Function at 0x10007700
Capabilities:
Get common file path

Disassembly:
mov eax, 0x10058972
call fcn.100582b8
sub esp, 0x50
push ebx
push esi
mov dword [ebp - 0x18], 0x23d4
cmp dword [ebp - 0x18], 0x2677
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2c], edx
jle 0x1000777a
push 0x185e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
xor esi, esi
xor edi, edi
mov eax, edi
lea ecx, [ebp - 0x44]
or eax, esi
cdq
push edx
push eax
call fcn.10001a11
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10007755
mov eax, dword [eax]
push eax
call fcn.100400a6
pop ecx
push 0
push 1
lea ecx, [ebp - 0x44]
call fcn.10001eb4
inc edi
cmp edi, 0x14c1
jl 0x1000773c
inc esi
cmp esi, 0x535c
jl 0x1000773a
cmp dword [ebp - 0x18], 0x2162
jge 0x1000778e
push str.ezhj_wylcwlza_mjmsbyfc_rltbdozr_tjlwiadi_ldqagn_azyyzb_gmbwubd
call fcn.100400a6
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 0x47a2
cmp dword [ebp - 0x1c], 0x48de
jle 0x100077fa
push 0x11df
push 0
push 0xc63
call dword [sym.imp.KERNEL32.dll_OpenProcess]
xor esi, esi
mov dword [ebp - 0x18], esi
xor edi, edi
and dword [ebp - 0x20], 0
mov ebx, esi
mov esi, dword [ebp - 0x20]
mov ecx, edi
shl ebx, cl
mov eax, ebx
mov ecx, 0x10072ab8
and eax, esi
cdq
push edx
push eax
call fcn.10001ac8
inc esi
cmp esi, 0x122d
jl 0x100077c8
mov esi, dword [ebp - 0x18]
inc edi
cmp edi, 0x2c82
jl 0x100077bb
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x46e8
jl 0x100077b9
mov dword [ebp - 4], 2
cmp dword [ebp - 0x1c], 0x468e
jge 0x10007819
mov edx, str.terlhmrlo_nzhjl_qalf_lie_zkjk_pnzgglxi_jkssauct_mpqcbtk_uhfwovym_zkdijb_poucfnmfq
mov ecx, 0x10072ab8
call fcn.1000350a
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 0x1c], 0
je 0x10007888
mov esi, dword [ebp + 0x14]
mov dword [esi], 0
jmp 0x1000787e
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x24]
push eax
push 0
lea eax, [ebp - 0x28]
mov dword [ebp - 0x24], 0x8c53
push eax
push 1
push dword [ebp + 8]
mov dword [ebp - 0x28], 0xdc99
mov edx, esi
push 0x11bc
push dword [ebp + 0x18]
push 1
call fcn.10006070
add esp, 0x20
inc dword [esi]
cmp dword [esi], 0x16
jl 0x10007848
jmp 0x10007932
mov dword [ebp - 0x20], 0x1412
cmp dword [ebp - 0x20], 0x14ff
jle 0x10007916
push 0
push 0x1f3b
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
xor esi, esi
mov dword [ebp - 0x18], esi
xor edi, edi
mov dword [ebp - 0x1c], edi
xor ebx, ebx
mov dword [ebp - 0x28], edi
and edi, esi
xor esi, esi
mov eax, edi
lea ecx, [ebp - 0x5c]
xor eax, esi
xor eax, ebx
cdq
push edx
push eax
call fcn.10001a11
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100078d3
mov eax, dword [eax]
push eax
call fcn.100400a6
pop ecx
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.10001eb4
inc esi
cmp esi, 0x6a2e
jl 0x100078b8
inc ebx
cmp ebx, 0x7c82
jl 0x100078b6
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x18]
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x4e85
jl 0x100078af
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x3a8a
jl 0x100078aa
cmp dword [ebp - 0x20], 0x13ad
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x2c]
mov dword [eax], ecx
jge 0x10007932
push str.odbgpr_fdtv_coyuke_tzpgkrphv_nuycbqev_ivae_lvfvj_ngjgkh
call fcn.100400a6
pop ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret