Function at 0x4108b8
Capabilities:
Get common file path

Disassembly:
mov eax, 0x420d23
call fcn.00412d4c
sub esp, 0x138
push ebx
xor ebx, ebx
push ebp
mov dword [esp + 0x20], ebx
push esi
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
push edi
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], ebx
mov byte [esp + 0x10], bl
mov dword [esp + 0x150], 1
mov esi, dword [esp + 0x160]
mov ebp, dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
jne 0x4109b5
call fcn.004113ad
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventA]
cmp eax, 3
jae 0x410927
push ebx
push ebx
push ebx
push ebx
call esi
test eax, eax
je 0x410927
push eax
call ebp
lea eax, [esp + 0x44]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x410960
cmp byte [esp + 0x44], 0
jne 0x410946
mov eax, ebx
jmp 0x410951
lea eax, [esp + 0x44]
push eax
call fcn.004124c0
pop ecx
push eax
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x18]
call fcn.004040e9
cmp dword [esp + 0x24], 0x10
lea eax, [esp + 0x10]
cmovae eax, dword [esp + 0x10]
push 1
push eax
call fcn.0040ff2c
pop ecx
pop ecx
test al, al
jne 0x41099a
push dword [esp + 0x164]
call fcn.00404573
pop ecx
push eax
push dword [esp + 0x168]
lea ecx, [esp + 0x18]
call fcn.004040e9
call fcn.004113ad
cmp eax, 3
jae 0x4109c7
push ebx
push 1
push 1
push ebx
call esi
test eax, eax
je 0x4109c7
push eax
call ebp
jmp 0x4109c7
push esi
call fcn.00404573
pop ecx
push eax
push esi
lea ecx, [esp + 0x18]
call fcn.004040e9
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x410a06
cmp dword [esp + 0x24], 0x10
lea eax, [esp + 0x10]
cmovae eax, dword [esp + 0x10]
cmp byte [eax + ecx - 1], 0x5c
je 0x410a06
cmp dword [esp + 0x24], 0x10
lea eax, [esp + 0x10]
cmovae eax, dword [esp + 0x10]
cmp byte [eax + ecx - 1], 0x2f
je 0x410a06
push 0x5c
push 1
lea ecx, [esp + 0x18]
call fcn.00405183
cmp dword [esp + 0x24], 0x10
lea edi, [esp + 0x10]
cmovae edi, dword [esp + 0x10]
call fcn.004150a2
mov esi, eax
shl esi, 0x10
call fcn.004150a2
or eax, esi
push eax
push edi
lea eax, [esp + 0x34]
push str._spl_08x.ftf
push eax
call fcn.004075ca
mov byte [esp + 0x160], 2
cmp dword [esp + 0x50], 0x10
lea eax, [esp + 0x3c]
cmovae eax, dword [esp + 0x3c]
push eax
call fcn.00410fd8
mov ecx, dword [0x42e660]
add esp, 0x14
lea eax, [ecx + 0x54]
push eax
push 1
call fcn.0040d9d1
cmp dword [eax], 0
je 0x410aa0
mov ecx, dword [0x42e660]
cmp dword [esp + 0x40], 0x10
lea eax, [ecx + 0x54]
push eax
lea esi, [esp + 0x30]
cmovae esi, dword [esp + 0x30]
push 1
call fcn.0040d9d1
xor ecx, ecx
push ecx
push 0x80
push 1
push ecx
push ecx
push 0xc0000000
push esi
call dword [eax]
jmp 0x410aa2
xor eax, eax
cmp eax, 0xffffffff
jne 0x410b1d
call fcn.004113ad
cmp eax, 3
jae 0x410ace
push str.Global544
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
test eax, eax
je 0x410ace
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [esp + 0x150], 1
lea ecx, [esp + 0x2c]
call fcn.004015cc
inc ebx
cmp ebx, 0x200
jl 0x410a06
mov esi, dword [esp + 0x15c]
xor eax, eax
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], eax
mov byte [esi], al
mov dword [esp + 0x28], 1
mov byte [esp + 0x150], al
lea ecx, [esp + 0x10]
call fcn.004015cc
mov eax, esi
jmp 0x410b62
push eax
call ebp
mov ecx, dword [esp + 0x15c]
lea eax, [esp + 0x2c]
push eax
call fcn.0040a246
mov dword [esp + 0x28], 1
mov byte [esp + 0x150], 1
lea ecx, [esp + 0x2c]
call fcn.004015cc
mov byte [esp + 0x150], 0
lea ecx, [esp + 0x10]
call fcn.004015cc
mov eax, dword [esp + 0x15c]
mov ecx, dword [esp + 0x148]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
leave
ret