Function at 0x4979ae
Capabilities:
Get common file path

Disassembly:
push 0x228
mov eax, 0x4e6c87
call fcn.004b5257
mov edi, ecx
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x22c], edi
call fcn.0040c7d0
xor ebx, ebx
mov dword [ebp - 4], ebx
push str._Y_m_d_H_M_S
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.0043daf0
mov ecx, eax
call fcn.0046b20d
mov esi, eax
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push dword [esi]
lea eax, [ebp - 0x228]
push str.360_install__s__d
push eax
call fcn.0040e3f0
add esp, 0x10
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x220]
call fcn.0040d610
xor eax, eax
push 0x206
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push ebx
push eax
mov dword [ebp - 0x230], 0x65
call fcn.004b4620
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov esi, 0x4f8b70
test eax, eax
je 0x497ae5
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00444ab6
mov byte [ebp - 4], 2
push esi
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.00445250
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x220]
call fcn.0040d610
push dword [ebp - 0x21c]
call fcn.00492fea
pop ecx
mov dword [ebp - 0x230], eax
cmp eax, ebx
jne 0x497acb
lea eax, [ebp - 0x21c]
lea ecx, [edi + 0x7c]
push eax
call fcn.004453ce
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x21c]
call fcn.0040d610
cmp dword [ebp - 0x230], ebx
je 0x497cce
mov dword [ebp - 0x220], 0x65
cmp byte [0x53fe3d], bl
je 0x497bd4
cmp byte [0x53fdd9], 1
jne 0x497bd4
lea eax, [ebp - 0x21c]
push eax
mov ecx, 0x53fda0
call fcn.0046fad7
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x21c]
cmp dword [eax - 0xc], ebx
je 0x497bc1
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x22c]
push 0x505670
push eax
call fcn.00444ab6
mov byte [ebp - 4], 6
push esi
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.00445250
add esp, 0x18
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x22c]
call fcn.0040d610
mov eax, dword [ebp - 0x21c]
cmp dword [eax - 0xc], ebx
jge 0x497b7d
push 0x80070057
call fcn.0040b600
movzx eax, word [eax]
push eax
push ebx
lea ecx, [ebp - 0x224]
call fcn.00484611
push dword [ebp - 0x224]
call fcn.00492fea
pop ecx
mov dword [ebp - 0x220], eax
cmp eax, ebx
jne 0x497bb2
lea eax, [ebp - 0x224]
lea ecx, [edi + 0x7c]
push eax
call fcn.004453ce
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x224]
call fcn.0040d610
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x21c]
call fcn.0040d610
jmp 0x497cc0
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x220]
push 0x505670
push eax
call fcn.00444ab6
mov byte [ebp - 4], 9
push esi
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.00445250
add esp, 0x18
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x220]
call fcn.0040d610
xor edi, edi
lea eax, [edi + 0x41]
push eax
push ebx
lea ecx, [ebp - 0x21c]
call fcn.00484611
push dword [ebp - 0x21c]
call fcn.00492fea
pop ecx
mov dword [ebp - 0x220], eax
cmp eax, ebx
je 0x497c40
inc edi
cmp edi, 0x1a
jl 0x497c12
jmp 0x497cac
mov ecx, dword [ebp - 0x22c]
lea eax, [ebp - 0x21c]
add ecx, 0x7c
push eax
call fcn.004453ce
cmp byte [0x53fe3d], bl
je 0x497cac
lea eax, [ebp - 0x224]
mov esi, 0x53fda0
push eax
mov ecx, esi
call fcn.0046fad7
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x224]
cmp dword [eax - 0xc], ebx
je 0x497c9d
add edi, 0x41
push edi
push ebx
lea ecx, [ebp - 0x224]
call fcn.00484611
push ebx
push dword [ebp - 0x224]
mov ecx, esi
call fcn.0048b477
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x224]
call fcn.0040d610
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x21c]
call fcn.0040d610
mov edi, dword [ebp - 0x22c]
cmp dword [ebp - 0x220], ebx
jne 0x497cce
mov dword [ebp - 0x230], ebx
mov eax, dword [ebp - 0x230]
cmp eax, ebx
mov dword [edi + 0x84], eax
sete bl
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x228]
call fcn.0040d610
mov al, bl
call fcn.004b52da
ret