Function at 0x1002aac9
Capabilities:
Get common file path

Disassembly:
mov eax, 0x100581d5
call fcn.10056ec8
sub esp, 0x7c
cmp byte [ebp + 0x10], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x18], dl
je 0x1002aafe
cmp byte [ebp + 0xc], 0
je 0x1002aaf4
mov eax, dword [ecx]
mov dword [ecx], eax
jmp 0x1002af5d
mov eax, dword [ebp + 8]
dec dword [eax]
jmp 0x1002af5d
test dl, dl
je 0x1002af50
mov eax, dword [ebp + 0x1c]
xor ebx, ebx
mov edi, dword [ebp + 0x18]
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x5c], 7
mov dword [ebp - 0x60], ebx
mov word [ebp - 0x70], ax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1c], 0xf2c29a3d
mov dword [ebp - 0x1c], ebx
jmp 0x1002ab41
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x20], 0xaf1124f0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1002ab33
call fcn.1002dc7d
mov dword [ebp - 0x1c], ebx
jmp 0x1002ac3a
mov dword [ebp - 0x24], 0xffffffff
xor edx, edx
mov dword [ebp - 0x30], 0x376fbfcc
inc edx
mov dword [ebp - 0x30], 0x56e623b2
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x24], ebx
jmp 0x1002ac1e
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x30], 0xfffffff6
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
mov eax, dword [ebp + eax*4 - 0x20]
cmp edx, eax
mov eax, dword [ebp - 0x24]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setne dl
mov eax, dword [ebp + eax*4 - 0x20]
sub edx, eax
mov eax, dword [ebp - 0x20]
sub eax, edx
neg eax
sbb eax, eax
inc eax
sub eax, 0x3e8c
jne 0x1002abd2
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x20], ebx
jne 0x1002abd2
xor edx, edx
mov esi, ebx
inc edx
jmp 0x1002abd7
xor edx, edx
inc edx
mov esi, edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, esi
setne cl
add ecx, dword [ebp - 0x20]
je 0x1002abed
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x20]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x20], ebx
jne 0x1002ac27
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x1002ab77
push 0x593c
lea edx, [ebp - 0x24]
xor cl, cl
call fcn.1002db1b
inc dword [ebp - 0x1c]
pop ecx
cmp dword [ebp - 0x1c], ebx
jle 0x1002ab54
cmp dword [ebp + 0x1c], edi
ja 0x1002ad49
mov dword [ebp - 0x1c], 0x1aa1
cmp dword [ebp - 0x1c], 0x1de0
jle 0x1002ac95
mov esi, ebx
mov edi, esi
mov dword [ebp - 0x30], 0x4227
mov dword [ebp - 0x38], ebx
lea eax, [edi + ebx]
mov ecx, 0x10072d38
cdq
push edx
push eax
call fcn.10011982
inc ebx
cmp ebx, 0x35e0
jl 0x1002ac6a
dec edi
dec dword [ebp - 0x30]
push 0
pop ebx
jne 0x1002ac67
inc esi
cmp esi, 0x297c
jl 0x1002ac5e
mov dword [ebp - 0x38], 0xffffffff
lea ecx, [ebp - 0x58]
push 4
call fcn.10011bd7
push ecx
push ecx
mov byte [ebp - 4], 1
lea edx, [ebp - 0x58]
mov dword [ebp - 0x3c], ebx
lea ecx, [ebp - 0x40]
call fcn.1002c36c
push 0x7cec
xor dl, dl
lea ecx, [ebp - 0x3c]
call fcn.1002b7e0
push 0x10d9
mov byte [ebp + 0x13], bl
lea ecx, [ebp + 0x13]
push 0x1d30
call fcn.1002a89c
add esp, 0x14
lea ecx, [ebp - 0x58]
call fcn.10011c39
mov byte [ebp - 4], 2
cmp dword [ebp - 0x1c], 0x18e2
jge 0x1002ad23
mov edx, str.njdnthdrv_ctzq_oesicwv_lrhnmefzg_srty_iksou_auzoek
mov ecx, 0x10072d38
