Function at 0x402500
Capabilities:
Get common file path
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x43fd67
mov eax, dword fs:[0]
push eax
sub esp, 0xa50
mov eax, dword [0x4575e0]
xor eax, esp
mov dword [esp + 0xa48], eax
push ebx
push esi
push edi
mov eax, dword [0x4575e0]
xor eax, esp
push eax
lea eax, [esp + 0xa60]
mov dword fs:[0], eax
mov esi, ecx
call fcn.0040e82f
mov eax, dword [esi + 0x20]
push 0
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
push eax
call fcn.00418559
mov edi, eax
test edi, edi
je 0x4025d0
lea ecx, [esp + 0x18]
call fcn.00402120
mov dword [esp + 0xa68], 0
push 0x65
call fcn.004111fe
test eax, eax
je 0x4025bc
push 0x65
push eax
lea ecx, [esp + 0x20]
call fcn.00401db0
test eax, eax
je 0x4025bc
mov ecx, dword [esp + 0x18]
cmp dword [ecx - 0xc], 0
je 0x4025bc
mov edx, dword [edi + 4]
mov ebx, dword [sym.imp.USER32.dll_AppendMenuW]
push 0
push 0
push 0x800
push edx
call ebx
mov eax, dword [esp + 0x18]
mov ecx, dword [edi + 4]
push eax
push 0x10
push 0
push ecx
call ebx
mov dword [esp + 0xa68], 0xffffffff
lea ecx, [esp + 0x18]
call fcn.004021b0
mov eax, dword [esi + 0x74]
mov edx, dword [esi + 0x20]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 1
push 0x80
push edx
call edi
mov eax, dword [esi + 0x74]
push eax
mov eax, dword [esi + 0x20]
push 0
push 0x80
push eax
call edi
push 0x44a428
xor bl, bl
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, eax
test edi, edi
je 0x4027d9
push str.GetUserDefaultUILanguage
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x402638
call eax
movzx eax, ax
and eax, 0x3ff
movzx eax, ax
sub eax, 1
je 0x402636
sub eax, 0xc
jne 0x402638
mov bl, 1
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test bl, bl
je 0x4027d9
push 0
push 0x400000
push 0
mov ecx, esi
call fcn.00418884
push 0
push 0x400000
push 0
push 0x3ee
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
push 0
push 0x400000
push 0
push 0x3ed
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
push 0
push 0x400000
push 0
push 0x3eb
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
push 0
push 0x400000
push 0
push 0x3ec
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
push 0
push 0x400000
push 0
push 4
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
push 0
push 0x400000
push 0
push 2
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
push 0
push 0x400000
push 0
push 1
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
push 0
push 0x400000
push 0
push 0x3e8
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
mov edx, dword [esi + 0xab4]
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [esp + 0x24]
push ecx
push edx
call edi
push 0x3ec
mov ecx, esi
call fcn.004187d6
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x44]
push ecx
push edx
call edi
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
sub ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x44]
push 4
push eax
push ecx
push 7
push edx
push 0
lea ecx, [esi + 0xa94]
call fcn.00418b57
push 0x3ed
mov ecx, esi
call fcn.004187d6
mov edx, dword [eax + 0x20]
lea ecx, [esp + 0x34]
push ecx
push edx
call edi
mov eax, dword [esp + 0x40]
sub eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
sub ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x2c]
sub edx, dword [esp + 0x24]
push 4
push eax
mov eax, dword [esp + 0x4c]
push ecx
push 7
lea ecx, [edx + eax + 0xa]
push ecx
push 0
push 0x3ed
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418b57
jmp 0x4028c0
push 0
push 0
push 0x400000
mov ecx, esi
call fcn.00418884
push 0
push 0
push 0x400000
push 0x3ee
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
push 0
push 0
push 0x400000
push 0x3ed
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
push 0
push 0
push 0x400000
push 0x3eb
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
push 0
push 0
push 0x400000
push 0x3ec
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
