Function at 0x10006d42
Capabilities:
Get common file path

Disassembly:
mov eax, 0x1005f55b
call fcn.1005ecf4
sub esp, 0x58
push ebx
xor ebx, ebx
push esi
mov byte [ebp - 0x18], bl
mov dword [ebp - 0x2c], 0x2e5
cmp dword [ebp - 0x2c], 0x5de
push edi
mov dword [ebp - 0x10], esp
jle 0x10006dab
mov esi, ebx
mov dword [ebp - 0x1c], ebx
mov edi, ebx
mov eax, esi
mov esi, 0x13f7
cdq
idiv edi
mov ebx, edx
mov eax, ebx
mov ecx, 0x10079358
cdq
push edx
push eax
call fcn.100033d6
inc ebx
dec esi
jne 0x10006d7d
mov esi, dword [ebp - 0x1c]
inc edi
cmp edi, 0x9f7
jl 0x10006d71
inc esi
mov dword [ebp - 0x1c], esi
push 0
pop ebx
cmp esi, 0x10d7
jl 0x10006d6f
mov dword [ebp - 0x28], 0x49eb
cmp dword [ebp - 0x28], 0x4c26
jle 0x10006e4e
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov eax, ebx
mov dword [ebp - 0x1c], ebx
mov edx, edi
mov dword [ebp - 0x34], ebx
mov ecx, eax
mov edi, ebx
sar edx, cl
and edx, esi
mov dword [ebp - 0x30], edx
mov esi, edx
mov eax, esi
lea ecx, [ebp - 0x4c]
or eax, edi
cdq
push edx
push eax
call fcn.10001ac4
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10006df9
mov eax, dword [eax]
push eax
call fcn.10046ccf
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4c]
call fcn.100038da
inc edi
cmp edi, 0x4280
jl 0x10006de0
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x24]
inc eax
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
cmp eax, 0x6e87
jl 0x10006dce
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x37a
jl 0x10006dc9
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x12d2
jl 0x10006dc4
push ebx
push 0x162f
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
cmp dword [ebp - 0x28], 0x4707
jge 0x10006e62
push str.gfn_hxdyf_ixfvskwy_xxiwignc_ufxgviqus_gspo_qewtakefn_jmvqv_pdidcvg_zjrejch_xmzzoubgl_rbs_vxcaxexqc_gvhjryajw
call fcn.10046ccf
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0x632d
cmp dword [ebp - 0x24], 0x66b3
jle 0x10006eb3
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x28], 0x26a6
mov ecx, ebx
mov eax, esi
sar eax, cl
mov ecx, 0x10079358
cdq
push edx
push eax
call fcn.100033d6
add ebx, edi
dec dword [ebp - 0x28]
jne 0x10006e84
inc edi
push 0
pop ebx
cmp edi, 0xaba
jl 0x10006e7a
inc esi
cmp esi, 0x3f1
jl 0x10006e78
mov dword [ebp - 4], 2
cmp dword [ebp - 0x24], 0x622d
jge 0x10006ed2
mov edx, str.rngnii_jehqmlra_fezcfpc_txfnfy_rarc_bzsnb_erpumtbaj_nnixtlg
mov ecx, 0x10079358
call fcn.1000562f
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0x37a2
cmp dword [ebp - 0x28], 0x39c3
jle 0x10006f27
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x64]
and eax, esi
cdq
push edx
push eax
call fcn.10001ac4
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10006f03
mov eax, dword [eax]
push eax
call fcn.10046ccf
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.100038da
inc edi
cmp edi, 0x1a45
jl 0x10006eea
inc esi
cmp esi, 0x7c16
jl 0x10006ee8
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10006f37
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [ebp - 0x28], 0x346b
jge 0x10006f4b
push str.onbeaprpj_wkths_tewbw_weausnqy_ozkcluek_akusgwgzd_hvc_hrk_nkstyyt_wmybhfim_nxgbnck_bovmraaxk
call fcn.10046ccf
pop ecx
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x2c], 0x18c
jge 0x10006f6a
mov edx, str.wcaltrvr_fzzbkmct_lykgbs_jqg_dvmmaluh_ddfgu_tyffvb_brpdakv_avqzrmyba_sxxmh_wazuycfn
mov ecx, 0x10079358
call fcn.1000562f
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret