Function at 0x4a63b0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x61bbc8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x540
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [ebp - 0x10], esp
push esi
lea ecx, [ebp + 8]
mov dword [ebp - 0x18], edi
call fcn.00401eb0
mov eax, dword [ebp + 8]
cmp dword [eax - 0xc], 0
mov dword [ebp - 4], 0
jl 0x4a640c
push 0x630fc8
push eax
call fcn.005d9339
add esp, 8
test eax, eax
je 0x4a640c
sub eax, dword [ebp + 8]
je 0x4a6451
push esi
mov ecx, edi
call fcn.004a4d90
mov bl, al
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a643c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0
push 0
push 0
push 0
push 1
push 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.005bf086
mov ecx, dword [ebp + 8]
push 0
push 0
push 0x20000002
push 1
push ecx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
call fcn.005bfd21
mov esi, eax
mov dword [ebp - 0x1c], esi
test esi, esi
mov byte [ebp - 4], 3
jne 0x4a64cc
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.005bf8a5
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4a6766
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x4a6766
lea ecx, [ebp - 0x14c]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov edx, dword [ebp + 8]
push 0x2f
push edx
call fcn.005d940c
add esp, 8
test eax, eax
jne 0x4a64f5
or eax, 0xffffffff
jmp 0x4a64f8
sub eax, dword [ebp + 8]
add eax, 1
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 8]
call fcn.00407f80
push eax
lea ecx, [ebp - 0x14c]
push ecx
lea edx, [ebp - 0x20]
mov bl, 4
push edx
mov byte [ebp - 4], bl
call fcn.0042f4c0
add esp, 0xc
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 5
call fcn.00403020
mov eax, dword [ebp - 0x20]
add eax, 0xfffffff0
mov byte [ebp - 4], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a6550
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
mov byte [ebp - 4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a6573
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 8]
cmp dword [eax - 0xc], 0
jl 0x4a65d2
push 0x6387f0
push eax
call fcn.005d9339
add esp, 8
test eax, eax
je 0x4a65d2
sub eax, dword [ebp + 8]
test eax, eax
jle 0x4a65d2
push eax
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp + 8]
call fcn.004048d0
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 6
call fcn.00403020
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
mov byte [ebp - 4], 3
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4a65d2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x30]
call fcn.005be0de
mov ecx, dword [ebp + 8]
push 0
push 0x9021
push ecx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 7
call fcn.005be558
test eax, eax
jne 0x4a6644
mov edx, dword [esi]
mov eax, dword [edx + 0x4c]
mov ecx, esi
call eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 3
call fcn.005be1eb
mov edx, dword [esi]
mov eax, dword [edx + 4]
push 1
mov ecx, esi
mov byte [ebp - 4], 2
call eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.005bf8a5
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x4a64b7
xor edi, edi
mov edx, dword [esi]
mov edx, dword [edx + 0x34]
push 0x400
lea eax, [ebp - 0x54c]
push eax
mov ecx, esi
call edx
cmp eax, 0x400
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
jne 0x4a66a4
mov ecx, dword [ebx + 0x24]
test ecx, ecx
mov esi, dword [ebx + 0x20]
jl 0x4a668b
jg 0x4a6678
test esi, esi
jb 0x4a668b
add edi, 0x400
mov eax, edi
cdq
cmp edx, ecx
jg 0x4a66aa
jl 0x4a668b
cmp eax, esi
jae 0x4a66aa
push 0x400
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x30]
call fcn.005bde2c
mov esi, dword [ebp - 0x1c]
jmp 0x4a6646
test eax, eax
jle 0x4a66bd
jmp 0x4a66ad
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x54c]
push ecx
lea ecx, [ebp - 0x30]
call fcn.005bde2c
lea edx, [ebp + 8]
lea esi, [ebx + 0x28]
push edx
mov ecx, esi
call fcn.00403020
mov edi, dword [ebp - 0x1c]
mov eax, dword [edi]
mov edx, dword [eax + 0x4c]
mov ecx, edi
call edx
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 3
call fcn.005be1eb
mov eax, dword [edi]
mov edx, dword [eax + 4]
push 1
mov ecx, edi
mov byte [ebp - 4], 2
call edx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.005bf8a5
mov eax, dword [esi]
push eax
mov ecx, ebx
mov dword [ebp - 4], 0
call fcn.004a4d90
mov bl, al
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4a643c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
xor al, al
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4