Function at 0x104efa8
Capabilities:
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x1099a38]
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov dword [ebp - 4], eax
mov ebx, 0x104
push ebx
lea eax, [ebp - 0x108]
push eax
mov dword [ebp - 0x10c], esi
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
xor edi, edi
cmp eax, edi
je 0x104f67d
cmp eax, ebx
jae 0x104f67d
push edi
push 0xfffa
push 0x1106960
push 0x1015df8
mov ebx, 0x100fed0
push ebx
push esi
mov esi, dword [sym.imp.UPDSPAPI.dll_UpdSpGetLineTextA]
push edi
call esi
cmp eax, edi
mov dword [ebp - 0x114], eax
je 0x104f3da
push 0x1018808
push 0x1106960
call dword [sym.imp.msvcrt.dll__mbslwr]
pop ecx
push eax
call dword [sym.imp.msvcrt.dll_strstr]
test eax, eax
pop ecx
pop ecx
je 0x104f042
mov dword [0x109a030], 1
push 0x10bed20
push 0x10187f8
push ebx
push dword [ebp - 0x10c]
mov dword [0x10bed20], edi
call fcn.01070f0a
push 0x10bf54c
push 0x10187e8
push ebx
push dword [ebp - 0x10c]
mov dword [0x10bf54c], edi
call fcn.01070f0a
push 0x10bf564
push 0x10187d0
push ebx
push dword [ebp - 0x10c]
mov dword [0x10bf564], 0xa
call fcn.01070f0a
push 0x109abbc
push 0x10187c0
push ebx
push dword [ebp - 0x10c]
mov dword [0x109abbc], edi
call fcn.01070f0a
push 0x10bf788
push 0x1016cf8
push 0x100d9dc
push dword [ebp - 0x10c]
mov dword [0x10bf788], edi
call fcn.01070f0a
cmp dword [0x109a030], edi
mov dword [ebp - 0x114], 1
je 0x104f125
push edi
push 0xfffa
push 0x1106960
push 0x10187ac
push ebx
push dword [ebp - 0x10c]
push edi
call esi
push 0x104
push 0x10bed24
mov dword [ebp - 0x114], eax
push 0x1106960
lea eax, [ebp - 0x108]
push eax
call fcn.01070fc9
jmp 0x104f18f
mov eax, 0x10bed24
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x104f12d
sub eax, edx
mov dword [ebp - 0x110], eax
jne 0x104f179
push edi
push 0xfffa
push 0x1106960
push 0x10187ac
push ebx
push dword [ebp - 0x10c]
push edi
call esi
push 0x104
push 0x10bed24
mov dword [ebp - 0x114], eax
push 0x1106960
lea eax, [ebp - 0x108]
push eax
call fcn.01070fc9
push 0x10bee28
push 0x1018794
push ebx
push dword [ebp - 0x10c]
call fcn.01070f0a
cmp dword [ebp - 0x114], edi
je 0x104f3da
push edi
push 0x209
push 0x10bee2c
push 0x1018780
push ebx
push dword [ebp - 0x10c]
push edi
call esi
cmp eax, edi
mov dword [ebp - 0x114], eax
je 0x104f3da
push edi
push 0x209
push 0x10bf035
push 0x1018768
push ebx
push dword [ebp - 0x10c]
push edi
call esi
cmp eax, edi
mov dword [ebp - 0x114], eax
je 0x104f3da
push edi
push 0x104
push 0x10bf23e
push 0x1018758
push ebx
push dword [ebp - 0x10c]
push edi
call esi
cmp eax, edi
jne 0x104f220
mov esi, 0x1018748
mov edi, 0x10bf23e
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, dword [sym.imp.UPDSPAPI.dll_UpdSpGetLineTextA]
xor edi, edi
push edi
push 0x104
push 0x10bf342
push 0x1018738
push ebx
push dword [ebp - 0x10c]
push edi
call esi
cmp eax, edi
jne 0x104f254
mov esi, 0x101872c
mov edi, 0x10bf342
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, dword [sym.imp.UPDSPAPI.dll_UpdSpGetLineTextA]
xor edi, edi
push edi
push 0x104
push 0x10bf446
push 0x1018718
push ebx
push dword [ebp - 0x10c]
mov byte [0x10bf446], 0
push edi
call esi
xor eax, eax
inc eax
mov dword [ebp - 0x114], eax
mov dword [0x10bf578], eax
lea eax, [ebp - 0x110]
push eax
push 0x1018704
push ebx
push dword [ebp - 0x10c]
mov dword [ebp - 0x110], edi
call fcn.01070f51
cmp eax, edi
je 0x104f2ac
cmp eax, 0xe0000102
jne 0x104f2b7
mov ecx, dword [ebp - 0x110]
cmp ecx, 1
