Function at 0x1103e7c
Capabilities:
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x52c
mov eax, dword [0x111121c]
push ebx
push esi
mov dword [ebp - 4], eax
mov esi, 0x104
push esi
lea eax, [ebp - 0x108]
push eax
mov dword [ebp - 0x520], ecx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
xor ebx, ebx
cmp eax, ebx
jne 0x1103eb7
xor eax, eax
jmp 0x110415e
push edi
mov ecx, esi
sub ecx, eax
push ecx
push 0x1028ba8
lea eax, [ebp + eax - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push ebx
push 0x8000000
push 3
push ebx
push 3
push 0x80000000
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x1103efb
xor eax, eax
jmp 0x110415d
push dword [0x1112624]
mov ecx, dword [ebp - 0x520]
lea eax, [ebp - 0x51c]
push eax
push edi
mov dword [ebp - 0x528], ebx
mov dword [ebp - 0x51c], ebx
mov byte [ebp - 0x20c], 0
call fcn.01101a07
test eax, eax
je 0x110414b
mov eax, dword [0x1112624]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1103f37
mov ecx, dword [ebp - 0x51c]
push ebx
sub eax, edx
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [eax + ecx + 1]
push eax
push edi
call ebx
cmp eax, 0xffffffff
je 0x110414b
mov ecx, dword [ebp - 0x520]
push esi
lea eax, [ebp - 0x414]
push eax
push edi
call fcn.01101b60
test eax, eax
je 0x110414b
push dword [0x1112628]
and dword [ebp - 0x524], 0
mov ecx, dword [ebp - 0x520]
inc dword [ebp - 0x51c]
lea eax, [ebp - 0x51c]
push eax
push edi
call fcn.01101a07
test eax, eax
je 0x110406d
mov eax, dword [0x1112628]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1103fb1
mov ecx, dword [ebp - 0x51c]
push 0
sub eax, edx
push 0
lea eax, [eax + ecx + 1]
push eax
push edi
call ebx
cmp eax, 0xffffffff
je 0x1104064
mov ecx, dword [ebp - 0x520]
push esi
lea eax, [ebp - 0x310]
push eax
push edi
call fcn.01101b60
test eax, eax
je 0x1104064
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x110401f
lea eax, [ebp - 0x310]
push esi
push eax
mov dword [ebp - 0x524], 1
lea eax, [ebp - 0x518]
jmp 0x1104036
cmp byte [ebp - 0x20c], 0
jne 0x110403d
lea eax, [ebp - 0x310]
push esi
push eax
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push dword [0x1112628]
mov ecx, dword [ebp - 0x520]
inc dword [ebp - 0x51c]
lea eax, [ebp - 0x51c]
push eax
push edi
call fcn.01101a07
test eax, eax
jne 0x1103fa9
cmp dword [ebp - 0x524], 0
jne 0x110407a
cmp byte [ebp - 0x20c], 0
je 0x110414b
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [ebp - 0x52c], 0xffffffff
cmp dword [ebp - 0x524], 0
lea eax, [ebp - 0x518]
jne 0x110409d
lea eax, [ebp - 0x20c]
push dword [0x111262c]
mov edi, dword [sym.imp.SHLWAPI.dll_wnsprintfA]
push eax
mov ebx, 0x1028ba0
push ebx
lea eax, [ebp - 0x108]
push esi
push eax
call edi
mov ecx, dword [ebp - 0x520]
add esp, 0x14
lea eax, [ebp - 0x108]
push eax
call fcn.01101bb9
test eax, eax
mov dword [ebp - 0x51c], eax
jne 0x110411e
cmp dword [ebp - 0x524], eax
je 0x1104114
push dword [0x111262c]
lea eax, [ebp - 0x20c]
push eax
push ebx
lea eax, [ebp - 0x108]
push esi
push eax
call edi
mov ecx, dword [ebp - 0x520]
add esp, 0x14
lea eax, [ebp - 0x108]
push eax
call fcn.01101bb9
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x51c]
test eax, eax
je 0x1104157
mov ecx, dword [ebp - 0x520]
push eax
call fcn.01103b7b
cmp dword [ebp - 0x51c], 0
mov dword [ebp - 0x528], eax
je 0x1104157
push dword [ebp - 0x51c]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
mov edi, dword [ebp - 0x52c]
pop ecx
cmp edi, 0xffffffff
je 0x1104157
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x528]
pop edi
mov ecx, dword [ebp - 4]
pop esi
pop ebx
call fcn.0105eca9
leave
ret