Function at 0x409540
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58effd
mov eax, dword fs:[0]
push eax
sub esp, 0xadc
mov eax, dword [0x5f3e24]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x104
lea eax, [ebp - 0x224]
mov ecx, 0x201
lea esi, [ebp + 8]
lea edi, [ebp - 0xa2c]
push 0
rep movsd dword es:[edi], dword [esi]
push eax
mov dword [ebp - 0xa30], 0
call fcn.00564e00
add esp, 0xc
lea eax, [ebp - 0x11c]
push 0x104
push 0
push eax
call fcn.00564e00
mov esi, dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [ebp - 0x224]
add esp, 0xc
push eax
push 0x104
call esi
lea eax, [ebp - 0x11c]
push eax
push 0x104
call esi
lea ecx, [ebp - 0x224]
dec ecx
nop dword [eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x4095e0
mov eax, dword [str.getwindows.exe]
mov dword [ecx], eax
mov eax, dword [0x5d3e94]
mov dword [ecx + 4], eax
mov eax, dword [0x5d3e98]
mov dword [ecx + 8], eax
mov ax, word [0x5d3e9c]
mov word [ecx + 0xc], ax
mov al, byte [0x5d3e9e]
mov byte [ecx + 0xe], al
lea ecx, [ebp - 0x11c]
dec ecx
nop word [eax + eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x409620
mov eax, dword [str.getwindowsact.txt]
mov dword [ecx], eax
mov eax, dword [0x5d3ea4]
mov dword [ecx + 4], eax
mov eax, dword [0x5d3ea8]
mov dword [ecx + 8], eax
mov eax, dword [0x5d3eac]
mov dword [ecx + 0xc], eax
mov ax, word [0x5d3eb0]
mov word [ecx + 0x10], ax
mov dword [ebp - 0xae4], 0x5d4150
mov dword [ebp - 0xa74], 0
mov dword [ebp - 0xa54], 0
mov dword [ebp - 0xa50], 0
mov dword [ebp - 0xa4c], 0
mov dword [ebp - 4], 0
lea eax, [ebp - 0xae0]
push 0
push eax
lea ecx, [ebp - 0xa7c]
mov dword [ebp - 0xa30], 1
mov dword [ebp - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov dword [ebp - 0xa80], 0x60
call fcn.004067c0
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0xae4]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xae4]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0xae8], eax
lea ecx, [ebp - 0xae0]
call fcn.004064e0
push ecx
push 2
lea eax, [ebp - 0x11c]
mov dword [ebp - 4], 3
push eax
lea ecx, [ebp - 0xae0]
call fcn.004063a0
test eax, eax
lea ecx, [ebp - 0xae4]
mov eax, dword [ebp - 0xae4]
je 0x409735
add ecx, dword [eax + 4]
xor edx, edx
mov eax, 4
cmp dword [ecx + 0x38], edx
cmovne eax, edx
jmp 0x40974a
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push 0
push eax
call fcn.00408920
lea edx, [ebp - 0xa28]
lea ecx, [ebp - 0xae4]
call fcn.00406910
lea ecx, [ebp - 0xae4]
call fcn.00407190
lea ecx, [ebp - 0xae0]
call fcn.004062a0
test eax, eax
jne 0x4097a6
mov eax, dword [ebp - 0xae4]
lea ecx, [ebp - 0xae4]
push 0
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.00408920
lea eax, [ebp - 0x224]
push eax
call fcn.00569a39
mov eax, dword [ebp - 0xae4]
add esp, 4
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xae4]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0xae8], eax
lea ecx, [ebp - 0xae0]
call fcn.004059e0
mov eax, dword [ebp - 0xae4]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xae4]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0xae8], eax
lea eax, [ebp - 0xa7c]
mov dword [ebp - 4], 4
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0041734a
add esp, 4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00562bba
mov esp, ebp
pop ebp
ret