Function at 0x418e00
Capabilities:
Check if file exists
Create directory
Enumerate processes
Get common file path
Get startup folder

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x294
mov eax, dword [0x439004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x104
lea eax, [ebp - 0x16c]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0
push 2
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov esi, eax
mov dword [ebp - 0x294], 0x128
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, eax
lea eax, [ebp - 0x294]
push eax
push esi
call sub.KERNEL32.dll_Process32First
test eax, eax
je 0x418e92
mov ebx, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
cmp edi, dword [ebp - 0x28c]
je 0x418e81
lea eax, [ebp - 0x270]
push str.Artists_Of_Fortune___8bit.exe
push eax
call ebx
add esp, 8
test eax, eax
je 0x418fde
lea eax, [ebp - 0x294]
push eax
push esi
call sub.KERNEL32.dll_Process32Next
test eax, eax
jne 0x418e60
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x180
call sub.hge.dll_hgeCreate
push 0x417770
mov dword [0x439734], eax
push 8
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
mov eax, dword [0x439734]
push 0xcb
push 0x19
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov eax, dword [0x439734]
push str.log.txt
push 0x1c
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
mov eax, dword [0x439734]
push 0
push 4
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov eax, dword [0x439734]
push 1
push 6
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowDC]
mov esi, dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edi, eax
push 8
push edi
call esi
push 0xa
push edi
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [0x439754], xmm0
call esi
movss xmm4, dword [0x439754]
ucomiss xmm4, dword [0x434924]
movss xmm5, dword [0x433bbc]
movss xmm3, dword [0x433684]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
lahf
movss dword [0x439758], xmm0
movaps xmm2, xmm0
test ah, 0x44
jp 0x418f81
ucomiss xmm0, dword [0x43491c]
lahf
test ah, 0x44
jp 0x418f81
movaps xmm4, xmm5
mov dword [0x439758], 0x44870000
movss dword [0x439754], xmm4
movaps xmm2, xmm3
comiss xmm2, xmm3
jb 0x418fea
movss xmm0, dword [0x4334e4]
mov eax, dword [0x439734]
push 0x780
movss dword [0x439938], xmm0
movss dword [0x43993c], xmm0
mov dword [0x439744], 0
movss dword [0x439930], xmm0
movss dword [0x439934], xmm0
mov ecx, dword [eax]
push 0x11
push eax
call dword [ecx + 0x2c]
mov eax, dword [0x439734]
push 0x438
push 0x12
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
jmp 0x419054
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x419404
movaps xmm1, xmm2
mov ecx, dword [0x439734]
movaps xmm0, xmm4
mov dword [0x439744], 1
divss xmm1, xmm3
divss xmm0, xmm5
divss xmm3, xmm2
divss xmm5, xmm4
cvttss2si eax, xmm4
movss dword [0x439938], xmm5
push eax
movss dword [0x43993c], xmm3
movss dword [0x439930], xmm0
movss dword [0x439934], xmm1
mov edx, dword [ecx]
push 0x11
push ecx
call dword [edx + 0x2c]
cvttss2si eax, dword [0x439758]
mov ecx, dword [0x439734]
mov edx, dword [ecx]
push eax
push 0x12
push ecx
call dword [edx + 0x2c]
mov eax, dword [0x439734]
push 0x20
push 0x13
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [0x439734]
push 0
push 7
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
push 1
push 0x1a
push 0x439950
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
test eax, eax
jns 0x4190a4
mov eax, dword [0x439734]
push str.Could_not_get_Application_Data.
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
add esp, 8
mov ecx, 0x4334f4
jmp 0x41914a
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendA]
push str.Oleg_Sereda
push 0x439950
call esi
push 0x439950
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
mov ebx, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
jne 0x4190f7
push 0
push 0x439950
call ebx
test eax, eax
jne 0x4190f7
push str.Oleg_Sereda
mov eax, dword [0x439734]
push str.Could_not_create_directory__s.