jbe 0x104f2c2
mov dword [ebp - 0x114], edi
jmp 0x104f3da
cmp eax, edi
jne 0x104f2cc
mov dword [0x10bf578], ecx
push 0x10bf550
push 0x10186f4
push ebx
push dword [ebp - 0x10c]
call fcn.01070f0a
push 0x10bf554
push 0x10186e4
push ebx
push dword [ebp - 0x10c]
call fcn.01070f0a
lea eax, [ebp - 0x110]
push eax
push 0x10186cc
push ebx
push dword [ebp - 0x10c]
mov dword [ebp - 0x110], edi
call fcn.01070f0a
cmp dword [ebp - 0x110], edi
je 0x104f328
mov dword [0x10bcec0], 1
push 0x10bf55c
push 0x10186bc
push ebx
push dword [ebp - 0x10c]
call fcn.01070f0a
push 0x10bf558
push 0x10186ac
push ebx
push dword [ebp - 0x10c]
call fcn.01070f0a
push 0x10bf560
push 0x1018698
push ebx
push dword [ebp - 0x10c]
call fcn.01070f0a
lea eax, [ebp - 0x110]
push eax
push 0x1018688
push ebx
push dword [ebp - 0x10c]
mov dword [ebp - 0x110], edi
mov dword [0x10bf568], edi
call fcn.01070f0a
test eax, eax
je 0x104f3a8
mov eax, dword [ebp - 0x110]
cmp eax, 0x400
ja 0x104f2b7
mov dword [0x10bf568], eax
push 0x104
push 0x10bf684
push 0x100da14
push 0x10bed24
call fcn.01070fc9
push 0x104
push 0x10bf580
push 0x1018678
push 0x10bf684
call fcn.01070fc9
push edi
push 0xfffa
push 0x1106960
push 0x1018668
push ebx
push dword [ebp - 0x10c]
mov byte [0x1106960], 0
push edi
call esi
test eax, eax
je 0x104f438
cmp byte [0x1106960], 0
je 0x104f438
cmp dword [0x10bcec4], edi
mov esi, 0x1106960
je 0x104f426
push 0xfffa
push esi
push 0x10bced0
push esi
call fcn.01070fc9
push esi
call dword [sym.imp.msvcrt.dll__strdup]
pop ecx
mov dword [0x109ab5c], eax
jmp 0x104f4ea
jmp dword [0x1099138]
cmp dword [ebp - 0x114], edi
je 0x104f57c
lea eax, [ebp - 0x110]
push eax
push 0x101857c
push ebx
push dword [ebp - 0x10c]
mov dword [ebp - 0x110], edi
mov dword [0x10bf56c], edi
call fcn.01070f51
cmp eax, edi
je 0x104f525
cmp eax, 0xe0000102
jne 0x104f530
mov eax, dword [ebp - 0x110]
cmp eax, 7
jbe 0x104f538
mov dword [ebp - 0x114], edi
jmp 0x104f57c
mov dword [0x10bf56c], eax
lea eax, [ebp - 0x110]
push eax
push 0x1018564
push ebx
push dword [ebp - 0x10c]
mov dword [ebp - 0x110], edi
mov dword [0x10bf570], edi
call fcn.01070f51
cmp eax, edi
je 0x104f56c
cmp eax, 0xe0000102
jne 0x104f530
mov eax, dword [ebp - 0x110]
cmp eax, 1
ja 0x104f530
mov dword [0x10bf570], eax
cmp dword [0x10bf570], edi
jne 0x104f58c
cmp dword [0x10bf56c], edi
je 0x104f5bb
push edi
push edi
push edi
push 0x14
mov dword [0x10bf574], 1
call fcn.010713ac
test eax, eax
jne 0x104f5c1
push 0x1018524
call fcn.010430af
pop ecx
mov dword [0x10bf570], edi
mov dword [0x10bf56c], edi
mov dword [0x10bf574], edi
push dword [0x10bf56c]
push 0x10184f0
call fcn.010430af
push dword [0x10bf570]
push 0x10184b8
call fcn.010430af
add esp, 0x10
cmp dword [ebp - 0x114], edi
je 0x104f675
lea eax, [ebp - 0x110]
push eax
push 0x10184ac
push ebx
push dword [ebp - 0x10c]
mov dword [ebp - 0x110], edi
mov dword [0x10bf57c], edi
call fcn.01070f51
cmp eax, edi
mov ecx, dword [ebp - 0x110]
je 0x104f625
cmp eax, 0xe0000102
jne 0x104f62a
cmp ecx, 1
jbe 0x104f641
push ecx
push eax
push 0x1018450
mov dword [ebp - 0x114], edi
call fcn.010430af
add esp, 0xc
jmp 0x104f675
push ecx
push 0x101841c
mov dword [0x10bf57c], ecx
call fcn.010430af
cmp dword [0x10bf57c], edi
pop ecx
pop ecx
je 0x104f675
cmp dword [0x109a090], edi
je 0x104f675
push 0x10183c0
call fcn.010430af
pop ecx
mov dword [ebp - 0x114], edi
mov eax, dword [ebp - 0x114]
jmp 0x104f67f
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.0106bc50
leave
ret 4