Function at 0x407afa
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x468
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x5c
lea ecx, [ebp - 0x20c]
push ecx
call fcn.004098f0
add esp, 8
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x407ba6
mov edx, dword [ebp - 0x108]
add edx, 1
push edx
lea eax, [ebp - 0x104]
push eax
call fcn.00409730
add esp, 8
push str.Simulate.CD
mov ecx, dword [ebp - 0x108]
add ecx, 1
push ecx
call fcn.00409730
add esp, 8
lea edx, [ebp - 0x34c]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0xffffffff
je 0x407b9b
mov byte [ebp + 0xc], 1
mov ecx, dword [ebp - 0x354]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp - 0x108]
mov byte [edx], 0
jmp 0x407bbc
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x104]
push ecx
call fcn.00409730
add esp, 8
push 0x2e
lea edx, [ebp - 0x104]
push edx
call fcn.004098f0
add esp, 8
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x407be5
mov eax, dword [ebp - 0x108]
mov byte [eax], 0
mov ecx, dword [ebp + 0xc]
and ecx, 0xff
test ecx, ecx
je 0x407c04
lea edx, [ebp - 0x20c]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
push 0
lea eax, [ebp - 0x20c]
push eax
call fcn.00409830
add esp, 8
sub eax, 1
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
movsx edx, byte [ecx]
cmp edx, 0x5c
je 0x407c40
push 0x4115f8
lea eax, [ebp - 0x20c]
push eax
call fcn.00409740
add esp, 8
mov dword [ebp - 0x350], 0
jmp 0x407c5b
mov ecx, dword [ebp - 0x350]
add ecx, 1
mov dword [ebp - 0x350], ecx
cmp dword [ebp - 0x350], 0x3e8
jge 0x407dda
mov byte [ebp - 0x45c], 0
xor edx, edx
mov dl, byte [0x41236d]
test edx, edx
je 0x407c8a
mov dword [ebp - 0x468], str..EXE
jmp 0x407c94
mov dword [ebp - 0x468], 0x4125a4
mov eax, dword [ebp - 0x468]
push eax
mov ecx, dword [ebp - 0x350]
push ecx
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x20c]
push eax
push str._s_s.TMP_d_s
lea ecx, [ebp - 0x458]
push ecx
call fcn.00409917
add esp, 0x18
mov edx, dword [ebp + 0x10]
and edx, 0xff
test edx, edx
je 0x407ceb
lea eax, [ebp - 0x458]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00409730
add esp, 8
mov al, 1
jmp 0x407ddc
lea edx, [ebp - 0x34c]
push edx
lea eax, [ebp - 0x458]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0xffffffff
je 0x407d22
mov byte [ebp - 0x45c], 1
mov ecx, dword [ebp - 0x354]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
lea edx, [ebp - 0x458]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 0xffffffff
jne 0x407db6
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0xb7
je 0x407d71
cmp dword [ebp - 0x464], 0x20
jne 0x407d76
jmp 0x407c4c
cmp dword [ebp - 0x464], 5
jne 0x407d93
mov eax, dword [ebp - 0x45c]
and eax, 0xff
test eax, eax
je 0x407d93
jmp 0x407c4c
mov ecx, dword [ebp + 0xc]
and ecx, 0xff
test ecx, ecx
jne 0x407db4
mov dl, byte [ebp + 0x10]
push edx
push 1
mov eax, dword [ebp + 8]
push eax
call fcn.00407afa
add esp, 0xc
jmp 0x407ddc
jmp 0x407dda
mov ecx, dword [ebp - 0x460]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [ebp - 0x458]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00409730
add esp, 8
mov al, 1
jmp 0x407ddc
xor al, al
mov esp, ebp
pop ebp
ret