Function at 0x481208
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff004
push eax
add esp, 0xfffffdc8
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x1234], edx
mov dword [ebp - 0x1238], edx
mov dword [ebp - 0x1230], edx
mov dword [ebp - 0x1228], edx
mov dword [ebp - 0x122c], edx
mov dword [ebp - 0x1224], edx
mov dword [ebp - 0x1220], edx
mov dword [ebp - 4], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x481556
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1116]
push eax
push 0x104
call sub.kernel32.dll_GetTempPathA
lea eax, [ebp - 0x121b]
push eax
push 0
push 0x481568
lea eax, [ebp - 0x1116]
push eax
call sub.kernel32.dll_GetTempFileNameA
lea eax, [ebx + 0x3a8]
lea edx, [ebp - 0x121b]
mov ecx, 0x105
call fcn.00404f94
mov eax, dword [0x48d948]
mov eax, dword [eax]
call fcn.00465c58
lea eax, [ebp - 4]
mov edx, 0x481578
call fcn.00404dbc
mov byte [ebp - 5], 1
call dword [0x495064]
mov esi, eax
mov edx, 0x14
mov eax, dword [ebx + 0x39c]
call fcn.0047fd18
lea edx, [ebp - 0x1220]
mov eax, 0x4815b8
call fcn.00487250
mov edx, dword [ebp - 0x1220]
mov eax, dword [ebx + 0x398]
call fcn.004474bc
mov eax, dword [0x48d948]
mov eax, dword [eax]
call fcn.00465c58
test esi, esi
jne 0x4814f9
push 0
push 0x80
push 3
push 0
push 0
push 0x80000000
lea eax, [ebp - 0x1224]
mov edx, dword [ebp - 4]
call fcn.00405658
mov eax, dword [ebp - 0x1224]
push eax
call dword [0x495070]
mov esi, eax
mov eax, esi
xor edx, edx
cmp edx, 0xffffffff
jne 0x481385
cmp eax, 0xffffffff
jne 0x481385
lea edx, [ebp - 0x1228]
mov eax, 0x4815d8
call fcn.00487250
mov eax, dword [ebp - 0x1228]
push eax
lea edx, [ebp - 0x122c]
mov eax, ebx
call fcn.0044748c
mov eax, dword [ebp - 0x122c]
mov dx, 0x30
pop ecx
call fcn.0048740c
call dword [0x495068]
mov byte [ebp - 5], 0
jmp 0x4814f9
mov edx, 0x28
mov eax, dword [ebx + 0x39c]
call fcn.0047fd18
lea edx, [ebp - 0x1230]
mov eax, 0x4815f4
call fcn.00487250
mov edx, dword [ebp - 0x1230]
mov eax, dword [ebx + 0x398]
call fcn.004474bc
mov eax, dword [0x48d948]
mov eax, dword [eax]
call fcn.00465c58
push 0xffff
mov ecx, dword [ebx + 0x3a8]
mov dl, 1
mov eax, dword [0x418cb0]
call fcn.0041cf98
mov dword [ebp - 0xc], eax
push 0
lea eax, [ebp - 0x10]
push eax
push 0x1001
lea eax, [ebp - 0x1011]
push eax
push esi
call dword [0x495074]
cmp dword [ebp - 0x10], 0
ja 0x481442
lea edx, [ebp - 0x1234]
mov eax, 0x481618
call fcn.00487250
mov eax, dword [ebp - 0x1234]
push eax
lea edx, [ebp - 0x1238]
mov eax, ebx
call fcn.0044748c
mov eax, dword [ebp - 0x1238]
mov dx, 0x30
pop ecx
call fcn.0048740c
mov eax, dword [ebp - 0xc]
call fcn.00403ef8
call dword [0x495068]
jmp 0x4814f9
mov ecx, 0x12
mov edx, 0x481638
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0x10]
cmp dword [ebp - 0x10], 2
jbe 0x48146e
mov ecx, dword [ebp - 0x10]
sub ecx, 2
lea edx, [ebp - 0x100f]
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0x10]
mov edx, 0x32
mov eax, dword [ebx + 0x39c]
call fcn.0047fd18
mov eax, dword [0x48d948]
mov eax, dword [eax]
call fcn.00465c58
cmp dword [ebp - 0x10], 0
jbe 0x4814ca
push 0
lea eax, [ebp - 0x10]
push eax
push 0x1001
lea eax, [ebp - 0x1011]
push eax
push esi
call dword [0x495074]
test eax, eax
jne 0x4814b3
mov byte [ebp - 5], 0
jmp 0x4814ca
lea edx, [ebp - 0x1011]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
mov edi, dword [eax]
call dword [edi + 0x10]
cmp dword [ebp - 0x10], 0
ja 0x481490
push esi
call dword [0x49507c]
mov eax, dword [ebp - 0xc]
call fcn.00403ef8
call dword [0x495068]
mov dl, 1
mov eax, dword [ebx + 0x36c]
mov ecx, dword [eax]
call dword [ecx + 0x68]
xor edx, edx
mov eax, dword [ebx + 0x3a0]
mov ecx, dword [eax]
call dword [ecx + 0x68]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48155d
lea eax, [ebp - 0x1238]
call fcn.00404d24
lea eax, [ebp - 0x1234]
mov edx, 2
call fcn.00404d48
lea eax, [ebp - 0x122c]
call fcn.00404d24
lea eax, [ebp - 0x1228]
call fcn.00404d24
lea eax, [ebp - 0x1224]
call fcn.004054d8
lea eax, [ebp - 0x1220]
call fcn.00404d24
lea eax, [ebp - 4]
call fcn.00404d24
ret