Function at 0x11095af0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x444
mov eax, dword [0x11279148]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push edi
mov edi, ecx
mov ecx, dword [edi + 4]
mov dword [ebp - 0x43c], edi
call fcn.110c7040
push 0x800
push 1
mov dword [ebp - 0x438], eax
call dword [sym.imp.MSVCR100.dll_calloc]
mov ebx, eax
add esp, 8
mov dword [ebp - 0x444], ebx
test ebx, ebx
jne 0x11095b4e
push 0x31ec
push str.CltConn.cpp
push 0x111f9508
call fcn.11067750
add esp, 0xc
mov eax, 0x4e
push esi
mov word [ebx], ax
call fcn.11087e90
mov word [ebx + 2], ax
mov ecx, dword [edi + 4]
mov ecx, dword [ecx + 0x30]
call fcn.110bbf40
test eax, eax
je 0x11095b73
push 7
jmp 0x11095b75
push 5
call fcn.11068bb0
add esp, 4
mov esi, eax
call fcn.111b8710
cmp eax, 0x37
jne 0x11095bc1
push 0x112034e8
push esi
call dword [sym.imp.MSVCR100.dll__wcsicmp]
add esp, 8
push str.V1.10
test eax, eax
jne 0x11095bb5
lea edx, [ebp - 0x24]
push str.NSA__s
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x11095bee
push esi
push 0x11204c08
lea eax, [ebp - 0x24]
push eax
jmp 0x11095be5
mov ecx, dword [edi + 4]
mov ecx, dword [ecx + 0x30]
call fcn.110bbf40
test eax, eax
mov eax, str.V15.10
jne 0x11095bda
mov eax, 0x111f79d8
push eax
push esi
push 0x11204c08
lea edx, [ebp - 0x24]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
movsx eax, byte [0x111fa863]
push eax
mov esi, 0x111fa863
call dword [sym.imp.MSVCR100.dll_toupper]
add esp, 4
cmp eax, 0x56
jne 0x11095c0e
mov esi, 0x111fa864
movsx ecx, byte [esi]
mov edi, dword [sym.imp.MSVCR100.dll_isdigit]
push ecx
call edi
add esp, 4
test eax, eax
je 0x11095c30
movsx edx, byte [esi + 1]
inc esi
push edx
call edi
add esp, 4
test eax, eax
jne 0x11095c21
cmp byte [esi], 0x2e
jne 0x11095cee
movsx eax, byte [esi + 1]
inc esi
push eax
call edi
add esp, 4
test eax, eax
je 0x11095c57
movsx ecx, byte [esi + 1]
inc esi
push ecx
call edi
add esp, 4
test eax, eax
jne 0x11095c48
movsx edx, byte [esi]
mov edi, dword [sym.imp.MSVCR100.dll_toupper]
push edx
call edi
add esp, 4
cmp eax, 0x44
jne 0x11095c6c
inc esi
movsx eax, byte [esi]
push eax
call edi
add esp, 4
cmp eax, 0x46
jne 0x11095c95
lea edi, [ebp - 0x24]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x11095c80
mov ecx, dword [0x11247f48]
mov dword [edi], ecx
inc esi
push 0
push esi
lea ecx, [ebp - 0x440]
call fcn.111bd170
mov ebx, dword [ebp - 0x440]
mov eax, ebx
mov edx, ebx
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x11095cb0
lea edi, [ebp - 0x24]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x11095cc3
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
push ebx
rep movsb byte es:[edi], byte [esi]
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
mov ebx, dword [ebp - 0x444]
add esp, 4
mov edi, dword [ebp - 0x438]
push edi
push 0x10
lea edx, [ebx + 4]
push edx
lea eax, [ebp - 0x24]
push eax
call fcn.111b7fb0
add esp, 0x10
push 0x104
lea ecx, [ebp - 0x22c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x22c]
push 0x5c
push edx
call dword [sym.imp.MSVCR100.dll_wcsrchr]
push edi
push 0x208
lea esi, [ebx + 0x14]
lea edx, [ebp - 0x22c]
xor ecx, ecx
push esi
push edx
mov word [eax], cx
call fcn.111b7fb0
mov eax, esi
add esp, 0x18
lea ecx, [eax + 1]
lea ecx, [ecx]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x11095d50
sub eax, ecx
lea edi, [eax + 1]
push 0x104
lea eax, [ebp - 0x434]
push eax
add esi, edi
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov ecx, dword [ebp - 0x438]
push ecx
push 0x208
lea edx, [ebp - 0x434]
push esi
push edx
call fcn.111b7fb0
mov eax, esi
add esp, 0x10
lea ecx, [eax + 1]
pop esi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x11095d92
sub eax, ecx
mov ecx, dword [ebp - 0x43c]
mov ecx, dword [ecx + 4]
mov edx, dword [ecx]
mov edx, dword [edx + 0x48]
push 1
lea eax, [eax + edi + 0x15]
push eax
push ebx
call edx
push ebx
call dword [sym.imp.MSVCR100.dll_free]
mov ecx, dword [ebp - 4]
add esp, 4
pop edi
xor ecx, ebp
pop ebx
call fcn.111d9022
mov esp, ebp
pop ebp
ret