Function at 0x475ec0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x640
mov eax, dword [0x4ff5d0]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov dword [ebp - 0x62c], ecx
push edi
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x61c]
mov dword [ebp - 0x628], eax
call fcn.00472090
mov eax, dword [edi + 0x38]
xor esi, esi
cmp eax, esi
je 0x475f0a
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov dword [edi + 0x38], esi
push 0x1c
call fcn.00493dba
add esp, 4
cmp eax, esi
je 0x475f21
mov ecx, eax
call fcn.0047e5e0
jmp 0x475f23
xor eax, eax
mov dword [edi + 0x38], eax
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
lea ecx, [ebp - 0x614]
call fcn.00472090
push str.START_COMPRESSION_USING_ICTLIB_n
call fcn.0049927d
mov eax, dword [edi + 0x40]
add esp, 4
cmp eax, esi
je 0x475f58
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [edi + 0x40], esi
mov eax, dword [ebp + 0x18]
mov dword [edi + 0x40], eax
cmp eax, esi
je 0x475f6a
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [edi + 0x34]
cmp eax, esi
je 0x475f80
lea ecx, [eax + 4]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc]
push 1
call edx
mov dword [edi + 0x34], esi
push 0x24
call fcn.00493dba
add esp, 4
cmp eax, esi
je 0x475f97
mov ecx, eax
call fcn.00478d30
jmp 0x475f99
xor eax, eax
push str..rzt
lea ecx, [eax + 0x1c]
mov dword [edi + 0x34], eax
call fcn.00472470
push esi
call fcn.0049cf7d
add esp, 4
push eax
lea ecx, [ebp - 0x614]
call fcn.00472470
lea ecx, [ebp - 0x614]
call fcn.004720a0
test eax, eax
jne 0x475fdd
push str.xxtmpxx.tmp
lea ecx, [ebp - 0x614]
call fcn.00472470
cmp byte [ebp - 0x60d], 0xff
lea eax, [ebp - 0x614]
jne 0x475ff2
mov eax, dword [ebp - 0x614]
push 0x4e0bd4
push eax
call fcn.00494eaf
mov ebx, eax
add esp, 8
mov dword [ebp - 0x620], ebx
cmp ebx, esi
jne 0x476188
lea eax, [ebp - 0x108]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
cmp eax, 0x104
ja 0x476137
cmp eax, esi
je 0x476137
lea ecx, [ebp - 0x20c]
push ecx
push esi
push esi
lea edx, [ebp - 0x108]
push edx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
test eax, eax
jne 0x47609a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetTempFileName_failed___d__n
call fcn.0049b37d
add eax, 0x40
push eax
call fcn.004965fb
add esp, 0xc
lea ecx, [ebp - 0x614]
call fcn.00472320
lea ecx, [ebp - 0x61c]
call fcn.00472320
pop edi
pop esi
mov eax, 0x8004008a
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00493f43
mov esp, ebp
pop ebp
ret 0x14
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x614]
call fcn.00472470
cmp byte [ebp - 0x60d], 0xff
lea eax, [ebp - 0x614]
jne 0x4760c1
mov eax, dword [ebp - 0x614]
push 0x4e0bd4
push eax
call fcn.00494eaf
add esp, 8
mov dword [ebp - 0x620], eax
cmp eax, esi
jne 0x476182
cmp byte [ebp - 0x60d], 0xff
lea eax, [ebp - 0x614]
jne 0x4760f2
mov eax, dword [ebp - 0x614]
push eax
push str.cant_create_file__s_n
call fcn.0049b37d
add eax, 0x40
push eax
call fcn.004965fb
add esp, 0xc
lea ecx, [ebp - 0x614]
call fcn.00472320
lea ecx, [ebp - 0x61c]
call fcn.00472320
pop edi
pop esi
mov eax, 0x8004008a
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00493f43
mov esp, ebp
pop ebp
ret 0x14
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetTempPath_failed___d__n
call fcn.0049b37d
add eax, 0x40
push eax
call fcn.004965fb
add esp, 0xc
lea ecx, [ebp - 0x614]
call fcn.00472320
lea ecx, [ebp - 0x61c]
call fcn.00472320
pop edi
pop esi
mov eax, 0x8004008a
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00493f43
mov esp, ebp
pop ebp
ret 0x14
mov ebx, dword [ebp - 0x620]
mov eax, dword [edi + 0x38]
lea edx, [ebp - 0x640]
mov dword [ebp - 0x63c], ebx
mov dword [ebp - 0x634], 6
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0xc]
call eax
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x624], esi
test eax, eax
jle 0x47634e
mov ebx, dword [ebp - 0x62c]
mov ecx, ebx
call fcn.004720a0
test eax, eax
je 0x476290
cmp byte [ebx + 7], 0xff
mov eax, ebx
jne 0x4761db
mov eax, dword [ebx]
lea edx, [ebp - 0x60c]
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4761e3
lea ecx, [ebp - 0x60c]
push 0x5c
push ecx
call fcn.00499250
mov esi, eax
add esp, 8
lea ecx, [ebp - 0x61c]
test esi, esi
je 0x476218
lea edx, [esi + 1]
push edx
call fcn.00472470
mov byte [esi], 0
jmp 0x47622b
lea eax, [ebp - 0x60c]
push eax
call fcn.00472470
mov byte [ebp - 0x60c], 0
lea esi, [ebp - 0x60c]
call fcn.00475ba0
mov esi, eax
test esi, esi
js 0x4762f0
cmp byte [ebp - 0x615], 0xff
lea eax, [ebp - 0x61c]
jne 0x476255
mov eax, dword [ebp - 0x61c]
push 0x475e40
lea ecx, [edi - 4]
push ecx
push eax
lea edx, [ebp - 0x60c]
push edx
call fcn.00474d10
mov esi, eax
add esp, 0x10
test esi, esi
js 0x4762f0
mov eax, dword [ebp - 0x624]
movzx ecx, word [ebp + 0x10]
inc eax
add ebx, 8
mov dword [ebp - 0x624], eax
cmp eax, ecx
jl 0x4761c2
test esi, esi
jns 0x476348
mov ecx, dword [ebp - 0x620]
push ecx
call fcn.00494a18
add esp, 4
cmp byte [ebp - 0x60d], 0xff
lea eax, [ebp - 0x614]
jne 0x4762bc
mov eax, dword [ebp - 0x614]
push eax
call fcn.0049f0ac
add esp, 4
lea ecx, [ebp - 0x614]
call fcn.00472320
lea ecx, [ebp - 0x61c]
call fcn.00472320
pop edi
mov eax, esi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00493f43
mov esp, ebp
pop ebp
ret 0x14
mov eax, dword [ebp - 0x620]
push eax
call fcn.00494a18
add esp, 4
cmp byte [ebp - 0x60d], 0xff
lea eax, [ebp - 0x614]
jne 0x476314
mov eax, dword [ebp - 0x614]
push eax
call fcn.0049f0ac
add esp, 4
lea ecx, [ebp - 0x614]
call fcn.00472320
lea ecx, [ebp - 0x61c]
call fcn.00472320
pop edi
mov eax, esi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00493f43
mov esp, ebp
pop ebp
ret 0x14
mov ebx, dword [ebp - 0x620]
mov eax, dword [edi + 0x38]
mov edx, dword [eax]
mov edx, dword [edx + 0x18]
lea ecx, [ebp - 0x630]
push ecx
push 0
push 0
push eax
call edx
push ebx
mov esi, eax
call fcn.00494a18
add esp, 4
test esi, esi
jns 0x4763bc
cmp byte [ebp - 0x60d], 0xff
lea eax, [ebp - 0x614]
jne 0x476388
mov eax, dword [ebp - 0x614]
push eax
call fcn.0049f0ac
add esp, 4
lea ecx, [ebp - 0x614]
call fcn.00472320
lea ecx, [ebp - 0x61c]
call fcn.00472320
pop edi
mov eax, esi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00493f43
mov esp, ebp
pop ebp
ret 0x14
mov eax, dword [ebp - 0x628]
push 0x4e0bd4
push eax
call fcn.00494eaf
add esp, 8
mov dword [edi + 4], eax
test eax, eax
je 0x476154
push eax
lea ecx, [edi - 4]
call fcn.00475400
cmp byte [ebp - 0x60d], 0xff
lea eax, [ebp - 0x614]
jne 0x4763f9
mov eax, dword [ebp - 0x614]
mov ecx, dword [edi + 4]
push eax
push ecx
call fcn.00474950
mov edx, dword [edi + 4]
push edx
call fcn.00494a18
add esp, 0xc
cmp byte [ebp - 0x60d], 0xff
lea eax, [ebp - 0x614]
jne 0x476424
mov eax, dword [ebp - 0x614]
push eax
call fcn.0049f0ac
mov eax, dword [edi + 0x38]
add esp, 4
test eax, eax
je 0x476443
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [edi + 0x38], 0
lea ecx, [ebp - 0x614]
call fcn.00472320
lea ecx, [ebp - 0x61c]
call fcn.00472320
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.00493f43
mov esp, ebp
pop ebp
ret 0x14