41761a
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c0c
test eax, eax
jl 0x417652
movzx esi, word [esp + 0x4ae]
cmp esi, 4
je 0x417b66
cmp esi, 5
je 0x417ae6
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x41765d
lea edi, [esp + 0x10]
mov edx, 0x879370
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x41767a
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c0c
test eax, eax
jl 0x4176c4
movzx esi, word [esp + 0x4ae]
cmp esi, 4
je 0x417a95
cmp esi, 5
je 0x417a0d
cmp esi, 4
je 0x4179c0
cmp esi, 5
je 0x417940
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4176cf
lea edi, [esp + 0x10]
mov edx, 0x87937c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x4176ec
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c0c
test eax, eax
jl 0x417781
mov esi, 0x375
mov word [esp + 0xc], si
mov eax, 6
mov edx, 3
mov ecx, 1
call fcn.00417bbf
mov dword [esp + 0x490], eax
mov dword [esp + 0x494], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jl 0x417781
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417763
mov dword [eax], 8
test ebx, ebx
je 0x41776d
mov dword [ebx], 1
test ebp, ebp
je 0x417775
mov byte [ebp], 0x62
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x41778c
lea edi, [esp + 0x10]
mov edx, 0x87938c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x4177a9
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c0c
test eax, eax
jl 0x4177e1
movzx esi, word [esp + 0x4ae]
cmp esi, 4
je 0x4178f6
cmp esi, 5
je 0x417876
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4177ec
lea edi, [esp + 0x10]
mov edx, 0x879398
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x417809
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c0c
test eax, eax
jl 0x417865
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417838
mov dword [eax], 9
test ebx, ebx
je 0x417842
mov dword [ebx], 0
test ebp, ebp
je 0x41784a
mov byte [ebp], 0x20
xor eax, eax
add esp, 0x4b8
pop ebx
pop ebp
pop esi
pop edi
ret
xor eax, eax
mov dword [esp + 0x4b0], eax
jmp 0x41706e
mov eax, dword [esp + 0x4b0]
test eax, eax
je 0x416f78
jmp 0x41784a
mov esi, 0x86
mov word [esp + 0xc], si
mov eax, 5
mov edx, 2
mov ecx, 0xe5d
call fcn.00417bbf
mov dword [esp + 0x228], eax
mov dword [esp + 0x22c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jl 0x4177e1
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4178d3
mov dword [eax], 8
test ebx, ebx
je 0x4178dd
mov dword [ebx], 2
test ebp, ebp
je 0x4178e5
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x4177e1
mov edi, 0x86
mov word [esp + 0xc], di
mov eax, 4
mov edx, 9
xor ecx, ecx
call fcn.00417bbf
mov dword [esp + 0x248], eax
mov dword [esp + 0x24c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jge 0x4178c2
jmp 0x4177d8
mov esi, 0x385
mov word [esp + 0xc], si
mov eax, 5
mov edx, 1
mov ecx, 0xa28
call fcn.00417bbf
mov dword [esp + 0x210], eax
mov dword [esp + 0x214], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jl 0x4176c4
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x41799d
mov dword [eax], 8
test ebx, ebx
je 0x4179a7
mov dword [ebx], 1
test ebp, ebp
je 0x4179af
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x4176c4
mov edi, 0x385
mov word [esp + 0xc], di
mov eax, 4
mov edx, 8
mov ecx, 1
call fcn.00417bbf
mov dword [esp + 0x230], eax
mov dword [esp + 0x234], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jge 0x41798c
jmp 0x4176bb
mov edi, 0x371
mov word [esp + 0xc], di
mov eax, 5
mov edx, 1
mov ecx, 0xa28
call fcn.00417bbf
mov dword [esp + 0x220], eax
mov dword [esp + 0x224], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jl 0x4176b2
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417a6a
mov dword [eax], 8
test ebx, ebx
je 0x417a74
mov dword [ebx], 1
test ebp, ebp
je 0x417a7c
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
movzx esi, word [esp + 0x4ae]
jmp 0x4176b2
mov edi, 0x371
mov word [esp + 0xc], di
mov eax, 4
mov edx, 8
mov ecx, 1
call fcn.00417bbf
mov dword [esp + 0x240], eax
mov dword [esp + 0x244], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jge 0x417a59
jmp 0x4176a9
mov esi, 0x190
mov word [esp + 0xc], si
mov eax, 5
mov edx, 1
mov ecx, 0x8d2
call fcn.00417bbf
mov dword [esp + 0x218], eax
mov dword [esp + 0x21c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jl 0x417652
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417b43
mov dword [eax], 8
test ebx, ebx
je 0x417b4d
mov dword [ebx], 0
test ebp, ebp
je 0x417b55
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x417652
mov edi, 0x190
mov word [esp + 0xc], di
mov eax, 4
mov edx, 8
xor ecx, ecx
call fcn.00417bbf
mov dword [esp + 0x238], eax
mov dword [esp + 0x23c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bd8
add esp, 0x10
test eax, eax
jge 0x417b32
jmp 0x417649