Function at 0x401000
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x37718
call fcn.00408210
push edi
mov al, byte [0x413c2c]
mov byte [ebp - 0x664c], al
xor ecx, ecx
mov dword [ebp - 0x664b], ecx
mov dword [ebp - 0x6647], ecx
mov dword [ebp - 0x6643], ecx
mov byte [ebp - 0x663f], cl
mov dl, byte [0x413c30]
mov byte [ebp - 0x375b0], dl
mov ecx, 0xc34f
xor eax, eax
lea edi, [ebp - 0x375af]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x413c34]
mov byte [ebp - 0x663c], al
mov ecx, 0x1869
xor eax, eax
lea edi, [ebp - 0x663b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x413c38]
mov byte [ebp - 0x104], cl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x103]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x413c3c]
mov byte [ebp - 0x37718], dl
mov ecx, 0x59
xor eax, eax
lea edi, [ebp - 0x37717]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x6758], 0
mov dword [ebp - 0x6860], 0
mov dword [ebp - 0x6864], 0
mov dword [ebp - 0x6754], 0
mov al, byte [0x413c40]
mov byte [ebp - 0x490], al
mov ecx, 0x59
xor eax, eax
lea edi, [ebp - 0x48f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x413c44]
mov byte [ebp - 0x208], cl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x207]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x413c48]
mov byte [ebp - 0x685c], dl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x685b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x413c4c]
mov byte [ebp - 0x6750], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x674f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x413c50]
mov byte [ebp - 0x314], cl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x313]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x686c], 0
mov dword [ebp - 0x6870], 0
mov dword [ebp - 0x6868], 0
mov dword [ebp - 0x494], 0
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [0xde69a0], eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
push eax
push 0x412f84
call fcn.00407ff0
add esp, 8
push 0x412f84
call fcn.00408140
add esp, 4
mov dword [ebp - 0x6758], eax
jmp 0x401218
mov ecx, dword [ebp - 0x6758]
sub ecx, 1
mov dword [ebp - 0x6758], ecx
cmp dword [ebp - 0x6758], 1
jle 0x40126b
push 1
mov edx, dword [ebp - 0x6758]
push edx
push 0x412f84
call fcn.00403988
add esp, 0xc
push eax
call fcn.00403924
add esp, 4
cmp eax, 0x5c
jne 0x401269
mov eax, dword [ebp - 0x6758]
push eax
push 0x412f84
call fcn.00403ab5
add esp, 8
push eax
push 0x41336c
call fcn.00407ff0
add esp, 8
jmp 0x40126b
jmp 0x401209
push str.aRCheliFUN
push 0x41375c
call fcn.00407ff0
add esp, 8
mov dword [ebp - 0x6758], 1
jmp 0x401298
mov ecx, dword [ebp - 0x6758]
add ecx, 1
mov dword [ebp - 0x6758], ecx
cmp dword [ebp - 0x6758], 0xb
jge 0x4012cf
push 1
mov edx, dword [ebp - 0x6758]
push edx
push 0x41375c
call fcn.00403988
add esp, 0xc
push eax
call fcn.00403924
add esp, 4
mov ecx, dword [ebp - 0x6758]
mov dword [ecx*4 + 0x413f00], eax
jmp 0x401289
push 1
call fcn.00407e9d
add esp, 4
mov dword [ebp - 0x6758], eax
mov edx, dword [ebp - 0x6758]
push edx
push 0x41103c
push 0x413768
call fcn.004080e0
add esp, 0xc
push 5
push 0x413768
call fcn.00403b0b
add esp, 8
push eax
push 0x413790
call fcn.00407ff0
add esp, 8
fild dword [ebp - 0x6758]
sub esp, 8
fstp qword [esp]
call fcn.00403941
add esp, 8
push eax
push 0x413768
call fcn.00407ff0
add esp, 8
push 5
push 0x413768
call fcn.00403b0b
add esp, 8
push eax
push 0x4137b8
call fcn.00407ff0
add esp, 8
mov dword [ebp - 0x6758], 0
push 0x413c54
push 0x411ea8
call fcn.00407ff0
add esp, 8
push 0x413c58
lea eax, [ebp - 0x208]
push eax
call fcn.00407ff0
add esp, 8
push 0x411ea8
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x494]
push ecx
push 0x411ea8
call fcn.00403ab5
add esp, 8
push eax
push 0x411ea8
call fcn.00407ff0
add esp, 8
push 0x72
call fcn.004038c8
add esp, 4
push eax
push 0x65
call fcn.004038c8
add esp, 4
push eax
push 0x64
call fcn.004038c8
add esp, 4
push eax
push 0x6c
call fcn.004038c8
add esp, 4
push eax
push 0x6f
call fcn.004038c8
add esp, 4
push eax
push 0x66
call fcn.004038c8
add esp, 4
push eax
push 0x61
call fcn.004038c8
add esp, 4
push eax
push 0x411ea8
push 0x411040
push 0x4120b0
call fcn.004080e0
add esp, 0x28
push 0x411054
lea edx, [ebp - 0x37718]
push edx
call fcn.00407ff0
add esp, 8
push 0x22
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x37718]
push eax
call fcn.00408000
add esp, 8
push 0x4120b0
lea ecx, [ebp - 0x37718]
push ecx
call fcn.00408000
add esp, 8
push 0x22
call fcn.004038c8
add esp, 4
push eax
lea edx, [ebp - 0x37718]
push edx
call fcn.00408000
add esp, 8
push 0x411064
lea eax, [ebp - 0x37718]
push eax
call fcn.00408000
add esp, 8
push 0x22
call fcn.004038c8
add esp, 4
push eax
lea ecx, [ebp - 0x37718]
push ecx
call fcn.00408000
add esp, 8
push 0x4120b0
lea edx, [ebp - 0x37718]
push edx
call fcn.00408000
add esp, 8
push 0x22
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x37718]
push eax
call fcn.00408000
add esp, 8
lea ecx, [ebp - 0x37718]
push ecx
call fcn.00407f4d
add esp, 4
push 0x70
call fcn.004038c8
add esp, 4
push eax
push 0x6d
call fcn.004038c8
add esp, 4
push eax
push 0x74
call fcn.004038c8
add esp, 4
push eax
push 0x7a
call fcn.004038c8
add esp, 4
push eax
push 0x411ea8
push 0x41106c
push 0x411fac
call fcn.004080e0
add esp, 0x1c
push str.if_not_exist
lea edx, [ebp - 0x37718]
push edx
call fcn.00407ff0
add esp, 8
push 0x22
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x37718]
push eax
call fcn.00408000
add esp, 8
push 0x411fac
lea ecx, [ebp - 0x37718]
push ecx
call fcn.00408000
add esp, 8
push 0x22
call fcn.004038c8
add esp, 4
push eax
lea edx, [ebp - 0x37718]
push edx
call fcn.00408000
add esp, 8
push str._mkdir
lea eax, [ebp - 0x37718]
push eax
call fcn.00408000
add esp, 8
push 0x22
call fcn.004038c8
add esp, 4
push eax
lea ecx, [ebp - 0x37718]
push ecx
call fcn.00408000
add esp, 8
push 0x411fac
lea edx, [ebp - 0x37718]
push edx
call fcn.00408000
add esp, 8
push 0x22
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x37718]
push eax
call fcn.00408000
add esp, 8
lea ecx, [ebp - 0x37718]
push ecx
call fcn.00407f4d
add esp, 4
push 0x411fac
push str.attrib_h
push 0x41109c
lea edx, [ebp - 0x37718]
push edx
call fcn.004080e0
add esp, 0x10
lea eax, [ebp - 0x37718]
push eax
call fcn.00407f4d
add esp, 4
push str..bat
push 1
call fcn.0040356a
add esp, 4
push eax
push 0x4110ac
push 0x411fac
push str._s_s_s_s
push 0x4121c4
call fcn.004080e0
add esp, 0x18
push 0x4121c4
push 0x4125ac
call fcn.00407ff0
add esp, 8
push 0x413c5c
lea ecx, [ebp - 0x104]
push ecx
call fcn.00407ff0
add esp, 8
push str..exe
push 2
call fcn.0040356a
add esp, 4
push eax
push 0x4110c4
lea edx, [ebp - 0x104]
push edx
call fcn.004080e0
add esp, 0x10
lea eax, [ebp - 0x104]
push eax
push 0x4110cc
push 0x411fac
push str._s_s_s
push 0x4126b0
call fcn.004080e0
add esp, 0x14
push 0x73
call fcn.004038c8
