Function at 0x425303
Capabilities:
Get common file path
Read .ini file

Disassembly:
push 0x474
mov eax, 0x46ed9e
call fcn.004517f7
mov ebx, ecx
mov eax, dword [ebx + 0x38]
xor edi, edi
mov dword [ebp - 0x444], ebx
cmp eax, edi
je 0x42532c
push eax
call fcn.00418d3e
mov dword [ebx + 0x38], edi
lea esi, [ebp - 0x440]
call fcn.00408676
push 1
push 0x1a
lea eax, [ebp - 0x424]
push eax
push edi
mov dword [ebp - 4], edi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push dword [ebp - 0x440]
mov eax, dword [ebx + 4]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push edi
push 0x477348
push eax
call esi
mov dword [ebp - 0x448], eax
call fcn.0042a8d7
push eax
lea ecx, [ebp - 0x430]
call fcn.00402773
push str.ESCNDV
push 0x478068
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x430]
push str._s_s_s
push eax
mov byte [ebp - 4], 1
call fcn.0040314f
add esp, 0x14
call fcn.0042a8d7
push eax
lea ecx, [ebp - 0x43c]
call fcn.00402773
push dword [ebp - 0x448]
mov byte [ebp - 4], 2
push ecx
mov ecx, esp
mov dword [ebp - 0x434], esp
push 0x47987c
call fcn.004024c3
lea edi, [ebp - 0x428]
call fcn.00429b27
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 3
call fcn.0040270e
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x428]
add ecx, 0xfffffff0
call fcn.0040285d
call fcn.0042a8d7
push eax
lea ecx, [ebp - 0x428]
call fcn.00402773
mov byte [ebp - 4], 4
push dword [ebx + 0x68]
lea eax, [ebp - 0x428]
push dword [ebp - 0x43c]
push dword [ebp - 0x430]
push str._s_s_s
push eax
call fcn.0040314f
add esp, 0x14
push dword [ebp - 0x428]
mov edi, str.FileSaveSettings
push 0xffffffffffffffff
push 0x478788
push edi
call esi
cmp eax, 0xffffffff
jne 0x425494
mov ecx, dword [ebp - 0x428]
add ecx, 0xfffffff0
call fcn.0040285d
mov ecx, dword [ebp - 0x43c]
add ecx, 0xfffffff0
call fcn.0040285d
mov ecx, dword [ebp - 0x430]
add ecx, 0xfffffff0
call fcn.0040285d
mov ecx, dword [ebp - 0x440]
add ecx, 0xfffffff0
call fcn.0040285d
xor eax, eax
inc eax
call fcn.0045187a
ret
push dword [ebp - 0x428]
push 1
push str.FolderPresetIndex
push edi
call esi
mov esi, eax
call fcn.0042a8d7
push eax
lea ecx, [ebp - 0x42c]
call fcn.00402773
mov byte [ebp - 4], 5
test esi, esi
jne 0x4254d2
push esi
push 5
lea eax, [ebp - 0x21c]
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
jmp 0x425534
cmp esi, 1
jne 0x42550c
lea ebx, [ebp - 0x434]
call fcn.00428510
push eax
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 6
call fcn.0040270e
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x434]
add ecx, 0xfffffff0
call fcn.0040285d
mov ebx, dword [ebp - 0x444]
jmp 0x425546
cmp esi, 2
jne 0x425546
push dword [ebp - 0x428]
lea eax, [ebp - 0x21c]
push 0x104
push eax
push 0x47741c
push str.FolderAbsolutePath
push edi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x42c]
call fcn.0040247a
mov esi, dword [ebp - 0x42c]
cmp dword [esi - 0xc], 0
jne 0x4255df
lea ebx, [ebp - 0x434]
call fcn.00428510
push eax
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 7
call fcn.0040270e
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x434]
add ecx, 0xfffffff0
call fcn.0040285d
mov esi, dword [ebp - 0x42c]
cmp dword [esi - 0xc], 0
jne 0x4255d9
xor edi, edi
inc edi
lea ecx, [esi - 0x10]
call fcn.0040285d
mov ecx, dword [ebp - 0x428]
add ecx, 0xfffffff0
call fcn.0040285d
mov ecx, dword [ebp - 0x43c]
add ecx, 0xfffffff0
call fcn.0040285d
mov ecx, dword [ebp - 0x430]
add ecx, 0xfffffff0
call fcn.0040285d
mov ecx, dword [ebp - 0x440]
add ecx, 0xfffffff0
call fcn.0040285d
mov eax, edi
jmp 0x42548e
mov ebx, dword [ebp - 0x444]
push 0xa
lea ecx, [ebp - 0x464]
call fcn.0042ada0
push 0xa
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 8
call fcn.0042ada0
push ecx
mov byte [ebp - 4], 9
lea eax, [ebp - 0x42c]
mov dword [ebp - 0x434], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x464]
call fcn.0040283c
call fcn.004247bd
push dword [ebp - 0x448]
mov ecx, ebx
call fcn.00424482
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x464]
push eax
push ecx
lea eax, [ebp - 0x42c]
mov dword [ebp - 0x434], esp
mov ecx, esp
push eax
lea edi, [ebp - 0x480]
call fcn.0040283c
call fcn.00424947
cmp dword [ebx + 0x3c], 0xffffffff
je 0x425688
lea eax, [ebx + 0x5c]
push 0
mov edx, edi
lea ecx, [ebp - 0x438]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], ebx
call fcn.00404f29
test eax, eax
je 0x4256ad
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 8
call fcn.0042aef0
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 5
call fcn.0042aef0
xor edi, edi
jmp 0x425592
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 8
call fcn.0042aef0
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 5
call fcn.0042aef0
jmp 0x42558f