Function at 0x408ab9
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5b4
push esi
mov esi, dword [ebp + 0xc]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 0x15
jl 0x40909d
and dword [ebp - 0x14], 0
and dword [ebp - 4], 0
cmp dword [0x41806c], 1
movsx eax, byte [esi]
jle 0x408af6
push 8
push eax
call fcn.0040e5a2
pop ecx
pop ecx
jmp 0x408b03
mov ecx, dword [str.________________________________H]
movzx eax, byte [ecx + eax*2]
and eax, 8
test eax, eax
je 0x408b0a
inc esi
jmp 0x408ade
push ebx
lea eax, [esi + 6]
push edi
push eax
call fcn.0040e74f
mov edi, eax
lea eax, [esi + 3]
push eax
sub edi, 0x7bc
call fcn.0040e74f
mov ebx, eax
push esi
and ebx, 0x1f
call fcn.0040e74f
and eax, 0xf
shl edi, 4
or eax, edi
shl eax, 5
or ebx, eax
lea eax, [esi + 0x10]
push eax
mov dword [ebp - 0x20], ebx
call fcn.0040e74f
mov ebx, eax
lea eax, [esi + 0xd]
push eax
and ebx, 0x3f
call fcn.0040e74f
shl eax, 6
or ebx, eax
lea eax, [esi + 0x13]
push eax
shl ebx, 5
call fcn.0040e74f
cdq
sub eax, edx
sar eax, 1
and eax, 0x1f
or ebx, eax
mov al, byte [esi]
add esp, 0x18
test al, al
mov dword [ebp - 0x24], ebx
je 0x408ba7
cmp al, 0x7c
je 0x408b8a
inc esi
mov al, byte [esi]
test al, al
jne 0x408b7f
cmp byte [esi], 0
je 0x408ba7
inc esi
mov al, byte [esi]
test al, al
je 0x408ba7
cmp al, 0x7c
je 0x408ba1
inc esi
mov al, byte [esi]
test al, al
jne 0x408b96
cmp byte [esi], 0
je 0x408ba7
inc esi
push 8
pop edi
cmp dword [0x41806c], 1
movsx eax, byte [esi]
jle 0x408bc1
push edi
push eax
call fcn.0040e5a2
pop ecx
pop ecx
jmp 0x408bcd
mov ecx, dword [str.________________________________H]
movzx eax, byte [ecx + eax*2]
and eax, edi
test eax, eax
je 0x408bd4
inc esi
jmp 0x408baa
mov al, byte [esi]
test al, al
je 0x408beb
cmp al, 0x7c
je 0x408be5
inc esi
mov al, byte [esi]
test al, al
jne 0x408bda
cmp byte [esi], 0
je 0x408beb
inc esi
push esi
call fcn.0040e6f7
mov dword [ebp - 0x18], eax
mov al, byte [esi]
test al, al
pop ecx
je 0x408c0c
cmp al, 0x7c
je 0x408c06
inc esi
mov al, byte [esi]
test al, al
jne 0x408bfb
cmp byte [esi], 0
je 0x408c0c
inc esi
cmp dword [0x41806c], 1
movsx eax, byte [esi]
jle 0x408c23
push edi
push eax
call fcn.0040e5a2
pop ecx
pop ecx
jmp 0x408c2f
mov ecx, dword [str.________________________________H]
movzx eax, byte [ecx + eax*2]
and eax, edi
test eax, eax
jne 0x408c0b
and dword [ebp - 0x1c], eax
mov edi, 0x107
cmp dword [0x41806c], 1
movsx eax, byte [esi]
jle 0x408c52
push edi
push eax
call fcn.0040e5a2
pop ecx
pop ecx
jmp 0x408c5e
mov ecx, dword [str.________________________________H]
movzx eax, word [ecx + eax*2]
and eax, edi
test eax, eax
je 0x408ca4
cmp dword [0x41806c], 1
movsx eax, byte [esi]
jle 0x408c7a
push 4
push eax
call fcn.0040e5a2
pop ecx
pop ecx
jmp 0x408c87
mov ecx, dword [str.________________________________H]
movzx eax, byte [ecx + eax*2]
and eax, 4
test eax, eax
movsx eax, byte [esi]
