Function at 0x4143e8
Capabilities:
Get common file path

Disassembly:
mov eax, 0x41bb7f
call fcn.00403df8
sub esp, 0x14c
xor dl, dl
push ebx
push esi
push edi
mov edi, ecx
call fcn.004174de
xor ebx, ebx
inc ebx
test al, al
jne 0x414462
mov dl, bl
mov ecx, edi
call fcn.004174de
test al, al
jne 0x414462
mov eax, dword [0x631b64]
test eax, eax
je 0x414425
call eax
jmp 0x414450
cmp dword [0x6303c8], 0
je 0x41444d
push 0x18
pop eax
call fcn.0040171b
push esp
push 0x62bb2c
call fcn.0040f4b6
push eax
call dword [0x6303c8]
add esp, 0xc
jmp 0x414462
or eax, 0xffffffff
cmp eax, 2
je 0x41468e
cmp eax, 3
je 0x41468e
mov eax, dword [0x630bb0]
test eax, eax
je 0x414470
push edi
call eax
jmp 0x41449a
cmp dword [0x6303c8], 0
je 0x414498
push 0x14
pop eax
call fcn.0040171b
push esp
push 0x62bb44
call fcn.0040f4b6
push eax
call dword [0x6303c8]
add esp, 0xc
jmp 0x4144a2
xor eax, eax
test eax, eax
jne 0x41468e
xor ecx, ecx
push 0xf
pop eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], ecx
mov byte [ebp - 0x24], cl
mov dword [ebp - 4], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], ecx
mov byte [ebp - 0x3c], cl
mov byte [ebp - 4], bl
lea eax, [ebp - 0x158]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x41450b
cmp byte [ebp - 0x158], 0
jne 0x4144ee
xor eax, eax
jmp 0x4144fb
lea eax, [ebp - 0x158]
push eax
call fcn.00401566
pop ecx
push eax
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x24]
call fcn.00404934
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x41454d
cmp dword [ebp - 0x10], 0x10
mov ecx, dword [ebp - 0x24]
jae 0x41451e
lea ecx, [ebp - 0x24]
cmp byte [ecx + eax - 1], 0x5c
jne 0x41454d
dec eax
push eax
push 0
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.004111be
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x24]
call fcn.00411157
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x54]
call fcn.004047bf
cmp dword [ebp - 0x10], 0x10
mov ecx, dword [ebp - 0x24]
jae 0x414559
lea ecx, [ebp - 0x24]
mov dl, bl
call fcn.004174de
test al, al
je 0x4145f0
call fcn.00401bc6
mov esi, eax
shl esi, 0xf
call fcn.00401bc6
or eax, esi
push eax
lea eax, [ebp - 0x54]
push 0x62bb58
push eax
call fcn.00412572
add esp, 0xc
mov byte [ebp - 4], 3
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x24]
call fcn.004059d9
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x54]
call fcn.004047bf
mov eax, dword [0x630e7c]
test eax, eax
je 0x4145ca
cmp dword [ebp - 0x10], 0x10
mov ecx, dword [ebp - 0x24]
jae 0x4145bc
lea ecx, [ebp - 0x24]
push ebx
push ecx
push edi
call eax
mov ecx, eax
mov eax, dword [0x630e7c]
jmp 0x414604
cmp dword [0x6303c8], 0
je 0x414602
push 0x14
pop eax
call fcn.0040171b
push esp
push 0x62bb64
call fcn.0040f4b6
push eax
call dword [0x6303c8]
add esp, 0xc
mov eax, dword [0x630e7c]
test eax, eax
je 0x414649
push 4
push 0
push edi
call eax
jmp 0x414671
xor ecx, ecx
test ecx, ecx
je 0x4145f5
test eax, eax
je 0x414621
cmp dword [ebp - 0x10], 0x10
mov ecx, dword [ebp - 0x24]
jae 0x414618
lea ecx, [ebp - 0x24]
push 4
push 0
push ecx
call eax
jmp 0x414676
cmp dword [0x6303c8], 0
je 0x414676
push 0x14
pop eax
call fcn.0040171b
push esp
push 0x62bb64
call fcn.0040f4b6
push eax
call dword [0x6303c8]
add esp, 0xc
jmp 0x414676
cmp dword [0x6303c8], 0
je 0x41466f
push 0x14
pop eax
call fcn.0040171b
push esp
push 0x62bb64
call fcn.0040f4b6
push eax
call dword [0x6303c8]
add esp, 0xc
xor eax, eax
test eax, eax
setne bl
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x3c]
call fcn.004047bf
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.004047bf
mov al, bl
lea esp, [ebp - 0x164]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret