Function at 0x10011e36
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10067b0f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x10011e9c
lea eax, [ebp + 8]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [eax]
test eax, eax
je 0x10011e8a
push 0xd6b
push 0x208a
push 0x189a
push 0x1d45
push 0x187c
call dword [sym.imp.GDI32.dll_Rectangle]
jmp 0x10011e97
push 0
push 0x991
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
jmp 0x10012052
lea eax, [ebp + 0x10]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax]
test eax, eax
je 0x10012038
mov dword [ebp - 0x24], 0x261a
cmp dword [ebp - 0x24], 0xb6c
jge 0x10012024
lea ecx, [ebp - 0x3c]
call fcn.1002aef5
and dword [ebp - 4], 0
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x10659d70
call fcn.1002afe3
lea edx, [ebp - 0x3c]
mov ecx, eax
call fcn.1003050f
mov eax, dword [ebp - 0x18]
and eax, 0x80000001
jns 0x10011ef7
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x10011f53
and dword [ebp - 0x14], 0
jmp 0x10011f08
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x18]
jge 0x10011f4e
cmp dword [ebp - 0x14], 0
je 0x10011f35
mov eax, dword [ebp - 0x14]
and eax, 0x80000001
jns 0x10011f25
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x10011f35
mov dl, 0x2d
mov ecx, 0x10659cb8
call fcn.10030517
push dword [ebp - 0x14]
lea ecx, [ebp - 0x3c]
call fcn.1002af87
mov dl, byte [eax]
mov ecx, 0x10659cb8
call fcn.10030517
jmp 0x10011f01
jmp 0x10012009
and dword [ebp - 0x14], 0
jmp 0x10011f60
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
sub eax, 3
cmp dword [ebp - 0x14], eax
jge 0x10011fa9
cmp dword [ebp - 0x14], 0
je 0x10011f90
mov eax, dword [ebp - 0x14]
and eax, 0x80000001
jns 0x10011f80
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x10011f90
mov dl, 0x2d
mov ecx, 0x10659cb8
call fcn.10030517
push dword [ebp - 0x14]
lea ecx, [ebp - 0x3c]
call fcn.1002af87
mov dl, byte [eax]
mov ecx, 0x10659cb8
call fcn.10030517
jmp 0x10011f59
cmp dword [ebp - 0x14], 0
je 0x10011fbb
mov dl, 0x2d
mov ecx, 0x10659cb8
call fcn.10030517
mov eax, dword [ebp - 0x18]
sub eax, 3
push eax
lea ecx, [ebp - 0x3c]
call fcn.1002af87
mov dl, byte [eax]
mov ecx, 0x10659cb8
call fcn.10030517
mov eax, dword [ebp - 0x18]
dec eax
dec eax
push eax
lea ecx, [ebp - 0x3c]
call fcn.1002af87
mov dl, byte [eax]
mov ecx, 0x10659cb8
call fcn.10030517
mov eax, dword [ebp - 0x18]
dec eax
push eax
lea ecx, [ebp - 0x3c]
call fcn.1002af87
mov dl, byte [eax]
mov ecx, 0x10659cb8
call fcn.10030517
push fcn.1003046c
mov ecx, 0x10659cb8
call fcn.1002b50f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c]
call fcn.1002af7d
mov byte [ebp - 0xd], 0
movzx eax, byte [ebp - 0xd]
test eax, eax
je 0x10012036
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x10012052
mov byte [ebp - 0xe], 0
movzx eax, byte [ebp - 0xe]
test eax, eax
je 0x10012052
push 0
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret