Function at 0x409ddb
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 0x80000301
push 0
push 0x104
push 1
mov ebx, 0x184
call fcn.00453c20
add esp, 0x10
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x409e27
push ebx
call fcn.0044f0d8
add esp, 4
pop eax
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 1
jne 0x409e41
mov dword [ebp - 8], 5
jmp 0x409f68
cmp dword [ebp + 8], 2
jne 0x409e57
mov dword [ebp - 8], 6
jmp 0x409f68
cmp dword [ebp + 8], 3
jne 0x409e6d
mov dword [ebp - 8], 0
jmp 0x409f68
cmp dword [ebp + 8], 4
jne 0x409e83
mov dword [ebp - 8], 0x14
jmp 0x409f68
cmp dword [ebp + 8], 5
jne 0x409e99
mov dword [ebp - 8], 0xb
jmp 0x409f68
cmp dword [ebp + 8], 6
jne 0x409eaf
mov dword [ebp - 8], 2
jmp 0x409f68
cmp dword [ebp + 8], 7
jne 0x409ec5
mov dword [ebp - 8], 7
jmp 0x409f68
cmp dword [ebp + 8], 8
jne 0x409edb
mov dword [ebp - 8], 0x1a
jmp 0x409f68
cmp dword [ebp + 8], 9
jne 0x409ef1
mov dword [ebp - 8], 0x24
jmp 0x409f68
cmp dword [ebp + 8], 0xa
jne 0x409f07
mov dword [ebp - 8], 0x25
jmp 0x409f68
cmp dword [ebp + 8], 0xb
jne 0x409f5e
mov dword [ebp - 0xc], esp
push dword [ebp - 4]
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x409f38
push 6
call fcn.0044f0de
add esp, 4
mov eax, dword [ebp - 4]
test eax, eax
je 0x409f54
push eax
mov ebx, eax
call fcn.0040107b
inc eax
push eax
call fcn.0044f0d2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x40a0d3
mov eax, 0x4762fd
jmp 0x40a0d3
mov dword [ebp - 0xc], esp
push 0
push dword [ebp - 8]
push dword [ebp - 4]
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
nop
nop
nop
nop
cmp dword [ebp - 0xc], esp
je 0x409f97
push 6
call fcn.0044f0de
add esp, 4
push 0x80000301
push 0
push 1
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x409fb6
mov eax, 0x4762fd
push eax
push 2
mov ebx, 0x138
call fcn.00453ff0
add esp, 0x1c
mov dword [ebp - 0xc], eax
push 0x80000101
push 0
push 0x5c
push 1
mov ebx, 0x140
call fcn.00453c60
add esp, 0x10
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
push dword [ebp - 0xc]
call fcn.00401df3
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x40a01a
push ebx
call fcn.0044f0d8
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x40a02a
push ebx
call fcn.0044f0d8
add esp, 4
push 0x80000101
push 0
push 0x5c
push 1
mov ebx, 0x140
call fcn.00453c60
add esp, 0x10
mov dword [ebp - 0x18], eax
push dword [ebp - 0x18]
push dword [ebp - 4]
mov ecx, 2
call fcn.004010e6
add esp, 8
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x40a071
push ebx
call fcn.0044f0d8
add esp, 4
cmp dword [ebp - 0x14], 0
je 0x40a09c
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x40a097
push eax
mov ebx, eax
call fcn.0040107b
inc eax
push eax
call fcn.0044f0d2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x40a0b8
mov eax, dword [ebp - 4]
test eax, eax
je 0x40a0b8
push eax
mov ebx, eax
call fcn.0040107b
inc eax
push eax
call fcn.0044f0d2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x40a0cb
push ebx
call fcn.0044f0d8
add esp, 4
mov eax, dword [ebp - 0x20]
jmp 0x40a0d3
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x40a0e4
push ebx
call fcn.0044f0d8
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4