Function at 0x408bf0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x539ea0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18c
push esi
mov dword [ebp - 0x18c], ecx
mov ecx, dword [ebp - 0x18c]
add ecx, 0xc0
call fcn.0040ba00
test eax, eax
je 0x408c2f
jmp 0x4093f6
mov eax, dword [ebp - 0x18c]
mov dword [eax + 0x670], 1
mov ecx, dword [ebp - 0x18c]
add ecx, 0xc0
call fcn.0040ba20
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jne 0x408c71
push 1
mov ecx, dword [ebp - 0x18c]
call fcn.004089cd
jmp 0x4093f6
cmp dword [ebp - 0x180], 0
je 0x408c7f
jmp 0x4093f6
cmp dword [0x599958], 0
jle 0x408cae
mov ecx, dword [ebp - 0x18c]
cmp dword [ecx + 0x1c], 0
je 0x408cae
mov edx, dword [ebp - 0x18c]
cmp dword [edx + 0x808], 0
jne 0x408cae
mov ecx, dword [ebp - 0x18c]
call fcn.00459900
mov ecx, dword [ebp - 0x18c]
call fcn.00469b40
mov ecx, dword [ebp - 0x18c]
call fcn.00469e50
mov ecx, dword [ebp - 0x18c]
call fcn.00424e00
lea ecx, [ebp - 0x178]
call fcn.00473490
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x150]
call fcn.00473490
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x13c]
call fcn.00473490
mov byte [ebp - 4], 2
push 0x59931c
lea ecx, [ebp - 0x13c]
call fcn.00473800
mov eax, dword [ebp - 0x18c]
mov ecx, dword [eax + 0xd8]
mov dword [ebp - 0x154], ecx
cmp dword [ebp - 0x154], 0x2710
je 0x408d39
cmp dword [ebp - 0x154], 0x2af8
jne 0x408d4b
mov edx, dword [ebp - 0x18c]
mov dword [edx + 0xd8], 1
jmp 0x408d9d
mov ecx, dword [ebp - 0x18c]
add ecx, 0xc0
call fcn.004556f0
test eax, eax
jne 0x408d84
cmp dword [ebp - 0x154], 0
je 0x408d72
cmp dword [ebp - 0x154], 2
jne 0x408d82
mov eax, dword [ebp - 0x18c]
mov dword [eax + 0xd8], 1
jmp 0x408d9d
cmp dword [ebp - 0x154], 2
jne 0x408d9d
mov ecx, dword [ebp - 0x18c]
mov dword [ecx + 0xd8], 0
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x18c]
add edx, 0x794
push edx
mov eax, dword [ebp - 0x18c]
add eax, 0x780
push eax
mov ecx, dword [ebp - 0x18c]
add ecx, 0x76c
push ecx
lea edx, [ebp - 0x178]
push edx
mov ecx, dword [ebp - 0x18c]
call fcn.0040fb00
test eax, eax
je 0x408e28
push 0xffffffffffffffff
push 0
push 0
push 0xe
push 0x585338
push 0x800
push 0x4c2
push 0x584e74
push 0
lea eax, [ebp - 0x150]
push eax
lea ecx, [ebp - 0x13c]
push ecx
mov ecx, dword [ebp - 0x18c]
call fcn.0041b990
test eax, eax
je 0x408e28
mov dword [ebp - 0x190], 1
jmp 0x408e32
mov dword [ebp - 0x190], 0
mov edx, dword [ebp - 0x190]
mov dword [ebp - 0x164], edx
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x154]
mov dword [eax + 0xd8], ecx
cmp dword [ebp - 0x164], 0
jne 0x408e8e
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x13c]
call fcn.004087f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x150]
call fcn.004087f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x178]
call fcn.004087f0
jmp 0x4093f6
lea edx, [ebp - 0x11c]
push edx
push 0
push 0x5863e8
mov ecx, dword [ebp - 0x18c]
add ecx, 0x898
call fcn.0040b9f0
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
