Function at 0x530ec0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x72e5ef
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x150
mov dword [ebp - 0x154], ecx
mov eax, dword [ebp - 0x154]
mov dword [eax], 0x745850
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x154]
mov edx, dword [ecx + 0x8c]
push edx
push 0x7865f8
push 0x786604
mov ecx, 0x79ddf8
call fcn.007111ba
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 0x94]
push ecx
push 0x786610
push 0x786618
mov ecx, 0x79ddf8
call fcn.007111ba
mov edx, dword [ebp - 0x154]
mov eax, dword [edx + 0x98]
push eax
push 0x786624
push 0x78662c
mov ecx, 0x79ddf8
call fcn.007111ba
mov ecx, dword [ebp - 0x154]
mov edx, dword [ecx + 0x9c]
push edx
push 0x786638
push 0x786640
mov ecx, 0x79ddf8
call fcn.007111ba
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 0xa0]
push ecx
push 0x78664c
push 0x786654
mov ecx, 0x79ddf8
call fcn.007111ba
mov edx, dword [ebp - 0x154]
mov eax, dword [edx + 0xa4]
push eax
push 0x786660
push 0x786668
mov ecx, 0x79ddf8
call fcn.007111ba
mov ecx, dword [ebp - 0x154]
mov edx, dword [ecx + 0xa8]
push edx
push 0x786674
push 0x78667c
mov ecx, 0x79ddf8
call fcn.007111ba
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 0xac]
push ecx
push 0x786688
push 0x786690
mov ecx, 0x79ddf8
call fcn.007111ba
mov edx, dword [ebp - 0x154]
mov eax, dword [edx + 0xb0]
push eax
push 0x78669c
push 0x7866a4
mov ecx, 0x79ddf8
call fcn.007111ba
mov ecx, dword [ebp - 0x154]
mov edx, dword [ecx + 0xb4]
push edx
push 0x7866b0
push 0x7866b8
mov ecx, 0x79ddf8
call fcn.007111ba
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x12c]
push edx
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0x154]
mov ecx, dword [edx + 0xc0]
call fcn.005c6106
cmp dword [ebp - 0x12c], 0
je 0x531239
push 0x104
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.DLL_GetWindowsDirectoryA]
test eax, eax
je 0x531239
push 0x7866c4
lea ecx, [ebp - 0x114]
push ecx
call fcn.006ee950
add esp, 8
push 0x7866d0
lea edx, [ebp - 0x114]
push edx
call fcn.006eed58
add esp, 8
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
je 0x531239
mov eax, dword [0x7866d4]
mov dword [ebp - 0x140], eax
mov ecx, dword [0x7866d8]
mov dword [ebp - 0x13c], ecx
mov dl, byte [0x7866dc]
mov byte [ebp - 0x138], dl
xor eax, eax
mov byte [ebp - 0x137], al
mov ecx, dword [ebp - 0x130]
push ecx
push 9
push 1
lea edx, [ebp - 0x140]
push edx
call fcn.006ef8fe
add esp, 0x10
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 9
jne 0x53122a
cmp dword [ebp - 0x128], 0x3e8
jl 0x531142
mov dword [ebp - 0x128], 0x3e8
cmp dword [ebp - 0x128], 0
jge 0x531155
mov dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x130]
push eax
push 4
push 1
lea ecx, [ebp - 0x128]
push ecx
call fcn.006ef8fe
add esp, 0x10
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 4
jne 0x53122a
cmp dword [ebp - 0x128], 0
jle 0x53122a
mov edx, dword [ebp - 0x130]
push edx
mov eax, dword [ebp - 0x128]
push eax
push 8
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.006ef8fe
add esp, 0x10
cmp dword [ebp - 0x128], eax
jne 0x53122a
cmp dword [ebp - 0x118], 0x28
jle 0x5311c6
mov dword [ebp - 0x118], 0x28
cmp dword [ebp - 0x118], 0
jge 0x5311d9
mov dword [ebp - 0x118], 0
mov edx, dword [ebp - 0x130]
push edx
push 4
push 1
lea eax, [ebp - 0x118]
push eax
call fcn.006ef8fe
add esp, 0x10
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 4
jne 0x53122a
cmp dword [ebp - 0x118], 0
jle 0x53122a
mov ecx, dword [ebp - 0x130]
push ecx
mov edx, dword [ebp - 0x118]
push edx
push 8
mov eax, dword [ebp - 0x11c]
push eax
call fcn.006ef8fe
add esp, 0x10
mov ecx, dword [ebp - 0x130]
push ecx
call fcn.006eecaa
add esp, 4
lea ecx, [ebp - 0x124]
call fcn.00433910
lea edx, [ebp - 0x124]
push edx
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 0xc0]
call fcn.005c60dd
mov ecx, dword [ebp - 0x124]
push ecx
push 0x7866e0
push 0x7866ec
mov ecx, 0x79ddf8
call fcn.007111ba
mov edx, dword [ebp - 0x120]
push edx
push 0x7866f8
push 0x786704
mov ecx, 0x79ddf8
call fcn.007111ba
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax + 0xbc]
push ecx
push 0x786710
push 0x78671c
mov ecx, 0x79ddf8
call fcn.007111ba
mov edx, dword [ebp - 0x154]
mov eax, dword [edx + 0xc0]
mov dword [ebp - 0x148], eax
mov ecx, dword [ebp - 0x148]
mov dword [ebp - 0x144], ecx
cmp dword [ebp - 0x144], 0
je 0x5312f5
push 1
mov edx, dword [ebp - 0x144]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x144]
call dword [eax + 4]
mov dword [ebp - 0x158], eax
jmp 0x5312ff
mov dword [ebp - 0x158], 0
mov ecx, dword [ebp - 0x154]
mov edx, dword [ecx + 0xc4]
mov dword [ebp - 0x150], edx
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
je 0x531341
push 1
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14c]
call dword [edx + 4]
mov dword [ebp - 0x15c], eax
jmp 0x53134b
mov dword [ebp - 0x15c], 0
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x154]
call fcn.0071e897
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret