Function at 0x1003ef76
Capabilities:
Get common file path

Disassembly:
mov eax, 0x1006888f
call fcn.10067358
sub esp, 0x78
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x24], 0x37bc7528
xor ecx, ecx
mov dword [ebp - 0x48], edi
inc ecx
mov ebx, edx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x24], 0xc4185a1f
mov dword [ebp - 0x24], 0x235e
cmp dword [ebp - 0x24], 0x6c9
mov dword [ebp - 0x44], ebx
jge 0x1003f1fe
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], 2
mov edi, 0x10bfc220
push eax
mov ecx, edi
call fcn.1002b9d4
push 3
pop esi
mov dword [ebp - 0x2c], esi
mov ecx, esi
call fcn.1003ef41
test al, al
je 0x1003efee
lea eax, [ebp - 0x2c]
mov ecx, edi
push eax
call fcn.1002b9d4
mov esi, dword [ebp - 0x2c]
add esi, 2
mov dword [ebp - 0x2c], esi
cmp esi, 0x2a
jl 0x1003efd5
mov eax, dword [0x10bfc224]
lea ecx, [ebp - 0x40]
sub eax, dword [0x10bfc220]
xor edi, edi
push ecx
sar eax, 2
lea ecx, [ebp - 0x6c]
push eax
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x64], edi
call fcn.1002c8de
lea eax, [ebp - 0x6c]
mov dword [ebp - 4], edi
push eax
push ecx
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x58], edi
call fcn.10042c98
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x60]
mov ecx, dword [0x10bfc224]
add edx, 0x18
mov ebx, dword [0x10bfc220]
push 2
pop esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x24], edx
mov eax, ecx
sub eax, ebx
sar eax, 2
test eax, eax
je 0x1003f0b5
mov eax, dword [ebx + edi*4]
mov dword [ebp - 0x20], eax
cmp eax, esi
jg 0x1003f0b2
mov dword [ebp - 0x1c], esi
mov eax, esi
test esi, esi
je 0x1003f0a6
mov esi, dword [ebp - 0x24]
cdq
idiv dword [ebp - 0x20]
mov ecx, dword [esi]
add dword [ecx + edi*4], eax
mov ebx, dword [0x10bfc220]
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, dword [ebx + edi*4]
idiv ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], eax
test eax, eax
jne 0x1003f07b
mov ecx, dword [0x10bfc224]
mov esi, dword [ebp - 0x18]
mov eax, ecx
inc edi
sub eax, ebx
sar eax, 2
cmp edi, eax
jb 0x1003f065
mov edx, dword [ebp - 0x24]
inc esi
add edx, 0xc
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x24], edx
push 0
pop edi
cmp esi, 0x2a
jl 0x1003f05a
sub ecx, ebx
sar ecx, 2
push ecx
lea ecx, [ebp - 0x84]
call fcn.1002b976
mov byte [ebp - 4], 2
jmp 0x1003f1ab
lea eax, [ebp - 0x6c]
push eax
call fcn.1004285d
mov esi, dword [0x10bfc224]
xor ebx, ebx
mov ecx, dword [0x10bfc220]
mov eax, esi
sub eax, ecx
inc ebx
xor edx, edx
sar eax, 2
xor edi, edi
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x24], edx
test eax, eax
je 0x1003f16d
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x84]
imul eax, eax, 0xc
mov dword [ebp - 0x20], eax
imul eax, dword [ebp - 0x34], 0xc
imul ecx, dword [ebp - 0x30], 0xc
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], ecx
mov esi, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x20]
mov eax, dword [eax + esi]
mov ecx, dword [ecx + esi]
mov edx, dword [eax + edi*4]
mov eax, dword [ebp - 0x1c]
sub edx, dword [ecx + edi*4]
mov eax, dword [eax + esi]
sub edx, dword [eax + edi*4]
mov dword [ebx + edi*4], edx
inc edi
mov esi, dword [0x10bfc224]
mov eax, esi
mov ecx, dword [0x10bfc220]
sub eax, ecx
sar eax, 2
cmp edi, eax
mov eax, dword [ebp - 0x18]
jb 0x1003f12e
mov ebx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x24]
sub esi, ecx
xor edi, edi
sar esi, 2
test esi, esi
je 0x1003f198
mov eax, dword [ebp - 0x84]
push dword [ebp - 0x24]
push ebx
mov eax, dword [eax + edi*4]
inc eax
cdq
push edx
push eax
call fcn.10053cb0
inc edi
mov dword [ebp - 0x24], edx
