Function at 0x42a9c4
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x448
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ecx
mov ebx, edx
mov dword [ebp - 0xc], eax
mov eax, dword [ebx]
cmp eax, 3
je 0x42b302
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xb8]
cmp eax, 0xfffffffc
je 0x42b275
cmp eax, 0xfffffffd
je 0x42aa3a
cmp eax, 0xfffffffe
jne 0x42aa1d
mov ecx, dword [ebp - 0xc]
movzx esi, byte [ecx + 0x121]
test esi, 1
je 0x42ab1e
jmp 0x42aa63
cmp eax, 0xffffffff
jne 0x42aa85
mov ecx, dword [ebp - 0xc]
movzx esi, byte [ecx + 0x121]
test esi, 1
je 0x42aad6
jmp 0x42aa76
mov ecx, dword [ebp - 0xc]
movzx esi, byte [ecx + 0x121]
test esi, 1
je 0x42ab63
movzx esi, byte [ecx + 0x118]
test esi, 1
jne 0x42ab63
movzx esi, byte [ecx + 0x118]
test esi, 1
jne 0x42ab1e
movzx esi, byte [ecx + 0x118]
test esi, 1
jne 0x42aad6
mov ecx, dword [ebx + 4]
test ecx, ecx
je 0x42ad29
mov eax, dword [ebx + 8]
cmp eax, 0x100
jle 0x42aa9f
mov eax, 0x100
mov dword [ebp - 4], eax
lea esi, [ebp - 0x130]
mov dword [ebp - 8], esi
push eax
push ecx
push esi
call fcn.00484e48
add esp, 0xc
mov edi, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov byte [eax + edi], 0
mov esi, 1
mov edi, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], esi
jmp 0x42aba6
push 0x4b20f8
call fcn.0046def6
mov dword [ebp - 0x24], eax
add esp, 4
mov edi, eax
mov dword [ebp - 8], edi
test edi, edi
je 0x42af3d
mov eax, 1
mov dword [ebp - 0x20], eax
mov ecx, edi
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x42ab16
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x42aaff
add eax, 0xffffffff
mov dword [ebp - 4], eax
jmp 0x42aba6
push 0x4b20ec
call fcn.0046def6
mov dword [ebp - 0x24], eax
add esp, 4
mov edi, eax
mov dword [ebp - 8], edi
test edi, edi
je 0x42af64
mov eax, 1
mov dword [ebp - 0x20], eax
mov ecx, edi
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x42ab5e
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x42ab47
add eax, 0xffffffff
mov dword [ebp - 4], eax
jmp 0x42aba6
push 0x4b2104
call fcn.0046def6
mov dword [ebp - 0x24], eax
add esp, 4
mov edi, eax
mov dword [ebp - 8], edi
test edi, edi
je 0x42b24e
mov eax, 1
mov dword [ebp - 0x20], eax
mov ecx, edi
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x42aba3
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x42ab8c
add eax, 0xffffffff
mov dword [ebp - 4], eax
mov esi, dword [ebp - 0x24]
movsx esi, byte [esi]
cmp esi, 0x20
jne 0x42abd1
mov esi, dword [ebp - 0x24]
test eax, eax
jle 0x42abf0
add esi, 1
mov dword [ebp - 8], esi
mov edi, esi
add eax, 0xffffffff
mov dword [ebp - 4], eax
movsx edx, byte [esi]
cmp edx, 0x20
je 0x42abb4
mov dword [ebp - 0x24], esi
test eax, eax
jle 0x42abf0
mov edx, dword [ebp - 0x24]
movsx esi, byte [eax + edx - 1]
cmp esi, 0x20
je 0x42abe6
test esi, esi
jne 0x42ac28
add eax, 0xffffffff
mov dword [ebp - 4], eax
test eax, eax
jg 0x42abd8
jne 0x42ac28
mov eax, dword [ebp - 0xc]
movzx esi, byte [eax + 0x121]
test esi, 1
je 0x42ac28
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
lea ecx, [ebp - 4]
call fcn.0042b34c
test eax, eax
jne 0x42ac1b
mov edi, dword [ebp - 8]
jmp 0x42ac28
mov ebx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x42ac36
xor ebx, ebx
jmp 0x42acb9
mov eax, dword [ebp - 4]
mov byte [eax + edi], 0
mov eax, dword [ebp - 0xc]
push dword [ebp - 8]
push eax
call fcn.0041c04c
add esp, 8
