Function at 0x40b8d3
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20c
and dword [ebp - 4], 0
lea eax, [ebp - 0x20c]
push edi
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
push dword [ebp + 8]
lea eax, [ebp - 0x20c]
push 0
push 0x41d5fc
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
push 0x180
push 0x8321
push dword [ebp + 8]
call fcn.004133bd
add esp, 0xc
cmp eax, 0xffffffff
je 0x40b93d
push eax
call fcn.00413a30
pop ecx
push 2
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll__lopen]
mov edi, eax
cmp edi, 0xffffffff
jne 0x40b944
xor eax, eax
jmp 0x40bb2a
push ebx
push esi
call fcn.0040b824
mov esi, dword [sym.imp.KERNEL32.dll__lwrite]
push 4
pop ebx
push ebx
push 0x420cc4
push edi
call esi
mov eax, dword [0x420cc4]
test eax, eax
je 0x40b970
push eax
push dword [0x420cbc]
push edi
call esi
cmp dword [0x420cb8], 0
je 0x40b994
push ebx
push 0x420cc0
push edi
call esi
mov eax, dword [0x420cc0]
test eax, eax
je 0x40b9a0
push eax
push dword [0x420cb8]
jmp 0x40b99d
and dword [ebp - 4], 0
lea eax, [ebp - 4]
push ebx
push eax
push edi
call esi
mov eax, dword [0x420cd0]
test eax, eax
je 0x40b9cb
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push ebx
push 0x420cb4
push edi
mov dword [ebp + 8], eax
call esi
mov eax, dword [0x420cb4]
test eax, eax
je 0x40b9db
push eax
push dword [ebp + 8]
jmp 0x40b9d8
and dword [0x420cb4], 0
push ebx
push 0x420cb4
push edi
call esi
and dword [ebp - 4], 0
cmp dword [0x422c98], 0
je 0x40ba21
call fcn.0040b768
test eax, eax
mov dword [ebp + 8], eax
je 0x40ba21
push eax
call fcn.00413dd0
test eax, eax
pop ecx
mov dword [ebp - 4], eax
je 0x40ba21
inc dword [ebp - 4]
lea eax, [ebp - 4]
push ebx
push eax
push edi
call esi
push dword [ebp - 4]
push dword [ebp + 8]
push edi
call esi
push dword [ebp + 8]
call fcn.00413354
pop ecx
jmp 0x40ba29
lea eax, [ebp - 4]
push ebx
push eax
push edi
call esi
lea eax, [ebp - 0x108]
push eax
call fcn.0040b40b
and dword [ebp - 4], 0
pop ecx
test eax, eax
mov dword [ebp + 8], eax
je 0x40baa0
push eax
call fcn.00413dd0
test eax, eax
pop ecx
mov dword [ebp - 4], eax
je 0x40ba6e
inc dword [ebp - 4]
lea eax, [ebp - 4]
push ebx
push eax
push edi
call esi
push dword [ebp - 4]
push dword [ebp + 8]
push edi
call esi
push dword [ebp + 8]
call fcn.00413354
pop ecx
jmp 0x40ba76
lea eax, [ebp - 4]
push ebx
push eax
push edi
call esi
lea eax, [ebp - 0x108]
push eax
call fcn.00413dd0
test eax, eax
pop ecx
mov dword [ebp - 4], eax
je 0x40baa8
inc dword [ebp - 4]
lea eax, [ebp - 4]
push ebx
push eax
push edi
call esi
push dword [ebp - 4]
lea eax, [ebp - 0x108]
jmp 0x40baac
lea eax, [ebp - 4]
push ebx
push eax
push edi
call esi
push ebx
lea eax, [ebp - 4]
push eax
push edi
call esi
push 0x422260
push 0x422d04
call fcn.00413bb0
push 0x4225c0
push 0x422e14
call fcn.00413bb0
add esp, 0x10
push 0xe04
push 0x4227e0
push edi
call esi
mov eax, dword [0x420cdc]
test eax, eax
je 0x40bb12
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
mov dword [ebp + 8], eax
je 0x40bb12
cmp dword [0x420d10], 0
je 0x40bb12
push ebx
push 0x420d10
push edi
call esi
push dword [0x420d10]
push dword [ebp + 8]
jmp 0x40bb1b
and dword [ebp - 4], 0
lea eax, [ebp - 4]
push ebx
push eax
push edi
call esi
push edi
call dword [sym.imp.KERNEL32.dll__lclose]
push 1
pop eax
pop esi
pop ebx
pop edi
leave
ret