Function at 0x416f40
Capabilities:
Get common file path

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0x4b8
mov ebp, ecx
mov ebx, edx
mov dword [esp + 0x4b4], eax
lea eax, [esp + 0x250]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
jne 0x416f98
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x416f7d
mov dword [eax], 0
test ebx, ebx
je 0x416f87
mov dword [ebx], 0
test ebp, ebp
je 0x41783e
mov byte [ebp], 0x20
jmp 0x41783e
mov byte [esp + 0x353], 0
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x416fab
lea edi, [esp + 0x10]
mov edx, 0x87833c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x416fc8
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c00
test eax, eax
jl 0x41714c
mov esi, 0x5f
mov word [esp + 0xc], si
mov eax, 4
mov edx, 2
xor ecx, ecx
call fcn.00417bb3
mov dword [esp + 0x450], eax
mov dword [esp + 0x454], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jl 0x41784b
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417044
mov dword [eax], 1
test ebx, ebx
je 0x41704e
mov dword [ebx], 0
test ebp, ebp
je 0x417056
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x448
mov word [esp + 0xc], si
mov eax, 4
mov edx, 3
xor ecx, ecx
call fcn.00417bb3
mov dword [esp + 0x498], eax
mov dword [esp + 0x49c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jl 0x4170d6
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4170b8
mov dword [eax], 2
test ebx, ebx
je 0x4170c2
mov dword [ebx], 0
test ebp, ebp
je 0x4170ca
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x44
mov word [esp + 0xc], si
mov eax, 4
mov edx, 4
xor ecx, ecx
call fcn.00417bb3
mov dword [esp + 0x4a0], eax
mov dword [esp + 0x4a4], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jl 0x417155
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x41712c
mov dword [eax], 3
test ebx, ebx
je 0x417136
mov dword [ebx], 0
test ebp, ebp
je 0x41713e
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x417155
xor eax, eax
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x417160
lea edi, [esp + 0x10]
mov edx, 0x878348
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x41717d
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c00
test eax, eax
jl 0x41720f
mov esi, 0x46
mov word [esp + 0xc], si
mov eax, 4
mov edx, 4
xor ecx, ecx
call fcn.00417bb3
mov dword [esp + 0x458], eax
mov dword [esp + 0x45c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jl 0x41720f
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4171f1
mov dword [eax], 3
test ebx, ebx
je 0x4171fb
mov dword [ebx], 0
test ebp, ebp
je 0x417203
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x41721a
lea edi, [esp + 0x10]
mov edx, 0x87833c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x417237
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c00
test eax, eax
jl 0x4173b5
mov esi, 0x9b
mov word [esp + 0xc], si
mov eax, 4
mov edx, 5
xor ecx, ecx
call fcn.00417bb3
mov dword [esp + 0x460], eax
mov dword [esp + 0x464], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jl 0x4172cd
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4172af
mov dword [eax], 5
test ebx, ebx
je 0x4172b9
mov dword [ebx], 0
test ebp, ebp
je 0x4172c1
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x13e
mov word [esp + 0xc], si
mov eax, 4
mov edx, 6
xor ecx, ecx
call fcn.00417bb3
mov dword [esp + 0x468], eax
mov dword [esp + 0x46c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jl 0x417341
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417323
mov dword [eax], 6
test ebx, ebx
je 0x41732d
mov dword [ebx], 0
test ebp, ebp
je 0x417335
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
mov esi, 0x1b4
mov word [esp + 0xc], si
mov eax, 4
mov edx, 6
xor ecx, ecx
call fcn.00417bb3
mov dword [esp + 0x470], eax
mov dword [esp + 0x474], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jl 0x4173b5
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417397
mov dword [eax], 6
test ebx, ebx
je 0x4173a1
mov dword [ebx], 1
test ebp, ebp
je 0x4173a9
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4173c0
lea edi, [esp + 0x10]
mov edx, 0x878358
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x4173dd
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c00
test eax, eax
jl 0x417472
mov esi, 0x206
mov word [esp + 0xc], si
mov eax, 4
mov edx, 6
mov ecx, 3
call fcn.00417bb3
mov dword [esp + 0x478], eax
mov dword [esp + 0x47c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jl 0x417472
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417454
mov dword [eax], 6
test ebx, ebx
je 0x41745e
mov dword [ebx], 1
test ebp, ebp
je 0x417466
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x41747d
lea edi, [esp + 0x10]
mov edx, 0x87833c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x41749a
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c00
test eax, eax
jl 0x41752c
mov esi, 0x2bc
mov word [esp + 0xc], si
mov eax, 4
mov edx, 7
xor ecx, ecx
call fcn.00417bb3
mov dword [esp + 0x480], eax
mov dword [esp + 0x484], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jl 0x41752c
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x41750e
mov dword [eax], 7
test ebx, ebx
je 0x417518
mov dword [ebx], 0
test ebp, ebp
je 0x417520
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x417537
lea edi, [esp + 0x10]
mov edx, 0x878364
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x417554
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c00
test eax, eax
jl 0x4175e6
mov esi, 0x2cc
mov word [esp + 0xc], si
