Function at 0x431ae2
Capabilities:
Get common file path
Terminate process

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x47549c
push eax
mov dword fs:[0], esp
sub esp, 0x25c
push ebx
push ebp
push esi
push edi
mov edi, ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [esp + 0x27c]
lea ebp, [edi + 0xa4]
push 4
push ebp
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x34]
mov edx, dword [esi]
lea eax, [edi + 0xa8]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov edx, dword [esi]
lea eax, [edi + 0xac]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov eax, dword [esi]
lea ebx, [edi + 0x94]
push 4
push ebx
mov ecx, esi
call dword [eax + 0x34]
mov edx, dword [esi]
lea eax, [edi + 0x98]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov edx, dword [esi]
lea eax, [edi + 0x9c]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov ecx, edi
call fcn.00435e50
mov dword [edi + 0xa0], eax
mov eax, dword [ebp]
test eax, eax
je 0x431ca5
cmp dword [ebx], 0
je 0x431bc7
lea eax, [esp + 0x64]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x14]
call fcn.004654a8
mov edx, dword [esi]
push str.Narration.wav
push ecx
mov ecx, esi
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
mov dword [esp + 0x280], 0
call dword [edx + 0x10]
lea ecx, [esp + 0x20]
push ecx
call fcn.00437d00
add esp, 8
lea edx, [esp + 0x20]
push eax
push edx
mov byte [esp + 0x280], 1
call fcn.004656cf
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x278], 2
call fcn.004657de
lea ecx, [esp + 0x1c]
mov byte [esp + 0x274], 1
call fcn.0046543a
lea ecx, [esp + 0x18]
mov byte [esp + 0x274], 0
call fcn.0046543a
lea eax, [esp + 0x10]
lea ecx, [edi + 0xc8]
push eax
call fcn.00465573
lea ecx, [esp + 0x38]
call fcn.00402680
lea ecx, [esp + 0x10]
mov byte [esp + 0x274], 3
push ecx
call fcn.00438f40
add esp, 4
test eax, eax
jne 0x431afb
mov edx, dword [esp + 0x10]
push eax
push 0x1002
push edx
lea ecx, [esp + 0x44]
call fcn.00466330
test eax, eax
je 0x431ae0
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
mov edx, dword [esi]
lea eax, [esp + 0x20]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov ecx, dword [esp + 0x20]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edx, dword [esi]
mov ebx, eax
mov eax, dword [esp + 0x20]
mov ecx, esi
push eax
push ebx
call dword [edx + 0x34]
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00450390
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x20]
push ecx
push ebx
push edx
push eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], ecx
call fcn.0043df20
add esp, 0x14
test eax, eax
je 0x431a97
push 0x10
push 0x489150
push 0x149
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
push 0
call fcn.004508da
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
push eax
push ebx
lea ecx, [esp + 0x40]
call fcn.004026d0
lea ecx, [esp + 0x38]
call fcn.0046654b
push ebx
call fcn.004502a7
lea ecx, [edi + 0x54]
add esp, 4
mov dword [edi + 0x90], 1
lea edx, [esp + 0x10]
mov eax, dword [ecx + 8]
push edx
push eax
call fcn.00460ed7
jmp 0x431b3a
push 0
push 0
push 0x14a
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
jmp 0x431b3a
mov eax, dword [esi]
lea ecx, [esp + 0x24]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
mov edx, dword [esi]
lea eax, [esp + 0x14]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov ecx, dword [esp + 0x14]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edx, dword [esi]
mov ebx, eax
mov eax, dword [esp + 0x14]
mov ecx, esi
push eax
push ebx
call dword [edx + 0x34]
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [edi + 0x3c]
test eax, eax
