Function at 0x4b80fa
Capabilities:
Get common file path
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2d0
push ebx
push esi
push edi
mov dword [ebp - 0x248], 0xffffffff
mov dword [ebp - 0x134], 0
push 1
call fcn.0049c470
add esp, 4
push 5
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jne 0x4b814d
mov eax, 1
jmp 0x4b85fc
push 0
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4b8170
mov eax, 1
jmp 0x4b85fc
lea eax, [ebp - 0x244]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [ebp - 0x114]
push eax
push 0
push 0x531dc0
lea eax, [ebp - 0x244]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
push 0x1002
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004e483d
add esp, 0xc
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
push eax
call dword [sym.imp.KERNEL32.dll__lclose]
mov eax, dword [ebp - 0x12c]
push eax
call fcn.004e3c2e
add esp, 4
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x4b81f8
mov eax, dword [ebp - 0x12c]
jmp 0x4b85fc
push 2
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004e483d
add esp, 0xc
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x248]
push eax
call fcn.004e3c2e
add esp, 4
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x4b823d
jmp 0x4b855c
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalSize]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov eax, dword [eax]
mov dword [ebp - 0x128], eax
add dword [ebp - 4], 4
push 0
push 0
mov eax, dword [ebp - 0x248]
push eax
call dword [sym.imp.KERNEL32.dll__llseek]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffff
jne 0x4b829d
mov dword [ebp - 0x12c], 0xffffffff
cmp dword [ebp - 0x12c], 0
jne 0x4b8348
cmp dword [ebp - 0x128], 0
jbe 0x4b8348
cmp dword [ebp - 0x128], 0xfffe
jbe 0x4b82d6
mov dword [ebp - 0x138], 0xfffe
jmp 0x4b82e2
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
push eax
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 4]
push eax
mov eax, dword [ebp - 0x248]
push eax
call dword [sym.imp.KERNEL32.dll__lwrite]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0xffffffff
jne 0x4b831d
jmp 0x4b8348
mov dword [ebp - 0x12c], 0
xor eax, eax
sub eax, dword [ebp - 0x138]
neg eax
sub dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x138]
add dword [ebp - 0x134], eax
jmp 0x4b82aa
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [ebp - 0x248]
push eax
call dword [sym.imp.KERNEL32.dll__lclose]
mov dword [ebp - 0x248], 0xffffffff
cmp dword [ebp - 0x12c], 0
je 0x4b837b
jmp 0x4b855c
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x120], eax
push 0
mov eax, dword [ebp - 0x124]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 1
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 0x218]
push eax
call fcn.00477cca
add esp, 8
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x4b83c9
jmp 0x4b855c
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 0x218]
push eax
call fcn.00477eb5
add esp, 4
push 0xc8
push 6
push 0
mov eax, dword [ebp - 0x120]
add eax, 0x218
push eax
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 0x214]
push eax
call fcn.00477c04
add esp, 0x14
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x4b8426
mov eax, dword [ebp - 0x12c]
jmp 0x4b85fc
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 0x218]
push eax
call fcn.004b1cf0
add esp, 4
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x4b8459
mov eax, dword [ebp - 0x12c]
jmp 0x4b85fc
mov eax, dword [ebp - 0x124]
push eax
call fcn.004b7707
add esp, 4
mov eax, dword [ebp - 0x124]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x118], eax
push 0x52ceb0
push 0
push 0
mov eax, dword [ebp - 0x118]
push eax
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
mov eax, dword [ebp - 0x118]
push eax
mov eax, dword [ebp - 0x124]
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
push 0x5e
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 0x218]
push eax
mov eax, dword [ebp - 0x124]
push eax
call fcn.004b08c5
add esp, 0xc
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x4b84e1
mov eax, dword [ebp - 0x12c]
jmp 0x4b85fc
push 4
mov eax, dword [ebp - 0x124]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x13c], eax
push 0
push 0
push 0x64
push 0x64
mov eax, dword [ebp - 0x124]
push eax
call fcn.004e462a
add esp, 0x14
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x4b8538
jmp 0x4b855c
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x114]
push eax
mov eax, dword [ebp - 0x124]
push eax
call fcn.0048b920
add esp, 0x18
mov dword [ebp - 0x12c], eax
push 0x7d00
push 2
call fcn.004d4fdd
add esp, 8
push 0
push 2
call fcn.004d52cc
add esp, 8
cmp dword [ebp - 0x248], 0
jl 0x4b8591
mov eax, dword [ebp - 0x248]
push eax
call dword [sym.imp.KERNEL32.dll__lclose]
push 0x200
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004e483d
add esp, 0xc
cmp dword [ebp - 0x12c], 0
je 0x4b85be
jmp 0x4b85e7
push 8
mov eax, dword [ebp - 0x124]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp + 8]
push eax
call fcn.004bad5e
add esp, 4
push 1
mov eax, dword [ebp + 8]
push eax
call fcn.004a1e47
add esp, 8
push 0
call fcn.0049c470
add esp, 4
mov eax, dword [ebp - 0x12c]
jmp 0x4b85fc
pop edi
pop esi
pop ebx
leave
ret