je 0x408c93
sub eax, 0x30
jmp 0x408c96
sub eax, 0x57
mov ecx, dword [ebp - 0x1c]
shl ecx, 4
or ecx, eax
mov dword [ebp - 0x1c], ecx
inc esi
jmp 0x408c3b
xor edi, edi
push edi
push dword [ebp + 8]
call fcn.00401d5c
test eax, eax
pop ecx
pop ecx
jne 0x408f28
push edi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll__lopen]
mov esi, eax
cmp esi, 0xffffffff
mov dword [ebp - 0x10], esi
je 0x408da2
lea eax, [ebp - 0x34]
push eax
push edi
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetFileTime]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToDosDateTime]
mov ax, word [ebp - 0xc]
cmp word [ebp - 0x20], ax
jae 0x408d11
mov dword [ebp - 0x14], 1
jmp 0x408d22
ja 0x408d1b
cmp bx, word [ebp - 8]
jb 0x408d08
jbe 0x408d22
mov dword [ebp - 4], 1
push 2
push edi
push esi
call dword [sym.imp.KERNEL32.dll__llseek]
cmp dword [ebp - 0x14], edi
jne 0x408d97
cmp dword [ebp - 0x18], eax
je 0x408d3d
mov dword [ebp - 4], 1
cmp dword [ebp - 4], 0
jne 0x408d97
or dword [0x418af8], 0xffffffff
push 0
push 0
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll__llseek]
mov edi, dword [sym.imp.KERNEL32.dll__lread]
mov ebx, 0x4000
push ebx
push dword [0x418740]
jmp 0x408d7f
mov esi, dword [0x418740]
push eax
push esi
call fcn.00402539
pop ecx
pop ecx
push ebx
mov dword [ebp - 0x18], eax
push esi
push dword [ebp - 0x10]
call edi
test eax, eax
jg 0x408d6b
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1c]
je 0x408d97
mov dword [ebp - 4], 1
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll__lclose]
jmp 0x408da9
mov dword [ebp - 4], 1
xor edi, edi
cmp dword [ebp - 0x14], edi
je 0x408f1f
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x74]
jmp 0x408dc5
cmp dl, 0x7c
je 0x408dcb
mov byte [eax], dl
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x408dbc
inc ecx
jmp 0x408dd7
cmp dl, 0x7c
je 0x408ddd
mov byte [eax], dl
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x408dce
movzx ecx, word [ebp - 0xc]
mov byte [eax], 0
mov eax, ecx
shr eax, 9
add eax, 0x50
push 0x64
cdq
pop esi
idiv esi
cmp dx, 0x3c
jae 0x408e00
add edx, 0x7d0
jmp 0x408e06
add edx, 0x76c
movzx eax, word [ebp - 8]
mov esi, eax
and esi, 0x1f
shl esi, 1
push esi
mov esi, eax
shr esi, 5
shr eax, 0xb
and esi, 0x3f
push esi
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
push eax
movzx eax, dx
push eax
mov eax, ecx
and eax, 0x1f
push eax
shr ecx, 5
and ecx, 0xf
push ecx
lea eax, [ebp - 0xb4]
push str.__02d__02d__04d___02d:_02d:_02d
push eax
call esi
push 0x400
lea eax, [ebp - 0x5b4]
push eax
push 0x4d
push dword [0x418790]
call fcn.004033e3
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x74]
push eax
push dword [ebp + 8]
lea eax, [ebp - 0x5b4]
push eax
push dword [0x418a5c]
call esi
add esp, 0x44
cmp dword [0x41878c], edi
mov ebx, 0x3ed
jne 0x408f13
cmp dword [0x418a38], edi
jne 0x408f1c
cmp dword [0x418b14], edi
jne 0x408f28
