Function at 0x432b50
Capabilities:
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x4d639d
mov eax, dword fs:[0]
push eax
sub esp, 0x458
mov eax, dword [0x54d158]
xor eax, esp
mov dword [esp + 0x450], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x54d158]
xor eax, esp
push eax
lea eax, [esp + 0x46c]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x2c], esi
mov dword [esp + 0x474], 0
mov eax, dword [esi + 0xa8]
sub eax, 0x10
push eax
call fcn.0040ff10
add eax, 0x10
add esp, 4
mov dword [esp + 0x24], eax
lea eax, [esp + 0x47c]
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x478], 1
call fcn.0040fdf0
mov eax, dword [esi + 0x80]
sub eax, 0x10
push eax
call fcn.0040ff10
lea ecx, [eax + 0x10]
add esp, 4
mov dword [esp + 0x18], ecx
mov byte [esp + 0x474], 2
mov edx, dword [esi + 0xb0]
mov eax, dword [edx - 0xc]
test eax, eax
lea ebp, [esi + 0xb0]
jle 0x432ee7
mov ecx, dword [ecx - 0xc]
test ecx, ecx
je 0x432c4d
lea ebx, [esp + 0x18]
call fcn.00431910
mov edi, eax
call fcn.00431990
push eax
mov ecx, ebx
call fcn.0040fdf0
mov edx, dword [esp + 0x18]
mov ecx, dword [edx - 0xc]
lea eax, [ecx - 1]
test eax, eax
jl 0x432c67
cmp eax, ecx
jg 0x432c67
movzx eax, word [edx + eax*2]
cmp ax, 0x2c
je 0x432c4d
push 0x51ed18
mov ecx, ebx
call fcn.0040da00
call fcn.004a08e6
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x432c71
push 0x80004005
call fcn.004103e0
push 0x80070057
call fcn.004103e0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
mov byte [esp + 0x474], 3
call fcn.004a08e6
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x432ca3
push 0x80004005
call fcn.004103e0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x20], eax
mov bl, 4
mov byte [esp + 0x474], bl
xor esi, esi
mov edi, edi
test esi, esi
mov eax, dword [ebp]
mov ecx, dword [eax - 0xc]
jl 0x432ce0
cmp esi, ecx
jge 0x432ce0
lea ecx, [eax + esi*2]
push 0x3b
push ecx
call fcn.004ae2db
add esp, 8
test eax, eax
jne 0x432cea
mov dword [esp + 0x34], 0xffffffff
jmp 0x432cfb
sub eax, dword [ebp]
sar eax, 1
test eax, eax
mov dword [esp + 0x34], eax
jge 0x432d77
push esi
lea edx, [esp + 0x40]
push edx
mov ecx, ebp
call fcn.00431500
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x478], 5
call fcn.0040fdf0
mov byte [esp + 0x474], bl
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x432d41
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp]
mov eax, dword [ecx - 0xc]
sub eax, esi
push eax
lea edx, [esp + 0x44]
push edx
lea ecx, [esp + 0x28]
call fcn.004315e0
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x478], 6
call fcn.0040fdf0
mov byte [esp + 0x474], bl
mov eax, dword [esp + 0x40]
jmp 0x432def
push esi
lea ecx, [esp + 0x3c]
push ecx
mov ecx, ebp
call fcn.00431500
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x478], 7
call fcn.0040fdf0
mov byte [esp + 0x474], bl
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x432dbd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x34]
sub ecx, esi
push ecx
lea edx, [esp + 0x34]
push edx
lea ecx, [esp + 0x28]
call fcn.004315e0
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x478], 8
call fcn.0040fdf0
mov byte [esp + 0x474], bl
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x432e0b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], 0
jl 0x432e3c
push 0x52151c
push eax
call fcn.004ae27d
add esp, 8
test eax, eax
je 0x432e3c
sub eax, dword [esp + 0x20]
sar eax, 1
test eax, eax
jle 0x432e3c
push eax
lea ecx, [esp + 0x24]
push ecx
call fcn.00437950
lea ebx, [esp + 0x20]
call fcn.00431910
mov edi, eax
call fcn.00431990
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x30]
call fcn.0040ee60
mov esi, dword [esp + 0x34]
test esi, esi
jl 0x432e7e
push 1
push 0x51ed18
lea ecx, [esp + 0x30]
call fcn.0040ee60
add esi, 1
mov bl, 4
jmp 0x432cc0
mov esi, dword [esp + 0x28]
mov eax, dword [esi - 0xc]
push eax
push esi
lea ecx, [esp + 0x20]
call fcn.0040ee60
mov byte [esp + 0x474], 3
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
or ebp, 0xffffffff
lea edx, [eax + 0xc]
mov ecx, ebp
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x432eba
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esi - 0x10]
mov byte [esp + 0x474], 2
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x432edd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x2c]
jmp 0x432eea
or ebp, 0xffffffff
cmp dword [ecx - 0xc], 0
jg 0x432f5a
mov byte [esp + 0x474], 1
lea eax, [ecx - 0x10]
mov edx, ebp
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x432f13
