Function at 0x41d4c0
Capabilities:
Get common file path
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58ad8b
mov eax, dword fs:[0]
push eax
sub esp, 0x22c
mov eax, dword [0x5f0a00]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x234], edi
mov dword [ebp - 0x238], edi
mov dword [edi], vtable.CSystemInfo.0
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
mov dword [ebp - 4], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [edi + 0x28], xmm0
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 7
mov word [edi + 0x28], ax
mov dword [edi + 0x44], eax
mov dword [edi + 0x48], eax
mov dword [edi + 0x4c], eax
movups xmmword [edi + 0x50], xmm0
mov dword [edi + 0x60], eax
mov dword [edi + 0x64], 7
mov word [edi + 0x50], ax
movups xmmword [edi + 0x68], xmm0
mov dword [edi + 0x78], eax
mov dword [edi + 0x7c], 7
mov word [edi + 0x68], ax
movups xmmword [edi + 0x80], xmm0
mov dword [edi + 0x90], eax
mov dword [edi + 0x94], 7
mov word [edi + 0x80], ax
movups xmmword [edi + 0x98], xmm0
mov dword [edi + 0xa8], eax
mov dword [edi + 0xac], 7
mov word [edi + 0x98], ax
movups xmmword [edi + 0xb0], xmm0
mov dword [edi + 0xc0], eax
mov dword [edi + 0xc4], 7
mov word [edi + 0xb0], ax
movups xmmword [edi + 0xc8], xmm0
mov dword [edi + 0xd8], eax
mov dword [edi + 0xdc], 7
mov word [edi + 0xc8], ax
movups xmmword [edi + 0xe0], xmm0
mov dword [edi + 0xf0], eax
mov dword [edi + 0xf4], 7
mov word [edi + 0xe0], ax
mov dword [edi + 0xf8], eax
mov dword [edi + 0xfc], eax
mov dword [edi + 0x100], eax
movups xmmword [edi + 0x104], xmm0
mov dword [edi + 0x114], eax
mov dword [edi + 0x118], 7
mov word [edi + 0x104], ax
movups xmmword [edi + 0x120], xmm0
mov dword [edi + 0x130], eax
mov dword [edi + 0x134], 7
mov word [edi + 0x120], ax
movups xmmword [edi + 0x138], xmm0
mov dword [edi + 0x148], eax
mov dword [edi + 0x14c], 7
mov word [edi + 0x138], ax
movups xmmword [edi + 0x150], xmm0
mov dword [edi + 0x160], eax
mov dword [edi + 0x164], 7
mov word [edi + 0x150], ax
movups xmmword [edi + 0x170], xmm0
mov dword [edi + 0x180], eax
mov dword [edi + 0x184], 7
mov word [edi + 0x170], ax
movups xmmword [edi + 0x188], xmm0
mov dword [edi + 0x198], eax
mov dword [edi + 0x19c], 7
mov word [edi + 0x188], ax
movups xmmword [edi + 0x1a0], xmm0
mov dword [edi + 0x1b0], eax
mov dword [edi + 0x1b4], 7
mov word [edi + 0x1a0], ax
movups xmmword [edi + 0x1b8], xmm0
mov dword [edi + 0x1c8], eax
mov dword [edi + 0x1cc], 7
mov word [edi + 0x1b8], ax
movups xmmword [edi + 0x1d0], xmm0
mov dword [edi + 0x1e0], eax
mov dword [edi + 0x1e4], 7
mov word [edi + 0x1d0], ax
mov dword [edi + 0x1e8], eax
mov dword [edi + 0x1ec], eax
mov dword [edi + 0x1f0], eax
mov dword [edi + 0x1f4], eax
mov dword [edi + 0x1f8], eax
mov dword [edi + 0x1fc], eax
mov dword [edi + 0x200], eax
mov dword [edi + 0x204], eax
mov dword [edi + 0x208], eax
mov dword [edi + 0x20c], eax
mov dword [edi + 0x210], eax
mov dword [edi + 0x214], eax
mov dword [edi + 0x218], eax