jne 0x431b4e
mov ecx, edi
call fcn.00435e50
mov dword [edi + 0xa0], eax
mov eax, dword [edi + 0xa0]
test eax, eax
je 0x431ba2
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, dword [edi + 0x3c]
push 0
call fcn.00439be0
test eax, eax
jne 0x431b8b
push eax
push eax
push 0x17d
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
mov dword [ebp], 0
jmp 0x431b92
mov dword [ebp], 1
mov ecx, dword [edi + 0x3c]
push 0
call fcn.00439ae0
mov dword [edi + 0xd4], eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x274], 0
call fcn.004026c0
mov dword [esp + 0x274], 0xffffffff
lea ecx, [esp + 0x10]
jmp 0x431ca0
mov edx, dword [esi]
push str.Narration.wav
push ecx
mov ecx, esi
mov eax, esp
mov dword [esp + 0x38], esp
push eax
call dword [edx + 0x18]
lea ecx, [esp + 0x20]
push ecx
call fcn.00437d00
add esp, 8
lea edx, [esp + 0x14]
push eax
push edx
mov dword [esp + 0x280], 4
call fcn.004656cf
lea ecx, [esp + 0x18]
mov byte [esp + 0x274], 6
call fcn.0046543a
lea eax, [esp + 0x10]
lea ecx, [edi + 0xc8]
push eax
call fcn.00465573
mov eax, dword [edi + 0x3c]
test eax, eax
jne 0x431c33
mov ecx, edi
call fcn.00435e50
mov dword [edi + 0xa0], eax
mov eax, dword [edi + 0xa0]
test eax, eax
je 0x431c91
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, dword [edi + 0x3c]
push 0
call fcn.00439be0
test eax, eax
jne 0x431c70
push eax
push eax
push 0x17d
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
mov dword [ebp], 0
jmp 0x431c91
mov ecx, dword [edi + 0x3c]
push 0
mov dword [ebp], 1
mov dword [edi + 0x90], 1
call fcn.00439ae0
mov dword [edi + 0xd4], eax
mov dword [esp + 0x274], 0xffffffff
lea ecx, [esp + 0x10]
call fcn.0046543a
mov eax, dword [edi + 0xa8]
test eax, eax
je 0x432015
mov eax, dword [edi + 0x98]
test eax, eax
je 0x431f45
lea edx, [esp + 0x64]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [esp + 0x64]
lea ecx, [esp + 0x10]
push eax
call fcn.004654a8
mov edx, dword [esi]
push str.Background.wav
push ecx
mov ecx, esi
mov eax, esp
mov dword [esp + 0x2c], esp
push eax
mov dword [esp + 0x280], 7
call dword [edx + 0x10]
lea ecx, [esp + 0x20]
push ecx
call fcn.00437d00
add esp, 8
lea edx, [esp + 0x20]
mov bl, 8
push eax
push edx
mov byte [esp + 0x280], bl
call fcn.004656cf
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x278], 9
call fcn.004657de
lea ecx, [esp + 0x1c]
mov byte [esp + 0x274], bl
call fcn.0046543a
lea ecx, [esp + 0x18]
mov byte [esp + 0x274], 7
call fcn.0046543a
lea eax, [esp + 0x10]
lea ecx, [edi + 0xcc]
push eax
call fcn.00465573
lea ecx, [esp + 0x38]
call fcn.00402680
lea ecx, [esp + 0x10]
mov byte [esp + 0x274], 0xa
push ecx
call fcn.00438f40
add esp, 4
test eax, eax
jne 0x431e87
mov edx, dword [esp + 0x10]
push eax
push 0x1002
push edx
lea ecx, [esp + 0x44]
call fcn.00466330
test eax, eax
je 0x431e6c
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
mov edx, dword [esi]
lea eax, [esp + 0x20]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov ecx, dword [esp + 0x20]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edx, dword [esi]
mov ebp, eax
mov eax, dword [esp + 0x20]
mov ecx, esi
push eax
push ebp
call dword [edx + 0x34]
mov ecx, dword [esp + 0x14]
push ecx
call fcn.00450390
mov ebx, eax
mov eax, dword [esp + 0x18]
push eax
lea edx, [esp + 0x24]
push ebp
push edx
push ebx
mov dword [esp + 0x30], eax
call fcn.0043df20
add esp, 0x14
test eax, eax
je 0x431e27
push 0x10
push 0x489150
push 0x149
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
push 0
call fcn.004508da
push ebp
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x38]
push eax
push ebx
call fcn.004026d0