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x474], 0
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x432f3a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x474], ebp
mov eax, dword [esp + 0x47c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
lock xadd dword [ecx], ebp
dec ebp
test ebp, ebp
jmp 0x4332fb
call fcn.004a08e6
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x432f74
push 0x80004005
call fcn.004103e0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x54]
push ecx
push 0x104
mov byte [esp + 0x47c], 9
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
jne 0x432fdb
mov byte [esp + 0x474], 2
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
mov ecx, ebp
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x432fc7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x474], 1
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
jmp 0x432efb
lea ecx, [esp + 0x25c]
push ecx
push 0
push str.xplat
lea edx, [esp + 0x60]
push edx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
test eax, eax
jne 0x433016
mov byte [esp + 0x474], 2
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x432fbb
lea ecx, [esp + 0x25c]
push ecx
lea ecx, [esp + 0x20]
call fcn.00410090
mov edx, dword [esp + 0x1c]
push 0x5c
push edx
call fcn.004adb61
mov edx, dword [esp + 0x24]
add esp, 8
test eax, eax
jne 0x433042
mov ecx, ebp
jmp 0x433048
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, dword [edx - 0xc]
sub eax, ecx
add eax, 0xffffffff
push eax
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x24]
call fcn.0040dbf0
lea edi, [esi + 0x84]
push eax
mov ecx, edi
mov byte [esp + 0x478], 0xa
call fcn.0040fdf0
mov byte [esp + 0x474], 9
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43309c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x51cd44
lea ecx, [esp + 0x2c]
call fcn.00410140
push str._CACHE_
lea ecx, [esp + 0x30]
mov byte [esp + 0x478], 0xb
call fcn.00410140
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x3c]
push edx
mov byte [esp + 0x47c], 0xc
call fcn.0042ba80
push eax
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x38]
push ecx
mov bl, 0xd
push esi
xor edx, edx
lea ecx, [esp + 0x38]
mov byte [esp + 0x484], bl
call fcn.0042be80
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x478], 0xe
call fcn.0040fdf0
mov byte [esp + 0x474], bl
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
mov ecx, ebp
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x43312f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x474], 0xc
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x433156
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x474], 0xb
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43317d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x474], 9
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
mov edx, ebp
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4331a4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
call fcn.0042ddf0
mov eax, dword [edi]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x24]
call fcn.0040ee60
lea ecx, [esp + 0x44]
call fcn.004a2c0c
push 0
push 0
push 0
push 0
push ebp
mov byte [esp + 0x488], 0xf
mov edx, dword [esp + 0x2c]
mov ebp, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push edx
push 0
push 0xfde9
call ebp
mov esi, eax
test esi, esi
jle 0x433250
push esi
call fcn.004acec0
add esp, 4
push esi
mov edi, eax
push 0
push edi
call fcn.004b0770
mov eax, dword [esp + 0x24]
add esp, 0xc
push 0
push 0
push esi
push edi
push 0xffffffffffffffff
push eax
push 0
push 0xfde9
call ebp
mov ecx, dword [esp + 0x1c]
push 0
push 0x1001
push ecx
lea ecx, [esp + 0x50]
mov esi, eax
call fcn.004a3008
test eax, eax
je 0x433250
push esi
push edi
lea ecx, [esp + 0x4c]
call fcn.004a295a
lea ecx, [esp + 0x44]
call fcn.004a2baa
lea ecx, [esp + 0x44]
mov byte [esp + 0x474], 9
call fcn.004a2ce0
mov byte [esp + 0x474], 2
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x433289
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x474], 1
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4332b1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x474], 0
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4332d9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x474], 0xffffffff
mov eax, dword [esp + 0x47c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x433307
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x46c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x450]
xor ecx, esp
call fcn.004ac89d
add esp, 0x464
ret 4