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
add esp, 0xc
mov ecx, 0x4334f4
jmp 0x41914a
push str.Artists_Of_Fortune___8bit
push 0x439950
call esi
mov edi, 0x439950
dec edi
nop dword [eax]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x419110
mov ax, word [0x4348a4]
push 0x439950
mov word [edi], ax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x419145
push eax
push 0x439950
call ebx
test eax, eax
jne 0x419145
push str.Artists_Of_Fortune___8bit
jmp 0x4190dd
mov ecx, 0x439950
lea edx, [ebp - 0x16c]
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x419152
lea ecx, [ebp - 0x16c]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x419166
mov eax, dword [str.artists.ini]
lea edx, [ebp - 0x16c]
mov dword [ecx], eax
mov eax, dword [0x4346f8]
mov dword [ecx + 4], eax
mov eax, dword [0x4346fc]
mov dword [ecx + 8], eax
mov eax, dword [0x439734]
push edx
push 0x1b
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
push 0x20
call fcn.0042f719
add esp, 4
test eax, eax
je 0x4191b2
mov ecx, eax
call fcn.00423730
jmp 0x4191b4
xor eax, eax
mov dword [0x43972c], eax
mov eax, dword [eax + 0x18]
sub eax, 1
je 0x41920a
sub eax, 1
je 0x4191ee
sub eax, 1
jne 0x4191e7
push 4
call fcn.0042f719
add esp, 4
test eax, eax
je 0x419226
push str.StringsFR.txt
mov ecx, eax
call fcn.00402640
jmp 0x419228
mov eax, dword [0x43973c]
jmp 0x41922d
push 4
call fcn.0042f719
add esp, 4
test eax, eax
je 0x419226
push str.StringsDE.txt
mov ecx, eax
call fcn.00402640
jmp 0x419228
push 4
call fcn.0042f719
add esp, 4
test eax, eax
je 0x419226
push str.StringsEN.txt
mov ecx, eax
call fcn.00402640
jmp 0x419228
xor eax, eax
mov dword [0x43973c], eax
push str.GAMETITLE
mov ecx, eax
call fcn.00402990
mov ecx, dword [0x439734]
push eax
push 0x1a
push ecx
mov edx, dword [ecx]
call dword [edx + 0x30]
mov eax, dword [0x43972c]
mov ecx, dword [0x439734]
cmp byte [eax + 4], 0
mov edx, dword [ecx]
sete al
movzx eax, al
push eax
push 1
push ecx
call dword [edx + 0x20]
mov eax, dword [0x439734]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
cmp al, 1
jne 0x419283
mov ecx, dword [0x43972c]
cmp byte [ecx + 4], 0
jne 0x41929f
mov eax, dword [0x439734]
push 1
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test al, al
jne 0x4192ce
mov ecx, dword [0x43972c]
cmp byte [ecx + 4], al
jne 0x4192ce
sete al
mov byte [ecx + 4], al
mov ecx, dword [0x43972c]
call fcn.004239b0
mov eax, dword [0x43972c]
mov ecx, dword [0x439734]
cmp byte [eax + 4], 0
mov edx, dword [ecx]
sete al
movzx eax, al
push eax
push 1
push ecx
call dword [edx + 0x20]
push 0x5bc
call fcn.0042f719
add esp, 4
test eax, eax
je 0x4192e8
mov ecx, eax
call fcn.0042a3f0
jmp 0x4192ea
xor eax, eax
mov ecx, eax
mov dword [0x439738], eax
call fcn.0042a660
mov eax, dword [0x439734]
push 0x50
push 0x17
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [0x439734]
push 0
push 2
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov eax, dword [0x439734]
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x80]
mov eax, dword [0x439734]
push eax
mov ecx, dword [eax]
call dword [ecx + 4]
test al, al
je 0x4193c3
call fcn.00417f20
test al, al
je 0x419404
mov eax, dword [0x439734]
push 0x4183c0
push 0xa
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov eax, dword [0x439734]
push 0x417a30
push 0xb
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov eax, dword [0x439734]
push fcn.00405220
push 0xc
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov eax, dword [0x439734]
push 0x4183e0
push 9
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov eax, dword [0x439734]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov eax, dword [0x439730]
mov eax, dword [eax + 0x34]
cmp eax, 8
je 0x4193a9
cmp eax, 3
jne 0x4193b4
mov ecx, dword [0x439728]
call fcn.00422c00
mov ecx, dword [0x439728]
push 0
call fcn.004200b0
jmp 0x4193ff
mov eax, dword [0x439734]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
lea edx, [ebp - 0x68]
sub edx, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x4193d3
mov ecx, dword [0x43973c]
push 0x10
push str.ERROR
call fcn.00402990
push eax
lea eax, [ebp - 0x68]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00417780
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0042f757
mov esp, ebp
pop ebp
ret 0x10