Function at 0x78131d76
Capabilities:
Get common file path

Disassembly:
push ebp
lea ebp, [esp - 0x8104]
mov eax, 0x8184
call fcn.78131610
mov eax, dword [0x781c19e0]
xor eax, ebp
mov dword [ebp + 0x8100], eax
push esi
push edi
mov edi, dword [sym.imp._CKERNEL.dll_GetModuleHandleA]
push str.kernel32.dll
mov esi, ecx
call edi
test eax, eax
jne 0x78131db2
xor eax, eax
inc eax
jmp 0x78131f5a
push str.FindActCtxSectionStringW
push eax
call dword [sym.imp._CKERNEL.dll_GetProcAddress]
test eax, eax
mov dword [ebp - 0x40], eax
je 0x78131daa
push ebx
push str.MSCoree.dll
call edi
push str.PGORT80.dll
mov ebx, eax
call edi
test ebx, ebx
je 0x78131de2
test eax, eax
jne 0x78131f56
mov ebx, 0x1f40
push ebx
lea eax, [ebp + 0x1f8]
push eax
push esi
call dword [sym.imp._CKERNEL.dll_GetModuleFileNameW]
test eax, eax
je 0x78131f56
cmp eax, ebx
jae 0x78131f56
push ebx
lea eax, [ebp + 0x4078]
push eax
lea eax, [ebp + 0x1f8]
push eax
call dword [sym.imp._CKERNEL.dll_GetLongPathNameW]
test eax, eax
je 0x78131f56
cmp eax, ebx
jae 0x78131f56
lea eax, [ebp + 0x4078]
push 0x5c
push eax
call sym.MSVCR80.dll_wcsrchr
test eax, eax
pop ecx
pop ecx
je 0x78131f56
and word [eax + 2], 0
lea eax, [ebp + 0x4078]
push eax
call sym.MSVCR80.dll_wcslen
pop ecx
mov dword [ebp - 0x3c], eax
mov esi, 0x104
push esi
lea eax, [ebp + 0x7ef8]
push eax
call dword [sym.imp._CKERNEL.dll_GetSystemDirectoryW]
test eax, eax
je 0x78131f56
cmp eax, esi
jae 0x78131f56
cmp word [ebp + eax*2 + 0x7ef6], 0x5c
je 0x78131ea5
push 0xffffffffffffffff
push 0x7819498c
lea eax, [ebp + 0x7ef8]
push esi
push eax
call sym.MSVCR80.dll_wcsncat_s
add esp, 0x10
test eax, eax
jne 0x78131f56
lea eax, [ebp + 0x7ef8]
push eax
call sym.MSVCR80.dll_wcslen
cmp dword [ebp - 0x3c], eax
pop ecx
jne 0x78131ed0
lea eax, [ebp + 0x7ef8]
push eax
lea eax, [ebp + 0x4078]
push eax
call sym.MSVCR80.dll__wcsicmp
test eax, eax
pop ecx
pop ecx
je 0x78131efd
push 0x3c
lea eax, [ebp - 0x7c]
push 0
push eax
mov dword [ebp - 0x80], 0x40
call sym.MSVCR80.dll_memset
add esp, 0xc
lea eax, [ebp - 0x80]
push eax
push str.msvcr80.dll
push 2
push 0
push 0
call dword [ebp - 0x40]
test eax, eax
jne 0x78131f01
xor eax, eax
jmp 0x78131f59
push str.kernel32.dll
call edi
xor edi, edi
cmp eax, edi
je 0x78131f56
push str.GetSystemWindowsDirectoryW
push eax
call dword [sym.imp._CKERNEL.dll_GetProcAddress]
cmp eax, edi
je 0x78131f56
push esi
lea ecx, [ebp + 0x7ef8]
push ecx
call eax
cmp eax, edi
je 0x78131f56
cmp eax, esi
jae 0x78131f56
cmp word [ebp + eax*2 + 0x7ef6], 0x5c
push 0xffffffffffffffff
lea eax, [ebp + 0x7ef8]
je 0x78131f71
push str.WinSxS_
push esi
push eax
call sym.MSVCR80.dll_wcsncat_s
add esp, 0x10
test eax, eax
je 0x78131f78
xor eax, eax
inc eax
pop ebx
mov ecx, dword [ebp + 0x8100]
pop edi
xor ecx, ebp
pop esi
call fcn.78139a71
add ebp, 0x8104
leave
ret
push 0x78194934
jmp 0x78131f48
lea eax, [ebp + 0x7ef8]
push eax
call sym.MSVCR80.dll_wcslen
push eax
lea eax, [ebp + 0x4078]
push eax
lea eax, [ebp + 0x7ef8]
push eax
call sym.MSVCR80.dll__wcsnicmp
add esp, 0x10
test eax, eax
je 0x78131f56
push 0x228
lea eax, [ebp - 0x30]
push edi
push eax
mov dword [ebp - 0x38], edi
call sym.MSVCR80.dll_memset
push 0xffffffffffffffff
push str.Microsoft.VC80.CRT.manifest
lea eax, [ebp + 0x4078]
push ebx
push eax
call sym.MSVCR80.dll_wcsncat_s
add esp, 0x1c
test eax, eax
jne 0x78131f56
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp + 0x4078]
push eax
call sym.MSVCR80.dll__wfindfirst64i32
cmp eax, 0xffffffff
pop ecx
pop ecx
je 0x78131fef
push eax
call sym.MSVCR80.dll__findclose
pop ecx
jmp 0x78131f56
mov eax, dword [ebp - 0x3c]
jmp 0x78131efd