Function at 0x4065e7
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x468
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x5c
lea ecx, [ebp - 0x20c]
push ecx
call fcn.00408000
add esp, 8
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x406693
mov edx, dword [ebp - 0x108]
add edx, 1
push edx
lea eax, [ebp - 0x104]
push eax
call fcn.00407f10
add esp, 8
push str.Simulate.CD
mov ecx, dword [ebp - 0x108]
add ecx, 1
push ecx
call fcn.00407f10
add esp, 8
lea edx, [ebp - 0x34c]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0xffffffff
je 0x406688
mov byte [ebp + 0xc], 1
mov ecx, dword [ebp - 0x354]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp - 0x108]
mov byte [edx], 0
jmp 0x4066a9
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x104]
push ecx
call fcn.00407f10
add esp, 8
push 0x2e
lea edx, [ebp - 0x104]
push edx
call fcn.00408000
add esp, 8
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x4066d2
mov eax, dword [ebp - 0x108]
mov byte [eax], 0
mov ecx, dword [ebp + 0xc]
and ecx, 0xff
test ecx, ecx
je 0x4066f1
lea edx, [ebp - 0x20c]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
push 0
lea eax, [ebp - 0x20c]
push eax
call fcn.00407e50
add esp, 8
sub eax, 1
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
movsx edx, byte [ecx]
cmp edx, 0x5c
je 0x40672d
push 0x40d398
lea eax, [ebp - 0x20c]
push eax
call fcn.00407f20
add esp, 8
mov dword [ebp - 0x350], 0
jmp 0x406748
mov ecx, dword [ebp - 0x350]
add ecx, 1
mov dword [ebp - 0x350], ecx
cmp dword [ebp - 0x350], 0x3e8
jge 0x40689c
mov byte [ebp - 0x45c], 0
xor edx, edx
mov dl, byte [0x40dfa9]
test edx, edx
je 0x406777
mov dword [ebp - 0x468], str..EXE
jmp 0x406781
mov dword [ebp - 0x468], 0x40e1dc
mov eax, dword [ebp - 0x468]
push eax
mov ecx, dword [ebp - 0x350]
push ecx
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x20c]
push eax
push str._s_s.TMP_d_s
lea ecx, [ebp - 0x458]
push ecx
call fcn.00408027
add esp, 0x18
lea edx, [ebp - 0x34c]
push edx
lea eax, [ebp - 0x458]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0xffffffff
je 0x4067e8
mov byte [ebp - 0x45c], 1
mov ecx, dword [ebp - 0x354]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
lea edx, [ebp - 0x458]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 0xffffffff
jne 0x406878
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0xb7
je 0x406837
cmp dword [ebp - 0x464], 0x20
jne 0x40683c
jmp 0x406739
cmp dword [ebp - 0x464], 5
jne 0x406859
mov eax, dword [ebp - 0x45c]
and eax, 0xff
test eax, eax
je 0x406859
jmp 0x406739
mov ecx, dword [ebp + 0xc]
and ecx, 0xff
test ecx, ecx
jne 0x406876
push 1
mov edx, dword [ebp + 8]
push edx
call fcn.004065e7
add esp, 8
jmp 0x40689e
jmp 0x40689c
mov eax, dword [ebp - 0x460]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x458]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00407f10
add esp, 8
mov al, 1
jmp 0x40689e
xor al, al
mov esp, ebp
pop ebp
ret