Function at 0x42d4bd
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c0
mov eax, dword [0x494240]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 0x4b0], 0
push ebx
call fcn.00406370
mov ebx, eax
lea ecx, [ebp - 0x474]
push str.disable_breakpad
mov dword [ebp - 0x4ac], ebx
call fcn.00401fd0
lea eax, [ebp - 0x474]
mov ecx, ebx
push eax
call fcn.00406d30
push 0
push 1
lea ecx, [ebp - 0x474]
mov bl, al
call fcn.00402fc0
test bl, bl
jne 0x42d9b5
push dword [ebp + 8]
lea ecx, [ebp - 0x4c0]
call fcn.00407900
lea eax, [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x42c]
push eax
call fcn.0040fac0
cmp dword [ebp - 0x41c], 0
mov ebx, str.browser
pop ecx
pop ecx
jne 0x42d561
push ebx
call fcn.004058c0
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x42c]
call fcn.00408320
push esi
push edi
xor eax, eax
xor ebx, ebx
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x414]
push 0x104
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x474]
call fcn.00407420
call fcn.00443052
mov esi, eax
lea ecx, [ebp - 0x444]
lea eax, [ebp - 0x474]
push eax
mov edi, dword [esi]
call fcn.0040a7b0
push eax
mov ecx, esi
call dword [edi + 0x1c]
lea ecx, [ebp - 0x444]
mov byte [ebp - 0x4b8], al
call fcn.00407530
push ebx
push 1
lea ecx, [ebp - 0x474]
call fcn.00407d80
push 0x30
call fcn.00444deb
pop ecx
test eax, eax
je 0x42d5ea
mov ecx, eax
call fcn.00443363
mov esi, eax
jmp 0x42d5ec
mov esi, ebx
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x474]
call fcn.00407420
call fcn.00443052
push eax
call fcn.00406370
push eax
lea eax, [ebp - 0x4a4]
push eax
call fcn.0042d3c7
pop ecx
push eax
lea eax, [ebp - 0x42c]
mov ecx, esi
push eax
lea eax, [ebp - 0x474]
push eax
call fcn.0044340e
push ebx
push 1
lea ecx, [ebp - 0x4a4]
mov dword [ebp - 0x4b4], eax
call fcn.00407d80
push ebx
push 1
lea ecx, [ebp - 0x474]
call fcn.00407d80
mov esi, str.browser
mov dword [ebp - 0x4a8], ebx
push esi
mov edi, ebx
call fcn.004058c0
pop ecx
push eax
push esi
push dword [ebp - 0x41c]
lea ecx, [ebp - 0x42c]
push ebx
call fcn.004085e0
test eax, eax
jne 0x42d682
mov edi, 0x42d25d
jmp 0x42d6b0
mov esi, str.service
push esi
call fcn.004058c0
pop ecx
push eax
push esi
push dword [ebp - 0x41c]
lea ecx, [ebp - 0x42c]
push ebx
call fcn.004085e0
mov esi, str.browser
test eax, eax
jne 0x42d6ba
mov edi, 0x42dc87
mov dword [ebp - 0x4a8], fcn.0042d285
push esi
call fcn.004058c0
pop ecx
push eax
push esi
push dword [ebp - 0x41c]
lea ecx, [ebp - 0x42c]
push ebx
call fcn.004085e0
test eax, eax
jne 0x42d6f1
push dword [ebp - 0x4b8]
call fcn.0042d9d7
pop ecx
call fcn.00443052
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x28]
call fcn.0040e5d0
mov esi, eax
mov dword [ebp - 0x448], 0xf
mov dword [ebp - 0x44c], ebx
lea ecx, [ebp - 0x45c]
mov byte [ebp - 0x45c], bl
push ecx
mov eax, dword [esi]
mov ecx, esi
push str.CHROME_BREAKPAD_PIPE_NAME
call dword [eax + 4]
test al, al
jne 0x42d74c
test edi, edi
je 0x42d730
push edi
call fcn.0042d9c4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x45c]
call fcn.00402fc0
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
push ebx
jmp 0x42d9a6
cmp dword [ebp - 0x448], 0x10
lea eax, [ebp - 0x45c]
cmovae eax, dword [ebp - 0x45c]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x4bc], eax
lea eax, [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x48c]
push eax
call fcn.0040fac0
xor eax, eax
push 0x206
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push ebx
push eax
call fcn.00447d70
add esp, 0x14
lea eax, [ebp - 0x20c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push str.full_memory_crash_report
lea ecx, [ebp - 0x444]
mov edi, 0x120
call fcn.00401fd0
mov ecx, dword [ebp - 0x4ac]
lea eax, [ebp - 0x444]
push eax
call fcn.00406d30
push 0
push 1
lea ecx, [ebp - 0x444]
mov bl, al
call fcn.00402fc0
test bl, bl
je 0x42d7f6
add edi, 6
jmp 0x42d812
call fcn.00443052
push dword [ebp - 0x4b8]
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x20]
test al, al
mov ecx, 0x160
cmovne edi, ecx
push 0xc8
call fcn.00444deb
mov dword [ebp - 0x4ac], eax
pop ecx
test eax, eax
je 0x42d880
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x444]
call fcn.00407420
push dword [ebp - 0x4b4]
mov ecx, dword [ebp - 0x4ac]
lea eax, [ebp - 0x48c]
xor ebx, ebx
inc ebx
cmp dword [ebp - 0x478], 8
cmovae eax, dword [ebp - 0x48c]
push eax
push edi
push 7
push 0
push dword [ebp - 0x4a8]
lea eax, [ebp - 0x444]
push 0x42d389
push eax
call fcn.00462a3e
mov dword [0x496028], eax
jmp 0x42d88d
and dword [0x496028], 0
mov ebx, dword [ebp - 0x4b0]
test bl, 1
je 0x42d8a4
push 0
push 1
lea ecx, [ebp - 0x444]
and ebx, 0xfffffffe
call fcn.00407d80
push 0xc8
call fcn.00444deb
mov dword [ebp - 0x4b0], eax
pop ecx
test eax, eax
je 0x42d911
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x444]
call fcn.00407420
push dword [ebp - 0x4b4]
or ebx, 2
lea ecx, [ebp - 0x48c]
cmp dword [ebp - 0x478], 8
lea eax, [ebp - 0x444]
cmovae ecx, dword [ebp - 0x48c]
push ecx
mov ecx, dword [ebp - 0x4b0]
push edi
xor edi, edi
push edi
push edi
push method.std::codecvt_char__char__int_.virtual_12
push 0x42d3b6
push eax
call fcn.00462a3e
mov dword [0x49602c], eax
jmp 0x42d919
xor edi, edi
mov dword [0x49602c], edi
test bl, 2
je 0x42d92c
push edi
push 1
lea ecx, [ebp - 0x444]
call fcn.00407d80
push sym.chrome.exe_DumpProcessWithoutCrash
call fcn.004262b0
mov eax, dword [0x496028]
pop ecx
cmp dword [eax + 0xc], edi
je 0x42d981
mov ebx, str.browser
mov byte [eax + 0xbd], 1
push ebx
call fcn.004058c0
pop ecx
push eax
push ebx
push dword [ebp - 0x41c]
lea ecx, [ebp - 0x42c]
push edi
call fcn.004085e0
test eax, eax
je 0x42d981
call fcn.00443052
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x38]
test al, al
jne 0x42d981
call fcn.0042db87
push edi
push 1
lea ecx, [ebp - 0x48c]
call fcn.00407d80
push edi
push 1
lea ecx, [ebp - 0x45c]
call fcn.00402fc0
mov eax, dword [esi]
mov ecx, esi
push 1
call dword [eax]
push edi
push 1
lea ecx, [ebp - 0x42c]
call fcn.00407d80
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.004455d4
mov esp, ebp
pop ebp
ret