Function at 0x40ab40
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x43c
mov eax, dword [0x4fb2a0]
xor eax, esp
mov dword [esp + 0x438], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push 0xfa1
mov dword [esp + 0x34], eax
call fcn.00416110
push 0x206
lea edx, [esp + 0x3e]
xor ecx, ecx
push ebx
push edx
mov word [esp + 0x44], cx
call fcn.00438200
add esp, 0x14
push 0x206
lea ecx, [esp + 0x23e]
xor eax, eax
push ebx
push ecx
mov word [esp + 0x244], ax
call fcn.00438200
add esp, 0xc
lea edx, [esp + 0x30]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [esp + 0x238]
push eax
push ebx
push str.gppins
lea ecx, [esp + 0x3c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
test eax, eax
je 0x40ac18
xor eax, eax
lea ebx, [ebx]
movzx ecx, word [esp + eax + 0x238]
mov word [esp + eax + 0x30], cx
add eax, 2
cmp cx, bx
jne 0x40abe0
lea eax, [esp + 0x30]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x40ac00
sub eax, edx
sar eax, 1
xor edx, edx
mov word [esp + eax*2 + 0x28], dx
jmp 0x40ac4f
lea eax, [esp + 0x30]
add eax, 0xfffffffe
nop
mov cx, word [eax + 2]
add eax, 2
cmp cx, bx
jne 0x40ac20
mov ecx, dword [str.tmpgpp]
mov edx, dword [0x4d67a0]
mov dword [eax], ecx
mov ecx, dword [0x4d67a4]
mov dword [eax + 4], edx
mov edx, dword [0x4d67a8]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov eax, dword [0x50012c]
cmp eax, ebx
jne 0x40ac79
push 0x24d4
call fcn.0042ec5c
add esp, 4
cmp eax, ebx
je 0x40ac72
mov esi, eax
call fcn.004112e0
jmp 0x40ac74
xor eax, eax
mov dword [0x50012c], eax
push 1
lea ecx, [esp + 0x34]
mov edx, eax
call fcn.00410190
call fcn.0040a710
push ebx
push 0xfa2
call fcn.00416110
mov eax, dword [0x4fc44c]
mov edx, dword [eax + 0xc]
add esp, 8
mov ecx, 0x4fc44c
call edx
add eax, 0x10
mov dword [esp + 0x24], eax
mov eax, dword [0x50012c]
cmp eax, ebx
jne 0x40acd9
push 0x24d4
call fcn.0042ec5c
add esp, 4
cmp eax, ebx
je 0x40acd2
mov esi, eax
call fcn.004112e0
jmp 0x40acd4
xor eax, eax
mov dword [0x50012c], eax
add eax, 0x208
push eax
push str._sApps
lea edi, [esp + 0x2c]
call fcn.00403db0
mov eax, dword [0x50012c]
add esp, 8
cmp eax, ebx
jne 0x40ad1a
push 0x24d4
call fcn.0042ec5c
add esp, 4
cmp eax, ebx
je 0x40ad13
mov esi, eax
call fcn.004112e0
jmp 0x40ad15
xor eax, eax
mov dword [0x50012c], eax
mov ecx, dword [esp + 0x24]
push 1
push 0x4d5b00
push ecx
mov ecx, eax
call fcn.0040d100
mov edx, dword [0x4fc44c]
mov eax, dword [edx + 0xc]
mov ecx, 0x4fc44c
call eax
add eax, 0x10
mov dword [esp + 0x20], eax
mov eax, dword [0x50012c]
cmp eax, ebx
jne 0x40ad6e
push 0x24d4
call fcn.0042ec5c
add esp, 4
cmp eax, ebx
je 0x40ad67
mov esi, eax
call fcn.004112e0
jmp 0x40ad69
xor eax, eax
mov dword [0x50012c], eax
add eax, 0x208
push eax
push str._sMain
lea edi, [esp + 0x28]
call fcn.00403db0
mov eax, dword [0x50012c]
add esp, 8
cmp eax, ebx
jne 0x40adaf
push 0x24d4
call fcn.0042ec5c
add esp, 4
cmp eax, ebx
je 0x40ada8
mov esi, eax
call fcn.004112e0
jmp 0x40adaa
xor eax, eax
mov dword [0x50012c], eax
mov ecx, dword [esp + 0x20]
push 2
push 0x4d5b00
push ecx
mov ecx, eax
call fcn.0040d100
mov edx, dword [0x4fc44c]
mov eax, dword [edx + 0xc]
mov ecx, 0x4fc44c
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
mov eax, dword [0x50012c]
cmp eax, ebx
jne 0x40ae03
push 0x24d4
call fcn.0042ec5c
add esp, 4
cmp eax, ebx
je 0x40adfc
mov esi, eax
call fcn.004112e0
jmp 0x40adfe
xor eax, eax
mov dword [0x50012c], eax
add eax, 0x208
push eax
push str._sSDK
lea edi, [esp + 0x30]
call fcn.00403db0
mov eax, dword [0x50012c]
add esp, 8
cmp eax, ebx
jne 0x40ae44
push 0x24d4
call fcn.0042ec5c
add esp, 4
cmp eax, ebx
je 0x40ae3d
mov esi, eax
call fcn.004112e0
jmp 0x40ae3f
xor eax, eax
mov dword [0x50012c], eax
mov ecx, dword [esp + 0x28]
push 3
push 0x4d5b00
push ecx
mov ecx, eax
call fcn.0040d100
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