cmp eax, 0xffffffff
je 0x42afc0
mov edx, dword [0x4a2400]
test edx, edx
jne 0x42ac7f
cmp eax, 0xfffffffa
jne 0x42ac7f
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ebx, dword [ebp - 0xc]
mov edi, dword [ebp - 8]
mov dword [ebx + 0xa4], eax
xor ebx, ebx
mov dword [ebp - 0x20], ebx
jmp 0x42acb9
cmp eax, 1
je 0x42ac64
test eax, eax
je 0x42aca0
cmp eax, 2
je 0x42af8b
mov edi, dword [ebp - 8]
xor eax, eax
mov dword [ebp - 0x20], eax
mov ebx, 1
jmp 0x42acb9
push 0xfffffffffffffff6
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ebx, dword [ebp - 0xc]
mov edi, dword [ebp - 8]
mov dword [ebx + 0xa4], eax
xor ebx, ebx
mov dword [ebp - 0x20], ebx
mov esi, dword [ebp - 0x10]
mov dl, byte [edi]
add edi, 1
mov byte [esi], dl
add esi, 1
test dl, dl
jne 0x42acbc
mov eax, dword [0x4a2400]
test eax, eax
je 0x42acee
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x42ad03
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0xa4]
cmp edx, 0xffffffff
je 0x42afa9
jmp 0x42ad03
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x42ad03
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0xa4]
cmp edx, 0xffffffff
je 0x42ad07
test ebx, ebx
je 0x42ad12
mov eax, dword [ebp + 0x14]
mov dword [eax], 1
jmp 0x42ad1a
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 0x20]
mov dword [edx], eax
mov ebx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
xor eax, eax
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x130]
push eax
push 0x4b23b4
push ecx
call fcn.0046df79
lea eax, [ebp - 0x130]
push eax
call fcn.0046def6
mov dword [ebp - 0x24], eax
add esp, 0x10
mov edi, eax
test edi, edi
je 0x42ad81
mov ecx, eax
mov dword [ebp - 8], ecx
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x42ad71
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x42ad5a
add eax, 0xffffffff
mov dword [ebp - 4], eax
mov esi, 1
mov dword [ebp - 0x20], esi
jmp 0x42aba6
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xb8]
test eax, eax
je 0x42af1c
cmp eax, 0xfffffffc
jge 0x42ae6e
mov eax, 1
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xc]
movzx ecx, byte [eax + 0x121]
test cl, 1
jne 0x42ae59
movzx ecx, byte [eax + 0x119]
test cl, 0x20
je 0x42adfe
mov edi, dword [eax + 0x50]
mov dword [ebp - 0x24], edi
mov dword [ebp - 8], edi
mov ecx, edi
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x42ade6
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x42adcf
add eax, 0xffffffff
mov esi, dword [ebx]
mov dword [ebp - 4], eax
test esi, esi
je 0x42aba6
mov dword [ebx], 0
jmp 0x42aba6
mov eax, edi
mov ecx, dword [ebp - 0xc]
push dword [ecx + 0xb8]
mov dword [ebp - 8], eax
push 0x4b68a8
lea esi, [ebp - 0x130]
push esi
call fcn.0046df79
add esp, 0xc
lea ecx, [ebp - 0x130]
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x42ae3f
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x42ae28
add eax, 0xffffffff
lea esi, [ebp - 0x130]
mov dword [ebp - 0x24], esi
mov dword [ebp - 4], eax
lea edi, [ebp - 0x130]
mov dword [ebp - 8], esi
jmp 0x42aba6
lea esi, [ebp - 0x130]
mov dword [ebp - 8], esi
xor eax, eax
mov byte [esi], al
mov dword [ebp - 4], eax
jmp 0x42ac04
cmp eax, 0xfffffffd
jg 0x42ae7a
mov eax, edi
mov dword [ebp - 8], eax
jmp 0x42aec7
cmp eax, 5
je 0x42aec2
cmp eax, 0xfffffffe
jl 0x42aeb5
test eax, eax
jge 0x42ae8f
mov eax, edi
mov dword [ebp - 8], eax
jmp 0x42ae99
cmp eax, 6
jne 0x42aeb5
mov eax, edi
mov dword [ebp - 8], eax
