Function at 0x42d4f0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x23c
mov eax, dword [0x4b93f8]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [0x4bbfa8], 0
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, ecx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
jne 0x42d531
push str.Wow64DisableWow64FsRedirection
push str.kernel32.dll
call edi
push eax
call esi
mov dword [0x4bbfa8], eax
cmp dword [0x4bbee4], 0
jne 0x42d54e
push str.Wow64RevertWow64FsRedirection
push str.kernel32.dll
call edi
push eax
call esi
mov dword [0x4bbee4], eax
lea ecx, [ebp - 0x238]
call fcn.00408110
call fcn.00402250
mov ecx, eax
test ecx, ecx
je 0x42d7b6
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x218], eax
call fcn.00402250
mov ecx, eax
test ecx, ecx
je 0x42d7c0
mov eax, dword [ecx]
call dword [eax + 0xc]
mov dword [ebp - 0x220], eax
call fcn.00402250
mov ecx, eax
test ecx, ecx
je 0x42d7ca
mov eax, dword [ecx]
call dword [eax + 0xc]
mov dword [ebp - 0x21c], eax
call fcn.00402250
mov ecx, eax
test ecx, ecx
je 0x42d7d4
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
push 0x208
mov dword [ebp - 0x214], eax
lea eax, [ebp - 0x20c]
push 0
push eax
call fcn.0044c180
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x210]
call fcn.00403710
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x214]
call fcn.00409a20
mov edx, dword [ebp - 0x210]
or edi, 0xffffffff
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42d633
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push ecx
mov ecx, esp
push str.history.html
call fcn.00403710
mov eax, dword [ebp - 0x214]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
mov dword [ebp - 0x214], eax
call fcn.00403380
add eax, 0x10
lea ecx, [ebp - 0x23c]
add esp, 4
mov dword [esi], eax
lea eax, [ebp - 0x210]
push eax
call fcn.0042b620
push eax
lea ecx, [ebp - 0x218]
call fcn.00409a20
mov edx, dword [ebp - 0x210]
mov eax, edi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42d69b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
movsd xmm0, qword [0x4c1060]
ucomisd xmm0, qword [0x4a7098]
mov esi, dword [ebp - 0x218]
lahf
test ah, 0x44
jp 0x42d6c4
push esi
push 0x4a6e3c
push 0xee
jmp 0x42d713
ucomisd xmm0, qword [0x4a70a0]
lahf
test ah, 0x44
jp 0x42d6df
push esi
push 0x4a6e3c
push 0xef
jmp 0x42d713
ucomisd xmm0, qword [0x4a70a8]
lahf
test ah, 0x44
jp 0x42d6fa
push esi
push 0x4a6e3c
push 0xf0
jmp 0x42d713
ucomisd xmm0, qword [0x4a70b0]
lahf
test ah, 0x44
jp 0x42d71a
push esi
push 0x4a6e3c
push 0xf1
mov ecx, ebx
call fcn.0042e620
mov edx, dword [ebp - 0x214]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42d734
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x21c]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42d74e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x220]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42d768
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x42d77f
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x228]
call fcn.00402130
mov edx, dword [ebp - 0x228]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x42d7a5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004495f3
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00402080
push 0x80004005
call fcn.00402080
push 0x80004005
call fcn.00402080
push 0x80004005
call fcn.00402080
int3