Function at 0x78131d61
Capabilities:
Get common file path

Disassembly:
push ebp
lea ebp, [esp - 0x8104]
mov eax, 0x8184
call fcn.78131610
mov eax, dword [0x781c19c8]
xor eax, ebp
mov dword [ebp + 0x8100], eax
push esi
push edi
mov edi, dword [sym.imp.kernel32.dll_GetModuleHandleA]
push 0x781949cc
mov esi, ecx
call edi
test eax, eax
jne 0x78131d9d
xor eax, eax
inc eax
jmp 0x78131f45
push str.FindActCtxSectionStringW
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
mov dword [ebp - 0x40], eax
je 0x78131d95
push ebx
push str.MSCoree.dll
call edi
push str.PGORT80.dll
mov ebx, eax
call edi
test ebx, ebx
je 0x78131dcd
test eax, eax
jne 0x78131f41
mov ebx, 0x1f40
push ebx
lea eax, [ebp + 0x1f8]
push eax
push esi
call dword [sym.imp.kernel32.dll_GetModuleFileNameW]
test eax, eax
je 0x78131f41
cmp eax, ebx
jae 0x78131f41
push ebx
lea eax, [ebp + 0x4078]
push eax
lea eax, [ebp + 0x1f8]
push eax
call dword [sym.imp.kernel32.dll_GetLongPathNameW]
test eax, eax
je 0x78131f41
cmp eax, ebx
jae 0x78131f41
lea eax, [ebp + 0x4078]
push 0x5c
push eax
call sym.MSVCR80.dll_wcsrchr
test eax, eax
pop ecx
pop ecx
je 0x78131f41
and word [eax + 2], 0
lea eax, [ebp + 0x4078]
push eax
call sym.MSVCR80.dll_wcslen
pop ecx
mov dword [ebp - 0x3c], eax
mov esi, 0x104
push esi
lea eax, [ebp + 0x7ef8]
push eax
call dword [sym.imp.kernel32.dll_GetSystemDirectoryW]
test eax, eax
je 0x78131f41
cmp eax, esi
jae 0x78131f41
cmp word [ebp + eax*2 + 0x7ef6], 0x5c
je 0x78131e90
push 0xffffffffffffffff
push 0x78194994
lea eax, [ebp + 0x7ef8]
push esi
push eax
call fcn.781891cb
add esp, 0x10
test eax, eax
jne 0x78131f41
lea eax, [ebp + 0x7ef8]
push eax
call sym.MSVCR80.dll_wcslen
cmp dword [ebp - 0x3c], eax
pop ecx
jne 0x78131ebb
lea eax, [ebp + 0x7ef8]
push eax
lea eax, [ebp + 0x4078]
push eax
call sym.MSVCR80.dll__wcsicmp
test eax, eax
pop ecx
pop ecx
je 0x78131ee8
push 0x3c
lea eax, [ebp - 0x7c]
push 0
push eax
mov dword [ebp - 0x80], 0x40
call sym.MSVCR80.dll_memset
add esp, 0xc
lea eax, [ebp - 0x80]
push eax
push str.msvcr80.dll
push 2
push 0
push 0
call dword [ebp - 0x40]
test eax, eax
jne 0x78131eec
xor eax, eax
jmp 0x78131f44
push 0x781949cc
call edi
xor edi, edi
cmp eax, edi
je 0x78131f41
push str.GetSystemWindowsDirectoryW
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
cmp eax, edi
je 0x78131f41
push esi
lea ecx, [ebp + 0x7ef8]
push ecx
call eax
cmp eax, edi
je 0x78131f41
cmp eax, esi
jae 0x78131f41
cmp word [ebp + eax*2 + 0x7ef6], 0x5c
push 0xffffffffffffffff
lea eax, [ebp + 0x7ef8]
je 0x78131f5c
push str.WinSxS_
push esi
push eax
call fcn.781891cb
add esp, 0x10
test eax, eax
je 0x78131f63
xor eax, eax
inc eax
pop ebx
mov ecx, dword [ebp + 0x8100]
pop edi
xor ecx, ebp
pop esi
call fcn.78139847
add ebp, 0x8104
leave
ret
push 0x7819493c
jmp 0x78131f33
lea eax, [ebp + 0x7ef8]
push eax
call sym.MSVCR80.dll_wcslen
push eax
lea eax, [ebp + 0x4078]
push eax
lea eax, [ebp + 0x7ef8]
push eax
call fcn.781891cb
add esp, 0x10
test eax, eax
je 0x78131f41
push 0x228
lea eax, [ebp - 0x30]
push edi
push eax
mov dword [ebp - 0x38], edi
call sym.MSVCR80.dll_memset
push 0xffffffffffffffff
push str.Microsoft.VC80.CRT.manifest
lea eax, [ebp + 0x4078]
push ebx
push eax
call fcn.781891cb
add esp, 0x1c
test eax, eax
jne 0x78131f41
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp + 0x4078]
push eax
call fcn.781891cb
cmp eax, 0xffffffff
pop ecx
pop ecx
je 0x78131fda
push eax
call sym.MSVCR80.dll__findclose
pop ecx
jmp 0x78131f41
mov eax, dword [ebp - 0x3c]
jmp 0x78131ee8