lea ecx, [esp + 0x38]
call fcn.0046654b
push ebx
call fcn.004502a7
lea ecx, [edi + 0x54]
add esp, 4
mov dword [edi + 0x8c], 1
lea edx, [esp + 0x10]
mov eax, dword [ecx + 8]
push edx
push eax
call fcn.00460ed7
jmp 0x431ec6
push 0
push 0
push 0x17f
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
jmp 0x431ec6
mov eax, dword [esi]
lea ecx, [esp + 0x24]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
mov edx, dword [esi]
lea eax, [esp + 0x14]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov ecx, dword [esp + 0x14]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edx, dword [esi]
mov ebx, eax
mov eax, dword [esp + 0x14]
mov ecx, esi
push eax
push ebx
call dword [edx + 0x34]
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [edi + 0x3c]
test eax, eax
je 0x431ee7
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
call fcn.004651af
mov ecx, edi
call fcn.00436210
jmp 0x431f20
mov ecx, edi
call fcn.00435e50
test eax, eax
je 0x431f16
push ecx
lea eax, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
mov dword [edi + 0xa0], 1
call fcn.004651af
mov ecx, edi
call fcn.00436210
jmp 0x431f20
mov dword [edi + 0xa0], 0
lea ecx, [esp + 0x38]
mov byte [esp + 0x274], 7
call fcn.004026c0
mov dword [esp + 0x274], 0xffffffff
lea ecx, [esp + 0x10]
jmp 0x432010
mov edx, dword [esi]
push str.Background.wav
push ecx
mov ecx, esi
mov eax, esp
mov dword [esp + 0x38], esp
push eax
call dword [edx + 0x18]
lea ecx, [esp + 0x20]
push ecx
call fcn.00437d00
add esp, 8
lea edx, [esp + 0x14]
push eax
push edx
mov dword [esp + 0x280], 0xb
call fcn.004656cf
lea ecx, [esp + 0x18]
mov byte [esp + 0x274], 0xd
call fcn.0046543a
lea eax, [esp + 0x10]
lea ecx, [edi + 0xcc]
push eax
call fcn.00465573
mov eax, dword [edi + 0x3c]
test eax, eax
je 0x431fbe
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
call fcn.004651af
mov ecx, edi
call fcn.00436210
jmp 0x431ff7
mov ecx, edi
call fcn.00435e50
test eax, eax
je 0x431fed
push ecx
lea eax, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
mov dword [edi + 0xa0], 1
call fcn.004651af
mov ecx, edi
call fcn.00436210
jmp 0x431ff7
mov dword [edi + 0xa0], 0
mov dword [edi + 0x8c], 1
mov dword [esp + 0x274], 0xffffffff
lea ecx, [esp + 0x10]
call fcn.0046543a
mov eax, dword [edi + 0xac]
test eax, eax
je 0x4323a7
mov eax, dword [edi + 0x3c]
test eax, eax
jne 0x43203d
mov ecx, edi
call fcn.00435e50
neg eax
sbb eax, eax
neg eax
mov dword [edi + 0xa0], eax
mov eax, dword [0x48b464]
mov dword [esp + 0x24], eax
mov dword [esp + 0x274], 0xe
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], eax
mov edx, dword [esi]
lea eax, [esp + 0x14]
push 4
push eax
mov ecx, esi
mov byte [esp + 0x27c], 0x10
call dword [edx + 0x34]
mov eax, dword [edi + 0x9c]
test eax, eax
jne 0x43215e
mov eax, dword [esp + 0x14]
xor ebp, ebp
test eax, eax
jle 0x43214f
mov bl, 0x11
mov edx, dword [esi]
lea eax, [esp + 0x1c]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x432132
push ebp
lea ecx, [esp + 0x24]
push str.Effect_d.wav
push ecx
call fcn.0045fd47
add esp, 0xc
mov eax, dword [esi]
lea edx, [esp + 0x20]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, esi
call dword [eax + 0x18]
lea edx, [esp + 0x34]
push edx
call fcn.00437d00
add esp, 8
push eax
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x280], bl
call fcn.00465669
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x278], 0x12
call fcn.00465573
lea ecx, [esp + 0x18]
mov byte [esp + 0x274], bl
call fcn.0046543a
lea ecx, [esp + 0x2c]
mov byte [esp + 0x274], 0x10
call fcn.0046543a
mov edx, dword [edi + 0x44]
lea ecx, [esp + 0x28]
push ecx
