Function at 0x418ead
Capabilities:
Get common file path

Disassembly:
mov eax, 0x429dcc
call fcn.0041bd3c
sub esp, 0x140
push ebx
xor ebx, ebx
push ebp
mov dword [esp + 0x20], ebx
push esi
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
push edi
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], ebx
mov byte [esp + 0x10], bl
mov dword [esp + 0x158], 1
mov esi, dword [esp + 0x168]
test esi, esi
jne 0x418f61
lea eax, [esp + 0x4c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x418f2e
cmp byte [esp + 0x4c], 0
jne 0x418f14
mov eax, ebx
jmp 0x418f1f
lea eax, [esp + 0x4c]
push eax
call fcn.0041b4b0
pop ecx
push eax
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x18]
call fcn.00406721
cmp dword [esp + 0x24], 0x10
lea eax, [esp + 0x10]
cmovae eax, dword [esp + 0x10]
push 1
push eax
call fcn.004180ef
pop ecx
pop ecx
test al, al
jne 0x418f73
push dword [esp + 0x16c]
call fcn.00406b76
pop ecx
push eax
push dword [esp + 0x170]
jmp 0x418f6a
push esi
call fcn.00406b76
pop ecx
push eax
push esi
lea ecx, [esp + 0x18]
call fcn.00406721
call fcn.0041a1da
cmp eax, 3
jae 0x418f99
push str.Global310
push ebx
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
je 0x418f99
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call fcn.0041a1da
cmp eax, 2
jae 0x418fba
push 2
call fcn.0041a976
pop ecx
test eax, eax
je 0x418fba
push eax
mov byte [eax + 1], 0xb5
call fcn.0040c4f8
pop ecx
call fcn.0041a1da
cmp eax, 2
jae 0x418fda
push str.618618
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
test eax, eax
je 0x418fda
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
call fcn.0041a1da
cmp eax, 2
jae 0x418ff3
lea eax, [esp + 0x30]
push eax
mov dword [esp + 0x34], ebx
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
call fcn.0041a1da
cmp eax, 2
jae 0x419018
push str.Local11665
push 1
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x419018
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
call fcn.0041a1da
cmp eax, 3
jae 0x41902f
push str.Local423
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
call fcn.0041a1da
cmp eax, 2
jae 0x419050
push 2
call fcn.0041a976
pop ecx
test eax, eax
je 0x419050
push eax
mov byte [eax + 1], 0x45
call fcn.0040c4f8
pop ecx
call fcn.0041a1da
cmp eax, 2
jae 0x419071
push 2
call fcn.0041a976
pop ecx
test eax, eax
je 0x419071
push eax
mov byte [eax + 1], 0x21
call fcn.0040c4f8
pop ecx
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x4190b0
cmp dword [esp + 0x24], 0x10
lea eax, [esp + 0x10]
cmovae eax, dword [esp + 0x10]
cmp byte [eax + ecx - 1], 0x5c
je 0x4190b0
cmp dword [esp + 0x24], 0x10
lea eax, [esp + 0x10]
cmovae eax, dword [esp + 0x10]
cmp byte [eax + ecx - 1], 0x2f
je 0x4190b0
push 0x5c
push 1
lea ecx, [esp + 0x18]
call fcn.00407a7e
mov ebp, ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [esp + 0x24], 0x10
lea edi, [esp + 0x10]
cmovae edi, dword [esp + 0x10]
call fcn.0041e092
mov esi, eax
shl esi, 0x10
call fcn.0041e092
or eax, esi
push eax
push edi
lea eax, [esp + 0x3c]
push str._spl_08x.ftf
push eax
call fcn.0040b674
mov byte [esp + 0x168], 2
cmp dword [esp + 0x58], 0x10
lea eax, [esp + 0x44]
cmovae eax, dword [esp + 0x44]
push eax
call fcn.00419813
add esp, 0x14
call fcn.0041a1da
push 2
pop esi
cmp eax, esi
jae 0x419126
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x30], 0
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
call fcn.0041a1da
cmp eax, 3
jae 0x41914d
push str.Global931
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
je 0x41914d
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call fcn.0041a1da
cmp eax, esi
jae 0x41916c
push str.905905
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
test eax, eax
je 0x41916c
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
call fcn.0041a1da
cmp eax, esi
jae 0x419188
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x419188
push eax
call ebx
call fcn.0041a1da
cmp eax, esi
jae 0x4191a6
push 0
push 1
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
test eax, eax
je 0x4191a6
push eax
call ebx
mov ecx, dword [0x4387c0]
lea eax, [ecx + 0x54]
push eax
push 1
call fcn.0040dd5c
cmp dword [eax], 0
je 0x4191f1
mov ecx, dword [0x4387c0]
cmp dword [esp + 0x48], 0x10
lea eax, [ecx + 0x54]
push eax
lea esi, [esp + 0x38]
cmovae esi, dword [esp + 0x38]
push 1
call fcn.0040dd5c
xor ecx, ecx
push ecx
push 0x80
push 1
push ecx
push ecx
push 0xc0000000
push esi
call dword [eax]
jmp 0x4191f3
xor eax, eax
cmp eax, 0xffffffff
jne 0x419247
mov byte [esp + 0x158], 1
lea ecx, [esp + 0x34]
call fcn.0040165f
inc ebp
cmp ebp, 0x200
jl 0x4190b8
mov esi, dword [esp + 0x164]
xor eax, eax
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], eax
mov byte [esi], al
mov dword [esp + 0x28], 1
mov byte [esp + 0x158], al
lea ecx, [esp + 0x10]
call fcn.0040165f
mov eax, esi
jmp 0x41928c
push eax
call ebx
mov ecx, dword [esp + 0x164]
lea eax, [esp + 0x34]
push eax
call fcn.0040f6d7
mov dword [esp + 0x28], 1
mov byte [esp + 0x158], 1
lea ecx, [esp + 0x34]
call fcn.0040165f
mov byte [esp + 0x158], 0
lea ecx, [esp + 0x10]
call fcn.0040165f
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x150]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
leave
ret