mov ebx, eax
cmp edi, esi
jb 0x1003f178
push edx
push ebx
mov ecx, 0x10659cb8
call fcn.1002b73f
push eax
call fcn.1003046c
pop ecx
lea eax, [ebp - 0x30]
push eax
push ecx
lea eax, [ebp - 0x34]
mov ecx, 0x10659d70
push eax
call fcn.1002afe3
pop ecx
mov ecx, eax
call fcn.1002afe3
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
lea ecx, [ebp - 0x84]
je 0x1003f0e1
call fcn.1002c9a6
lea ecx, [ebp - 0x60]
call fcn.1002cc78
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call fcn.1002c9a6
mov ebx, dword [ebp - 0x44]
xor ecx, ecx
mov edi, dword [ebp - 0x48]
inc ecx
mov dword [ebp - 0x48], 0xbe39e3c
mov dword [ebp - 0x18], 0
jmp 0x1003f21c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x54], 0xfffffffd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003f20e
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x18], 0
jmp 0x1003f23b
mov dword [ebp - 0x24], 0xffffffff
inc dword [ebp - 0x24]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jle 0x1003f22e
mov dword [ebp - 0x18], ecx
push ecx
lea ecx, [ebp - 0x78]
call fcn.1002b976
xor edx, edx
mov dword [ebp - 0x18], edx
jmp 0x1003f263
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x78]
mov dword [eax + ecx*4], 0x7a7c2039
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1003f253
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x18], edx
jmp 0x1003f3d4
mov dword [ebp - 0x14], 5
mov byte [ebp - 0xd], dl
cmp byte [ebp - 0xd], 0
je 0x1003f29f
push 0x693
push 0x1166
push 0xdfc
call dword [sym.imp.USER32.dll_SetWindowLongW]
xor edx, edx
mov dword [ebp - 0x14], edx
jmp 0x1003f2b4
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x78]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1003f2a4
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], edx
jl 0x1003f3d1
mov dword [ebp - 0x1c], edx
jmp 0x1003f2d9
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x28], 2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1003f2cb
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], edx
jl 0x1003f3c8
mov dword [ebp - 0x24], 4
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x78]
cmp dword [eax + ecx*4], edx
jne 0x1003f3c8
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], edx
jl 0x1003f3bf
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], edx
jl 0x1003f3b6
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], edx
jl 0x1003f341
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x78]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [ebp - 0x1c]
jns 0x1003f32b
xor edx, edx
mov byte [ebp - 0xd], dl
mov dword [ebp - 0x48], 0x259a
cmp dword [ebp - 0x48], 0x945
jge 0x1003f398
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x38]
push eax
push 0x1000aaac
call fcn.1004f9db
mov ecx, dword [ebp - 0x38]
xor esi, esi
add esp, 0xc
inc esi
test ecx, ecx
jle 0x1003f386
mov eax, esi
cdq
idiv dword [ebp - 0x4c]
test edx, edx
je 0x1003f37e
dec ecx
inc esi
test ecx, ecx
jg 0x1003f373
mov dword [ebp - 0x38], ecx
lea eax, [esi - 1]
push eax
push 0x1000a754
call fcn.1004fea2
pop ecx
pop ecx
xor edx, edx
cmp byte [ebp - 0xd], 0
je 0x1003f3aa
push edx
push 0x991
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
dec dword [ebp - 0x20]
push 0
pop edx
jns 0x1003f320
dec dword [ebp - 0x24]
jns 0x1003f30d
dec dword [ebp - 0x28]
jns 0x1003f2eb
dec dword [ebp - 0x14]
jns 0x1003f2c6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x1003f278
lea ecx, [ebp - 0x78]
call fcn.1002c9a6
mov ecx, dword [ebx]
mov eax, dword [edi]
pop edi
pop esi
pop ebx
mov dword [eax + ecx*4], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret