Function at 0x4430af
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44f56a
mov eax, dword fs:[0]
push eax
mov eax, 0x143c
call fcn.0041c370
mov eax, dword [0x46b034]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x1444], ebx
mov edi, dword [ebp + 8]
xor eax, eax
mov esi, dword [ebp + 0xc]
test edi, edi
je 0x44313b
cmp word [edi], ax
je 0x44313b
push eax
push edi
call fcn.00426968
pop ecx
pop ecx
test eax, eax
jne 0x443139
mov ebx, eax
mov ecx, edi
call fcn.00408142
test al, al
je 0x443133
push edi
call fcn.00426df1
pop ecx
test eax, eax
je 0x443133
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
cmp ebx, 0x3e8
jl 0x443109
mov ebx, dword [ebp - 0x1444]
xor eax, eax
test esi, esi
je 0x44317d
cmp word [esi], ax
je 0x44317d
push eax
push esi
call fcn.00426968
pop ecx
pop ecx
test eax, eax
jne 0x44317d
mov edi, eax
mov ecx, esi
call fcn.00408142
test al, al
je 0x44317d
push esi
call fcn.00426df1
pop ecx
test eax, eax
je 0x44317d
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 0x3e8
jl 0x443153
xor eax, eax
lea edi, [ebp - 0x1428]
stosd dword es:[edi], eax
xor ecx, ecx
push 7
pop edx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x1418], ecx
mov dword [ebp - 0x1414], edx
mov word [ebp - 0x1428], ax
mov dword [ebp - 4], ecx
lea edi, [ebp - 0x1440]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
xor edi, edi
mov dword [ebp - 0x142c], edx
mov dword [ebp - 0x1430], edi
mov word [ebp - 0x1440], ax
lea eax, [ebp - 0x1440]
mov byte [ebp - 4], 1
push eax
lea edx, [ebp - 0x1428]
mov ecx, esi
call fcn.00409846
mov dword [esp], 0x400
lea eax, [ebp - 0x410]
push edi
push eax
call fcn.0041cff0
add esp, 0xc
lea eax, [ebp - 0x410]
push eax
push 0x200
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push 0x1000
lea eax, [ebp - 0x1410]
push edi
push eax
call fcn.0041cff0
add esp, 0xc
lea eax, [ebp - 0x1410]
push 0x800
push eax
lea eax, [ebp - 0x410]
push eax
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
push 8
pop esi
cmp dword [ebp - 0x1418], edi
je 0x4432bf
cmp dword [ebp - 0x1414], esi
lea ecx, [ebp - 0x1410]
lea eax, [ebp - 0x1428]
cmovae eax, dword [ebp - 0x1428]
push ecx
push eax
call fcn.00422042
pop ecx
pop ecx
test eax, eax
je 0x4432bf
cmp dword [ebp - 0x1414], esi
lea ecx, [ebp - 0x1428]
cmovae ecx, dword [ebp - 0x1428]
call fcn.00408169
test al, al
je 0x4432bf
cmp dword [ebp - 0x1414], esi
lea eax, [ebp - 0x1428]
push ecx
cmovae eax, dword [ebp - 0x1428]
push eax
call fcn.004075c1
cmp byte [ebx + 0x48], 0
pop ecx
pop ecx
jne 0x4432bf
cmp dword [ebp - 0x1414], esi
lea eax, [ebp - 0x1428]
cmovae eax, dword [ebp - 0x1428]
push eax
call fcn.00426e19
pop ecx
mov eax, dword [ebp - 0x142c]
cmp eax, esi
jb 0x443313
mov ecx, dword [ebp - 0x1440]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1448], eax
mov dword [ebp - 0x1444], ecx
cmp eax, 0x1000
jb 0x44330a
lea eax, [ebp - 0x1448]
push eax
lea eax, [ebp - 0x1444]
push eax
call fcn.00402494
mov eax, dword [ebp - 0x1448]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1444]
push eax
push ecx
call fcn.0041b2b5
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x1430], edi
mov word [ebp - 0x1440], ax
mov eax, dword [ebp - 0x1414]
mov dword [ebp - 0x142c], 7
cmp eax, esi
jb 0x443380
mov ecx, dword [ebp - 0x1428]
lea eax, [eax*2 + 2]
mov dword [ebp - 0x1444], eax
mov dword [ebp - 0x1448], ecx
cmp eax, 0x1000
jb 0x443377
lea eax, [ebp - 0x1444]
push eax
lea eax, [ebp - 0x1448]
push eax
call fcn.00402494
mov eax, dword [ebp - 0x1444]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x1448]
push eax
push ecx
call fcn.0041b2b5
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041b2a7
leave
ret 8