Function at 0x43b9c0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a06ec
mov eax, dword fs:[0]
push eax
sub esp, 0xe8
mov eax, dword [0x4ce4bc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
movzx eax, word [ebx + 0xc]
lea esi, [ebx + 0xc]
mov edi, dword [ebp + 8]
test ax, ax
jne 0x43ba16
push 0
push 0x1a
push esi
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
cmp word [esi], 0
je 0x43be4b
mov ecx, ebx
call fcn.0043cfc0
cmp word [eax], 0
je 0x43be4b
cmp dword [edi + 0x10], 1
jbe 0x43be4b
xor eax, eax
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
mov word [ebp - 0x40], ax
cmp dword [edi + 0x14], 8
mov dword [ebp - 4], eax
mov eax, edi
jb 0x43ba59
mov eax, dword [edi]
cmp word [eax], 0x62
je 0x43ba68
xor bl, bl
mov al, bl
jmp 0x43be4d
push 3
push 0x4ada30
lea ecx, [ebp - 0x40]
call fcn.00404580
mov ecx, 7
mov dword [ebp - 0x28], 0
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], ecx
mov word [ebp - 0x28], ax
cmp dword [edi + 0x10], 1
mov byte [ebp - 4], 1
jbe 0x43be6b
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x43baab
mov eax, dword [edi]
movzx eax, word [eax + 2]
add eax, 0xffffff9a
cmp eax, 0x11
ja case.0x43bac2.103
movzx eax, byte [eax + 0x43be88]
jmp dword [eax*4 + 0x43be70]
mov eax, 0x4ada38
jmp 0x43baea
mov eax, 0x4abeb8
jmp 0x43baea
mov eax, 0x4abec0
jmp 0x43baea
mov eax, 0x4aab90
jmp 0x43baea
mov eax, 0x4abec8
push eax
lea ecx, [ebp - 0x28]
call fcn.0041d640
mov ecx, ebx
call fcn.0043cfc0
mov ecx, ebx
mov esi, eax
call fcn.0043cfa0
push eax
lea ecx, [ebp - 0xf4]
call fcn.00401960
push str.Kingsoftoffice6cache_
push eax
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 2
push eax
call fcn.00401590
push esi
push eax
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 3
push eax
call fcn.00401590
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 4
push ecx
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.00417580
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
push ecx
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.00417580
push str.cache.merge
push eax
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 6
push eax
call fcn.00401590
add esp, 0x3c
mov ecx, edi
push eax
call fcn.004023b0
mov edx, dword [ebp - 0x68]
cmp edx, 8
jb 0x43bbb9
mov ecx, dword [ebp - 0x7c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43bbaf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43bd69
push edx
push ecx
call fcn.004991fe
add esp, 8
mov edx, dword [ebp - 0x80]
xor eax, eax
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 7
mov word [ebp - 0x7c], ax
cmp edx, 8
jb 0x43bc0a
mov ecx, dword [ebp - 0x94]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43bc00
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43bd69
push edx
push ecx
call fcn.004991fe
add esp, 8
mov edx, dword [ebp - 0x98]
xor eax, eax
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 7
mov word [ebp - 0x94], ax
cmp edx, 8
jb 0x43bc64
mov ecx, dword [ebp - 0xac]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43bc5a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43bd69
push edx
push ecx
call fcn.004991fe
add esp, 8
mov edx, dword [ebp - 0xb0]
xor eax, eax
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 7
mov word [ebp - 0xac], ax
cmp edx, 8
jb 0x43bcc1
mov ecx, dword [ebp - 0xc4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43bcb7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43bd69
push edx
push ecx
call fcn.004991fe
add esp, 8
mov edx, dword [ebp - 0xc8]
xor eax, eax
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 7
mov word [ebp - 0xc4], ax
cmp edx, 8
jb 0x43bd1a
mov ecx, dword [ebp - 0xdc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43bd10
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43bd69
push edx
push ecx
call fcn.004991fe
add esp, 8
mov edx, dword [ebp - 0xe0]
xor eax, eax
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 7
mov word [ebp - 0xdc], ax
cmp edx, 8
jb 0x43bd79
mov ecx, dword [ebp - 0xf4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43bd6f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43bd6f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004991fe
add esp, 8
xor eax, eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
jb 0x43bd9e
mov edi, dword [edi]
lea eax, [ebp - 0x64]
push eax
push 0
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
test eax, eax
je 0x43bdbf
cmp dword [ebp - 0x44], 0x2800000
ja 0x43bdbf
mov ecx, dword [ebp - 0x14]
mov bl, 1
jmp 0x43bdc4
mov ecx, dword [ebp - 0x14]
xor bl, bl
cmp ecx, 8
jb 0x43bdf7
lea edx, [ecx*2 + 2]
mov ecx, dword [ebp - 0x28]
mov eax, ecx
cmp edx, 0x1000
jb 0x43bded
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43be37
push edx
push ecx
call fcn.004991fe
add esp, 8
mov edx, dword [ebp - 0x2c]
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x43be47
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x43be3d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43be3d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004991fe
add esp, 8
mov al, bl
jmp 0x43be4d
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049920c
mov esp, ebp
pop ebp
ret 4
call fcn.00404510
in eax, 0xba
inc ebx
add cl, cl
mov edx, 0xbad70043
inc ebx
add dh, bl
mov edx, 0xbad00043
inc ebx
add dl, al
mov ebp, 0x5000043
add eax, 0x5050505
add eax, 84017413
add eax, 84215043
add al, 204
int3