Function at 0x101ec1e
Capabilities:
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x744
mov eax, dword [0x102c22c]
and dword [ebp - 0x724], 0
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp + 0x18]
push esi
mov dword [ebp - 0x730], eax
mov eax, dword [ebp + 0x20]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x734], eax
mov esi, 0x104
push esi
lea eax, [ebp - 0x720]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
test eax, eax
je 0x101ef43
push esi
lea eax, [ebp - 0x518]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
test eax, eax
je 0x101ef43
lea eax, [ebp - 0x744]
push eax
push 0
push ebx
push edi
call dword [sym.imp.UPDSPAPI.dll_UpdSpFindFirstLineA]
test eax, eax
je 0x101ef31
xor edi, edi
push edi
push esi
lea eax, [ebp - 0x108]
push eax
push 1
lea eax, [ebp - 0x744]
push eax
call dword [sym.imp.UPDSPAPI.dll_UpdSpGetStringFieldA]
test eax, eax
je 0x101ef31
mov ebx, 0x103
push edi
push esi
lea eax, [ebp - 0x20c]
push eax
push 2
lea eax, [ebp - 0x744]
push eax
call dword [sym.imp.UPDSPAPI.dll_UpdSpGetStringFieldA]
test eax, eax
jne 0x101ecfc
mov cl, byte [ebp + eax - 0x108]
mov byte [ebp + eax - 0x20c], cl
inc eax
test cl, cl
jne 0x101ece9
cmp dword [ebp + 0x14], edi
je 0x101eed1
push esi
lea eax, [ebp - 0x310]
push eax
push 0x1007c28
lea eax, [ebp - 0x518]
push eax
call fcn.01015121
push esi
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.01015121
push edi
lea eax, [ebp - 0x61c]
push eax
call fcn.01017367
test eax, eax
je 0x101eed1
cmp dword [0x106e3c4], 1
jne 0x101eddd
mov dword [ebp - 0x728], edi
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x728]
push dword [0x106e3c8]
call fcn.01020f02
inc dword [ebp - 0x728]
test eax, eax
je 0x101eed1
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 0x724]
add eax, 0x104
push eax
call sub.ntdll.dll__stricmp
test eax, eax
pop ecx
pop ecx
jne 0x101edd4
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [ebp - 0x724]
push esi
add eax, 0x208
push eax
call fcn.0100b4e5
push dword [ebp - 0x724]
lea eax, [ebp - 0x108]
push esi
xor edi, edi
push eax
inc edi
call fcn.0100b4e5
test edi, edi
je 0x101ed61
jmp 0x101eed1
lea eax, [ebp - 0x108]
push eax
push 0
lea eax, [ebp - 0x310]
push eax
push 0x1008278
lea eax, [ebp - 0x414]
push ebx
push eax
call fcn.0100d9ee
add esp, 0x18
push 0
lea eax, [ebp - 0x414]
push eax
call fcn.01017367
test eax, eax
je 0x101ee55
cmp edi, 0xa
jge 0x101ee53
lea eax, [ebp - 0x108]
push eax
push edi
lea eax, [ebp - 0x310]
push eax
push 0x1008278
lea eax, [ebp - 0x414]
push ebx
push eax
call fcn.0100d9ee
add esp, 0x18
push 0
lea eax, [ebp - 0x414]
push eax
inc edi
call fcn.01017367
test eax, eax
jne 0x101ee14
cmp edi, 0xa
je 0x101eed1
push 0x30c
lea eax, [ebp - 0x724]
push eax
push dword [0x106e3c8]
call fcn.01020e92
test eax, eax
je 0x101eed1
lea eax, [ebp - 0x108]
push eax
push edi
push 0x100826c
push esi
push dword [ebp - 0x724]
call fcn.0100d9ee
add esp, 0x14
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 0x724]
push esi
add eax, 0x104
push eax
call fcn.0100b4e5
lea eax, [ebp - 0x20c]
push eax
mov eax, dword [ebp - 0x724]
push esi
add eax, 0x208
push eax
call fcn.0100b4e5
push dword [ebp - 0x724]
lea eax, [ebp - 0x108]
push ebx
push eax
call fcn.0100b4e5
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0x734]
push dword [ebp + 0x1c]
push dword [ebp - 0x730]
push dword [ebp - 0x72c]
call fcn.0101e8a1
test eax, eax
je 0x101ef43
lea eax, [ebp - 0x744]
push eax
push eax
call dword [sym.imp.UPDSPAPI.dll_UpdSpFindNextLine]
test eax, eax
je 0x101ef31
xor edi, edi
push edi
push esi
lea eax, [ebp - 0x108]
push eax
push 1
lea eax, [ebp - 0x744]
push eax
call dword [sym.imp.UPDSPAPI.dll_UpdSpGetStringFieldA]
test eax, eax
jne 0x101eccd
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.0101439a
leave
ret 0x1c
xor eax, eax
jmp 0x101ef34