Function at 0x405700
Capabilities:
Get common file path
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x47bc82
mov eax, dword fs:[0]
push eax
sub esp, 0xdf4
mov eax, dword [0x4a05d0]
xor eax, esp
mov dword [esp + 0xdf0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4a05d0]
xor eax, esp
push eax
lea eax, [esp + 0xe08]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [esp + 0xd4], 0xf
mov dword [esp + 0xd0], ebx
mov byte [esp + 0xc0], bl
lea eax, [esp + 0x5c]
push eax
mov dword [esp + 0xe14], ebx
call fcn.00414b50
push str.aid
lea ecx, [esp + 0x38]
mov byte [esp + 0xe14], 1
call fcn.0040a630
mov esi, eax
push str.http:__web.4399.com_webStatic_index.php__cclient_agetIconInfogame
lea ecx, [esp + 0x34]
mov byte [esp + 0xe14], 2
call fcn.0040a630
mov edi, eax
mov byte [esp + 0xe10], 3
call fcn.004134f0
push eax
lea ecx, [esp + 0x3c]
push edi
push ecx
call fcn.00408c50
add esp, 0xc
push esi
push eax
lea edx, [esp + 0x34]
push edx
mov byte [esp + 0xe1c], 4
call fcn.00408b90
add esp, 0xc
mov esi, eax
mov byte [esp + 0xe10], 5
call fcn.004136b0
push eax
lea eax, [esp + 0x40]
push esi
push eax
call fcn.00408c50
add esp, 0xc
mov byte [esp + 0xe10], 6
mov eax, dword [eax]
lea ecx, [esp + 0x40]
push ecx
mov edx, eax
lea ecx, [esp + 0x60]
call fcn.00416370
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xc8]
mov byte [esp + 0xe1c], 7
call fcn.00409030
mov ebp, 0x10
cmp dword [esp + 0x58], ebp
jb 0x405832
mov edx, dword [esp + 0x44]
push edx
call fcn.00439ae5
add esp, 4
mov byte [esp + 0xe10], 5
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x54], ebx
mov byte [esp + 0x44], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40586a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xe10], 4
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405892
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xe10], 3
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4058ba
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xe10], 2
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4058e2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0xe10], 1
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40590a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0xc0]
push edx
mov byte [esp + 0x1c], 0x7b
call fcn.00409110
push 0xffffffffffffffff
mov ecx, eax
lea esi, [esp + 0x44]
lea edx, [esp + 0xc0]
call fcn.00408e90
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xc8]
mov byte [esp + 0xe1c], 8
call fcn.00409030
mov byte [esp + 0xe10], 1
cmp dword [esp + 0x58], ebp
jb 0x405968
mov eax, dword [esp + 0x44]
push eax
call fcn.00439ae5
add esp, 4
lea ecx, [esp + 0x14]
push ecx
lea edi, [esp + 0xc0]
mov byte [esp + 0x18], 0x7d
call fcn.004091c0
inc eax
push eax
xor ecx, ecx
lea esi, [esp + 0x44]
mov edx, edi
call fcn.00408e90
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
mov byte [esp + 0xe1c], 9
call fcn.00409030
mov byte [esp + 0xe10], 1
cmp dword [esp + 0x58], ebp
jb 0x4059bb
mov edx, dword [esp + 0x44]
push edx
call fcn.00439ae5
add esp, 4
lea eax, [esp + 0x12c]
push eax
call fcn.0041fae0
and dword [esp + 0x24], 0xfffffe00
mov dword [esp + 0x28], ebx
mov byte [esp + 0xe10], 0xc
mov edx, dword [esp + 0xc0]
cmp dword [esp + 0xd4], ebp
jae 0x4059f3
lea edx, [esp + 0xc0]
mov eax, edx
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x54], ebx
mov byte [esp + 0x44], bl
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x405a08
sub eax, esi
push eax
push edx
lea ecx, [esp + 0x48]
call fcn.004094f0
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x48]
push ecx
lea ecx, [esp + 0x178]
mov byte [esp + 0xe1c], 0xd
call fcn.00409030
mov eax, dword [esp + 0x170]
cmp dword [esp + 0x184], ebp
jae 0x405a4f
lea eax, [esp + 0x170]
mov edx, dword [esp + 0x180]
lea ecx, [edx + eax]
lea edx, [esp + 0x1c]
push edx
push ecx
push eax
lea eax, [esp + 0x138]
push eax
call fcn.0041fba0
test al, al
sete byte [esp + 0x14]
mov byte [esp + 0xe10], 0xc
cmp dword [esp + 0x58], ebp
jb 0x405a8f
mov ecx, dword [esp + 0x44]
push ecx
call fcn.00439ae5
add esp, 4
lea ecx, [esp + 0x1c]
cmp byte [esp + 0x14], bl
je 0x405ae5
mov byte [esp + 0xe10], 0xa
call fcn.00423a10
lea edi, [esp + 0x12c]
call fcn.00406390
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0xe14], bl
call fcn.00415280
cmp dword [esp + 0xd4], ebp
jb 0x406368
mov eax, dword [esp + 0xc0]
push eax
call fcn.00439ae5
add esp, 4
jmp 0x406368
push str.iconUrl
call fcn.00424000
lea ecx, [esp + 0x1c]
cmp eax, 0x4a68c8
jne 0x405b46
mov byte [esp + 0xe10], 0xa
call fcn.00423a10
lea edi, [esp + 0x12c]
call fcn.00406390
lea ecx, [esp + 0x5c]
push ecx
mov byte [esp + 0xe14], bl
call fcn.00415280
cmp dword [esp + 0xd4], ebp
jb 0x406368
mov edx, dword [esp + 0xc0]
push edx
call fcn.00439ae5
add esp, 4
jmp 0x406368
push str.iconName
call fcn.00424000
lea ecx, [esp + 0x1c]
cmp eax, 0x4a68c8
jne 0x405ba7
mov byte [esp + 0xe10], 0xa
call fcn.00423a10
lea edi, [esp + 0x12c]
call fcn.00406390
lea eax, [esp + 0x5c]
push eax
mov byte [esp + 0xe14], bl
call fcn.00415280
cmp dword [esp + 0xd4], ebp
jb 0x406368
mov ecx, dword [esp + 0xc0]
push ecx
call fcn.00439ae5
add esp, 4
jmp 0x406368
push str.time
call fcn.00424000
cmp eax, 0x4a68c8
jne 0x405be6
lea ecx, [esp + 0x1c]
mov byte [esp + 0xe10], 0xa
call fcn.00423a10
lea edi, [esp + 0x12c]
call fcn.00406390
lea edx, [esp + 0x5c]
mov byte [esp + 0xe10], bl
push edx
jmp 0x406357
push str.iconUrl
lea ebx, [esp + 0x20]
call fcn.00423e10
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x114]
call fcn.00408e20
push str.iconName
mov byte [esp + 0xe14], 0xe
call fcn.00423e10
mov eax, dword [eax]
push eax
lea ecx, [esp + 0xdc]
call fcn.00408e20
push str.time
mov byte [esp + 0xe14], 0xf
call fcn.00423e10
mov eax, dword [eax]
push eax
lea ecx, [esp + 0xf8]
call fcn.00408e20
xor eax, eax
push 0x1fe
push eax
lea ecx, [esp + 0xc0e]
mov ebx, 0x10
mov byte [esp + 0xe18], bl
push ecx
mov word [esp + 0xc10], ax
call fcn.0045db90
add esp, 0xc
xor edx, edx
push 0x3e
push edx
lea eax, [esp + 0x4b6]
push eax
mov word [esp + 0x4b8], dx
call fcn.0045db90
add esp, 0xc
xor ecx, ecx
push 0x7e
push ecx
lea edx, [esp + 0x4f6]
push edx
mov word [esp + 0x4f8], cx
call fcn.0045db90
add esp, 0xc
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x5f6]
push ecx
mov word [esp + 0x5f8], ax
call fcn.0045db90
add esp, 0xc
xor edx, edx
push 0x7e
push edx
lea eax, [esp + 0x576]
push eax
mov word [esp + 0x578], dx
call fcn.0045db90
add esp, 0xc
lea ecx, [esp + 0x5ec]
push ecx
push 0
push 0
push 0x23
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
push 0x485264
lea edx, [esp + 0x5f0]
push 0x104
push edx
call fcn.00459b8e
add esp, 0xc
lea eax, [esp + 0x5ec]
push eax
push 0x40
lea ecx, [esp + 0x574]
push ecx
push 0x485fe4
push str.iconTime
call fcn.00413560
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [esp + 0xf8]
cmp dword [esp + 0x10c], ebx
jae 0x405d57
lea eax, [esp + 0xf8]
mov ecx, dword [esp + 0x108]
mov ebp, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 0x40
lea edx, [esp + 0x4f0]
push edx
push ecx
push eax
push 0
push 0xfde9
call ebp
lea ecx, [esp + 0x4ec]
lea eax, [esp + 0x56c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x405dad
test dx, dx
je 0x405da9
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x405dad
add eax, 4
add ecx, 4
test dx, dx
jne 0x405d87
xor eax, eax
jmp 0x405db2
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x405e01
lea ecx, [esp + 0xf4]
call fcn.00408e60
lea ecx, [esp + 0xd8]
call fcn.00408e60
lea ecx, [esp + 0x110]
call fcn.00408e60
lea ecx, [esp + 0x1c]
mov byte [esp + 0xe10], 0xa
call fcn.00423a10
lea edi, [esp + 0x12c]
call fcn.00406390
lea edx, [esp + 0x5c]
push edx
jmp 0x40634f
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x7fe]
push ecx
mov word [esp + 0x800], ax
call fcn.0045db90
add esp, 0xc
push 0x208
call fcn.00439af0
add esp, 4
push str..ico
lea ecx, [esp + 0x3c]
call fcn.0040a630
mov esi, eax
push 0x485764
lea ecx, [esp + 0x34]
mov byte [esp + 0xe14], 0x11
call fcn.0040a630
mov edi, eax
mov byte [esp + 0xe10], 0x12
call fcn.00413560
push eax
lea edx, [esp + 0x38]
push edi
push edx
call fcn.00408c50
add esp, 0xc
push esi
push eax
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0xe1c], 0x13
call fcn.00408b90
add esp, 0xc
lea ecx, [esp + 0x34]
call fcn.0040a0e0
lea ecx, [esp + 0x30]
call fcn.0040a0e0
lea ecx, [esp + 0x38]
mov byte [esp + 0xe10], 0x17
call fcn.0040a0e0
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 0xc]
push eax
lea ecx, [esp + 0x1c]
call fcn.0040a4a0
mov ebx, eax
lea edi, [esp + 0x7f4]
call fcn.00417940
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
call fcn.00409f70
push ebx
call fcn.00439ae5
mov eax, dword [esp + 0xe0]
mov esi, 0x10
add esp, 4
cmp dword [esp + 0xf0], esi
jae 0x405efb
lea eax, [esp + 0xdc]
mov ecx, dword [esp + 0xec]
push 0x20
lea edx, [esp + 0x4b0]
push edx
push ecx
push eax
push 0
push 0xfde9
call ebp
mov eax, dword [esp + 0x114]
cmp dword [esp + 0x128], esi
jae 0x405f2e
lea eax, [esp + 0x114]
mov ecx, dword [esp + 0x124]
push pe_nt_image_headers32
lea edx, [esp + 0xc08]
push edx
push ecx
push eax
push 0
push 0xfde9
call ebp
lea edx, [esp + 0x1c4]
push edx
call fcn.00414b50
mov ebp, vtable.CSockDownFile.0
mov dword [esp + 0x1bc], ebp
lea eax, [esp + 0xc04]
push eax
lea ecx, [esp + 0x7f8]
push ecx
lea edi, [esp + 0x1c4]
mov byte [esp + 0xe18], 0x18
call fcn.004162a0
test eax, eax
jne 0x405ffe
lea edx, [esp + 0x1c4]
mov byte [esp + 0xe10], 0x17
push edx
mov dword [esp + 0x1c0], ebp
call fcn.00415280
lea ecx, [esp + 0x18]
call fcn.0040a0e0
lea ecx, [esp + 0xf4]
call fcn.00408e60
lea ecx, [esp + 0xd8]
call fcn.00408e60
lea ecx, [esp + 0x110]
call fcn.00408e60
lea ecx, [esp + 0x1c]
mov byte [esp + 0xe10], 0xa
call fcn.00423a10
lea edi, [esp + 0x12c]
call fcn.00406390
lea eax, [esp + 0x5c]
push eax
jmp 0x40634f
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0xa06]
mov byte [esp + 0xe18], 0x19
push edx
mov word [esp + 0xa08], cx
call fcn.0045db90
add esp, 0xc
xor eax, eax
push 0x3e
push eax
lea ecx, [esp + 0x436]
push ecx
mov word [esp + 0x438], ax
call fcn.0045db90
mov edx, dword [0x4857a8]
mov eax, dword [0x4857ac]
add esp, 0xc
push 0x38
lea ecx, [esp + 0x478]
push 0
push ecx
mov dword [esp + 0x478], edx
mov dword [esp + 0x47c], eax
call fcn.0045db90
add esp, 0xc
xor ebx, ebx
lea edi, [esp + 0x9fc]
call fcn.00417940
lea edx, [esp + 0x5ec]
push edx
push 0x20
lea eax, [esp + 0x434]
push eax
push 0x485fe4
push 0x4852a0
call fcn.00413560
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
xor ecx, ecx
cmp cx, word [esp + 0x42c]
jne 0x406144
call fcn.004131e0
test eax, eax
je 0x4060ce
mov esi, eax
call fcn.00418e90
call fcn.004131e0
test eax, eax
je 0x4060de
mov esi, eax
call fcn.00419300
push 0x4857a8
lea ecx, [esp + 0x40]
call fcn.0040a630
mov esi, eax
mov byte [esp + 0xe10], 0x1a
call fcn.004131e0
push eax
lea edx, [esp + 0x30]
push esi
push edx
call fcn.00408c50
add esp, 0xc
mov byte [esp + 0xe10], 0x1b
mov esi, dword [eax]
test esi, esi
je 0x40611d
call fcn.00419300
lea ecx, [esp + 0x2c]
call fcn.0040a0e0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xe10], 0x19
call fcn.0040a0e0
call fcn.004131e0
test eax, eax
je 0x406197
mov ecx, eax
jmp 0x406192
lea eax, [esp + 0x42c]
push eax
lea ecx, [esp + 0x470]
push 0x20
push ecx
call fcn.00459b8e
lea edx, [esp + 0x438]
add esp, 0xc
test edx, edx
je 0x406175
mov esi, edx
call fcn.00418e90
call fcn.00419300
lea eax, [esp + 0x46c]
test eax, eax
je 0x406187
mov esi, eax
call fcn.00419300
lea ecx, [esp + 0x42c]
test ecx, ecx
je 0x406197
call fcn.004190d0
push 0x320
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0x1005
push 4
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
push 0
push str.Progman
call dword [sym.imp.USER32.dll_FindWindowW]
mov esi, dword [sym.imp.USER32.dll_FindWindowExW]
push 0
push str.SHELLDLL_DefView
push 0
push eax
call esi
push 0
push str.SysListView32
push 0
push eax
call esi
mov edi, dword [sym.imp.USER32.dll_PostMessageW]
push 0
push 0x74
mov esi, eax
push pe_nt_image_headers32
push esi
call edi
push 0
push 0x74
push 0x101
push esi
call edi
lea edx, [esp + 0x4ac]
push edx
lea eax, [esp + 0x476]
push 0x1d
push eax
call fcn.00459b1f
add esp, 0xc
call fcn.00413250
push eax
lea ecx, [esp + 0x7f8]
lea esi, [esp + 0xa00]
lea ebx, [esp + 0x4b0]
call fcn.00418cf0
lea ecx, [esp + 0x7f4]
push ecx
call fcn.00413250
mov ebx, eax
lea edi, [esp + 0x4b0]
call fcn.004191b0
lea edx, [esp + 0x7f4]
push edx
mov ebx, str._uninst
lea edi, [esp + 0x470]
call fcn.004191b0
mov eax, dword [0x4a9600]
shr eax, 7
test al, 1
je 0x40629e
call fcn.00401310
test al, al
jne 0x40629e
lea ecx, [esp + 0x7f4]
push ecx
call fcn.00413250
mov ebx, eax
mov edx, esi
lea ecx, [esp + 0x4b0]
call fcn.00418f40
lea edx, [esp + 0x5ec]
push edx
lea eax, [esp + 0x4f0]
push eax
push str.iconTime
call fcn.00413560
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push eax
call esi
lea ecx, [esp + 0x5ec]
push ecx
lea edx, [esp + 0x4b0]
push edx
push 0x4852a0
call fcn.00413560
push eax
call esi
call dword [sym.imp.ole32.dll_CoUninitialize]
lea eax, [esp + 0x1c4]
mov byte [esp + 0xe10], 0x17
push eax
mov dword [esp + 0x1c0], ebp
call fcn.00415280
lea ecx, [esp + 0x18]
call fcn.0040a0e0
lea ecx, [esp + 0xf4]
call fcn.00408e60
lea ecx, [esp + 0xd8]
call fcn.00408e60
lea ecx, [esp + 0x110]
call fcn.00408e60
lea ecx, [esp + 0x1c]
mov byte [esp + 0xe10], 0xa
call fcn.00423a10
lea edi, [esp + 0x12c]
call fcn.00406390
lea ecx, [esp + 0x5c]
push ecx
mov byte [esp + 0xe14], 0
call fcn.00415280
lea ecx, [esp + 0xbc]
call fcn.00408e60
mov ecx, dword [esp + 0xe08]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xdf0]
xor ecx, esp
call fcn.004597c7
add esp, 0xe00
ret