Function at 0x491cd0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x1034
call fcn.00427b00
mov eax, dword [0x4c8094]
xor eax, esp
mov dword [esp + 0x1030], eax
push ebx
push esi
push edi
push 0x800
lea eax, [esp + 0x83c]
mov bl, cl
push 0
push eax
call fcn.00440a80
add esp, 0xc
lea eax, [esp + 0x38]
push 0x800
push 0
push eax
call fcn.00440a80
add esp, 0xc
lea eax, [esp + 0x838]
push 0x800
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0x800
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push 0
push 0
push 0
lea eax, [esp + 0x34]
mov dword [esp + 0x3c], 0
push eax
lea eax, [esp + 0x48]
mov word [esp + 0x44], 0
xorps xmm0, xmm0
push eax
movq qword [esp + 0x3c], xmm0
call fcn.0044dab5
lea edi, [esp + 0x3c]
add esp, 0x14
add edi, 0xfffffffe
nop dword [eax + eax]
mov ax, word [edi + 2]
lea edi, [edi + 2]
test ax, ax
jne 0x491d80
mov eax, dword [0x4b5250]
mov dword [edi], eax
lea eax, [esp + 0x18]
push eax
call fcn.00448f23
mov eax, dword [esp + 0x1c]
add esp, 4
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x20]
push eax
call fcn.0044f067
movsd xmm2, qword [0x4b6768]
mov edx, eax
add esp, 4
mov dword [esp + 0x14], edx
xorps xmm0, xmm0
test edx, edx
jne 0x491dda
movaps xmm1, xmm0
jmp 0x491eb0
mov edi, dword [edx + 0x14]
add edi, 0x76c
cmp edi, 0x64
jge 0x491ded
cmp edi, 0x1e
jge 0x491df5
lea eax, [edi - 0x65]
cmp eax, 0x62
ja 0x491dfd
add edi, 0x76c
jmp 0x491e08
cmp edi, 0x1e
jge 0x491e08
add edi, 0x7d0
mov esi, dword [edx + 0x10]
inc esi
cmp esi, 2
jle 0x491e1b
mov dword [esp + 0x10], 1
jmp 0x491e24
dec edi
mov dword [esp + 0x10], 0xd
mov ecx, dword [edx + 8]
mov eax, dword [edx + 4]
movd xmm0, dword [edx]
shl ecx, 4
sub ecx, dword [edx + 8]
cvtdq2pd xmm0, xmm0
lea eax, [eax + ecx*4]
mov ecx, eax
shl ecx, 4
sub ecx, eax
mov eax, dword [esp + 0x10]
shl ecx, 2
add eax, esi
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
imul ecx, eax, 0x132
mov eax, 0x66666667
addsd xmm1, xmm0
imul ecx
divsd xmm1, xmm2
mov eax, 0x51eb851f
sar edx, 2
mov esi, edx
shr esi, 0x1f
add esi, edx
imul ecx, edi, 0x8ead
imul ecx
mov eax, dword [esp + 0x14]
sar edx, 5
mov ecx, edx
add esi, edx
shr ecx, 0x1f
mov eax, dword [eax + 0xc]
add ecx, esi
add eax, 0xfff568ea
add eax, ecx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm1, xmm0
xorps xmm0, xmm0
addsd xmm1, qword [0x4b6730]
test bl, bl
je 0x491ec9
movzx eax, bl
imul eax, eax, 0xe10
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movaps xmm3, xmm0
lea ecx, [esp + 0x838]
movaps xmm2, xmm1
mov dl, 1
call fcn.0040ea5f
test al, al
jne 0x4921a5
lea eax, [esp + 0x20]
push eax
call fcn.00448f23
mov eax, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x18]
push eax
call fcn.0044f067
mov edx, eax
add esp, 4
mov dword [esp + 0x14], edx
test edx, edx
jne 0x491f29
movsd xmm2, qword [0x4b6768]
xorps xmm1, xmm1
jmp 0x492004
mov edi, dword [edx + 0x14]
add edi, 0x76c
cmp edi, 0x64
jge 0x491f3c
cmp edi, 0x1e
jge 0x491f44
lea eax, [edi - 0x65]
cmp eax, 0x62
ja 0x491f4c
add edi, 0x76c
jmp 0x491f57
cmp edi, 0x1e
jge 0x491f57
