Function at 0x1103dd3
Capabilities:
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x52c
mov eax, dword [0x111121c]
push ebx
push esi
mov dword [ebp - 4], eax
mov esi, 0x104
push esi
lea eax, [ebp - 0x108]
push eax
mov dword [ebp - 0x520], ecx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
xor ebx, ebx
cmp eax, ebx
jne 0x1103e0e
xor eax, eax
jmp 0x11040b5
push edi
mov ecx, esi
sub ecx, eax
push ecx
push 0x1028b88
lea eax, [ebp + eax - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push ebx
push 0x8000000
push 3
push ebx
push 3
push accept
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x1103e52
xor eax, eax
jmp 0x11040b4
push dword [0x1112624]
mov ecx, dword [ebp - 0x520]
lea eax, [ebp - 0x51c]
push eax
push edi
mov dword [ebp - 0x528], ebx
mov dword [ebp - 0x51c], ebx
mov byte [ebp - 0x20c], 0
call fcn.0110195e
test eax, eax
je 0x11040a2
mov eax, dword [0x1112624]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1103e8e
mov ecx, dword [ebp - 0x51c]
push ebx
sub eax, edx
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea eax, [eax + ecx + 1]
push eax
push edi
call ebx
cmp eax, 0xffffffff
je 0x11040a2
mov ecx, dword [ebp - 0x520]
push esi
lea eax, [ebp - 0x414]
push eax
push edi
call fcn.01101ab7
test eax, eax
je 0x11040a2
push dword [0x1112628]
and dword [ebp - 0x524], 0
mov ecx, dword [ebp - 0x520]
inc dword [ebp - 0x51c]
lea eax, [ebp - 0x51c]
push eax
push edi
call fcn.0110195e
test eax, eax
je 0x1103fc4
mov eax, dword [0x1112628]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1103f08
mov ecx, dword [ebp - 0x51c]
push 0
sub eax, edx
push 0
lea eax, [eax + ecx + 1]
push eax
push edi
call ebx
cmp eax, 0xffffffff
je 0x1103fbb
mov ecx, dword [ebp - 0x520]
push esi
lea eax, [ebp - 0x310]
push eax
push edi
call fcn.01101ab7
test eax, eax
je 0x1103fbb
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x1103f76
lea eax, [ebp - 0x310]
push esi
push eax
mov dword [ebp - 0x524], 1
lea eax, [ebp - 0x518]
jmp 0x1103f8d
cmp byte [ebp - 0x20c], 0
jne 0x1103f94
lea eax, [ebp - 0x310]
push esi
push eax
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push dword [0x1112628]
mov ecx, dword [ebp - 0x520]
inc dword [ebp - 0x51c]
lea eax, [ebp - 0x51c]
push eax
push edi
call fcn.0110195e
test eax, eax
jne 0x1103f00
cmp dword [ebp - 0x524], 0
jne 0x1103fd1
cmp byte [ebp - 0x20c], 0
je 0x11040a2
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or dword [ebp - 0x52c], 0xffffffff
cmp dword [ebp - 0x524], 0
lea eax, [ebp - 0x518]
jne 0x1103ff4
lea eax, [ebp - 0x20c]
push dword [0x111262c]
mov edi, dword [sym.imp.SHLWAPI.dll_wnsprintfA]
push eax
mov ebx, 0x1028b80
push ebx
lea eax, [ebp - 0x108]
push esi
push eax
call edi
mov ecx, dword [ebp - 0x520]
add esp, 0x14
lea eax, [ebp - 0x108]
push eax
call fcn.01101b10
test eax, eax
mov dword [ebp - 0x51c], eax
jne 0x1104075
cmp dword [ebp - 0x524], eax
je 0x110406b
push dword [0x111262c]
lea eax, [ebp - 0x20c]
push eax
push ebx
lea eax, [ebp - 0x108]
push esi
push eax
call edi
mov ecx, dword [ebp - 0x520]
add esp, 0x14
lea eax, [ebp - 0x108]
push eax
call fcn.01101b10
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x51c]
test eax, eax
je 0x11040ae
mov ecx, dword [ebp - 0x520]
push eax
call fcn.01103ad2
cmp dword [ebp - 0x51c], 0
mov dword [ebp - 0x528], eax
je 0x11040ae
push dword [ebp - 0x51c]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
mov edi, dword [ebp - 0x52c]
pop ecx
cmp edi, 0xffffffff
je 0x11040ae
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x528]
pop edi
mov ecx, dword [ebp - 4]
pop esi
pop ebx
call fcn.0105ec09
leave
ret