push 0
push 0
push 0x400000
push 4
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
push 0
push 0
push 0x400000
push 2
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
push 0
push 0
push 0x400000
push 1
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
push 0
push 0
push 0x400000
push 0x3e8
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.00418884
call fcn.0040e34b
mov eax, dword [eax + 0xc]
push 0x83
push eax
lea edi, [esi + 0xa8c]
call dword [sym.imp.USER32.dll_LoadBitmapW]
push eax
mov ecx, edi
call fcn.00411020
test edi, edi
je 0x4028e9
mov edi, dword [edi + 4]
mov edx, dword [esi + 0xab4]
push edi
push 0
push 0x172
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x200
lea eax, [esp + 0x58]
push 0
push eax
call fcn.0042a280
add esp, 0xc
push 0x44a350
lea ecx, [esp + 0x18]
call fcn.00401c20
mov dword [esp + 0xa68], 1
push 0x67
call fcn.004111fe
test eax, eax
je 0x402941
push 0x67
push eax
lea ecx, [esi + 0x7c]
call fcn.00401db0
mov eax, dword [esi + 0x7c]
push eax
push 0x3ee
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.004188ae
push 0
push 0x44a350
lea ecx, [esp + 0x1c]
call fcn.00401b10
push 0x6a
call fcn.004111fe
test eax, eax
je 0x40297f
push 0x6a
push eax
lea ecx, [esp + 0x1c]
call fcn.00401db0
mov ecx, dword [esp + 0x14]
push ecx
push 0x3eb
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.004188ae
push 0
push 0x44a350
lea ecx, [esp + 0x1c]
call fcn.00401b10
push 0x69
call fcn.004111fe
test eax, eax
je 0x4029be
push 0x69
push eax
lea ecx, [esp + 0x1c]
call fcn.00401db0
mov edx, dword [esp + 0x14]
push edx
push 0x3ec
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.004188ae
push 0
push 0x44a350
lea ecx, [esp + 0x1c]
call fcn.00401b10
push 0x6c
call fcn.004111fe
test eax, eax
je 0x4029fd
push 0x6c
push eax
lea ecx, [esp + 0x1c]
call fcn.00401db0
mov eax, dword [esp + 0x14]
push eax
push 4
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.004188ae
push 0
push 0x44a350
lea ecx, [esp + 0x1c]
call fcn.00401b10
push 0x6d
call fcn.004111fe
test eax, eax
je 0x402a39
push 0x6d
push eax
lea ecx, [esp + 0x1c]
call fcn.00401db0
mov ecx, dword [esp + 0x14]
push ecx
push 2
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.004188ae
push 0
push 0x44a350
lea ecx, [esp + 0x1c]
call fcn.00401b10
push 0x6b
call fcn.004111fe
test eax, eax
je 0x402a75
push 0x6b
push eax
lea ecx, [esp + 0x1c]
call fcn.00401db0
mov edx, dword [esp + 0x14]
push edx
push 1
mov ecx, esi
call fcn.004187d6
mov ecx, eax
call fcn.004188ae
push 0x44a350
lea ecx, [esp + 0x20]
call fcn.00401c20
mov byte [esp + 0xa68], 2
push 0x100
lea eax, [esp + 0x58]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x66
call fcn.004111fe
test eax, eax
je 0x402ac9
push 0x66
push eax
lea ecx, [esp + 0x24]
call fcn.00401db0
mov ecx, dword [esp + 0x14]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov edi, dword [esp + 0x1c]
push ecx
lea edx, [esp + 0x58]
push edx
call ebx
push eax
lea eax, [esi + 0x78]
push edi
push eax
call fcn.00402190
add esp, 0x10
lea ecx, [esp + 0x20]
push ecx
push 5
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x254]
push edx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
lea ecx, [esp + 0x54]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveExtensionW]
lea edx, [esp + 0x54]
push edx
call ebx
push eax
lea eax, [esp + 0x258]
push eax
lea ecx, [esi + 0x80]
push str._s_s
push ecx
call fcn.00402190
add esp, 0x10
push 0
mov ecx, esi
call fcn.0041525f
mov byte [esp + 0xa68], 1
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x402b6f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0xa68], 0xffffffff
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x402b9a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
mov ecx, dword [esp + 0xa60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xa48]
xor ecx, esp
call fcn.0042955b
mov esp, ebp
pop ebp
ret