Function at 0x9d7230
Capabilities:
Get common file path

Disassembly:
sub esp, 0xe28
mov eax, dword [0xb196ec]
xor eax, esp
mov dword [esp + 0xe24], eax
mov eax, dword [esp + 0xe30]
push ebx
push ebp
mov ebp, dword [esp + 0xe34]
push esi
push edi
xor ebx, ebx
push 0x103
mov edi, ecx
lea ecx, [esp + 0x25]
mov esi, edx
push ebx
push ecx
mov dword [esp + 0x28], eax
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], ebx
mov byte [esp + 0x2c], bl
call fcn.00a7ffb0
add esp, 0xc
cmp dword [0xc08ffc], ebx
jne 0x9d7321
mov ebx, 0xc09000
mov dword [0xc08ffc], 1
call fcn.009541a0
cmp byte [0xc09000], 0
je 0x9d72b3
mov ecx, ebx
call fcn.0095a450
test eax, eax
jne 0x9d72c3
push 0xc09000
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
cmp byte [0xc09000], 0
je 0x9d7321
mov ecx, 0xc09000
call fcn.00960910
push str.CLOUDESN
push 0xc09000
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, 0xc09000
call fcn.0095a450
test eax, eax
jne 0x9d7313
mov ecx, 0xaa1543
mov esi, 0xc09000
call fcn.0095e7e0
mov ecx, esi
call fcn.0095a450
test eax, eax
jne 0x9d7313
mov byte [0xc09000], al
mov esi, 0xc09000
call fcn.00960950
mov esi, dword [esp + 0x14]
test edi, edi
je 0x9d7338
cmp byte [edi], 0
je 0x9d7338
push edi
lea edx, [esp + 0x24]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp 0x9d7357
cmp byte [0xc09000], 0
je 0x9d755c
push 0
push 0
lea eax, [esp + 0x28]
push eax
xor ecx, ecx
mov edx, ebp
call 0x98eaf0
cmp byte [0xc09000], 0
je 0x9d755c
cmp byte [esp + 0x20], 0
je 0x9d755c
push 0x5c
push ebp
call fcn.00a7aa50
add esp, 8
test eax, eax
jne 0x9d7382
mov eax, ebp
jmp 0x9d7383
inc eax
lea edx, [esp + 0x230]
sub edx, eax
mov edi, 1
mov cl, byte [eax]
mov byte [edx + eax], cl
add eax, edi
test cl, cl
jne 0x9d7391
lea ecx, [esp + 0x230]
push 0x2e
push ecx
call fcn.00a7a2c0
add esp, 8
test eax, eax
je 0x9d73cc
push 0xab75f4
lea edx, [esp + 0x234]
push 0xaacda4
push edx
call fcn.0095e130
add esp, 0xc
lea eax, [esp + 0x20]
push eax
push 0xc09000
lea ecx, [esp + 0x638]
push str._s_sNOCL.mwt
push ecx
call fcn.00a78f30
lea edx, [esp + 0x30]
push edx
push 0xc09000
lea eax, [esp + 0xa48]
push str._s_sYECL.mwt
push eax
call fcn.00a78f30
push 0
push 0
xor edx, edx
lea ecx, [esp + 0x658]
call fcn.0095a0f0
add esp, 0x28
test eax, eax
je 0x9d759f
push 0
push 0
xor edx, edx
lea ecx, [esp + 0xa38]
call fcn.0095a0f0
add esp, 8
test eax, eax
je 0x9d759f
cmp byte [esp + 0x20], 0
je 0x9d7579
cmp dword [0xbd07c4], edi
jne 0x9d7579
lea ecx, [esp + 0x14]
push ecx
push str.PostFile
mov ecx, 0xaa21e4
mov edx, 0x80000002
mov dword [esp + 0x1c], edi
call fcn.0094c0d0
cmp dword [esp + 0x14], 0
je 0x9d7579
test esi, esi
je 0x9d74a3
cmp byte [esi], 0
je 0x9d74a3
mov edx, dword [esp + 0x1c]
push esi
push ebp
push edx
push str.MONITOR
push str._POST___s:_s:_s___s_
push 0
call fcn.0096a780
add esp, 0x18
jmp 0x9d74bd
mov eax, dword [esp + 0x1c]
push ebp
push eax
push str.MONITOR
push str._POST___s:_s:_s
push 0
call fcn.0096a780
add esp, 0x14
mov ecx, dword [esp + 0xe44]
mov edi, dword [esp + 0x1c]
push esi
push ecx
lea ebx, [esp + 0x28]
mov ecx, ebp
call fcn.008599c0
add esp, 8
lea edx, [esp + 0x230]
push edx
mov eax, ebx
push eax
push 0xc09000
mov dword [esp + 0x24], 1
push str._s_s__s_YECL.mwt
lea ecx, [esp + 0x640]
push ecx
call fcn.00a78f30
add esp, 0x14
push 0
push 0
push 1
lea edx, [esp + 0x63c]
push 0
push edx
mov ecx, ebp
call fcn.0098a370
add esp, 0x14
test eax, eax
jne 0x9d7595
push 0x103
push eax
mov byte [esp + 0x130], al
lea eax, [esp + 0x131]
push eax
call fcn.00a7ffb0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x104
mov edi, eax
lea esi, [esp + 0x12c]
call fcn.00960a40
add esp, 4
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0xe34]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00a78f21
add esp, 0xe28
ret
lea edx, [esp + 0x230]
push edx
lea eax, [esp + 0x24]
push eax
push 0xc09000
push str._s_s__s_NOCL.mwt
jmp 0x9d74f5
mov dword [esp + 0x18], 1
jmp 0x9d755c
mov eax, edi
jmp 0x9d7560