Function at 0x1000f2f3
Capabilities:
Get common file path

Disassembly:
push ebp
lea ebp, [esp - 0x3030]
mov eax, 0x3030
call fcn.10039d10
push 0xffffffffffffffff
push 0x10056b1b
mov eax, dword fs:[0]
push eax
sub esp, 0xe4
mov eax, dword [0x10080f6c]
xor eax, ebp
mov dword [ebp + 0x302c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x3038]
mov dword [ebp - 0x10], eax
xor esi, esi
xor eax, eax
mov edi, 0xffe
mov dword [ebp - 0x14], esi
push edi
mov word [ebp + 0x102c], ax
lea eax, [ebp + 0x102e]
push esi
push eax
call fcn.10039d40
mov ebx, 0x800
lea eax, [ebp + 0x102c]
push ebx
push eax
call fcn.10036629
add esp, 0x14
cmp word [ebp + 0x102c], si
jne 0x1000f3a0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x302c]
xor ecx, ebp
call fcn.10039bc2
add ebp, 0x3030
leave
ret
push esi
push dword [ebp - 0x10]
push esi
call sub.urlmon.dll_IsValidURL
neg eax
sbb eax, eax
inc eax
je 0x1000f37b
xor eax, eax
push edi
mov word [ebp + 0x2c], ax
lea eax, [ebp + 0x2e]
push esi
push eax
call fcn.10039d40
xor eax, eax
push edi
mov word [ebp + 0x202c], ax
lea eax, [ebp + 0x202e]
push esi
push eax
call fcn.10039d40
add esp, 0x18
lea eax, [ebp + 0x2c]
push eax
push ebx
call dword [sym.imp.kernel32.dll_GetTempPathW]
lea eax, [ebp + 0x202c]
push eax
push esi
push 0x1005e0b0
lea eax, [ebp + 0x2c]
push eax
call dword [sym.imp.kernel32.dll_GetTempFileNameW]
push 0x20
call fcn.1003b150
pop ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], esi
cmp eax, esi
je 0x1000f440
push dword [ebp - 0x10]
lea ecx, [ebp - 0x18]
call fcn.10001309
mov eax, dword [eax]
xor ebx, ebx
inc ebx
mov byte [ebp - 4], 1
mov dword [ebp - 0x14], ebx
cmp eax, esi
je 0x1000f42f
mov eax, dword [eax]
jmp 0x1000f431
xor eax, eax
mov ecx, dword [ebp - 0x1c]
push esi
push eax
push esi
call fcn.1000123f
mov edi, eax
jmp 0x1000f445
xor ebx, ebx
xor edi, edi
inc ebx
or dword [ebp - 4], 0xffffffff
test byte [ebp - 0x14], 1
je 0x1000f45e
mov ecx, dword [ebp - 0x18]
cmp ecx, esi
je 0x1000f45e
call fcn.10001441
mov dword [ebp - 0x18], esi
call fcn.1002c14c
mov edx, dword [eax]
mov ecx, eax
call dword [edx]
lea ecx, [ebp + 0x202c]
push ecx
push edi
push eax
lea ecx, [ebp - 0x40]
call fcn.1000d30b
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 3
call fcn.1000cc02
test eax, eax
je 0x1000f49e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.1000d368
jmp 0x1000f37b
push ebx
push 0x40
push ebx
lea eax, [ebp + 0x202c]
push eax
lea ecx, [ebp - 0xf0]
call fcn.10013872
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 5
cmp dword [ebp - 0x8c], esi
je 0x1000f53a
jmp 0x1000f51c
xor eax, eax
mov dword [ebp + 0x14], 7
mov dword [ebp + 0x10], esi
mov word [ebp], ax
lea eax, [ebp]
push eax
lea eax, [ebp - 0xf0]
push eax
mov byte [ebp - 4], 6
call fcn.10013641
pop ecx
pop ecx
push 0x1005e0b8
lea ecx, [ebp]
call fcn.1001157d
test eax, eax
je 0x1000f50e
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10014896
push esi
push ebx
lea ecx, [ebp]
mov byte [ebp - 4], 5
call fcn.100115e9
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax + 4]
test byte [ebp + eax - 0xe4], 1
je 0x1000f4cb
lea ecx, [ebp - 0xf0]
call fcn.1001376b
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebp + 0x102c]
push eax
mov dword [ebp + 0x1c], esi
mov dword [ebp + 0x20], esi
mov dword [ebp + 0x24], esi
mov dword [ebp + 0x28], esi
call fcn.1001cbeb
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x2c]
pop ecx
pop ecx
sub eax, edi
push 0x1c
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x10], esi
mov ebx, eax
cmp ebx, esi
jbe 0x1000f5a6
mov dword [ebp + 0xc], esi
mov dword [ebp + 0x10], esi
mov dword [ebp + 0x14], esi
mov dword [ebp + 0x18], esi
cmp dword [edi + 0x14], 8
jb 0x1000f585
mov eax, dword [edi]
jmp 0x1000f587
mov eax, edi
lea ecx, [ebp + 0xc]
push ecx
push eax
call fcn.1001cbeb
mov eax, dword [ebp + 0x1c]
pop ecx
pop ecx
cmp eax, dword [ebp + 0xc]
je 0x1000f5d0
inc dword [ebp - 0x10]
add edi, 0x1c
cmp dword [ebp - 0x10], ebx
jb 0x1000f56f
lea ecx, [ebp - 0x2c]
call fcn.10013ff4
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 3
call fcn.10013ae5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.1000d368
mov eax, esi
jmp 0x1000f37d
xor eax, eax
mov ecx, dword [ebp + eax + 0x20]
cmp ecx, dword [ebp + eax + 0x10]
jb 0x1000f5a6
add eax, 4
cmp eax, 0xc
jl 0x1000f5d2
xor esi, esi
inc esi
jmp 0x1000f5a6