Function at 0x40c100
Capabilities:
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x5c4c5c
mov eax, dword fs:[0]
push eax
sub esp, 0x57c
mov eax, dword [0x630160]
xor eax, esp
mov dword [esp + 0x578], eax
push ebx
push edi
mov eax, dword [0x630160]
xor eax, esp
push eax
lea eax, [esp + 0x588]
mov dword fs:[0], eax
lea ecx, [esp + 0xec]
call fcn.00473200
xor ebx, ebx
push 0x54
lea eax, [esp + 0x9c]
push ebx
mov dword [esp + 0x598], ebx
push eax
mov dword [esp + 0xa0], ebx
call fcn.00422f70
push 0x208
lea ecx, [esp + 0x184]
push ebx
push ecx
call fcn.00422f70
push 0x208
lea edx, [esp + 0x398]
push ebx
push edx
call fcn.00422f70
add esp, 0x24
lea eax, [esp + 0x37c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov ecx, dword [esi + 4]
mov dword [esp + 0x98], ecx
lea ecx, [esp + 0x94]
lea edx, [esp + 0x174]
lea eax, [esp + 0x37c]
push ecx
mov dword [esp + 0x98], 0x58
mov dword [esp + 0xa4], str..ini
mov dword [esp + 0xb0], 1
mov dword [esp + 0xb4], edx
mov dword [esp + 0xb8], 0x208
mov dword [esp + 0xc4], eax
mov dword [esp + 0xcc], 0x806
mov dword [esp + 0xd4], 0x626500
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
test eax, eax
je 0x40c757
mov ecx, dword [esi + 0x764]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 1
call fcn.004730dd
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push eax
push 0x626708
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x768]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 2
call fcn.004730dd
push eax
push 0x626724
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x76c]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 3
call fcn.004730dd
push eax
push 0x626730
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x770]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 4
call fcn.004730dd
push eax
push 0x62673c
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x774]
mov edx, dword [ecx]
lea eax, [esp + 0x10]
push eax
mov edx, dword [edx + 0x38]
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 5
call fcn.004730dd
push eax
push 0x626748
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x778]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 6
call fcn.004730dd
push eax
push 0x626754
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x77c]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 7
call fcn.004730dd
push eax
push 0x626764
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x780]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 8
call fcn.004730dd
push eax
push str.BIOS
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x784]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
mov byte [esp + 0x590], 9
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
call fcn.004730dd
push eax
push 0x626780
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x788]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0xa
call fcn.004730dd
push eax
push str.UUID
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x78c]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0xb
call fcn.004730dd
push eax
push 0x626794
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x790]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0xc
call fcn.004730dd
push eax
push 0x62679c
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x794]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0xd
call fcn.004730dd
push eax
push 0x6267a4
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x798]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0xe
call fcn.004730dd
push eax
push 0x6267ac
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x79c]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0xf
call fcn.004730dd
push eax
push 0x6267b4
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x7a0]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0x10
call fcn.004730dd
push eax
push str._faS
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x7a4]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0x11
call fcn.004730dd
push eax
push str._f:yhV
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x7a8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0x12
call fcn.004730dd
push eax
push 0x6267cc
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
mov ecx, dword [esi + 0x7ac]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0x13
call fcn.004730dd
push eax
push 0x6267d4
push 0x626714
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.00473225
lea ecx, [esp + 0xec]
mov dword [esp + 0x590], 0xffffffff
call fcn.00473225
mov ecx, dword [esp + 0x588]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebx
mov ecx, dword [esp + 0x578]
xor ecx, esp
call fcn.00418878
add esp, 0x588
ret