Function at 0x411f10
Capabilities:
Get common file path

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x10c
mov edi, ecx
lea ebp, [esp + 8]
push ebp
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x411fcf
mov esi, eax
cmp eax, 0x104
jae 0x4120c7
mov bl, byte [esp + esi + 7]
cmp bl, 0x5c
jne 0x4121b5
mov byte [esp + esi + 7], 0
mov dword [edi + 4], 0
mov dword [edi], 0
mov dword [edi + 8], 0
push ebp
call sub.msvcrt.dll_strlen
add esp, 4
cmp eax, 0xfffffff0
jae 0x41229a
mov ebx, eax
cmp eax, 0xb
jae 0x411f8f
mov eax, ebx
mov esi, edi
add al, bl
inc esi
test ebx, ebx
mov byte [edi], al
jne 0x411fb3
jmp 0x411fbe
mov ebp, ebx
add ebx, 0x10
and ebx, 0xfffffff0
push ebx
call fcn.0040bb60
add esp, 4
or ebx, 1
mov dword [edi + 8], eax
mov esi, eax
mov dword [edi], ebx
mov ebx, ebp
lea ebp, [esp + 8]
mov dword [edi + 4], ebx
push ebx
push ebp
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov byte [esi + ebx], 0
mov eax, edi
add esp, 0x10c
pop esi
pop edi
pop ebx
pop ebp
ret
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [esp + 4]
nop dword [eax]
mov ecx, esi
push 0xffffffffffffffff
push 0
push 6
push 0
push 0x58
push str.system_core_base_file.cpp
call fcn.004427e0
mov ecx, esi
call fcn.004427d0
push 0xe
push 0x514672
push eax
call fcn.004ffbe0
add esp, 0xc
push 6
push 0x514681
push eax
call fcn.004ffbe0
add esp, 0xc
push 1
push 0x514688
push eax
call fcn.004ffbe0
add esp, 0xc
push 2
push 0x51468a
push eax
call fcn.004ffbe0
add esp, 0xc
push 1
push 0x514688
push eax
call fcn.004ffbe0
add esp, 0xc
push 3
push 0x51468d
push eax
call fcn.004ffbe0
add esp, 0xc
push 9
push 0x514691
push eax
call fcn.004ffbe0
add esp, 0xc
mov ecx, eax
push 0
call fcn.004f36c0
push 6
push str.__0ul
push eax
call fcn.004ffbe0
add esp, 0xc
mov ecx, eax
push 0
call fcn.004f36c0
push 2
push 0x5146a2
push eax
call fcn.004ffbe0
add esp, 0xc
push 0x1c
push str.GetTempPathA_failed__error:
push eax
call fcn.004ffbe0
add esp, 0xc
mov edi, eax
call ebx
mov ecx, edi
push eax
call fcn.004f36c0
mov ecx, esi
call fcn.004428d0
jmp 0x411fe0
lea edi, [esp + 4]
nop dword [eax + eax]
mov ecx, edi
push 0xffffffffffffffff
push 0
push 6
push 0
push 0x59
push str.system_core_base_file.cpp
call fcn.004427e0
mov ecx, edi
call fcn.004427d0
push 0xe
push 0x514672
push eax
call fcn.004ffbe0
add esp, 0xc
push 6
push 0x514681
push eax
call fcn.004ffbe0
add esp, 0xc
push 1
push 0x514688
push eax
call fcn.004ffbe0
add esp, 0xc
push 1
push 0x5146c2
push eax
call fcn.004ffbe0
add esp, 0xc
push 1
push 0x514688
push eax
call fcn.004ffbe0
add esp, 0xc
push 0xf
push str.sizeof_tmp_dir_
push eax
call fcn.004ffbe0
add esp, 0xc
push 9
push 0x514691
push eax
call fcn.004ffbe0
add esp, 0xc
mov ecx, eax
push esi
call fcn.004f36c0
push 0x12
push str.__sizeof_tmp_dir_
push eax
call fcn.004ffbe0
add esp, 0xc
mov ecx, eax
push 0x104
call fcn.004f3200
push 2
push 0x5146a2
push eax
call fcn.004ffbe0
add esp, 0xc
push 0x13
push str.path_truncated_to:
push eax
call fcn.004ffbe0
add esp, 0xc
mov ecx, eax
push esi
call fcn.004f36c0
mov ecx, edi
call fcn.004428d0
jmp 0x4120d0
lea esi, [esp + 4]
lea edi, [esp + 3]
nop dword [eax]
mov ecx, esi
push 0xffffffffffffffff
push 0
push 6
push 0
push 0x5d
push str.system_core_base_file.cpp
call fcn.004427e0
mov ecx, esi
call fcn.004427d0
push 0xe
push 0x514672
push eax
call fcn.004ffbe0
add esp, 0xc
push 0x13
push str.tmp_dir_result___1_
push eax
call fcn.004ffbe0
add esp, 0xc
push 1
push 0x514688
push eax
call fcn.004ffbe0
add esp, 0xc
push 2
push 0x51470f
push eax
call fcn.004ffbe0
add esp, 0xc
push 1
push 0x514688
push eax
call fcn.004ffbe0
add esp, 0xc
push 4
push 0x514712
push eax
call fcn.004ffbe0
add esp, 0xc
push 0x16
push str.__tmp_dir_result___1_
push eax
call fcn.004ffbe0
add esp, 0xc
mov byte [esp + 3], bl
push 1
push edi
push eax
call fcn.004ffbe0
add esp, 0xc
push 7
push 0x51472e
push eax
call fcn.004ffbe0
add esp, 0xc
mov byte [esp + 3], 0x5c
push 1
push edi
push eax
call fcn.004ffbe0
add esp, 0xc
push 2
push 0x5146a2
push eax
call fcn.004ffbe0
add esp, 0xc
mov ecx, esi
call fcn.004428d0
jmp 0x4121c0
mov ecx, edi
call fcn.004d1480
nop word cs:[eax + eax]
nop dword [eax + eax]
push edi
push esi
mov eax, dword [esp + 0xc]
mov byte [ecx + 0x404], 1
mov esi, ecx
lea edi, [ecx + 4]
test byte [eax], 1
je 0x4122cc
mov eax, dword [eax + 8]
jmp 0x4122cd
inc eax
sub esp, 0x14
mov dword [esp + 0xc], eax
mov dword [esp], edi
mov dword [esp + 0x10], 0x5c
mov dword [esp + 8], str._s_cTemporaryFile_XXXXXX
call fcn.00412360
add esp, 0x14
push edi
call dword [sym.imp.msvcrt.dll__mktemp]
add esp, 4
test eax, eax
je 0x412312
push 0x180
push 0x8502
push edi
call sub.msvcrt.dll__open
add esp, 0xc
jmp 0x412317
mov eax, 0xffffffff
mov dword [esi], eax
pop esi
pop edi
ret 4