add esp, 4
push eax
lea ecx, [ebp - 0x6750]
push ecx
call fcn.00407ff0
add esp, 8
push 0x65
call fcn.004038c8
add esp, 4
push eax
lea edx, [ebp - 0x6750]
push edx
call fcn.00408000
add esp, 8
push 0x74
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x6750]
push eax
call fcn.00408000
add esp, 8
push 0x20
call fcn.004038c8
add esp, 4
push eax
lea ecx, [ebp - 0x6750]
push ecx
call fcn.00408000
add esp, 8
push 0x7a
call fcn.004038c8
add esp, 4
push eax
lea edx, [ebp - 0x6750]
push edx
call fcn.00408000
add esp, 8
push 0x74
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x6750]
push eax
call fcn.00408000
add esp, 8
push 0x6d
call fcn.004038c8
add esp, 4
push eax
lea ecx, [ebp - 0x6750]
push ecx
call fcn.00408000
add esp, 8
push 0x70
call fcn.004038c8
add esp, 4
push eax
lea edx, [ebp - 0x6750]
push edx
call fcn.00408000
add esp, 8
push 0x3d
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x6750]
push eax
call fcn.00408000
add esp, 8
push 0x73
call fcn.004038c8
add esp, 4
push eax
lea ecx, [ebp - 0x314]
push ecx
call fcn.00407ff0
add esp, 8
push 0x65
call fcn.004038c8
add esp, 4
push eax
lea edx, [ebp - 0x314]
push edx
call fcn.00408000
add esp, 8
push 0x74
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x314]
push eax
call fcn.00408000
add esp, 8
push 0x20
call fcn.004038c8
add esp, 4
push eax
lea ecx, [ebp - 0x314]
push ecx
call fcn.00408000
add esp, 8
push 0x4d
call fcn.004038c8
add esp, 4
push eax
lea edx, [ebp - 0x314]
push edx
call fcn.00408000
add esp, 8
push 0x59
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x314]
push eax
call fcn.00408000
add esp, 8
push 0x46
call fcn.004038c8
add esp, 4
push eax
lea ecx, [ebp - 0x314]
push ecx
call fcn.00408000
add esp, 8
push 0x49
call fcn.004038c8
add esp, 4
push eax
lea edx, [ebp - 0x314]
push edx
call fcn.00408000
add esp, 8
push 0x4c
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x314]
push eax
call fcn.00408000
add esp, 8
push 0x45
call fcn.004038c8
add esp, 4
push eax
lea ecx, [ebp - 0x314]
push ecx
call fcn.00408000
add esp, 8
push 0x53
call fcn.004038c8
add esp, 4
push eax
lea edx, [ebp - 0x314]
push edx
call fcn.00408000
add esp, 8
push 0x3d
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x314]
push eax
call fcn.00408000
add esp, 8
push 0x411fac
lea ecx, [ebp - 0x6750]
push ecx
push 0x4110d8
lea edx, [ebp - 0x208]
push edx
call fcn.004080e0
add esp, 0x10
push 0x4120b0
lea eax, [ebp - 0x314]
push eax
push str._s_s
lea ecx, [ebp - 0x685c]
push ecx
call fcn.004080e0
add esp, 0x10
push 0x73
call fcn.004038c8
add esp, 4
push eax
lea edx, [ebp - 0x6750]
push edx
call fcn.00407ff0
add esp, 8
push 0x65
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x6750]
push eax
call fcn.00408000
add esp, 8
push 0x74
call fcn.004038c8
add esp, 4
push eax
lea ecx, [ebp - 0x6750]
push ecx
call fcn.00408000
add esp, 8
push 0x20
call fcn.004038c8
add esp, 4
push eax
lea edx, [ebp - 0x6750]
push edx
call fcn.00408000
add esp, 8
push 0x62
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x6750]
push eax
call fcn.00408000
add esp, 8
push 0x66
call fcn.004038c8
add esp, 4
push eax
lea ecx, [ebp - 0x6750]
push ecx
call fcn.00408000
add esp, 8
push 0x63
call fcn.004038c8
add esp, 4
push eax
lea edx, [ebp - 0x6750]
push edx
call fcn.00408000
add esp, 8
push 0x65
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x6750]
push eax
call fcn.00408000
add esp, 8
push 0x63
call fcn.004038c8
add esp, 4
push eax
lea ecx, [ebp - 0x6750]
push ecx
call fcn.00408000
add esp, 8
push 0x3d
call fcn.004038c8
add esp, 4
push eax
lea edx, [ebp - 0x6750]
push edx
call fcn.00408000
add esp, 8
push 0x413c60
push 0x4127b4
call fcn.00407ff0
add esp, 8
push 0xa
call fcn.004038c8
add esp, 4
push eax
push 0xd
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x6750]
push ecx
push 0xa
call fcn.004038c8
add esp, 4
push eax
push 0xd
call fcn.004038c8
add esp, 4
push eax
lea edx, [ebp - 0x685c]
push edx
push 0xa
call fcn.004038c8
add esp, 4
push eax
push 0xd
call fcn.004038c8
add esp, 4
push eax
lea eax, [ebp - 0x208]
push eax
push 0xa
call fcn.004038c8
add esp, 4
push eax
push 0xd
call fcn.004038c8
add esp, 4
push eax
push str._echo_off
push str._s_s_s_s_s_s_s_s_s_s_s_s_s
push 0x4127b4
call fcn.004080e0
add esp, 0x3c
push 0x4121c4
push 0x20
call fcn.004038c8
add esp, 4
push eax
push 0x6c
call fcn.004038c8
add esp, 4
push eax
push 0x65
call fcn.004038c8
add esp, 4
push eax
push 0x64
call fcn.004038c8
add esp, 4
push eax
push str._s_s_s_s_s
lea ecx, [ebp - 0x490]
push ecx
call fcn.004080e0
add esp, 0x1c
cmp dword [ebp + 8], 1
jle 0x401c55
mov dword [ebp - 0x6758], 1
jmp 0x401b24
mov edx, dword [ebp - 0x6758]
add edx, 1
mov dword [ebp - 0x6758], edx
mov eax, dword [ebp + 8]
sub eax, 1
cmp dword [ebp - 0x6758], eax
jg 0x401c55
mov dword [ebp - 0x6870], 0
mov dword [ebp - 0x6860], 1
jmp 0x401b5b
mov ecx, dword [ebp - 0x6860]
add ecx, 1
mov dword [ebp - 0x6860], ecx
mov edx, dword [ebp - 0x6758]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
call fcn.00408140
add esp, 4
add eax, 1
cmp dword [ebp - 0x6860], eax
jae 0x401bbd
push 1
mov edx, dword [ebp - 0x6860]
push edx
mov eax, dword [ebp - 0x6758]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4]
push edx
call fcn.00403988
add esp, 0xc
push eax
call fcn.00403924
add esp, 4
mov dword [ebp - 0x686c], eax
cmp dword [ebp - 0x686c], 0x20
jne 0x401bbb
mov dword [ebp - 0x6870], 1
jmp 0x401b4c
cmp dword [ebp - 0x6870], 1
jne 0x401c24
push 0x41111c
push 0x4121c4
call fcn.00408000
add esp, 8
push 0x22
call fcn.004038c8
add esp, 4
push eax
push 0x4121c4
call fcn.00408000
add esp, 8
mov eax, dword [ebp - 0x6758]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4]
push edx
push 0x4121c4
call fcn.00408000
add esp, 8
push 0x22
call fcn.004038c8
add esp, 4
push eax
push 0x4121c4
call fcn.00408000
add esp, 8
jmp 0x401c50
push 0x411120
push 0x4121c4
call fcn.00408000
add esp, 8
mov eax, dword [ebp - 0x6758]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4]
push edx
push 0x4121c4
call fcn.00408000
add esp, 8
jmp 0x401b15
call fcn.00401d09
push 0x4121c4
call fcn.00407f4d
add esp, 4
cmp dword [0x4121bc], 1
jne 0x401cb9
mov dword [ebp - 0x6758], 0
jmp 0x401c8b
mov eax, dword [ebp - 0x6758]
add eax, 1
mov dword [ebp - 0x6758], eax
mov ecx, dword [0x4121c0]
sub ecx, 2
cmp dword [ebp - 0x6758], ecx
jge 0x401cb9
mov edx, dword [ebp - 0x6758]
imul edx, edx, 0x3e8
add edx, 0x45d320
push edx
call fcn.00407f4d
add esp, 4
jmp 0x401c7c
mov eax, dword [0x4121c0]
sub eax, 2
mov dword [ebp - 0x6758], eax
jmp 0x401cd8
mov ecx, dword [ebp - 0x6758]
add ecx, 1
mov dword [ebp - 0x6758], ecx
mov edx, dword [ebp - 0x6758]
cmp edx, dword [0x4121c0]
jge 0x401d02
mov eax, dword [ebp - 0x6758]
imul eax, eax, 0x3e8
add eax, 0x45d320
push eax
call fcn.00407f4d
add esp, 4
jmp 0x401cc9
xor eax, eax
pop edi
mov esp, ebp
pop ebp
ret