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, dword [ebp - 0xc]
mov edi, dword [0x4a23e8]
mov dword [ebp - 0x24], edi
mov dword [ecx + 0xa4], eax
jmp 0x42aee1
mov eax, 1
mov dword [ebp - 0x20], eax
jmp 0x42ada3
mov eax, edi
mov dword [ebp - 8], eax
push 0xfffffffffffffff6
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, dword [ebp - 0xc]
mov edi, dword [0x4a23e4]
mov dword [ebp - 0x24], edi
mov dword [ecx + 0xa4], eax
mov eax, edi
test eax, eax
je 0x42af12
mov ecx, eax
mov dword [ebp - 8], ecx
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x42af05
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x42aeee
add eax, 0xffffffff
mov dword [ebp - 4], eax
xor esi, esi
mov dword [ebp - 0x20], esi
jmp 0x42aba6
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x42ada3
mov eax, edi
mov dword [ebp - 8], eax
push 0xfffffffffffffff4
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, dword [ebp - 0xc]
mov edi, dword [0x4a23e8]
mov dword [ebp - 0x24], edi
mov dword [ecx + 0xa4], eax
jmp 0x42aee1
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edi, dword [ebp - 0xc]
mov dword [edi + 0xa4], eax
mov edi, dword [0x4a23e8]
mov dword [ebp - 0x24], edi
xor eax, eax
mov dword [ebp - 8], edi
mov dword [ebp - 0x20], eax
jmp 0x42aafb
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edi, dword [ebp - 0xc]
mov dword [edi + 0xa4], eax
mov edi, dword [0x4a23e8]
mov dword [ebp - 0x24], edi
xor eax, eax
mov dword [ebp - 8], edi
mov dword [ebp - 0x20], eax
jmp 0x42ab43
push 0xfffffffffffffff4
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ebx, dword [ebp - 0xc]
mov edi, dword [ebp - 8]
mov dword [ebx + 0xa4], eax
xor ebx, ebx
mov dword [ebp - 0x20], ebx
jmp 0x42acb9
test ebx, ebx
jne 0x42ad07
mov dword [eax + 0xa4], 0
jmp 0x42ad12
mov eax, dword [ebp - 0xc]
movzx ecx, byte [eax + 0x121]
test cl, 2
jne 0x42afdc
mov ecx, dword [ebx + 0xc]
test ecx, ecx
je 0x42b0f2
jmp 0x42afe7
mov ecx, dword [ebx + 0xc]
test ecx, ecx
je 0x42b220
mov esi, dword [ebx + 0x10]
lea eax, [esi + 1]
cmp eax, 0x100
jle 0x42b006
mov ebx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov eax, 0x2b
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x234]
push esi
push ecx
push eax
call fcn.00484e48
add esp, 0xc
mov byte [ebp + esi - 0x234], 0
lea eax, [ebp - 0x234]
mov dword [ebp - 0x24], eax
movsx ecx, byte [eax]
cmp ecx, 0x20
jne 0x42b049
test esi, esi
jle 0x42b218
add eax, 1
movsx ecx, byte [eax]
add esi, 0xffffffff
cmp ecx, 0x20
je 0x42b030
mov dword [ebp - 0x24], eax
test esi, esi
jle 0x42b06b
mov ecx, eax
movsx eax, byte [ecx + esi - 1]
cmp eax, 0x20
je 0x42b061
test eax, eax
jne 0x42b12e
add esi, 0xffffffff
test esi, esi
jg 0x42b04f
mov dword [ebp - 0x24], ecx
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebx]
cmp eax, 3
je 0x42b15b
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 4]
add eax, esi
cmp eax, 0x100
jle 0x42b09c
mov ebx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
mov eax, 0x2b
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x10]
push esi
push eax
push edx
call fcn.00484e48
add esp, 0xc
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x42b0c4
mov edi, dword [ebp - 0x10]
lea ecx, [esi + edi]
mov eax, 0x4b68b0
movzx edx, byte [eax]
mov byte [ecx], dl
push dword [ebp - 4]
push dword [ebp - 8]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x10]