nop
mov ecx, dword [0x50012c]
test ecx, ecx
jne 0x40ae8e
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40ae86
mov esi, eax
call fcn.004112e0
mov ecx, eax
jmp 0x40ae88
xor ecx, ecx
mov dword [0x50012c], ecx
mov edx, dword [ecx + 0x2294]
sub edx, dword [ecx + 0x2290]
mov eax, 0x7e07e07f
imul edx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x10], eax
jae 0x40afc9
test ecx, ecx
jne 0x40aedd
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40aed5
mov esi, eax
call fcn.004112e0
mov ecx, eax
jmp 0x40aed7
xor ecx, ecx
mov dword [0x50012c], ecx
mov dword [esp + 0x1c], ecx
test ecx, ecx
jne 0x40af09
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40af01
mov esi, eax
call fcn.004112e0
mov ecx, eax
jmp 0x40af03
xor ecx, ecx
mov dword [0x50012c], ecx
mov edi, ecx
test ecx, ecx
jne 0x40af33
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40af2b
mov esi, eax
call fcn.004112e0
mov ecx, eax
jmp 0x40af2d
xor ecx, ecx
mov dword [0x50012c], ecx
mov ebx, dword [ecx + 0x2290]
mov ecx, dword [esp + 0x1c]
add ebx, dword [esp + 0x14]
add ecx, 0x1c70
lea edx, [edi + 0x208]
call fcn.0040d830
mov ebx, eax
mov eax, dword [0x50012c]
test eax, eax
jne 0x40af7e
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40af77
mov esi, eax
call fcn.004112e0
jmp 0x40af79
xor eax, eax
mov dword [0x50012c], eax
mov ecx, dword [eax + 0x2290]
mov esi, dword [esp + 0x14]
lea edx, [esi + ecx + 0x208]
nop
movzx ecx, word [ebx]
mov word [edx], cx
add ebx, 2
add edx, 2
test cx, cx
jne 0x40af90
mov edx, dword [eax + 0x2290]
lea ecx, [esi + edx]
lea edx, [ecx + 0x208]
push eax
call fcn.0040d910
inc dword [esp + 0x10]
add esi, 0x410
mov dword [esp + 0x14], esi
jmp 0x40ae60
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
lea esp, [esp]
test ecx, ecx
jne 0x40b008
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40b000
mov esi, eax
call fcn.004112e0
mov ecx, eax
jmp 0x40b002
xor ecx, ecx
mov dword [0x50012c], ecx
mov edx, dword [ecx + 0x22a4]
sub edx, dword [ecx + 0x22a0]
mov eax, 0x7e07e07f
imul edx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x18], eax
jae 0x40b204
mov edx, dword [0x4fc44c]
mov eax, dword [edx + 0xc]
mov ecx, 0x4fc44c
call eax
add eax, 0x10
mov dword [esp + 0x10], eax
mov eax, dword [0x50012c]
test eax, eax
jne 0x40b070
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40b069
mov esi, eax
call fcn.004112e0
jmp 0x40b06b
xor eax, eax
mov dword [0x50012c], eax
add eax, 0x208
push eax
push str._sMain
lea edi, [esp + 0x18]
call fcn.00403db0
mov eax, dword [0x50012c]
add esp, 8
test eax, eax
jne 0x40b0b1
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40b0aa
mov esi, eax
call fcn.004112e0
jmp 0x40b0ac
xor eax, eax
mov dword [0x50012c], eax
mov edi, dword [esp + 0x10]
cmp dword [edi - 4], 1
mov dword [esp + 0x1c], eax
jle 0x40b0d6
mov ecx, dword [edi - 0xc]
push ecx
lea edx, [esp + 0x14]
push edx
call fcn.00403600
mov edi, dword [esp + 0x10]
mov eax, dword [0x50012c]
test eax, eax
jne 0x40b0fb
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40b0f4
mov esi, eax
call fcn.004112e0
jmp 0x40b0f6
xor eax, eax
mov dword [0x50012c], eax
mov ebx, dword [eax + 0x22a0]
mov ecx, dword [esp + 0x1c]
add ebx, dword [esp + 0x14]
add ecx, 0x410
mov edx, edi
call fcn.0040d830
mov ebx, eax
mov eax, dword [0x50012c]
test eax, eax
jne 0x40b142
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40b13b
mov esi, eax
call fcn.004112e0
jmp 0x40b13d
xor eax, eax
mov dword [0x50012c], eax
mov eax, dword [eax + 0x22a0]
mov ecx, dword [esp + 0x14]
lea ecx, [eax + ecx + 0x208]
movzx eax, word [ebx]
mov word [ecx], ax
add ebx, 2
add ecx, 2
test ax, ax
jne 0x40b153
mov eax, dword [edi - 8]
push eax
push edi
call fcn.0042f176
add esp, 8
test eax, eax
js 0x40b1fa
cmp eax, dword [edi - 8]
jg 0x40b1fa
xor edx, edx
mov dword [edi - 0xc], eax