add edi, 0x7d0
mov esi, dword [edx + 0x10]
inc esi
cmp esi, 2
jle 0x491f6a
mov dword [esp + 0x10], 1
jmp 0x491f73
dec edi
mov dword [esp + 0x10], 0xd
mov ecx, dword [edx + 8]
mov eax, dword [edx + 4]
movd xmm0, dword [edx]
shl ecx, 4
sub ecx, dword [edx + 8]
movsd xmm2, qword [0x4b6768]
cvtdq2pd xmm0, xmm0
lea eax, [eax + ecx*4]
mov ecx, eax
shl ecx, 4
sub ecx, eax
mov eax, dword [esp + 0x10]
shl ecx, 2
add eax, esi
movd xmm1, ecx
cvtdq2pd xmm1, xmm1
imul ecx, eax, 0x132
mov eax, 0x66666667
addsd xmm1, xmm0
imul ecx
divsd xmm1, xmm2
mov eax, 0x51eb851f
sar edx, 2
mov esi, edx
shr esi, 0x1f
add esi, edx
imul ecx, edi, 0x8ead
imul ecx
mov eax, dword [esp + 0x14]
sar edx, 5
mov ecx, edx
add esi, edx
shr ecx, 0x1f
mov eax, dword [eax + 0xc]
add ecx, esi
add eax, 0xfff568ea
add eax, ecx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm1, xmm0
addsd xmm1, qword [0x4b6730]
test bl, bl
je 0x49201f
movzx eax, bl
imul eax, eax, 0xe10
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
jmp 0x492022
xorps xmm0, xmm0
movaps xmm3, xmm0
lea ecx, [esp + 0x38]
movaps xmm2, xmm1
xor dl, dl
call fcn.0040ea5f
test al, al
jne 0x4921a5
lea eax, [esp + 0x20]
push eax
call fcn.00448f23
mov eax, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x18]
push eax
call fcn.0044f067
mov edx, eax
add esp, 4
mov dword [esp + 0x14], edx
test edx, edx
jne 0x492082
movsd xmm2, qword [0x4b6768]
xorps xmm0, xmm0
movaps xmm1, xmm0
jmp 0x492160
mov edi, dword [edx + 0x14]
add edi, 0x76c
cmp edi, 0x64
jge 0x492095
cmp edi, 0x1e
jge 0x49209d
lea eax, [edi - 0x65]
cmp eax, 0x62
ja 0x4920a5
add edi, 0x76c
jmp 0x4920b0
cmp edi, 0x1e
jge 0x4920b0
add edi, 0x7d0
mov esi, dword [edx + 0x10]
inc esi
cmp esi, 2
jle 0x4920c3
mov dword [esp + 0x10], 1
jmp 0x4920cc
dec edi
mov dword [esp + 0x10], 0xd
mov ecx, dword [edx + 8]
mov eax, dword [edx + 4]
movd xmm0, dword [edx]
shl ecx, 4
sub ecx, dword [edx + 8]
movsd xmm2, qword [0x4b6768]
cvtdq2pd xmm0, xmm0
lea eax, [eax + ecx*4]
mov ecx, eax
shl ecx, 4
sub ecx, eax
mov eax, 0x66666667
shl ecx, 2
movd xmm1, ecx
mov ecx, dword [esp + 0x10]
cvtdq2pd xmm1, xmm1
add ecx, esi
imul ecx, ecx, 0x132
addsd xmm1, xmm0
imul ecx
divsd xmm1, xmm2
mov eax, 0x51eb851f
sar edx, 2
mov esi, edx
shr esi, 0x1f
add esi, edx
imul ecx, edi, 0x8ead
imul ecx
mov eax, dword [esp + 0x14]
sar edx, 5
mov ecx, edx
add esi, edx
shr ecx, 0x1f
mov eax, dword [eax + 0xc]
add ecx, esi
add eax, 0xfff568ea
add eax, ecx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm1, xmm0
xorps xmm0, xmm0
addsd xmm1, qword [0x4b6730]
test bl, bl
je 0x492179
movzx eax, bl
imul eax, eax, 0xe10
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm2
movaps xmm3, xmm0
lea ecx, [esp + 0x28]
movaps xmm2, xmm1
xor dl, dl
call fcn.0040ea5f
test al, al
jne 0x4921a5
mov al, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1030]
xor ecx, esp
call fcn.00426855
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x103c]
xor al, al
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00426855
mov esp, ebp
pop ebp
ret