Function at 0x1003fcdf
Capabilities:
Get common file path

Disassembly:
push ebp
sub esp, 0x8e4
lea ebp, [esp - 4]
mov eax, dword [0x1011ac70]
xor eax, ebp
mov dword [ebp + 0x8e4], eax
push 0x2c
mov eax, 0x100cfef1
call fcn.10071ffd
mov ebx, ecx
push 0x100e3d84
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x14], ebx
call fcn.100015f0
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
lea edx, [ebp - 0x30]
push edx
lea edx, [ebp]
xor esi, esi
push edx
mov dword [ebp - 4], esi
call dword [eax + 0x18]
push esi
push 1
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 2
call fcn.100017f0
lea eax, [ebp]
push eax
lea eax, [ebp + 0x8c]
push eax
call fcn.1001eb80
pop ecx
pop ecx
cmp dword [ebp + 0xa4], 0x10
mov eax, dword [ebp + 0x90]
mov byte [ebp - 4], 3
jae 0x1003f5ed
lea eax, [ebp + 0x90]
push 0x2f2f
push eax
call fcn.10078cf0
mov edi, eax
cmp edi, esi
pop ecx
pop ecx
jne 0x1003f63e
push esi
push 1
lea ecx, [ebp + 0x8c]
call fcn.10001770
push esi
push 1
lea ecx, [ebp]
call fcn.100017f0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x8e4]
xor ecx, ebp
call fcn.10071fee
add ebp, 0x8e8
leave
ret
cmp dword [ebp + 0xa4], 0x10
mov eax, dword [ebp + 0x90]
jae 0x1003f653
lea eax, [ebp + 0x90]
push esi
push eax
call fcn.1002ba42
push esi
inc edi
push edi
mov dword [ebp - 0x10], eax
call fcn.1002ba42
mov edi, eax
push edi
push 1
call fcn.1001ce06
add esp, 0x18
cmp dword [ebp - 0x10], edi
jae 0x1003f69e
cmp eax, dword [ebp - 0x10]
jbe 0x1003f69e
call fcn.10004c83
mov ecx, eax
call fcn.1001a6c0
push eax
push 0x100d50cc
push str.CanPopupPushApp
push str.PushBranch
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push 0x100e3d44
lea ecx, [ebp - 0x30]
call fcn.100015f0
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
lea edx, [ebp - 0x30]
push edx
mov byte [ebp - 4], 4
call dword [eax + 0x1c]
push esi
push 1
lea ecx, [ebp - 0x30]
mov edi, eax
mov byte [ebp - 4], 3
call fcn.100017f0
cmp edi, esi
je 0x1003f600
cmp dword [edi + 0x18], 8
jb 0x1003f6df
mov edi, dword [edi + 4]
jmp 0x1003f6e2
add edi, 4
push edi
lea ecx, [ebp + 0x38]
call fcn.100015f0
push 0x10102f18
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 5
call fcn.1000535e
test eax, eax
jne 0x1003f72d
xor edi, edi
push esi
push 1
lea ecx, [ebp + 0x38]
call fcn.100017f0
push esi
push 1
lea ecx, [ebp + 0x8c]
call fcn.10001770
push esi
push 1
lea ecx, [ebp]
call fcn.100017f0
mov eax, edi
jmp 0x1003f61b
lea eax, [ebp + 0x38]
push eax
lea ecx, [ebp + 0x1c]
call fcn.10003510
mov edi, 0x206
push edi
lea eax, [ebp + 0x6de]
push esi
push eax
mov byte [ebp - 4], 6
mov word [ebp + 0x6dc], si
call fcn.10072750
push edi
lea eax, [ebp + 0xc6]
push esi
push eax
mov word [ebp + 0xc4], si
call fcn.10072750
add esp, 0x18
lea eax, [ebp + 0x6dc]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp dword [ebp + 0x50], 8
mov eax, dword [ebp + 0x3c]
jae 0x1003f78d
lea eax, [ebp + 0x3c]
lea ecx, [ebp + 0xc4]
push ecx
push eax
call fcn.1001d497
pop ecx
pop ecx
lea eax, [ebp + 0x6dc]
push eax
lea ecx, [ebp + 0x70]
call fcn.100015f0
lea eax, [ebp + 0x6dc]
push eax
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 7
call fcn.100015f0
lea eax, [ebp + 0xc4]
push eax
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 8
call fcn.10003620
lea eax, [ebp + 0xc4]
push eax
lea ecx, [ebp + 0x54]
call fcn.10003620
push edi
lea eax, [ebp + 0x2ce]
push esi
push eax
mov word [ebp + 0x2cc], si
call fcn.10072750
push edi
lea eax, [ebp + 0x4d6]
push esi
push eax
mov word [ebp + 0x4d4], si
call fcn.10072750
add esp, 0x18
lea ecx, [ebp - 0x38]
call fcn.100013c0