mov word [edi + eax*2], dx
mov eax, dword [0x50012c]
test eax, eax
jne 0x40b1b1
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40b1aa
mov esi, eax
call fcn.004112e0
jmp 0x40b1ac
xor eax, eax
mov dword [0x50012c], eax
mov ecx, dword [eax + 0x22a0]
add ecx, dword [esp + 0x14]
push eax
lea edx, [ecx + 0x208]
call fcn.0040d910
add edi, 0xfffffff0
lea eax, [edi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x40b1e3
mov ecx, dword [edi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push edi
call eax
inc dword [esp + 0x18]
add dword [esp + 0x14], 0x410
mov ecx, dword [0x50012c]
jmp 0x40afe0
push 0x80070057
call fcn.00403050
xor ebx, ebx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
test ecx, ecx
jne 0x40b236
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40b22e
mov esi, eax
call fcn.004112e0
mov ecx, eax
jmp 0x40b230
xor ecx, ecx
mov dword [0x50012c], ecx
mov edx, dword [ecx + 0x22b4]
sub edx, dword [ecx + 0x22b0]
mov eax, 0x7e07e07f
imul edx
sar edx, 9
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp dword [esp + 0x18], ecx
jae 0x40b425
mov edx, dword [0x4fc44c]
mov eax, dword [edx + 0xc]
mov ecx, 0x4fc44c
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
mov eax, dword [0x50012c]
test eax, eax
jne 0x40b29e
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40b297
mov esi, eax
call fcn.004112e0
jmp 0x40b299
xor eax, eax
mov dword [0x50012c], eax
add eax, 0x208
push eax
push str._sSDK
lea edi, [esp + 0x1c]
call fcn.00403db0
mov eax, dword [0x50012c]
add esp, 8
test eax, eax
jne 0x40b2df
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40b2d8
mov esi, eax
call fcn.004112e0
jmp 0x40b2da
xor eax, eax
mov dword [0x50012c], eax
mov edx, dword [0x4fc44c]
mov esi, dword [eax + 0x22b0]
mov eax, dword [edx + 0xc]
mov ecx, 0x4fc44c
call eax
add eax, 0x10
add esi, ebx
mov dword [esp + 0x10], eax
je 0x40b322
test esi, 0xffff0000
jne 0x40b326
movzx edi, si
call fcn.004030e0
test eax, eax
je 0x40b350
push eax
mov eax, edi
lea edi, [esp + 0x14]
call fcn.00403450
jmp 0x40b350
xor eax, eax
jmp 0x40b33f
mov eax, esi
lea edx, [eax + 2]
jmp 0x40b330
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x40b330
sub eax, edx
sar eax, 1
push esi
lea ecx, [esp + 0x14]
push ecx
mov ebx, eax
call fcn.004034f0
mov ebx, dword [esp + 0x1c]
mov eax, dword [0x50012c]
test eax, eax
jne 0x40b37a
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40b373
mov esi, eax
call fcn.004112e0
jmp 0x40b375
xor eax, eax
mov dword [0x50012c], eax
mov edi, dword [esp + 0x14]
add eax, 0x1e78
push eax
push edi
lea edx, [esp + 0x18]
push edx
call fcn.0040a240
mov eax, dword [0x50012c]
test eax, eax
jne 0x40b3b9
push 0x24d4
call fcn.0042ec5c
add esp, 4
test eax, eax
je 0x40b3b2
mov esi, eax
call fcn.004112e0
jmp 0x40b3b4
xor eax, eax
mov dword [0x50012c], eax
mov ecx, dword [eax + 0x22b0]
mov esi, dword [esp + 0x10]
add ecx, ebx
push eax
mov edx, esi
call fcn.0040d910
test eax, eax
je 0x40b3d8
mov eax, dword [esp + 0x2c]
mov byte [eax], 1
lea eax, [esi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b3f4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [edi - 0x10]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b410
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
inc dword [esp + 0x18]
mov ecx, dword [0x50012c]
add ebx, 0x410
jmp 0x40b20a
mov esi, dword [esp + 0x2c]
cmp byte [esi], 0
je 0x40b44d
cmp dword [0x500134], 0
jne 0x40b446
push 1
call fcn.0042ec5c
add esp, 4
mov dword [0x500134], eax
call fcn.00413aa0
mov byte [esi], al
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b46d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b48d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40b4ad
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x444]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0042e217
mov esp, ebp
pop ebp
ret 4