lea ecx, [edx + ebp*4]
call fcn.00465573
jmp 0x432142
mov eax, dword [edi + 0x44]
push 0x48f490
lea ecx, [eax + ebp*4]
call fcn.004655c3
mov eax, dword [esp + 0x14]
inc ebp
cmp ebp, eax
jl 0x43208d
mov dword [edi + 0x88], 1
jmp 0x432371
lea ecx, [esp + 0x50]
call fcn.00402680
lea ecx, [esp + 0x168]
mov byte [esp + 0x274], 0x13
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea edx, [esp + 0x168]
lea ecx, [esp + 0x1c]
push edx
call fcn.004654a8
mov eax, dword [esp + 0x14]
xor ebp, ebp
test eax, eax
mov byte [esp + 0x274], 0x14
mov dword [esp + 0x18], ebp
jle 0x43234f
mov eax, dword [esi]
lea ecx, [esp + 0x48]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
mov eax, dword [esp + 0x48]
test eax, eax
je 0x43233e
push ebp
lea edx, [esp + 0x24]
push str.Effect_d.wav
push edx
call fcn.0045fd47
add esp, 0xc
lea eax, [esp + 0x20]
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x4c]
push eax
push ecx
push edx
call fcn.00465669
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x278], 0x15
call fcn.00465573
lea ecx, [esp + 0x4c]
mov byte [esp + 0x274], 0x14
call fcn.0046543a
mov ecx, dword [edi + 0x44]
lea eax, [esp + 0x28]
push eax
lea ecx, [ecx + ebp*4]
call fcn.00465573
lea edx, [esp + 0x28]
push edx
call fcn.00438f40
add esp, 4
test eax, eax
jne 0x4322ff
push eax
mov eax, dword [esp + 0x2c]
push 0x1002
push eax
lea ecx, [esp + 0x5c]
call fcn.00466330
test eax, eax
je 0x43233e
mov edx, dword [esi]
lea eax, [esp + 0x10]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov edx, dword [esi]
lea eax, [esp + 0x34]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov ecx, dword [esp + 0x34]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edx, dword [esi]
mov ebp, eax
mov eax, dword [esp + 0x34]
mov ecx, esi
push eax
push ebp
call dword [edx + 0x34]
mov ecx, dword [esp + 0x10]
push ecx
call fcn.00450390
mov ebx, eax
mov eax, dword [esp + 0x14]
push eax
lea edx, [esp + 0x38]
push ebp
push edx
push ebx
mov dword [esp + 0x44], eax
call fcn.0043df20
add esp, 0x14
test eax, eax
jne 0x4323d7
push ebp
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x50]
push eax
push ebx
call fcn.004026d0
lea ecx, [esp + 0x50]
call fcn.0046654b
push ebx
call fcn.004502a7
lea ecx, [edi + 0x54]
add esp, 4
mov dword [edi + 0x88], 1
lea edx, [esp + 0x28]
mov eax, dword [ecx + 8]
push edx
push eax
call fcn.00460ed7
mov ebp, dword [esp + 0x18]
jmp 0x43233e
mov eax, dword [esi]
lea ecx, [esp + 0x60]
push 4
push ecx
mov ecx, esi
call dword [eax + 0x34]
mov edx, dword [esi]
lea eax, [esp + 0x2c]
push 4
push eax
mov ecx, esi
call dword [edx + 0x34]
mov ecx, dword [esp + 0x2c]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edx, dword [esi]
mov ebx, eax
mov eax, dword [esp + 0x2c]
mov ecx, esi
push eax
push ebx
call dword [edx + 0x34]
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [esp + 0x14]
inc ebp
cmp ebp, eax
mov dword [esp + 0x18], ebp
jl 0x4321ad
lea ecx, [esp + 0x1c]
mov byte [esp + 0x274], 0x13
call fcn.0046543a
lea ecx, [esp + 0x50]
mov byte [esp + 0x274], 0x10
call fcn.004026c0
lea ecx, [esp + 0x28]
mov byte [esp + 0x274], 0xf
call fcn.0046543a
lea ecx, [esp + 0x20]
mov byte [esp + 0x274], 0xe
call fcn.0046543a
lea ecx, [esp + 0x24]
mov dword [esp + 0x274], 0xffffffff
call fcn.0046543a
mov ecx, dword [edi + 0xe0]
mov edx, dword [edi + 0xdc]
push ecx
push edx
mov ecx, edi
call fcn.00436140
mov ecx, dword [esp + 0x26c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x268
ret 4
push 0x10
push 0x489150
push 0x149
call fcn.00438120
add esp, 4
mov ecx, edi
push eax
call fcn.00463559
push 0
call fcn.004508da
nop
nop
nop
nop
nop
nop