mov dword [edi + 0x21c], eax
mov dword [edi + 0x220], eax
mov dword [edi + 0x224], eax
mov dword [edi + 0x228], eax
mov dword [edi + 0x22c], eax
movups xmmword [edi + 0x230], xmm0
mov dword [edi + 0x240], eax
mov dword [edi + 0x244], 7
mov word [edi + 0x230], ax
movups xmmword [edi + 0x248], xmm0
mov dword [edi + 0x258], eax
mov dword [edi + 0x25c], 7
mov word [edi + 0x248], ax
movups xmmword [edi + 0x260], xmm0
mov dword [edi + 0x270], eax
mov dword [edi + 0x274], 7
mov word [edi + 0x260], ax
movups xmmword [edi + 0x278], xmm0
mov dword [edi + 0x288], eax
mov dword [edi + 0x28c], 7
mov word [edi + 0x278], ax
movups xmmword [edi + 0x290], xmm0
mov dword [edi + 0x2a0], eax
mov dword [edi + 0x2a4], 7
mov word [edi + 0x290], ax
movups xmmword [edi + 0x2a8], xmm0
mov dword [edi + 0x2b8], eax
mov dword [edi + 0x2bc], 7
mov word [edi + 0x2a8], ax
movups xmmword [edi + 0x2c0], xmm0
mov dword [edi + 0x2d0], eax
mov dword [edi + 0x2d4], 7
mov word [edi + 0x2c0], ax
movups xmmword [edi + 0x2d8], xmm0
mov dword [edi + 0x2e8], eax
mov dword [edi + 0x2ec], 7
mov word [edi + 0x2d8], ax
movups xmmword [edi + 0x2f0], xmm0
mov dword [edi + 0x300], eax
mov dword [edi + 0x304], 7
mov word [edi + 0x2f0], ax
movups xmmword [edi + 0x308], xmm0
mov dword [edi + 0x318], eax
mov dword [edi + 0x31c], 7
mov word [edi + 0x308], ax
movups xmmword [edi + 0x324], xmm0
mov dword [edi + 0x334], eax
mov dword [edi + 0x338], 7
mov word [edi + 0x324], ax
movups xmmword [edi + 0x340], xmm0
mov dword [edi + 0x350], eax
mov dword [edi + 0x354], 7
mov word [edi + 0x340], ax
movups xmmword [edi + 0x358], xmm0
mov dword [edi + 0x368], eax
mov dword [edi + 0x36c], 7
mov word [edi + 0x358], ax
movups xmmword [edi + 0x370], xmm0
mov dword [edi + 0x380], eax
mov dword [edi + 0x384], 7
mov word [edi + 0x370], ax
mov dword [edi + 0x388], eax
mov dword [edi + 0x38c], eax
mov dword [edi + 0x390], eax
mov dword [edi + 0x16c], eax
mov dword [edi + 0x168], 1
mov dword [edi + 0x40], 0x3e8
mov eax, dword [edi + 0x44]
mov byte [ebp - 4], 0x2a
cmp eax, dword [edi + 0x48]
je 0x41d98d
mov dword [edi + 0x48], eax
mov eax, dword [edi + 8]
mov esi, dword [edi + 4]
mov dword [ebp - 0x234], eax
cmp esi, eax
je 0x41d9ff
nop dword [eax]
mov ecx, dword [esi + 0x14]
cmp ecx, 7
jbe 0x41d9df
mov eax, dword [esi]
lea ecx, [ecx*2 + 2]
cmp ecx, 0x1000
jb 0x41d9cf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41dce4
mov eax, edx
push ecx
push eax
call fcn.0055241f
mov eax, dword [ebp - 0x234]
add esp, 8
xor ecx, ecx
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], cx
add esi, 0x18
cmp esi, eax
jne 0x41d9a0
mov eax, dword [edi + 4]
mov dword [edi + 8], eax
mov eax, dword [edi + 0x14]
mov esi, dword [edi + 0x10]
mov dword [ebp - 0x234], eax
cmp esi, eax
je 0x41da6f
nop
mov ecx, dword [esi + 0x14]
cmp ecx, 7
jbe 0x41da4f
mov eax, dword [esi]
lea ecx, [ecx*2 + 2]
cmp ecx, 0x1000
jb 0x41da3f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41dce4