test eax, eax
jne 0x408efa
push 0x5863ec
call fcn.004dc540
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x13c]
call fcn.004087f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x150]
call fcn.004087f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x178]
call fcn.004087f0
jmp 0x4093f6
lea eax, [ebp - 0x11c]
push eax
mov ecx, dword [ebp - 0x18c]
add ecx, 0x494
call fcn.00519ab3
push 0
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x18c]
add ecx, 0x494
push ecx
lea ecx, [ebp - 0x150]
call fcn.00473ba0
test eax, eax
jne 0x408f74
push 0x586400
call fcn.004dc540
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x13c]
call fcn.004087f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x150]
call fcn.004087f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x178]
call fcn.004087f0
jmp 0x4093f6
mov ecx, dword [ebp - 0x18c]
add ecx, 0x1f4
call fcn.0040b9b0
test eax, eax
jne 0x408fbd
push 0x586414
mov ecx, dword [ebp - 0x18c]
add ecx, 0x494
call fcn.00519d06
mov edx, dword [ebp - 0x18c]
add edx, 0x1f4
push edx
mov ecx, dword [ebp - 0x18c]
add ecx, 0x494
call fcn.00519d42
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x158], 0
mov eax, 1
test eax, eax
je 0x4091b4
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x158]
push edx
mov ecx, dword [ebp - 0x18c]
add ecx, 0x2b0
call fcn.004d2d50
test eax, eax
jne 0x40900d
jmp 0x4091b4
mov eax, dword [ebp - 0x158]
push eax
mov ecx, dword [ebp - 0x18c]
add ecx, 0x2b0
call fcn.004d2d90
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x160]
add ecx, 0xb8
call fcn.0040c910
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x160]
add ecx, 0xb8
call fcn.0040c940
mov ecx, dword [ebp - 0x10]
add ecx, eax
mov dword [ebp - 0x128], ecx
mov edx, dword [ebp - 0x10]
cmp edx, dword [ebp - 0x128]
jae 0x4091a0
mov eax, dword [ebp - 0x10]
mov cl, byte [eax]
mov byte [ebp - 0x191], cl
mov dl, byte [ebp - 0x191]
push edx
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
call fcn.004ccac0
add esp, 4
test eax, eax
jne 0x409093
jmp 0x40905b
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
xor eax, eax
mov ax, word [edx + 6]
and eax, 4
test eax, eax
je 0x40918b
mov esi, dword [ebp - 0x10]
sub esi, 1
mov ecx, dword [ebp - 0x160]
add ecx, 0xb8
call fcn.0040c910
sub esi, eax
mov dword [ebp - 0x17c], esi
mov ecx, dword [ebp - 0x17c]
push ecx
mov edx, dword [ebp - 0x124]
push edx
mov ecx, dword [ebp - 0x18c]
call fcn.004604d0
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0xffffffff
je 0x409171
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x17c]
je 0x40916f
mov dword [ebp - 0x15c], 1
mov ecx, dword [ebp - 0x14]
xor edx, edx
mov dx, word [ecx + 6]
and edx, 0x784
mov word [ebp - 0x184], dx
mov eax, dword [ebp - 0x14]
mov cx, word [eax + 6]
and cx, 0xf87b
mov edx, dword [ebp - 0x14]
mov word [edx + 6], cx
mov ecx, dword [ebp - 0x160]
add ecx, 0xb8
call fcn.0040c910
mov ecx, dword [ebp - 0x120]
lea edx, [eax + ecx + 7]
