Function at 0x6d0999a3
Capabilities:
Get common file path

Disassembly:
push ebp
sub esp, 0x410
lea ebp, [esp - 4]
mov eax, dword [0x6d0f8610]
xor eax, ebp
mov dword [ebp + 0x410], eax
push 0x30
mov eax, 0x6d0b4f59
call fcn.6d0b0ca9
test byte [0x6d0fb628], 1
mov eax, dword [ebp + 0x420]
mov esi, dword [ebp + 0x41c]
mov dword [ebp - 0x28], eax
jne 0x6d0999f8
or dword [0x6d0fb628], 1
and dword [0x6d0fb624], 0
push 0x6d0b5a7a
call fcn.6d05f1d0
pop ecx
and dword [ebp - 0x14], 0
and dword [ebp - 4], 0
mov ecx, 0x6d0fb624
call fcn.6d097fbb
test eax, eax
jne 0x6d099bc9
mov eax, dword [esi]
push str.java_lang_System
push esi
mov dword [ebp - 0x18], 1
call dword [eax + 0x18]
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 1
test eax, eax
je 0x6d099b65
mov ecx, dword [esi]
push str._Ljava_lang_String__Ljava_lang_String_
push str.getProperty
push eax
push esi
call dword [ecx + 0x1c4]
mov ebx, eax
test ebx, ebx
je 0x6d099b65
mov edi, str.java.io.tmpdir
push edi
call dword [sym.imp.MSVCR100.dll_wcslen]
pop ecx
mov ecx, dword [esi]
push eax
push edi
push esi
call dword [ecx + 0x28c]
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x6d099b4b
push eax
push ebx
push dword [ebp - 0x20]
push esi
call fcn.6d0653c7
mov edi, eax
add esp, 0x10
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], edi
xor ebx, ebx
mov byte [ebp - 4], 3
cmp edi, ebx
je 0x6d099b37
push edi
push esi
lea ecx, [ebp - 0x1c]
call fcn.6d06a0f0
mov eax, dword [eax]
mov byte [ebp - 4], 4
cmp eax, ebx
jne 0x6d099abb
mov eax, 0x6d0bb99c
push eax
mov ecx, 0x6d0fb624
call fcn.6d0998d3
push dword [ebp - 0x1c]
mov byte [ebp - 4], 3
call dword [sym.imp.MSVCR100.dll_free]
pop ecx
lea eax, [ebp]
push eax
push ebx
push ebx
push 0x24
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov ebx, eax
mov dword [ebp - 0x14], ebx
test ebx, ebx
jns 0x6d099b01
push ebx
push 0x6d0c2718
call fcn.6d09e988
pop ecx
pop ecx
push 0
push ebx
call fcn.6d05f1d0
lea eax, [ebp]
push 0x6d0c2714
push eax
call dword [sym.imp.MSVCR100.dll_wcscat]
mov eax, dword [0x6d0fb624]
pop ecx
pop ecx
test eax, eax
je 0x6d099b1f
mov eax, dword [eax]
jmp 0x6d099b21
xor eax, eax
lea ecx, [ebp]
push ecx
push eax
call dword [sym.imp.MSVCR100.dll__wcsicmp]
mov ebx, eax
neg ebx
pop ecx
sbb ebx, ebx
pop ecx
inc ebx
jmp 0x6d099b3a
mov ebx, dword [ebp - 0x18]
mov byte [ebp - 4], 2
test edi, edi
je 0x6d099b4e
mov eax, dword [esi]
push edi
push esi
call dword [eax + 0x5c]
jmp 0x6d099b4e
mov ebx, dword [ebp - 0x18]
cmp dword [ebp - 0x2c], 0
mov byte [ebp - 4], 1
je 0x6d099b61
push dword [ebp - 0x2c]
mov eax, dword [esi]
push esi
call dword [eax + 0x5c]
test ebx, ebx
je 0x6d099bb6
lea eax, [ebp]
push eax
xor eax, eax
push eax
push eax
push 0x8020
push eax
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov edi, eax
mov dword [ebp - 0x14], edi
test edi, edi
jns 0x6d099b97
push edi
push str.Error:_08x_in_SHGetFolderPath__NULL__CSIDL_INTERNET_CACHECSIDL_FLAG_CREATE__NULL__0__szPath_
call fcn.6d09e988
pop ecx
pop ecx
push 0
push edi
jmp 0x6d099afc
lea eax, [ebp]
push 0x6d0c2714
push eax
call dword [sym.imp.MSVCR100.dll_wcscat]
pop ecx
pop ecx
lea eax, [ebp]
push eax
mov ecx, 0x6d0fb624
call fcn.6d0998d3
cmp dword [ebp - 0x20], 0
mov byte [ebp - 4], 0
je 0x6d099bc9
push dword [ebp - 0x20]
mov eax, dword [esi]
push esi
call dword [eax + 0x5c]
mov ecx, dword [ebp - 0x28]
push 0x6d0fb624
call fcn.6d0998a0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x410]
xor ecx, ebp
call fcn.6d0b0acb
add ebp, 0x414
leave
ret