lea eax, [ebp + 0x6dc]
push eax
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 9
call fcn.100015f0
cmp dword [ebp + 0x34], 8
mov eax, dword [ebp + 0x20]
mov byte [ebp - 4], 0xa
jae 0x1003f83b
lea eax, [ebp + 0x20]
push eax
lea ecx, [ebp - 0x30]
call fcn.100015f0
lea eax, [ebp + 0xa8]
push eax
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0xb
call fcn.10001460
push esi
push 1
lea ecx, [ebp - 0x30]
movzx edi, al
call fcn.100017f0
push esi
push 1
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 9
call fcn.100017f0
cmp edi, esi
je 0x1003fa7a
push str.downname
lea ecx, [ebp - 0x30]
call fcn.100015f0
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
lea edx, [ebp - 0x30]
push edx
mov byte [ebp - 4], 0xc
call dword [eax + 0x1c]
push esi
push 1
lea ecx, [ebp - 0x30]
mov edi, eax
mov byte [ebp - 4], 9
call fcn.100017f0
cmp edi, esi
je 0x1003f971
cmp dword [ebp + 0x88], 8
mov eax, dword [ebp + 0x74]
jae 0x1003f8c8
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x2cc]
push eax
call fcn.10072c5d
lea eax, [ebp + 0x6dc]
push eax
lea eax, [ebp + 0x4d4]
push eax
call fcn.10072c5d
add esp, 0x10
cmp dword [edi + 0x18], 8
lea ebx, [edi + 4]
jb 0x1003f8f8
mov eax, dword [ebx]
jmp 0x1003f8fa
mov eax, ebx
push eax
lea eax, [ebp + 0x4d4]
push eax
call fcn.10072c33
lea eax, [ebp + 0x2cc]
push eax
call fcn.10073333
lea eax, [ebp + 0x4d4]
push eax
call fcn.10073333
lea eax, [ebp + 0x4d4]
push eax
lea eax, [ebp + 0x2cc]
push eax
call fcn.10072e67
add esp, 0x18
test eax, eax
je 0x1003f96e
lea eax, [ebp + 0x6dc]
push eax
lea ecx, [ebp + 0x54]
call fcn.100017c0
cmp dword [edi + 0x18], 8
jb 0x1003f950
mov ebx, dword [ebx]
push ebx
lea ecx, [ebp + 0x54]
call fcn.10003620
lea eax, [ebp + 0x4d4]
push eax
lea eax, [ebp + 0x2cc]
push eax
call fcn.1001d5b7
pop ecx
pop ecx
mov ebx, dword [ebp - 0x14]
push str.parmes
lea ecx, [ebp - 0x30]
call fcn.100015f0
mov ecx, dword [ebx + 8]
mov eax, dword [ecx]
lea edx, [ebp - 0x30]
push edx
mov byte [ebp - 4], 0xd
call dword [eax + 0x1c]
xor ebx, ebx
push esi
inc ebx
push ebx
lea ecx, [ebp - 0x30]
mov edi, eax
mov byte [ebp - 4], 9
call fcn.100017f0
cmp edi, esi
jne 0x1003f9c0
cmp dword [ebp + 0x88], 8
mov eax, dword [ebp + 0x74]
jae 0x1003f9b4
lea eax, [ebp + 0x74]
push eax
call fcn.1001df3c
pop ecx
jmp 0x1003fa49
push 0x10102f18
lea ecx, [ebp + 0xa8]
call fcn.100015f0
push 0x100d89dc
lea ecx, [ebp + 0xa8]
mov byte [ebp - 4], 0xe
call fcn.10003620
push 0xffffffffffffffff
push esi
lea eax, [ebp + 0x54]
push eax
lea ecx, [ebp + 0xa8]
call fcn.10003ab0
push 0x100d8a88
lea ecx, [ebp + 0xa8]
call fcn.10003620
cmp dword [edi + 0x18], 8
jb 0x1003fa11
mov edi, dword [edi + 4]
jmp 0x1003fa14
add edi, 4
push edi
lea ecx, [ebp + 0xa8]
call fcn.10003620
cmp dword [ebp + 0xc0], 8
mov eax, dword [ebp + 0xac]
jae 0x1003fa35
lea eax, [ebp + 0xac]
push eax
call fcn.1001df3c
pop ecx
push esi
push ebx
lea ecx, [ebp + 0xa8]
call fcn.100017f0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 8
call fcn.10001450
push esi
push ebx
lea ecx, [ebp + 0x54]
call fcn.100017f0
push esi
push ebx
lea ecx, [ebp + 0x70]
call fcn.100017f0
push esi
push ebx
lea ecx, [ebp + 0x1c]
call fcn.100017f0
mov edi, ebx
jmp 0x1003f702
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 8
call fcn.10001450
push esi
push 1
lea ecx, [ebp + 0x54]
call fcn.100017f0
push esi
push 1
lea ecx, [ebp + 0x70]
call fcn.100017f0
push esi
push 1
lea ecx, [ebp + 0x1c]
call fcn.100017f0
jmp 0x1003f700
push esi
mov esi, ecx
call fcn.1003faac
test eax, eax
je 0x1003fcf3
mov ecx, esi
pop esi
jmp 0x1003f568
pop esi
ret