lea ecx, [eax + edx]
add ecx, esi
push ecx
call fcn.00484e48
add esp, 0xc
add esi, dword [ebp - 0x28]
mov eax, dword [ebp - 4]
xor ebx, ebx
add eax, dword [ebp - 0x10]
mov byte [esi + eax], 0
jmp 0x42acca
lea ecx, [ebp - 0x234]
lea eax, [ebp - 0x2c]
push eax
push ecx
push 0x101
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
test eax, eax
je 0x42b122
cmp eax, 0x101
jae 0x42b122
lea ecx, [ebp - 0x234]
mov dword [ebp - 8], ecx
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x24], eax
xor esi, esi
jmp 0x42b06b
mov dword [ebp - 0x24], ecx
test esi, esi
jle 0x42b06b
mov eax, ecx
movsx ecx, byte [eax + esi]
cmp ecx, 0x5c
je 0x42b151
mov eax, 1
mov dword [ebp - 0x28], eax
jmp 0x42b070
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x42b070
mov eax, dword [ebp - 0xc]
movzx ecx, byte [eax + 0x119]
test cl, 0x20
jne 0x42b07b
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x42b1c2
mov edx, dword [ebp - 0x24]
lea eax, [ebp - 0x338]
push eax
push 0
push 0x4b68b4
push edx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
mov eax, dword [ebp - 0xc]
movzx edx, byte [eax + 0x121]
test dl, 2
je 0x42b1a4
lea edi, [ebp - 0x336]
jmp 0x42b1aa
lea edi, [ebp - 0x338]
mov esi, dword [ebp - 0x10]
mov dl, byte [edi]
add edi, 1
mov byte [esi], dl
add esi, 1
test dl, dl
jne 0x42b1ad
xor ebx, ebx
jmp 0x42acca
mov eax, dword [ebp - 0xc]
movzx edx, byte [eax + 0x121]
test dl, 2
je 0x42b1ea
mov byte [ebp - 0x43c], 0x2e
lea eax, [ebp - 0x43c]
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x43b], 0
jmp 0x42b175
lea eax, [ebp - 0x43c]
push eax
push 0x100
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x42b20e
lea eax, [ebp - 0x43c]
mov dword [ebp - 0x24], eax
jmp 0x42b175
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x42b175
mov dword [ebp - 0x24], eax
jmp 0x42b06b
mov eax, dword [ebx]
cmp eax, 3
je 0x42b231
mov edi, dword [ebp - 8]
xor ebx, ebx
jmp 0x42acb9
mov eax, dword [ebp - 0xc]
movzx ecx, byte [eax + 0x119]
test cl, 0x20
je 0x42b0f2
mov edi, dword [ebp - 8]
xor ebx, ebx
jmp 0x42acb9
push 0xfffffffffffffff6
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edi, dword [ebp - 0xc]
mov dword [edi + 0xa4], eax
mov edi, dword [0x4a23e4]
mov dword [ebp - 0x24], edi
xor eax, eax
mov dword [ebp - 8], edi
mov dword [ebp - 0x20], eax
jmp 0x42ab88
mov ecx, dword [ebp - 0xc]
movzx esi, byte [ecx + 0x121]
test esi, 1
je 0x42b29a
movzx edi, byte [ecx + 0x118]
test edi, 1
je 0x42aa44
push 0x4b2110
call fcn.0046def6
mov dword [ebp - 0x24], eax
add esp, 4
mov edi, eax
mov dword [ebp - 8], edi
test edi, edi
je 0x42b2de
mov eax, 1
mov dword [ebp - 0x20], eax
mov ecx, edi
xor eax, eax
movzx edx, byte [ecx + eax]
test edx, edx
je 0x42b2d6
movzx edx, byte [ecx + eax + 1]
add eax, 2
test edx, edx
jne 0x42b2bf
add eax, 0xffffffff
mov dword [ebp - 4], eax
jmp 0x42aba6
push 0xfffffffffffffff6
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edi, dword [ebp - 0xc]
mov dword [edi + 0xa4], eax
mov edi, dword [0x4a23e4]
mov dword [ebp - 0x24], edi
xor eax, eax
mov dword [ebp - 8], edi
mov dword [ebp - 0x20], eax
jmp 0x42b2bb
mov eax, dword [ebp - 0xc]
movzx ecx, byte [eax + 0x119]
test cl, 0x20
jne 0x42a9e9
push 0x4b2244
lea eax, [ebp - 0x130]
push eax
call fcn.0046df79
add esp, 8
mov dword [ebp - 4], 7
lea edi, [ebp - 0x130]
mov eax, 7
mov esi, 1
mov dword [ebp - 8], edi
mov dword [ebp - 0x20], esi
jmp 0x42ac39