call fcn.10016228
jmp 0x1002ad23
mov dword [ebp - 4], ebx
mov ecx, dword [ebp + 0x14]
lea eax, [ebp - 0x70]
cmp ecx, eax
je 0x1002ad39
push 0xffffffffffffffff
push ebx
push eax
call fcn.10012477
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.100125a7
jmp 0x1002af5d
push ecx
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x2c]
push eax
push ecx
lea edx, [ebp - 0x34]
call fcn.1002a576
add esp, 0x10
call fcn.1002d264
mov esi, dword [ebp - 0x34]
jmp 0x1002ad8c
push ecx
push 0x719d
mov edx, 0x3fb6
mov ecx, 0x6242
call fcn.10029ddf
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x2c]
call fcn.1002b8c3
add esp, 0xc
cmp dword [ebp - 0x2c], esi
jb 0x1002ad68
push 4
lea ecx, [ebp - 0x4c]
call fcn.10011bd7
mov byte [ebp - 4], 4
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x30], 0x3c02
cmp dword [ebp - 0x30], 0x3d47
jle 0x1002addf
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x10072d38
cdq
push edx
push eax
call fcn.10011982
inc edi
cmp edi, 0x4694
jl 0x1002adba
inc esi
cmp esi, 0x1ae0
jl 0x1002adb8
mov dword [ebp - 0x1c], 0x8c7b5c6e
mov byte [ebp - 4], 5
cmp dword [ebp - 0x30], 0x3acf
jge 0x1002ae20
mov edx, str.fkqo_zxcybcde_nhpuj_gcwe_bfflc_qiovbmq_gnwvmwogq_nvodlr_ytoy_yvt_mmc_fqyfwjjfv_ivz_auywbilyl
mov ecx, 0x10072d38
call fcn.10016228
jmp 0x1002ae20
mov dword [ebp - 4], 4
mov dword [ebp - 0x30], 0x78c
cmp dword [ebp - 0x30], 0xaff
jle 0x1002ae7e
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x88]
xor eax, esi
cdq
push edx
push eax
call fcn.10001ba3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002ae57
mov eax, dword [eax]
push eax
call fcn.100410e1
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x88]
call fcn.100122d9
inc edi
cmp edi, 0x3088
jl 0x1002ae3b
inc esi
cmp esi, 0x341b
jl 0x1002ae39
mov dword [ebp - 0x1c], ebx
jmp 0x1002ae8f
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1002ae83
cmp dword [ebp - 0x30], 0x506
jge 0x1002aea9
push str.nsfnoosge_cjhr_cvqqv_fuyob_kvidedfr_cusvhz_hfuh_arawv_xhuhhup_mtrhrzpms_jybnahqzn
call fcn.100410e1
pop ecx
push 3
mov dword [ebp - 4], 4
pop esi
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x28], ebx
jl 0x1002aeec
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1002aed5
push ecx
push 0x48f0
push ecx
mov dl, 1
call fcn.1002cc9d
add esp, 0xc
push ebx
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x4c]
call fcn.1002aa6a
dec dword [ebp - 0x28]
pop ecx
jns 0x1002aebb
cmp dword [ebp - 0x28], ebx
je 0x1002af35
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x1c], 0x7e780ca9
cmp dword [ebp - 0x28], ebx
jne 0x1002af15
mov dword [ebp - 0x28], 0xee6d058a
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jne 0x1002af15
mov eax, ebx
jmp 0x1002af18
xor eax, eax
inc eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], ebx
jmp 0x1002af2e
call fcn.1002a889
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x1002af26
jmp 0x1002af40
push ecx
push ecx
mov dl, 1
call fcn.1002a7b5
pop ecx
pop ecx
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], bl
call fcn.10011c39
jmp 0x1002ad26
push 0x513
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret