Function at 0x4248e0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x69b655
mov eax, dword fs:[0]
push eax
sub esp, 0x354
mov eax, dword [0x76f950]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x344], 0
push 0x787ff0
mov dword [ebp - 0x35c], edi
mov dword [ebp - 0x324], 0x787ff0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [ebp - 4], 1
cmp byte [0x77a67e], 0
jne 0x4249c9
lea eax, [ebp - 0x320]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x320]
push eax
mov ecx, 0x788008
call fcn.0040bd10
mov ecx, dword [0x788008]
test ecx, ecx
je 0x4249a0
mov edx, dword [ecx + 4]
test edx, edx
jne 0x424980
lea edx, [ecx + 8]
mov eax, dword [ecx + 0x34]
cmp word [edx + eax*2 - 2], 0x5c
je 0x4249af
cmp dword [ecx], 0
je 0x4249a0
mov ecx, 0x788008
call fcn.004db0b0
mov ecx, dword [0x788008]
mov edx, 0x6e2e78
call fcn.004dfa30
mov dword [0x788008], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x795720], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov byte [0x77a67e], 1
jmp 0x4249ce
mov eax, dword [0x77a684]
mov esi, eax
inc eax
mov dword [0x77a684], eax
mov byte [ebp - 4], 0
push 0x787ff0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea eax, [ebp - 0x358]
push eax
call fcn.004e4530
movzx eax, byte [ebp - 0x353]
add esp, 4
push eax
movzx eax, byte [ebp - 0x354]
push eax
movzx eax, byte [ebp - 0x355]
push eax
movzx eax, byte [ebp - 0x356]
push eax
movzx eax, byte [ebp - 0x357]
push eax
movzx eax, byte [ebp - 0x358]
push eax
push 0x6e2e7c
lea eax, [ebp - 0x110]
push 0x80
push eax
call fcn.0063439c
add esp, 0x24
lea ecx, [ebp - 0x324]
push dword [0x795720]
call fcn.004dafb0
mov ebx, eax
mov dword [ebp - 4], 2
push esi
lea ecx, [ebp - 0x32c]
call fcn.004dafb0
mov dword [ebp - 0x330], eax
mov byte [ebp - 4], 3
cmp word [ebp - 0x110], 0
jne 0x424a7b
xor esi, esi
jmp 0x424a92
call fcn.004df4c0
mov esi, eax
push 0xffffffffffffffff
lea eax, [ebp - 0x110]
push eax
mov ecx, esi
call fcn.0040bb30
mov dword [ebp - 0x338], esi
mov byte [ebp - 4], 4
push str.krkr_
lea eax, [ebp - 0x33c]
push eax
mov ecx, 0x788008
call fcn.00406d10
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x338]
push ecx
lea ecx, [ebp - 0x328]
push ecx
mov ecx, eax
call fcn.00406be0
mov byte [ebp - 4], 6
push 0x6e2ebc
lea ecx, [ebp - 0x334]
push ecx
mov ecx, eax
call fcn.00406d10
mov byte [ebp - 4], 7
push dword [ebp - 0x330]
lea ecx, [ebp - 0x340]
push ecx
mov ecx, eax
call fcn.00406be0
mov byte [ebp - 4], 8
push 0x6e2ec0
lea ecx, [ebp - 0x348]
push ecx
mov ecx, eax
call fcn.00406d10
mov byte [ebp - 4], 9
push ebx
push edi
mov ecx, eax
call fcn.00406be0
mov dword [ebp - 0x344], 1
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x348]
test eax, eax
je 0x424b48
mov ecx, dword [eax]
test ecx, ecx
jne 0x424b45
mov ecx, eax
call fcn.004df580
jmp 0x424b48
dec ecx
mov dword [eax], ecx
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x340]
test eax, eax
je 0x424b68
mov ecx, dword [eax]
test ecx, ecx
jne 0x424b65
mov ecx, eax
call fcn.004df580
jmp 0x424b68
dec ecx
mov dword [eax], ecx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x334]
test eax, eax
je 0x424b88
mov ecx, dword [eax]
test ecx, ecx
jne 0x424b85
mov ecx, eax
call fcn.004df580
jmp 0x424b88
dec ecx
mov dword [eax], ecx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x328]
test eax, eax
je 0x424ba8
mov ecx, dword [eax]
test ecx, ecx
jne 0x424ba5
mov ecx, eax
call fcn.004df580
jmp 0x424ba8
dec ecx
mov dword [eax], ecx
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x33c]
test eax, eax
je 0x424bc8
mov ecx, dword [eax]
test ecx, ecx
jne 0x424bc5
mov ecx, eax
call fcn.004df580
jmp 0x424bc8
dec ecx
mov dword [eax], ecx
mov byte [ebp - 4], 3
test esi, esi
je 0x424be2
mov eax, dword [esi]
test eax, eax
jne 0x424bdf
mov ecx, esi
call fcn.004df580
jmp 0x424be2
dec eax
mov dword [esi], eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x32c]
test eax, eax
je 0x424c02
mov ecx, dword [eax]
test ecx, ecx
jne 0x424bff
mov ecx, eax
call fcn.004df580
jmp 0x424c02
dec ecx
mov dword [eax], ecx
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x324]
test ecx, ecx
je 0x424c20
mov eax, dword [ecx]
test eax, eax
jne 0x424c1d
call fcn.004df580
jmp 0x424c20
dec eax
mov dword [ecx], eax
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00633732
mov esp, ebp
pop ebp
ret