mov eax, edx
push ecx
push eax
call fcn.0055241f
mov eax, dword [ebp - 0x234]
add esp, 8
xor ecx, ecx
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], cx
add esi, 0x18
cmp esi, eax
jne 0x41da10
mov eax, dword [edi + 0x10]
mov dword [edi + 0x14], eax
mov eax, dword [edi + 0x20]
mov esi, dword [edi + 0x1c]
mov dword [ebp - 0x234], eax
cmp esi, eax
je 0x41dadf
nop
mov ecx, dword [esi + 0x14]
cmp ecx, 7
jbe 0x41dabf
mov eax, dword [esi]
lea ecx, [ecx*2 + 2]
cmp ecx, 0x1000
jb 0x41daaf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41dce4
mov eax, edx
push ecx
push eax
call fcn.0055241f
mov eax, dword [ebp - 0x234]
add esp, 8
xor ecx, ecx
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], cx
add esi, 0x18
cmp esi, eax
jne 0x41da80
mov eax, dword [edi + 0x1c]
mov dword [edi + 0x20], eax
push 0
push 0x59a304
lea ecx, [edi + 0x28]
call fcn.00418d10
push 0x208
lea eax, [ebp - 0x218]
mov dword [edi + 0x320], 0x64
push 0
push eax
call fcn.00557d70
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41db30
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [edi + 0x68]
call fcn.00418d10
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41db60
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [edi + 0x68]
call fcn.00418d10
cmp dword [edi + 0x7c], 7
lea esi, [edi + 0x68]
mov ecx, dword [esi + 0x10]
jbe 0x41db8d
mov esi, dword [esi]
test ecx, ecx
je 0x41dbbb
xor edx, edx
mov eax, esi
cmp word [esi], 0x5c
je 0x41dbaf
nop dword [eax + eax]
cmp ecx, 1
je 0x41dbb1
add eax, 2
dec ecx
cmp word [eax], 0x5c
jne 0x41dba0
mov edx, eax
test edx, edx
je 0x41dbbb
sub edx, esi
sar edx, 1
jmp 0x41dbbe
or edx, 0xffffffff
lea ecx, [edi + 0x68]
mov dword [ebp - 0x220], 0
inc edx
mov dword [ebp - 0x21c], 0
cmp dword [ecx + 0x10], edx
xorps xmm0, xmm0
movups xmmword [ebp - 0x230], xmm0
cmovb edx, dword [ecx + 0x10]
cmp dword [ecx + 0x14], 7
jbe 0x41dbef
mov ecx, dword [ecx]
push edx
push ecx
lea ecx, [ebp - 0x230]
call fcn.0040b6c0
lea esi, [edi + 0x68]
lea eax, [ebp - 0x230]
cmp esi, eax
je 0x41dc77
mov ecx, dword [esi + 0x14]
cmp ecx, 7
jbe 0x41dc42
mov eax, dword [esi]
lea ecx, [ecx*2 + 2]
cmp ecx, 0x1000
jb 0x41dc38
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41dce4
mov eax, edx
push ecx
push eax
call fcn.0055241f
add esp, 8
movups xmm0, xmmword [ebp - 0x230]
mov dword [esi + 0x10], 0
xor eax, eax
mov dword [esi + 0x14], 7
mov ecx, 7
movups xmmword [esi], xmm0
mov word [ebp - 0x230], ax
movq xmm0, qword [ebp - 0x220]
movq qword [esi + 0x10], xmm0
jmp 0x41dc7d
mov ecx, dword [ebp - 0x21c]
cmp ecx, 7
jbe 0x41dcb3
mov edx, dword [ebp - 0x230]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41dca9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41dce4
push ecx
push edx
call fcn.0055241f
add esp, 8
mov dword [edi + 0x33c], 0
mov eax, edi
mov dword [edi + 0x394], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00551e44
mov esp, ebp
pop ebp
ret
call fcn.0055bf8b
int3