Function at 0x48c38c
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ac220
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x3c0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
lea ecx, [ebp - 0x144]
call fcn.004903a0
mov dword [ebp - 4], 0
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x2d8]
call fcn.0042fcf0
push 0x104
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov byte [ebp - 4], 1
push 0
mov ecx, dword [ebp + 0xc]
push ecx
lea ecx, [ebp - 0x144]
call fcn.004904ae
push 0
push str.output
lea edx, [ebp - 0x2e8]
push edx
lea ecx, [ebp - 0x144]
call fcn.00490585
mov dword [ebp - 0x348], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x34c], eax
mov byte [ebp - 4], 2
push str.item
mov ecx, dword [ebp - 0x34c]
call fcn.00490762
mov dword [ebp - 0x350], eax
mov ecx, dword [ebp - 0x350]
mov dword [ebp - 0x24], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2e8]
call fcn.0049051f
lea edx, [ebp - 0x2ec]
push edx
mov ecx, dword [ebp - 0x24]
call fcn.004172b0
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
mov ecx, dword [eax]
mov dword [ebp - 0x2d8], ecx
jmp 0x48c492
push 0
lea edx, [ebp - 0x2f0]
push edx
lea ecx, [ebp - 0x2d8]
call fcn.00417310
lea eax, [ebp - 0x2f4]
push eax
mov ecx, dword [ebp - 0x24]
call fcn.00436710
mov dword [ebp - 0x358], eax
mov ecx, dword [ebp - 0x358]
push ecx
lea ecx, [ebp - 0x2d8]
call fcn.00448ed0
mov byte [ebp - 0x35c], al
mov edx, dword [ebp - 0x35c]
and edx, 0xff
test edx, edx
je 0x48c9f7
lea ecx, [ebp - 0x2d8]
call fcn.00416c20
mov dword [ebp - 0x360], eax
push 0
push str.errno
lea eax, [ebp - 0x2fc]
push eax
mov ecx, dword [ebp - 0x360]
call fcn.00490585
mov dword [ebp - 0x364], eax
mov ecx, dword [ebp - 0x364]
mov dword [ebp - 0x368], ecx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x368]
call fcn.00490687
mov dword [ebp - 0x36c], eax
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x12c], edx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2fc]
call fcn.0049051f
mov eax, dword [ebp - 0x12c]
push eax
call fcn.0048b8af
add esp, 4
mov ecx, dword [ebp - 0x12c]
push ecx
call dword [sym.imp.ntdll.dll_atoi]
add esp, 4
mov dword [ebp - 0x134], eax
lea ecx, [ebp - 0x2d8]
call fcn.00416c20
mov dword [ebp - 0x370], eax
push 0
push str.sysfile
lea edx, [ebp - 0x304]
push edx
mov ecx, dword [ebp - 0x370]
call fcn.00490585
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x378], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x378]
call fcn.00490687
mov dword [ebp - 0x37c], eax
mov ecx, dword [ebp - 0x37c]
mov dword [ebp - 0x13c], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x304]
call fcn.0049051f
mov edx, dword [ebp - 0x13c]
push edx
call fcn.0048b8af
add esp, 4
mov eax, dword [ebp - 0x13c]
push eax
call dword [sym.imp.ntdll.dll_atoi]
add esp, 4
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x2d8]
call fcn.00416c20
mov dword [ebp - 0x380], eax
push 0
push str.file
lea ecx, [ebp - 0x30c]
push ecx
mov ecx, dword [ebp - 0x380]
call fcn.00490585
mov dword [ebp - 0x384], eax
mov edx, dword [ebp - 0x384]
mov dword [ebp - 0x388], edx
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x388]
call fcn.00490687
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30c]
call fcn.0049051f
lea ecx, [ebp - 0x2d8]
call fcn.00416c20
mov dword [ebp - 0x390], eax
push 0
push str.path
lea ecx, [ebp - 0x314]
push ecx
mov ecx, dword [ebp - 0x390]
call fcn.00490585
mov dword [ebp - 0x394], eax
mov edx, dword [ebp - 0x394]
mov dword [ebp - 0x398], edx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x398]
call fcn.00490687
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x138], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x314]
call fcn.0049051f
lea ecx, [ebp - 0x2d8]
call fcn.00416c20
mov dword [ebp - 0x3a0], eax
push 0
push 0x53b1d8
lea ecx, [ebp - 0x31c]
push ecx
mov ecx, dword [ebp - 0x3a0]
call fcn.00490585
mov dword [ebp - 0x3a4], eax
mov edx, dword [ebp - 0x3a4]
mov dword [ebp - 0x3a8], edx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x3a8]
