Function at 0x437f3a
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x238
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp + 0x14]
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp + 0x18]
push edi
mov dword [ebp - 0x234], eax
xor edi, edi
mov eax, dword [ebp + 0x1c]
push 0x208
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x20c]
push edi
push eax
call fcn.004292a0
mov dword [ebp - 0x220], edi
xor eax, eax
mov dword [ebp - 0x228], edi
add esp, 0xc
lea edi, [ebp - 0x21c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
or edi, 0xffffffff
mov dword [ebp - 0x224], eax
test esi, esi
je 0x437fc8
cmp word [esi], ax
je 0x437fc8
lea eax, [ebp - 0x220]
push eax
push ebx
push esi
jmp 0x438020
lea eax, [ebp - 0x20c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
jne 0x438011
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov eax, 0x80004005
test esi, esi
cmovns esi, eax
push esi
push 0x26d
push str.pathutil.cpp
call fcn.00436473
jmp 0x43818c
lea eax, [ebp - 0x220]
push eax
push ebx
lea eax, [ebp - 0x20c]
push eax
call fcn.00437d63
mov esi, eax
test esi, esi
js 0x43818c
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0x220]
call fcn.0043854a
test eax, eax
jne 0x43805b
push eax
push dword [ebp - 0x228]
call fcn.0043ea78
mov esi, eax
test esi, esi
js 0x43818c
mov eax, dword [ebp - 0x22c]
mov ebx, 0x445570
test eax, eax
cmovne ebx, eax
and dword [ebp - 0x22c], 0
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov ecx, dword [ebp - 0x230]
mov edx, 0x45e2e0
push ecx
push 0x2e
pop esi
cmp si, word [ecx]
mov eax, 0x445570
cmovne eax, edx
push eax
movzx eax, word [ebp - 0x210]
push ebx
push eax
movzx eax, word [ebp - 0x212]
push eax
movzx eax, word [ebp - 0x214]
push eax
movzx eax, word [ebp - 0x216]
push eax
movzx eax, word [ebp - 0x21a]
push eax
movzx eax, word [ebp - 0x21c]
push eax
push dword [ebp - 0x220]
lea eax, [ebp - 0x224]
push str._ls__04u_02u_02u_02u_02u_02u_ls_ls_ls
push eax
call fcn.0043a845
mov esi, eax
add esp, 0x30
test esi, esi
js 0x438180
xor eax, eax
push eax
push 0x80
push 1
push eax
push 1
push 0x40000000
push dword [ebp - 0x224]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x438153
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x50
je 0x438124
cmp eax, 5
jne 0x438133
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
xor eax, eax
inc ecx
jmp 0x438139
mov ecx, dword [ebp - 0x22c]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
test esi, esi
js 0x43818c
test ecx, ecx
jne 0x43806b
mov eax, dword [ebp - 0x234]
test eax, eax
je 0x438171
push 0
push dword [ebp - 0x224]
push eax
call fcn.0043aa95
mov esi, eax
test esi, esi
js 0x438180
mov eax, dword [ebp - 0x238]
test eax, eax
je 0x438180
mov dword [eax], edi
or edi, 0xffffffff
cmp edi, 0xffffffff
je 0x43818c
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x224], 0
je 0x4381a0
push dword [ebp - 0x224]
call fcn.0043af5b
cmp dword [ebp - 0x228], 0
je 0x4381b4
push dword [ebp - 0x228]
call fcn.0043af5b
cmp dword [ebp - 0x220], 0
je 0x4381c8
push dword [ebp - 0x220]
call fcn.0043af5b
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0042928d
mov esp, ebp
pop ebp
ret 0x18