xor edi, edi
cmp dword [0x418784], edi
je 0x408ebe
push 0x19
push dword [0x418794]
call dword [sym.imp.USER32.dll_KillTimer]
push edi
push sym.UNWISE32.EXE__SharedDlg_16
push dword [0x418794]
push 0x68
push dword [0x418790]
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp dword [0x418784], edi
mov esi, eax
je 0x408ef6
push edi
push 0x96
push 0x19
push dword [0x418794]
call dword [sym.imp.USER32.dll_SetTimer]
xor eax, eax
inc eax
cmp esi, eax
jne 0x408f02
mov dword [0x418a38], eax
cmp esi, 0x3ef
jne 0x408f16
mov esi, ebx
mov dword [0x418b14], eax
jmp 0x408f16
push 7
pop esi
cmp esi, ebx
je 0x408f28
xor edi, edi
mov dword [ebp - 4], edi
cmp dword [ebp - 4], edi
je 0x40909b
movzx esi, word [ebp + 0x10]
mov eax, dword [0x418b48]
shl esi, 2
xor ebx, ebx
cmp dword [esi + eax], ebx
jne 0x408fee
xor edi, edi
mov ecx, dword [0x418a58]
movzx eax, di
shl eax, 2
mov ecx, dword [eax + ecx]
cmp ecx, ebx
je 0x408f72
mov edx, dword [0x418b48]
cmp dword [eax + edx], ebx
je 0x408f72
mov eax, dword [0x418a58]
push dword [esi + eax]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x408f7e
inc edi
cmp di, word [0x4186ac]
jbe 0x408f41
jmp 0x408f8c
mov eax, dword [0x418b48]
movzx ecx, di
mov ecx, dword [eax + ecx*4]
mov dword [esi + eax], ecx
cmp di, word [0x4186ac]
jbe 0x408fee
mov edi, pe_nt_image_headers32
push edi
call fcn.00401fe8
pop ecx
mov ecx, dword [0x418b48]
mov dword [esi + ecx], eax
lea eax, [ebp - 0x1b4]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov eax, dword [0x418b48]
push dword [esi + eax]
lea eax, [ebp - 0x1b4]
push ebx
push 0x4150ac
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
mov eax, dword [0x418b48]
push ebx
push dword [esi + eax]
call dword [sym.imp.KERNEL32.dll__lcreat]
cmp eax, 0xffffffff
je 0x408fee
push eax
call dword [sym.imp.KERNEL32.dll__lclose]
mov eax, dword [0x418b48]
mov esi, dword [esi + eax]
cmp esi, ebx
je 0x40909b
push 1
push esi
call dword [sym.imp.KERNEL32.dll__lopen]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x40909b
push 2
push 0
push ebx
call dword [sym.imp.KERNEL32.dll__llseek]
push dword [ebp + 8]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
call edi
mov esi, dword [sym.imp.KERNEL32.dll__lwrite]
push eax
push dword [ebp + 8]
push ebx
call esi
mov eax, dword [ebp + 0xc]
push 3
pop edx
mov cl, byte [eax]
test cl, cl
je 0x409053
cmp cl, 0x7c
je 0x40904d
inc eax
mov cl, byte [eax]
test cl, cl
jne 0x409041
cmp byte [eax], 0
je 0x409053
inc eax
dec edx
jne 0x40903b
push eax
movzx eax, word [ebp - 0x24]
push eax
movzx eax, word [ebp - 0x20]
push eax
lea eax, [ebp - 0x1b4]
push str._u_u_s_r_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x1b4]
push eax
call edi
push eax
lea eax, [ebp - 0x1b4]
push eax
push ebx
call esi
push ebx
call dword [sym.imp.KERNEL32.dll__lclose]
mov dword [0x418b98], 1
pop edi
pop ebx
xor eax, eax
pop esi
leave
ret