call fcn.00490687
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x2d4], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x31c]
call fcn.0049051f
lea ecx, [ebp - 0x2d8]
call fcn.00416c20
mov dword [ebp - 0x3b0], eax
push 0
push 0x53b1dc
lea ecx, [ebp - 0x324]
push ecx
mov ecx, dword [ebp - 0x3b0]
call fcn.00490585
mov dword [ebp - 0x3b4], eax
mov edx, dword [ebp - 0x3b4]
mov dword [ebp - 0x3b8], edx
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x3b8]
call fcn.00490687
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x324]
call fcn.0049051f
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.0048b8af
add esp, 4
mov edx, dword [ebp - 0x138]
push edx
call fcn.0048b8af
add esp, 4
mov eax, dword [ebp - 0x2d4]
push eax
call fcn.0048b8af
add esp, 4
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.0048b8af
add esp, 4
mov edx, dword [ebp - 0x138]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
movsx ecx, byte [eax]
test ecx, ecx
je 0x48c801
mov edx, dword [ebp - 0x14]
movsx eax, byte [edx]
cmp eax, 0x2f
jne 0x48c7f6
mov ecx, dword [ebp - 0x14]
mov byte [ecx], 0x5c
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
jmp 0x48c7db
mov eax, dword [ebp - 0x138]
movsx ecx, byte [eax]
test ecx, ecx
je 0x48c83b
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x138]
push eax
lea ecx, [ebp - 0x128]
push ecx
push str._s_s_s
push 0x104
lea edx, [ebp - 0x2d0]
push edx
call fcn.0040a150
add esp, 0x18
jmp 0x48c85f
mov eax, dword [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x128]
push ecx
push 0x53b1ec
push 0x104
lea edx, [ebp - 0x2d0]
push edx
call fcn.0040a150
add esp, 0x14
lea eax, [ebp - 0x2d0]
push eax
mov ecx, dword [ebp + 8]
call fcn.00416ec0
mov dword [ebp - 0x3c0], eax
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 0
jne 0x48c88e
jmp 0x48c47e
mov edx, dword [ebp - 0x2dc]
mov dword [edx + 0x170], 0
cmp dword [ebp - 0x20], 1
jne 0x48c8d1
cmp dword [ebp - 0x134], 0
je 0x48c8bf
mov eax, dword [ebp - 0x2dc]
mov dword [eax + 0x168], 2
jmp 0x48c8cf
mov ecx, dword [ebp - 0x2dc]
mov dword [ecx + 0x168], 0
jmp 0x48c91a
cmp dword [ebp - 0x20], 2
jne 0x48c8e9
mov edx, dword [ebp - 0x2dc]
mov dword [edx + 0x168], 2
jmp 0x48c91a
mov eax, dword [ebp - 0x2dc]
cmp dword [eax + 0x168], 0
jne 0x48c90a
mov ecx, dword [ebp - 0x2dc]
mov dword [ecx + 0x168], 2
jmp 0x48c91a
mov edx, dword [ebp - 0x2dc]
mov dword [edx + 0x168], 1
mov eax, dword [ebp - 0x2dc]
cmp dword [eax + 0x168], 0
jne 0x48c9f2
mov ecx, dword [ebp - 0x2dc]
mov dword [ecx + 0x168], 0
push 0x28
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x3c4], eax
mov edx, dword [ebp - 0x3c4]
mov dword [ebp - 0x328], edx
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x328]
mov dword [eax + 0x170], ecx
mov edx, dword [ebp - 0x18]
push edx
call sub.ntdll.dll_strlen
add esp, 4
add eax, 1
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [ebp - 0x3c8], eax
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x32c], ecx
mov edx, dword [ebp - 0x2dc]
mov eax, dword [edx + 0x170]
mov ecx, dword [ebp - 0x32c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x130]
push eax
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ecx + 0x170]
mov eax, dword [edx]
push eax
call fcn.00409000
mov ecx, dword [ebp - 0x2d4]
push ecx
push 0x21
mov edx, dword [ebp - 0x2dc]
mov eax, dword [edx + 0x170]
add eax, 4
push eax
call fcn.00409000
jmp 0x48c47e
jmp 0x48ca78
mov dword [ebp - 4], 0
cmp dword [ebp - 0x24], 0
je 0x48cac9
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x340], eax
mov ecx, dword [ebp - 0x340]
mov dword [ebp - 0x33c], ecx
cmp dword [ebp - 0x33c], 0
je 0x48cab8
push 1
mov ecx, dword [ebp - 0x33c]
call fcn.0048e4c0
mov dword [ebp - 0x3d0], eax
jmp 0x48cac2
mov dword [ebp - 0x3d0], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x344], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x144]
call fcn.0049051f
mov eax, dword [ebp - 0x344]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret