Function at 0x407fe4
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x468
push 0x104
lea eax, [ebp - 0x20c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x5c
lea ecx, [ebp - 0x20c]
push ecx
call fcn.00409f50
add esp, 8
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x408090
mov edx, dword [ebp - 0x108]
add edx, 1
push edx
lea eax, [ebp - 0x104]
push eax
call fcn.00409d90
add esp, 8
push str.Simulate.CD
mov ecx, dword [ebp - 0x108]
add ecx, 1
push ecx
call fcn.00409d90
add esp, 8
lea edx, [ebp - 0x34c]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0xffffffff
je 0x408085
mov byte [ebp + 0xc], 1
mov ecx, dword [ebp - 0x354]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edx, dword [ebp - 0x108]
mov byte [edx], 0
jmp 0x4080a6
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x104]
push ecx
call fcn.00409d90
add esp, 8
push 0x2e
lea edx, [ebp - 0x104]
push edx
call fcn.00409f50
add esp, 8
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x4080cf
mov eax, dword [ebp - 0x108]
mov byte [eax], 0
mov ecx, dword [ebp + 0xc]
and ecx, 0xff
test ecx, ecx
je 0x4080ee
lea edx, [ebp - 0x20c]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
push 0
lea eax, [ebp - 0x20c]
push eax
call fcn.00409e90
add esp, 8
sub eax, 1
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
movsx edx, byte [ecx]
cmp edx, 0x5c
je 0x40812a
push 0x41159c
lea eax, [ebp - 0x20c]
push eax
call fcn.00409da0
add esp, 8
mov dword [ebp - 0x350], 0
jmp 0x408145
mov ecx, dword [ebp - 0x350]
add ecx, 1
mov dword [ebp - 0x350], ecx
cmp dword [ebp - 0x350], 0x3e8
jge 0x4082c4
mov byte [ebp - 0x45c], 0
xor edx, edx
mov dl, byte [0x41236d]
test edx, edx
je 0x408174
mov dword [ebp - 0x468], str..EXE
jmp 0x40817e
mov dword [ebp - 0x468], 0x4125ac
mov eax, dword [ebp - 0x468]
push eax
mov ecx, dword [ebp - 0x350]
push ecx
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x20c]
push eax
push str._s_s.TMP_d_s
lea ecx, [ebp - 0x458]
push ecx
call fcn.00409f77
add esp, 0x18
mov edx, dword [ebp + 0x10]
and edx, 0xff
test edx, edx
je 0x4081d5
lea eax, [ebp - 0x458]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00409d90
add esp, 8
mov al, 1
jmp 0x4082c6
lea edx, [ebp - 0x34c]
push edx
lea eax, [ebp - 0x458]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0xffffffff
je 0x40820c
mov byte [ebp - 0x45c], 1
mov ecx, dword [ebp - 0x354]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
lea edx, [ebp - 0x458]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 0xffffffff
jne 0x4082a0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0xb7
je 0x40825b
cmp dword [ebp - 0x464], 0x20
jne 0x408260
jmp 0x408136
cmp dword [ebp - 0x464], 5
jne 0x40827d
mov eax, dword [ebp - 0x45c]
and eax, 0xff
test eax, eax
je 0x40827d
jmp 0x408136
mov ecx, dword [ebp + 0xc]
and ecx, 0xff
test ecx, ecx
jne 0x40829e
mov dl, byte [ebp + 0x10]
push edx
push 1
mov eax, dword [ebp + 8]
push eax
call fcn.00407fe4
add esp, 0xc
jmp 0x4082c6
jmp 0x4082c4
mov ecx, dword [ebp - 0x460]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea edx, [ebp - 0x458]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00409d90
add esp, 8
mov al, 1
jmp 0x4082c6
xor al, al
mov esp, ebp
pop ebp
ret