Function at 0x4df430
Capabilities:
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x5c5881
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push ebp
push esi
push edi
mov eax, dword [0x67ff88]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x20], 0
mov eax, dword [section..data]
mov esi, dword [esp + 0x38]
mov dword [esi], eax
mov eax, dword [section..data]
mov ecx, 1
mov dword [esp + 0x20], ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x1c], eax
mov bl, 2
mov byte [esp + 0x30], bl
mov byte [esp + 0x16], 0
test edi, edi
je 0x4df4a0
mov cl, byte [edi]
mov byte [esp + 0x16], cl
mov byte [edi], 0
jmp 0x4df4a4
lea edi, [esp + 0x16]
mov ecx, dword [esp + 0x3c]
push 0
push 0
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x24]
push eax
push ecx
call fcn.004dee50
mov edx, dword [esp + 0x2c]
mov eax, dword [edx - 8]
add esp, 0x14
test eax, eax
jne 0x4df505
lea eax, [esp + 0x24]
push eax
call fcn.004dd430
add esp, 4
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x34], 3
call fcn.004cecf0
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx - 0xc]
add ecx, 0xfffffff4
mov byte [esp + 0x30], bl
cmp eax, 0xffffffff
je 0x4df505
add eax, 0xffffffff
mov dword [ecx], eax
jne 0x4df505
call fcn.004ce2e0
push 0x105
mov ecx, esi
call fcn.004ceec0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push eax
push 0
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
test eax, eax
mov ecx, esi
sete bl
call fcn.004cf530
test bl, bl
je 0x4df543
mov eax, dword [0x5f09fc]
push eax
push 0
mov ecx, esi
call fcn.004cff70
mov ecx, dword [esi]
cmp dword [ecx - 8], 0
jne 0x4df585
call fcn.004d8e80
test eax, eax
je 0x4df572
mov edx, dword [eax]
push 0
mov ecx, eax
mov eax, dword [edx + 8]
push str.Failed_to_create_a_temporary_file_name
call eax
push eax
call fcn.004e6fa0
add esp, 4
jmp 0x4df629
mov eax, str.Failed_to_create_a_temporary_file_name
push eax
call fcn.004e6fa0
add esp, 4
jmp 0x4df629
mov ebx, dword [esp + 0x40]
mov byte [esp + 0x17], 1
test ebx, ebx
je 0x4df5c1
cmp dword [ebx], 0xffffffff
jne 0x4df5c1
mov cl, byte [esp + 0x16]
mov byte [edi], cl
mov ecx, edi
mov eax, esi
call fcn.004dce70
mov ebp, eax
cmp ebp, 0xffffffff
je 0x4df5bc
mov ecx, ebx
call fcn.004eae30
mov dword [ebx], ebp
mov byte [ebx + 4], 0
jmp 0x4df5c1
mov byte [esp + 0x17], 0
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4df5e9
cmp dword [eax], 0
jne 0x4df5e9
mov dl, byte [esp + 0x16]
push esi
mov ecx, edi
mov esi, eax
mov byte [edi], dl
call fcn.004dcea0
mov esi, dword [esp + 0x3c]
add esp, 4
mov byte [esp + 0x17], al
cmp byte [esp + 0x17], 0
jne 0x4df629
call fcn.004d8e80
test eax, eax
je 0x4df60b
mov edx, dword [eax]
push 0
mov ecx, eax
mov eax, dword [edx + 8]
push str.Failed_to_open_temporary_file.
call eax
jmp 0x4df610
mov eax, str.Failed_to_open_temporary_file.
push eax
call fcn.004e6cb0
mov ecx, dword [0x5f09fc]
add esp, 4
push ecx
push 0
mov ecx, esi
call fcn.004cff70
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx - 0xc]
add ecx, 0xfffffff4
mov byte [esp + 0x30], 1
cmp eax, 0xffffffff
je 0x4df649
add eax, 0xffffffff
mov dword [ecx], eax
jne 0x4df649
call fcn.004ce2e0
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 0xc]
add ecx, 0xfffffff4
mov byte [esp + 0x30], 0
cmp eax, 0xffffffff
je 0x4df669
add eax, 0xffffffff
mov dword [ecx], eax
jne 0x4df669
call fcn.004ce2e0
mov eax, esi
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret