Function at 0x40b800
Capabilities:
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43b2db
mov eax, dword fs:[0]
push eax
sub esp, 0x27c
mov eax, dword [0x447150]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
test eax, eax
jne 0x40b89b
push dword [esi + 0x34]
call dword [sym.imp.USER32.dll_IsWindow]
cmp eax, 1
jne 0x40b85e
push ebx
push edi
mov ecx, esi
call fcn.004103c0
mov eax, 1
jmp 0x40baec
test edi, edi
jne 0x40b876
xor ecx, ecx
push ecx
push edi
lea ecx, [esi + 0x67c8]
call fcn.0040bd00
jmp 0x40baea
mov ecx, edi
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40b880
sub ecx, edx
push ecx
push edi
lea ecx, [esi + 0x67c8]
call fcn.0040bd00
jmp 0x40baea
cmp eax, 2
jne 0x40b9cb
push dword [esi + 0x34]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x40b854
push 0
push 0
push 0x1004
push dword [esi + 0x34]
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
jle 0x40baea
lea ecx, [ebp - 0x220]
call fcn.00406990
lea eax, [ebp - 0x254]
mov dword [ebp - 4], 0
push eax
push 0
push 0x1005
push dword [esi + 0x34]
mov dword [ebp - 0x254], 4
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x250], 0
call dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push dword [esi + 0x34]
lea eax, [ebp - 0x21c]
mov ecx, esi
push eax
call fcn.0040f4b0
push dword [eax]
push 0x104
push edi
call fcn.0042cd27
mov edx, dword [ebp - 0x21c]
add esp, 0xc
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b955
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test ebx, ebx
je 0x40b961
mov eax, dword [ebp - 0x234]
mov dword [ebx], eax
push edi
lea ecx, [esi + 0x67c8]
call fcn.004069e0
lea eax, [ebp - 0x288]
mov dword [ebp - 0x278], 2
push eax
push 0
push 0x102b
push dword [esi + 0x34]
mov dword [ebp - 0x27c], 2
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [ebp - 0x220]
or eax, 0xffffffff
mov dword [ebp - 4], 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x40b854
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, 1
jmp 0x40baec
cmp eax, 1
jne 0x40b9f8
mov eax, dword [esi + 0x124]
test eax, eax
jne 0x40b9eb
push 0xffff
push ebx
push edi
call fcn.0040f600
jmp 0x40baea
push eax
push ebx
push edi
call fcn.0040f600
jmp 0x40baea
cmp eax, 3
jne 0x40ba16
push 0
push edi
push 0x7ec
call fcn.0041c240
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp 0x40baea
cmp eax, 4
jne 0x40baea
push 0
push 5
lea eax, [ebp - 0x114]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
push 0x43c5b8
lea eax, [ebp - 0x114]
push 0x104
push eax
call fcn.0042cd81
push 0x448238
lea eax, [ebp - 0x114]
push 0x104
push eax
call fcn.0042cd81
push 0x43c5b8
lea eax, [ebp - 0x114]
push 0x104
push eax
call fcn.0042cd81
push str.cvr.ini
lea eax, [ebp - 0x114]
push 0x104
push eax
call fcn.0042cd81
add esp, 0x30
lea eax, [ebp - 0x114]
push eax
push 0x103
lea eax, [ebp - 0x218]
push eax
push 0x43c576
push str.PATH
push str.OPEN_PATH
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
cmp byte [ebp - 0x218], 0
je 0x40baea
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x67c8]
call fcn.004069e0
push 0
push 0
push 0x7ea
mov ecx, 0x4486e8
call fcn.0041c240
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004271bb
mov esp, ebp
pop ebp
ret 0xc