Function at 0x4211dd
Capabilities:
Get common file path

Disassembly:
push ebp
sub esp, 0x430
lea ebp, [esp - 4]
mov eax, dword [0x43bca0]
xor eax, ebp
mov dword [ebp + 0x430], eax
push 0xe8
mov eax, 0x427c77
call fcn.0042606e
mov eax, dword [ebp + 0x43c]
xor ebx, ebx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x440]
xor edi, edi
inc ebx
test byte [0x43c7e4], bl
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x18], edi
mov esi, 0x43c7c8
jne 0x42124b
or dword [0x43c7e4], ebx
mov ecx, esi
mov dword [ebp - 4], edi
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
push 0x42b9f5
call fcn.00425f13
or dword [ebp - 4], 0xffffffff
pop ecx
cmp dword [0x43c7dc], edi
jne 0x42149d
mov edi, 0x104
push edi
lea eax, [ebp + 0x228]
push 0
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push ebx
push 0x1a
lea eax, [ebp + 0x228]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x421436
lea eax, [ebp + 0x228]
push eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
push str.TencentQQDownload
push eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 4], ebx
call dword [sym.imp.MSVCP80.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
add esp, 0xc
push eax
mov ecx, esi
mov byte [ebp - 4], 2
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push edi
lea eax, [ebp + 0x228]
push 0
push eax
call sub.MSVCR80.dll_memset
push dword [ebp - 0x10]
lea eax, [ebp + 0x228]
push eax
call fcn.004236fb
add esp, 0x14
push ebx
push 3
pop edi
push edi
lea ecx, [ebp - 0xf4]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_int_]
and dword [ebp - 0x10], 0
lea eax, [ebp + 0x228]
mov dword [ebp - 4], edi
mov edi, dword [sym.imp.MSVCR80.dll_wcslen]
push eax
call edi
test eax, eax
pop ecx
jbe 0x421351
mov eax, dword [ebp - 0x10]
movzx eax, word [ebp + eax*2 + 0x228]
push eax
call dword [sym.imp.MSVCR80.dll_towlower]
mov ecx, dword [ebp - 0x10]
inc dword [ebp - 0x10]
mov word [ebp + ecx*2 + 0x228], ax
lea eax, [ebp + 0x228]
push eax
call edi
cmp dword [ebp - 0x10], eax
pop ecx
pop ecx
jb 0x421321
lea eax, [ebp - 0xec]
push 0x42eef4
push eax
call fcn.0042109e
pop ecx
pop ecx
lea ecx, [ebp]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_void_]
lea eax, [ebp + 0x228]
push eax
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 4
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
lea eax, [ebp]
push eax
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 5
call fcn.004207e9
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 4
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
cmp dword [ebp + 0x18], 0x10
mov eax, dword [ebp + 4]
jae 0x4213ad
lea eax, [ebp + 4]
mov dword [ebp - 0x10], eax
lea eax, [ebp + 0x228]
push eax
call edi
push eax
push dword [ebp - 0x10]
xor edi, edi
push edi
call fcn.0040beb0
add esp, 0x10
push eax
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______thiscall_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int_]
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0xf4]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____thiscall_std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::str_void_]
push eax
mov ecx, esi
mov byte [ebp - 4], 6
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 4
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push esi
call fcn.0042088a
test al, al
pop ecx
jne 0x421413
push esi
call fcn.00420987
pop ecx
mov bl, al
lea ecx, [ebp]
mov byte [ebp - 4], 3
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf4]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::vbase_dtor_void_]
test bl, bl
jne 0x42149d
jmp 0x421438
xor edi, edi
push 0x208
lea eax, [ebp + 0x1e]
push edi
push eax
mov word [ebp + 0x1c], di
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x20a
lea eax, [ebp + 0x1c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp + 0x1c]
push 0x5c
push eax
call dword [sym.imp.MSVCR80.dll_wcsrchr]
cmp eax, edi
pop ecx
pop ecx
je 0x421473
mov word [eax], di
lea eax, [ebp + 0x1c]
push eax
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
push eax
mov ecx, esi
mov dword [ebp - 4], 7
call dword [0x42c5a0]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov ecx, dword [ebp - 0x14]
push esi
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x430]
xor ecx, ebp
call fcn.00426052
add ebp, 0x434
leave
ret