Function at 0x1005bfb0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100e186d
mov eax, dword fs:[0]
push eax
sub esp, 0x650
mov eax, dword [0x101279d8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 8]
mov edi, ecx
push esi
lea ecx, [ebp - 0x620]
mov dword [ebp - 0x628], edi
call fcn.10001e10
mov eax, dword [ebp - 0x620]
cmp dword [eax - 0xc], 0
mov dword [ebp - 4], 0
jl 0x1005c027
push 0x100e8d54
push eax
call fcn.100a73d9
add esp, 8
test eax, eax
je 0x1005c027
sub eax, dword [ebp - 0x620]
sar eax, 1
je 0x1005c061
push esi
mov ecx, edi
call fcn.1005b1c0
mov bl, al
mov eax, dword [ebp - 0x620]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1005c05a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov al, bl
jmp 0x1005c3dd
push 0
push 0
push 0
push 0
push 1
push 0
lea ecx, [ebp - 0x65c]
mov byte [ebp - 4], 1
call fcn.1009f9d1
mov ecx, dword [ebp - 0x620]
push 0
push 0
push 0x20000002
push 1
push ecx
lea ecx, [ebp - 0x65c]
mov byte [ebp - 4], 2
call fcn.100a0344
mov esi, eax
mov dword [ebp - 0x62c], esi
mov byte [ebp - 4], 3
test esi, esi
jne 0x1005c0ee
lea ecx, [ebp - 0x65c]
mov byte [ebp - 4], 1
call fcn.100a0093
mov eax, dword [ebp - 0x620]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x1005c3db
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x1005c3db
lea ecx, [ebp - 0x21c]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov edx, dword [ebp - 0x620]
push 0x2f
push edx
call fcn.100a8123
add esp, 8
test eax, eax
jne 0x1005c11a
or eax, 0xffffffff
jmp 0x1005c122
sub eax, dword [ebp - 0x620]
sar eax, 1
inc eax
push eax
lea eax, [ebp - 0x624]
push eax
lea ecx, [ebp - 0x620]
call fcn.10003630
push eax
lea ecx, [ebp - 0x21c]
push ecx
lea edx, [ebp - 0x630]
mov bl, 4
push edx
mov byte [ebp - 4], bl
call fcn.10024650
add esp, 0xc
push eax
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 5
call fcn.10003520
mov eax, dword [ebp - 0x630]
add eax, 0xfffffff0
mov byte [ebp - 4], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1005c187
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x624]
add eax, 0xfffffff0
mov byte [ebp - 4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1005c1ad
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x620]
cmp dword [eax - 0xc], 0
jl 0x1005c220
push 0x100f1688
push eax
call fcn.100a73d9
add esp, 8
test eax, eax
je 0x1005c220
sub eax, dword [ebp - 0x620]
sar eax, 1
test eax, eax
jle 0x1005c220
push eax
lea ecx, [ebp - 0x624]
push ecx
lea ecx, [ebp - 0x620]
call fcn.100111f0
push eax
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 6
call fcn.10003520
mov eax, dword [ebp - 0x624]
add eax, 0xfffffff0
mov byte [ebp - 4], 3
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x1005c220
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x644]
call fcn.1009e81f
mov ecx, dword [ebp - 0x620]
push 0
push 0x9021
push ecx
lea ecx, [ebp - 0x644]
mov byte [ebp - 4], 7
call fcn.1009ec5e
test eax, eax
jne 0x1005c2a4
mov edx, dword [esi]
mov eax, dword [edx + 0x50]
mov ecx, esi
call eax
lea ecx, [ebp - 0x644]
mov byte [ebp - 4], 3
call fcn.1009e91e
mov edx, dword [esi]
mov eax, dword [edx + 4]
push 1
mov ecx, esi
mov byte [ebp - 4], 2
call eax
lea ecx, [ebp - 0x65c]
mov byte [ebp - 4], 1
call fcn.100a0093
mov eax, dword [ebp - 0x620]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x1005c0d9
xor edi, edi
mov edx, dword [esi]
mov edx, dword [edx + 0x38]
push 0x400
lea eax, [ebp - 0x61c]
push eax
mov ecx, esi
call edx
mov ebx, dword [ebp - 0x628]
mov dword [ebp - 0x624], eax
cmp eax, 0x400
jne 0x1005c310
mov ecx, dword [ebx + 0x2c]
mov esi, dword [ebx + 0x28]
test ecx, ecx
jl 0x1005c2f1
jg 0x1005c2de
test esi, esi
jb 0x1005c2f1
add edi, 0x400
mov eax, edi
cdq
cmp edx, ecx
jg 0x1005c316
jl 0x1005c2f1
cmp eax, esi
jae 0x1005c316
push 0x400
lea eax, [ebp - 0x61c]
push eax
lea ecx, [ebp - 0x644]
call fcn.1009e556
mov esi, dword [ebp - 0x62c]
jmp 0x1005c2a6
test eax, eax
jle 0x1005c32f
jmp 0x1005c31c
mov eax, dword [ebp - 0x624]
push eax
lea ecx, [ebp - 0x61c]
push ecx
lea ecx, [ebp - 0x644]
call fcn.1009e556
lea edx, [ebp - 0x620]
push edx
lea ecx, [ebx + 0x30]
call fcn.10003520
mov edi, dword [ebp - 0x62c]
mov eax, dword [edi]
mov edx, dword [eax + 0x50]
mov ecx, edi
call edx
lea ecx, [ebp - 0x644]
mov byte [ebp - 4], 3
call fcn.1009e91e
mov eax, dword [edi]
mov edx, dword [eax + 4]
push 1
mov ecx, edi
mov byte [ebp - 4], 2
call edx
lea ecx, [ebp - 0x65c]
mov byte [ebp - 4], 1
call fcn.100a0093
mov eax, dword [ebx + 0x30]
push eax
mov ecx, ebx
mov dword [ebp - 4], 0
call fcn.1005b1c0
mov bl, al
mov eax, dword [ebp - 0x620]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1005c05a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov al, bl
jmp 0x1005c3dd
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100a6f5d
mov esp, ebp
pop ebp
ret 4