mov dword [ebp - 0x198], edx
mov eax, dword [ebp - 0x198]
mov cx, word [eax]
or cx, word [ebp - 0x184]
mov edx, dword [ebp - 0x198]
mov word [edx], cx
jmp 0x40918b
mov dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x14]
mov cx, word [eax + 6]
and cx, 0xf87b
mov edx, dword [ebp - 0x14]
mov word [edx + 6], cx
mov ecx, dword [ebp - 0x10]
call fcn.004ca4e0
mov ecx, dword [ebp - 0x10]
add ecx, eax
mov dword [ebp - 0x10], ecx
jmp 0x40905b
mov edx, dword [ebp - 0x158]
add edx, 1
mov dword [ebp - 0x158], edx
jmp 0x408fd8
cmp dword [ebp - 0x18], 0
jne 0x4091c3
cmp dword [ebp - 0x15c], 0
je 0x409231
lea ecx, [ebp - 0x188]
call fcn.0040b990
mov byte [ebp - 4], 3
cmp dword [ebp - 0x18], 0
je 0x4091e8
push 0x586418
lea ecx, [ebp - 0x188]
call fcn.00519ab3
cmp dword [ebp - 0x15c], 0
je 0x409201
push 0x586460
lea ecx, [ebp - 0x188]
call fcn.00519d06
lea ecx, [ebp - 0x188]
call fcn.0040b9f0
push eax
call fcn.004dc4d0
add esp, 4
push 0
mov ecx, dword [ebp - 0x18c]
call fcn.0045d000
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x188]
call fcn.00519976
push 1
mov ecx, dword [ebp - 0x18c]
add ecx, 0xc0
call fcn.0040b970
push 0
push 0
push 0x36a
mov eax, dword [ebp - 0x18c]
mov ecx, dword [eax + 0x8ac]
call fcn.0040c530
push 1
push 0x58649c
mov ecx, dword [ebp - 0x18c]
call fcn.0045d120
push 1
mov ecx, dword [ebp - 0x18c]
mov ecx, dword [ecx + 0x8ac]
mov edx, dword [ebp - 0x18c]
mov eax, dword [edx + 0x8ac]
mov edx, dword [eax]
call dword [edx + 0xe0]
mov eax, dword [ebp - 0x18c]
mov ecx, dword [eax + 0x8ac]
add ecx, 0x904
call fcn.0040c8c0
mov ecx, dword [ebp - 0x18c]
mov ecx, dword [ecx + 0x8ac]
add ecx, 0x818
call fcn.00490ca0
mov ecx, dword [ebp - 0x18c]
add ecx, 0x680
call fcn.0040c9c0
mov ecx, dword [ebp - 0x18c]
add ecx, 0x694
call fcn.0040c9c0
mov ecx, dword [ebp - 0x18c]
add ecx, 0x6a8
call fcn.0040c9c0
mov edx, dword [ebp - 0x18c]
mov eax, dword [edx + 0x8ac]
cmp dword [eax + 0x664], 0
je 0x409321
push 0
mov ecx, dword [ebp - 0x18c]
mov ecx, dword [ecx + 0x8ac]
add ecx, 0x648
call fcn.0040c560
lea edx, [ebp - 0x178]
push edx
mov ecx, dword [ebp - 0x18c]
add ecx, 0x498
call fcn.00473930
mov eax, dword [ebp - 0x18c]
mov dword [eax + 0x768], 0
cmp dword [ebp + 8], 0
je 0x4093b2
push 0
mov ecx, dword [ebp - 0x18c]
add ecx, 0x60c
call fcn.0040ca20
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x18c]
add ecx, 0x620
call fcn.0040ca20
mov edx, dword [ebp + 0xc]
push edx
mov ecx, dword [ebp - 0x18c]
add ecx, 0x634
call fcn.0040ca20
push 0
mov ecx, dword [ebp - 0x18c]
add ecx, 0x648
call fcn.0040ca20
push 0
mov ecx, dword [ebp - 0x18c]
add ecx, 0x65c
call fcn.0040ca20
push 0
push 0
push 0
push 0
push 0
push 0x424ed0
call fcn.0051e0bd
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x13c]
call fcn.004087f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x150]
call fcn.004087f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x178]
call fcn.004087f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 8