mov eax, 4
mov edx, 7
xor ecx, ecx
call fcn.00417bb3
mov dword [esp + 0x488], eax
mov dword [esp + 0x48c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jl 0x4175e6
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4175c8
mov dword [eax], 7
test ebx, ebx
je 0x4175d2
mov dword [ebx], 0
test ebp, ebp
je 0x4175da
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4175f1
lea edi, [esp + 0x10]
mov edx, 0x87833c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x41760e
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c00
test eax, eax
jl 0x417646
movzx esi, word [esp + 0x4ae]
cmp esi, 4
je 0x417b5a
cmp esi, 5
je 0x417ada
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x417651
lea edi, [esp + 0x10]
mov edx, 0x878370
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x41766e
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c00
test eax, eax
jl 0x4176b8
movzx esi, word [esp + 0x4ae]
cmp esi, 4
je 0x417a89
cmp esi, 5
je 0x417a01
cmp esi, 4
je 0x4179b4
cmp esi, 5
je 0x417934
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4176c3
lea edi, [esp + 0x10]
mov edx, 0x87837c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x4176e0
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c00
test eax, eax
jl 0x417775
mov esi, 0x375
mov word [esp + 0xc], si
mov eax, 6
mov edx, 3
mov ecx, 1
call fcn.00417bb3
mov dword [esp + 0x490], eax
mov dword [esp + 0x494], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jl 0x417775
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417757
mov dword [eax], 8
test ebx, ebx
je 0x417761
mov dword [ebx], 1
test ebp, ebp
je 0x417769
mov byte [ebp], 0x62
mov eax, 1
mov dword [esp + 0x4b0], eax
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x417780
lea edi, [esp + 0x10]
mov edx, 0x87838c
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x41779d
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c00
test eax, eax
jl 0x4177d5
movzx esi, word [esp + 0x4ae]
cmp esi, 4
je 0x4178ea
cmp esi, 5
je 0x41786a
lea esi, [esp + 0x10]
lea edi, [esp + 0x250]
mov dl, byte [edi]
inc edi
mov byte [esi], dl
inc esi
test dl, dl
jne 0x4177e0
lea edi, [esp + 0x10]
mov edx, 0x878398
mov ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
dec edi
mov al, byte [edx]
inc edx
mov byte [edi], al
inc edi
test al, al
jne 0x4177fd
lea eax, [esp + 0x10]
lea edx, [esp + 0x4a8]
call fcn.00417c00
test eax, eax
jl 0x417859
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x41782c
mov dword [eax], 9
test ebx, ebx
je 0x417836
mov dword [ebx], 0
test ebp, ebp
je 0x41783e
mov byte [ebp], 0x20
xor eax, eax
add esp, 0x4b8
pop ebx
pop ebp
pop esi
pop edi
ret
xor eax, eax
mov dword [esp + 0x4b0], eax
jmp 0x417062
mov eax, dword [esp + 0x4b0]
test eax, eax
je 0x416f6c
jmp 0x41783e
mov esi, 0x86
mov word [esp + 0xc], si
mov eax, 5
mov edx, 2
mov ecx, 0xe5d
call fcn.00417bb3
mov dword [esp + 0x228], eax
mov dword [esp + 0x22c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jl 0x4177d5
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x4178c7
mov dword [eax], 8
test ebx, ebx
je 0x4178d1
mov dword [ebx], 2
test ebp, ebp
je 0x4178d9
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x4177d5
mov edi, 0x86
mov word [esp + 0xc], di
mov eax, 4
mov edx, 9
xor ecx, ecx
call fcn.00417bb3
mov dword [esp + 0x248], eax
mov dword [esp + 0x24c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jge 0x4178b6
jmp 0x4177cc
mov esi, 0x385
mov word [esp + 0xc], si
mov eax, 5
mov edx, 1
mov ecx, 0xa28
call fcn.00417bb3
mov dword [esp + 0x210], eax
mov dword [esp + 0x214], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jl 0x4176b8
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417991
mov dword [eax], 8
test ebx, ebx
je 0x41799b
mov dword [ebx], 1
test ebp, ebp
je 0x4179a3
mov byte [ebp], 0x61
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x4176b8
mov edi, 0x385
mov word [esp + 0xc], di
mov eax, 4
mov edx, 8
mov ecx, 1
call fcn.00417bb3
mov dword [esp + 0x230], eax
mov dword [esp + 0x234], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jge 0x417980
jmp 0x4176af
mov edi, 0x371
mov word [esp + 0xc], di
mov eax, 5
mov edx, 1
mov ecx, 0xa28
call fcn.00417bb3
mov dword [esp + 0x220], eax
mov dword [esp + 0x224], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jl 0x4176a6
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417a5e
mov dword [eax], 8
test ebx, ebx
je 0x417a68
mov dword [ebx], 1
test ebp, ebp
je 0x417a70
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
movzx esi, word [esp + 0x4ae]
jmp 0x4176a6
mov edi, 0x371
mov word [esp + 0xc], di
mov eax, 4
mov edx, 8
mov ecx, 1
call fcn.00417bb3
mov dword [esp + 0x240], eax
mov dword [esp + 0x244], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jge 0x417a4d
jmp 0x41769d
mov esi, 0x190
mov word [esp + 0xc], si
mov eax, 5
mov edx, 1
mov ecx, 0x8d2
call fcn.00417bb3
mov dword [esp + 0x218], eax
mov dword [esp + 0x21c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jl 0x417646
mov eax, dword [esp + 0x4b4]
test eax, eax
je 0x417b37
mov dword [eax], 8
test ebx, ebx
je 0x417b41
mov dword [ebx], 0
test ebp, ebp
je 0x417b49
mov byte [ebp], 0x20
mov eax, 1
mov dword [esp + 0x4b0], eax
jmp 0x417646
mov edi, 0x190
mov word [esp + 0xc], di
mov eax, 4
mov edx, 8
xor ecx, ecx
call fcn.00417bb3
mov dword [esp + 0x238], eax
mov dword [esp + 0x23c], edx
push edx
push eax
push dword [esp + 0x4b4]
push dword [esp + 0x4b4]
call fcn.00417bcc
add esp, 0x10
test eax, eax
jge 0x417b26
jmp 0x41763d