Function at 0x433650
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58e829
mov eax, dword fs:[0]
push eax
mov eax, 0x1164
call fcn.0055d030
mov eax, dword [0x608190]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x116c], ecx
lea ecx, [ebp - 0x1088]
call fcn.0042d270
mov dword [ebp - 4], 0
lea eax, [ebp - 0x1088]
push eax
lea ecx, [ebp - 0x1170]
push ecx
call fcn.0042fb30
add esp, 8
lea ecx, [ebp - 0x1070]
call fcn.0042d270
mov byte [ebp - 4], 1
lea edx, [ebp - 0x1070]
push edx
lea eax, [ebp - 0x1088]
push eax
call fcn.0042fee0
add esp, 8
push str.AppDataRoamingzs_isp_clientLogs
lea ecx, [ebp - 0x1070]
push ecx
lea edx, [ebp - 0x10b8]
push edx
call fcn.00431120
add esp, 0xc
mov byte [ebp - 4], 2
push str.AppDataRoamingzs_isp_clientLogsMain
lea eax, [ebp - 0x1070]
push eax
lea ecx, [ebp - 0x1148]
push ecx
call fcn.00431120
add esp, 0xc
mov byte [ebp - 4], 3
push 0x104
lea edx, [ebp - 0x1058]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push 3
lea eax, [ebp - 0x1058]
push eax
lea ecx, [ebp - 0x18]
push ecx
call fcn.0042d0e0
add esp, 0xc
mov edx, 2
imul eax, edx, 3
mov dword [ebp - 0x1168], eax
cmp dword [ebp - 0x1168], 8
jae 0x433750
jmp 0x433755
call fcn.00559923
xor ecx, ecx
mov edx, dword [ebp - 0x1168]
mov word [ebp + edx - 0x18], cx
xor eax, eax
mov word [ebp - 0xc48], ax
push 0x206
push 0
lea ecx, [ebp - 0xc46]
push ecx
call fcn.0055ceb0
add esp, 0xc
lea edx, [ebp - 0x18]
push edx
push str._sProgramDataZshield
push 0x104
lea eax, [ebp - 0xc48]
push eax
call fcn.0055ad33
add esp, 0x10
xor ecx, ecx
mov word [ebp - 0x220], cx
push 0x206
push 0
lea edx, [ebp - 0x21e]
push edx
call fcn.0055ceb0
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push str._sProgramDataZShield_AgentAgentLoaderLog.txt
push 0x104
lea ecx, [ebp - 0x220]
push ecx
call fcn.0055ad33
add esp, 0x10
xor edx, edx
mov word [ebp - 0x428], dx
push 0x206
push 0
lea eax, [ebp - 0x426]
push eax
call fcn.0055ceb0
add esp, 0xc
lea ecx, [ebp - 0x18]
push ecx
push str._sProgramDataZShield_AgentAgentLoaderLog_old.txt
push 0x104
lea edx, [ebp - 0x428]
push edx
call fcn.0055ad33
add esp, 0x10
xor eax, eax
mov word [ebp - 0xa40], ax
push 0x206
push 0
lea ecx, [ebp - 0xa3e]
push ecx
call fcn.0055ceb0
add esp, 0xc
lea edx, [ebp - 0x18]
push edx
push str._sProgramDataZShield_AgentAgentSrv.txt
push 0x104
lea eax, [ebp - 0xa40]
push eax
call fcn.0055ad33
add esp, 0x10
xor ecx, ecx
mov word [ebp - 0xe50], cx
push 0x206
push 0
lea edx, [ebp - 0xe4e]
push edx
call fcn.0055ceb0
add esp, 0xc
lea eax, [ebp - 0x18]
push eax
push str._sProgramDataAgentBoot.log
push 0x104
lea ecx, [ebp - 0xe50]
push ecx
call fcn.0055ad33
add esp, 0x10
xor edx, edx
mov word [ebp - 0x838], dx
push 0x206
push 0
lea eax, [ebp - 0x836]
push eax
call fcn.0055ceb0
add esp, 0xc
lea ecx, [ebp - 0x18]
push ecx
push str._sProgramDataZSWorker.log
push 0x104
lea edx, [ebp - 0x838]
push edx
call fcn.0055ad33
add esp, 0x10
xor eax, eax
mov word [ebp - 0x630], ax
push 0x206
push 0
lea ecx, [ebp - 0x62e]
push ecx
call fcn.0055ceb0
add esp, 0xc
lea edx, [ebp - 0x18]
push edx
push str._sProgramDataZSCtl.log
push 0x104
lea eax, [ebp - 0x630]
push eax
call fcn.0055ad33
add esp, 0x10
lea ecx, [ebp - 0x10b8]
push ecx
mov ecx, dword [ebp + 8]
call fcn.00415530
lea edx, [ebp - 0x1148]
push edx
mov ecx, dword [ebp + 8]
call fcn.00415530
lea eax, [ebp - 0xc48]
push eax
lea ecx, [ebp - 0x1130]
call fcn.0042d030
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1130]
push ecx
mov ecx, dword [ebp + 8]
call fcn.00433b00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1130]
call fcn.0042d070
lea edx, [ebp - 0x220]
push edx
lea ecx, [ebp - 0x1160]
call fcn.0042d030
mov byte [ebp - 4], 5
lea eax, [ebp - 0x1160]
push eax
mov ecx, dword [ebp + 8]
call fcn.00433b00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1160]
call fcn.0042d070
lea ecx, [ebp - 0x428]
push ecx
lea ecx, [ebp - 0x1118]
call fcn.0042d030
mov byte [ebp - 4], 6
lea edx, [ebp - 0x1118]
push edx
mov ecx, dword [ebp + 8]
call fcn.00433b00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1118]
call fcn.0042d070
lea eax, [ebp - 0xa40]
push eax
lea ecx, [ebp - 0x10d0]
call fcn.0042d030
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x10d0]
push ecx
mov ecx, dword [ebp + 8]
call fcn.00433b00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10d0]
call fcn.0042d070
lea edx, [ebp - 0xe50]
push edx
lea ecx, [ebp - 0x10a0]
call fcn.0042d030
mov byte [ebp - 4], 8
lea eax, [ebp - 0x10a0]
push eax
mov ecx, dword [ebp + 8]
call fcn.00433b00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10a0]
call fcn.0042d070
lea ecx, [ebp - 0x838]
push ecx
lea ecx, [ebp - 0x1100]
call fcn.0042d030
mov byte [ebp - 4], 9
lea edx, [ebp - 0x1100]
push edx
mov ecx, dword [ebp + 8]
call fcn.00433b00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1100]
call fcn.0042d070
lea eax, [ebp - 0x630]
push eax
lea ecx, [ebp - 0x10e8]
call fcn.0042d030
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x10e8]
push ecx
mov ecx, dword [ebp + 8]
call fcn.00433b00
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10e8]
call fcn.0042d070
mov byte [ebp - 0x1161], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1148]
call fcn.0042d070
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10b8]
call fcn.0042d070
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1070]
call fcn.0042d070
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1088]
call fcn.0042d070
mov al, byte [ebp - 0x1161]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00558807
mov esp, ebp
pop ebp
ret 4