Function at 0x40de9c
Capabilities:
Get common file path

Disassembly:
push rbx
push rbp
push rsi
push r13
push r14
mov eax, 0x10b0
call fcn.0042ec50
sub rsp, rax
mov qword [rsp + 0x98], 0xfffffffffffffffe
mov rax, qword [0x004583d0]
mov qword [rsp + 0x10a0], rax
mov ecx, listen
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ebx, eax
mov ecx, reloc.WS2_32.dll_inet_addr
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov r9d, eax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], ebx
mov r13d, 1
mov r8d, r13d
lea edx, [r13 + 0x7f]
mov rcx, qword [0x0045df20]
call qword [sym.imp.USER32.dll_LoadImageW]
mov qword [rsp + 0x30], rax
lea rax, str.taskmgr.exe
mov qword [rsp + 0x70], rax
lea rax, str.desk.cpl
mov qword [rsp + 0x78], rax
lea rax, str.Mystify.scr
mov qword [rsp + 0x80], rax
lea rax, str.powercfg.cpl
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], 0
mov edx, 0x400
lea rcx, [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x8a0]
call qword [sym.imp.KERNEL32.dll_lstrcatW]
xor ebx, ebx
lea r14d, [r13 + 0x1f]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x38]
call sub.MFC42u.dll_CDaoException::CDaoException
nop
lea rdx, [0x00434da0]
lea rcx, [rsp + 0x38]
call sub.MFC42u.dll_Ordinal_1287
mov rdx, qword [rsp + rbx + 0x70]
lea rcx, [rsp + 0x38]
call sub.MFC42u.dll_Ordinal_1287
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x20], r13d
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x30]
xor edx, edx
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.SHELL32.dll_ExtractIconExW]
mov r11, qword [rsp + 0x40]
mov qword [rsp + rbx + 0x48], r11
lea rcx, [rsp + 0x38]
call sub.MFC42u.dll_CDocObjectServer::XOleDocument::AddRef
add rbx, 8
cmp rbx, r14
jl 0x40df83
mov r8d, 0xfa6
mov rdx, qword [rsp + 0x48]
lea rbp, [0x0045acd0]
mov rcx, rbp
call fcn.00428f20
mov r8d, 0xfa2
mov rdx, qword [rsp + 0x60]
mov rcx, rbp
call fcn.00428f20
mov r8d, r13d
mov edx, 0x10
lea rsi, [0x0045acb0]
mov rcx, rsi
call fcn.00427230
mov qword [rsp + 0x30], rax
mov r8d, 0xfa7
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, 0xfa3
mov rdx, qword [rsp + 0x50]
mov rcx, rbp
call fcn.00428f20
mov r8d, 0xfa5
mov rdx, qword [rsp + 0x50]
mov rcx, rbp
call fcn.00428f20
mov r8d, 0xfa0
mov rdx, qword [rsp + 0x58]
mov rcx, rbp
call fcn.00428f20
mov r8d, r13d
mov edx, 0x117
mov rcx, rsi
call fcn.00427230
mov qword [rsp + 0x30], rax
mov r8d, 0xfa4
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, r13d
mov edx, 0x112
mov rcx, rsi
call fcn.00427230
mov qword [rsp + 0x30], rax
mov r8d, 0xfcd
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, r13d
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rsi
call fcn.00427230
mov qword [rsp + 0x30], rax
mov r8d, 0xfce
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, r13d
mov edx, 0x416b
mov rcx, rsi
call fcn.00427230
mov r8d, 0x816b
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, r13d
mov edx, 0x4163
mov rcx, rsi
call fcn.00427230
mov r8d, 0x816a
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], r14d
mov r9d, r14d
mov r8d, r13d
mov edx, 0x153
mov rcx, qword [0x0045df20]
call qword [sym.imp.USER32.dll_LoadImageW]
mov rbx, rax
mov r8d, 0x8087
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, 0x808d
mov rdx, rbx
mov rcx, rbp
call fcn.00428f20
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], r14d
mov r9d, r14d
mov r8d, r13d
mov edx, 0x102
mov rcx, qword [0x0045df20]
call qword [sym.imp.USER32.dll_LoadImageW]
mov rbx, rax
mov r8d, 0x8084
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, 0x808a
mov rdx, rbx
mov rcx, rbp
call fcn.00428f20
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], r14d
mov r9d, r14d
mov r8d, r13d
mov edx, 0x1f41
mov rcx, qword [0x0045df20]
call qword [sym.imp.USER32.dll_LoadImageW]
mov rbx, rax
mov r8d, 0x8085
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, 0x808b
mov rdx, rbx
mov rcx, rbp
call fcn.00428f20
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], r14d
mov r9d, r14d
mov r8d, r13d
mov edx, 0x152
mov rcx, qword [0x0045df20]
call qword [sym.imp.USER32.dll_LoadImageW]
mov rbx, rax
mov r8d, 0x8086
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, 0x808c
mov rdx, rbx
mov rcx, rbp
call fcn.00428f20
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], r14d
mov r9d, r14d
mov r8d, r13d
mov edx, 0x154
mov rcx, qword [0x0045df20]
call qword [sym.imp.USER32.dll_LoadImageW]
mov rbx, rax
mov r8d, 0x8088
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, 0x808e
mov rdx, rbx
mov rcx, rbp
call fcn.00428f20
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], r14d
mov r9d, r14d
mov r8d, r13d
mov edx, reloc.MFC42u.dll_CDocTemplate::CDocTemplate
mov rcx, qword [0x0045df20]
call qword [sym.imp.USER32.dll_LoadImageW]
mov r8d, 0x808f
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, r13d
mov edx, 0x1c
mov rcx, rsi
call fcn.00427230
mov r8d, 0x107
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, r13d
mov edx, 0xe
mov rcx, rsi
call fcn.00427230
mov rbx, rax
mov r8d, 0x816d
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, 0x816f
mov rdx, rbx
mov rcx, rbp
call fcn.00428f20
mov r8d, 0x817b
mov rdx, rbx
mov rcx, rbp
call fcn.00428f20
mov r8d, 0x816e
mov rdx, rbx
mov rcx, rbp
call fcn.00428f20
mov r8d, 0x8169
mov rdx, rbx
mov rcx, rbp
call fcn.00428f20
xor r8d, r8d
mov edx, 0x8e
mov rcx, rsi
call fcn.00427230
mov r8d, 0x819c
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
xor r8d, r8d
lea edx, [r8 + 4]
mov rcx, rsi
call fcn.00427230
mov rbx, rax
mov r8d, 0x8166
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, 0x8167
mov rdx, rbx
mov rcx, rbp
call fcn.00428f20
mov r8d, r13d
mov edx, 0x97
mov rcx, rsi
call fcn.00427230
mov r8d, 0x8168
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, r13d
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rsi
call fcn.00427230
mov r8d, 0x816c
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov r8d, r13d
mov edx, 0x27
mov rcx, rsi
call fcn.00427230
mov r8d, 0xfa8
mov rdx, rax
mov rcx, rbp
call fcn.00428f20
mov rcx, qword [rsp + 0x10a0]
call fcn.0042ec20
add rsp, 0x10b0
pop r14
pop r13
pop rsi
pop rbp
pop rbx
ret