Function at 0x43bcd4
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2fc
mov eax, dword [0x59ece0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push str.dbghelp.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
xor ebx, ebx
mov dword [ebp - 0x2d8], eax
cmp eax, ebx
je 0x43c1d0
push str.MiniDumpWriteDump
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x2dc], eax
cmp eax, ebx
je 0x43c1c4
push edi
xor eax, eax
push 0x206
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push ebx
push eax
call fcn.0049d850
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
push 0x103
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov edi, 0x5a3d80
push edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x4ccb3c
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
push ebx
push 0x80
push 2
push ebx
push 2
push 0x40000000
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x2d4], eax
cmp eax, 0xffffffff
je 0x43c1c3
xor eax, eax
lea edi, [ebp - 0x2e8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 7
pop edi
mov dword [ebp - 0x2e8], eax
xor eax, eax
push 0x5a2318
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x2e4], esi
mov dword [ebp - 0x2e0], ebx
mov dword [ebp - 0x214], edi
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], ax
call fcn.00405a60
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.00412600
pop ecx
pop ecx
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x228]
call fcn.00405df0
xor eax, eax
push 0x5a2728
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], edi
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], ax
call fcn.00405a60
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x298]
push eax
call fcn.00412600
pop ecx
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x228]
call fcn.00405df0
xor eax, eax
push 0x5a2930
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], edi
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], ax
call fcn.00405a60
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.00412600
pop ecx
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x228]
call fcn.00405df0
xor eax, eax
push 0x5a2f48
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], edi
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], ax
call fcn.00405a60
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x2b4]
push eax
call fcn.00412600
pop ecx
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x228]
call fcn.00405df0
xor eax, eax
push 0x5a2520
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], edi
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], ax
call fcn.00405a60
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.00412600
pop ecx
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x228]
call fcn.00405df0
xor eax, eax
push 0x5a3358
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x214], edi
mov dword [ebp - 0x218], ebx
mov word [ebp - 0x228], ax
call fcn.00405a60
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.00412600
pop ecx
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x228]
call fcn.00405df0
call fcn.0043b9b8
push 0x7f
pop edi
cmp dword [eax + 0x10], edi
jbe 0x43bf7b
mov esi, edi
jmp 0x43bf83
call fcn.0043b9b8
mov esi, dword [eax + 0x10]
call fcn.0043b9b8
cmp dword [eax + 0x14], 0x10
jb 0x43bf90
mov eax, dword [eax]
push esi
push eax
push edi
push 0x5a4a38
call fcn.004a11dc
mov ecx, dword [ebp - 0x26c]
add esp, 0x10
mov byte [0x5a4ab7], bl
cmp ecx, edi
jbe 0x43bfb2
mov ecx, edi
cmp dword [ebp - 0x268], 0x10
mov eax, dword [ebp - 0x27c]
jae 0x43bfc7
lea eax, [ebp - 0x27c]
push ecx
push eax
push edi
mov esi, 0x5a49b8
push esi
call fcn.004a11dc
mov ecx, dword [ebp - 0x288]
add esp, 0x10
mov byte [0x5a4a37], bl
cmp ecx, edi
jbe 0x43bfea
mov ecx, edi
cmp dword [ebp - 0x284], 0x10
mov eax, dword [ebp - 0x298]
jae 0x43bfff
lea eax, [ebp - 0x298]
push ecx
push eax
push edi
push 0x5a4ab8
call fcn.004a11dc
mov ecx, dword [ebp - 0x2c0]
add esp, 0x10
mov byte [0x5a4b37], bl
cmp ecx, edi
jbe 0x43c021
mov ecx, edi
cmp dword [ebp - 0x2bc], 0x10
mov eax, dword [ebp - 0x2d0]
jae 0x43c036
lea eax, [ebp - 0x2d0]
push ecx
push eax
push edi
push 0x5a4b38
call fcn.004a11dc
mov ecx, dword [ebp - 0x2a4]
add esp, 0x10
mov byte [0x5a4bb7], bl
cmp ecx, edi
jbe 0x43c058
mov ecx, edi
cmp dword [ebp - 0x2a0], 0x10
mov eax, dword [ebp - 0x2b4]
jae 0x43c06d
lea eax, [ebp - 0x2b4]
push ecx
push eax
push edi
push 0x5a4bb8
call fcn.004a11dc
mov ecx, dword [ebp - 0x250]
add esp, 0x10
mov byte [0x5a4c37], bl
cmp ecx, edi
jbe 0x43c08f
mov ecx, edi
cmp dword [ebp - 0x24c], 0x10
mov eax, dword [ebp - 0x260]
jae 0x43c0a4
lea eax, [ebp - 0x260]
push ecx
push eax
push edi
push esi
call fcn.004a11dc
mov ecx, dword [ebp - 0x234]
add esp, 0x10
mov byte [0x5a4cb7], bl
cmp ecx, edi
jbe 0x43c0c2
mov ecx, edi
cmp dword [ebp - 0x230], 0x10
mov eax, dword [ebp - 0x244]
jae 0x43c0d7
lea eax, [ebp - 0x244]
push ecx
push eax
push edi
push 0x5a4f5c
call fcn.004a11dc
xor edi, edi
add esp, 0x10
inc edi
mov byte [0x5a4fdb], bl
cmp dword [ebp - 0x234], ebx
je 0x43c104
mov dword [0x5a4f58], edi
mov dword [0x5a4fdc], edi
lea eax, [ebp - 0x2fc]
mov dword [ebp - 0x2ec], eax
push ebx
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2e8]
push eax
xor eax, eax
cmp byte [0x5a1ee8], bl
mov dword [ebp - 0x2fc], 0x3600001
sete al
mov dword [ebp - 0x2f8], 0x630
mov dword [ebp - 0x2f4], esi
mov dword [ebp - 0x2f0], edi
lea eax, [eax + eax + 2]
push eax
push dword [ebp - 0x2d4]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [ebp - 0x2dc]
push dword [ebp - 0x2d4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.00402720
push ebx
push edi
lea ecx, [ebp - 0x260]
call fcn.00402720
push ebx
push edi
lea ecx, [ebp - 0x2b4]
call fcn.00402720
push ebx
push edi
lea ecx, [ebp - 0x2d0]
call fcn.00402720
push ebx
push edi
lea ecx, [ebp - 0x298]
call fcn.00402720
push ebx
push edi
lea ecx, [ebp - 0x27c]
call fcn.00402720
pop edi
push dword [ebp - 0x2d8]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.0049d4b1
leave
ret