Function at 0x40ca70
Capabilities:
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x46d6ec
mov eax, dword fs:[0]
push eax
sub esp, 0x57c
mov eax, dword [0x487fb0]
xor eax, esp
mov dword [esp + 0x578], eax
push ebx
push edi
mov eax, dword [0x487fb0]
xor eax, esp
push eax
lea eax, [esp + 0x588]
mov dword fs:[0], eax
lea ecx, [esp + 0xec]
call fcn.004186d2
xor ebx, ebx
push 0x54
lea eax, [esp + 0x9c]
push ebx
mov dword [esp + 0x598], ebx
push eax
mov dword [esp + 0xa0], ebx
call fcn.00451da0
push 0x208
lea ecx, [esp + 0x184]
push ebx
push ecx
call fcn.00451da0
push 0x208
lea edx, [esp + 0x398]
push ebx
push edx
call fcn.00451da0
add esp, 0x24
lea eax, [esp + 0x37c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov ecx, dword [esi + 4]
mov dword [esp + 0x98], ecx
lea ecx, [esp + 0x94]
lea edx, [esp + 0x174]
lea eax, [esp + 0x37c]
push ecx
mov dword [esp + 0x98], 0x58
mov dword [esp + 0xa4], str..ini
mov dword [esp + 0xb0], 1
mov dword [esp + 0xb4], edx
mov dword [esp + 0xb8], 0x208
mov dword [esp + 0xc4], eax
mov dword [esp + 0xcc], 0x806
mov dword [esp + 0xd4], 0x47f254
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
test eax, eax
je 0x40d0c7
mov ecx, dword [esi + 0x764]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 1
call fcn.004185bd
mov edi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push eax
push 0x47f474
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x768]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 2
call fcn.004185bd
push eax
push 0x47f490
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x76c]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 3
call fcn.004185bd
push eax
push 0x47f49c
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x770]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 4
call fcn.004185bd
push eax
push 0x47f4a8
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x774]
mov edx, dword [ecx]
lea eax, [esp + 0x10]
push eax
mov edx, dword [edx + 0x38]
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 5
call fcn.004185bd
push eax
push 0x47f4b4
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x778]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 6
call fcn.004185bd
push eax
push 0x47f4c0
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x77c]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 7
call fcn.004185bd
push eax
push 0x47f4d0
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x780]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 8
call fcn.004185bd
push eax
push str.BIOS
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x784]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
mov byte [esp + 0x590], 9
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
call fcn.004185bd
push eax
push 0x47f4ec
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x788]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0xa
call fcn.004185bd
push eax
push str.UUID
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x78c]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0xb
call fcn.004185bd
push eax
push 0x47f500
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x790]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0xc
call fcn.004185bd
push eax
push 0x47f508
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x794]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0xd
call fcn.004185bd
push eax
push 0x47f510
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x798]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0xe
call fcn.004185bd
push eax
push 0x47f518
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x79c]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0xf
call fcn.004185bd
push eax
push 0x47f520
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x7a0]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0x10
call fcn.004185bd
push eax
push str._faS
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x7a4]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0x11
call fcn.004185bd
push eax
push str._f:yhV
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x7a8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0x12
call fcn.004185bd
push eax
push 0x47f538
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
mov ecx, dword [esi + 0x7ac]
mov edx, dword [ecx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x10]
push eax
call edx
lea ecx, [esp + 0x174]
push ecx
mov ecx, eax
mov byte [esp + 0x594], 0x13
call fcn.004185bd
push eax
push 0x47f540
push 0x47f480
call edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x590], bl
call fcn.004186f7
lea ecx, [esp + 0xec]
mov dword [esp + 0x590], 0xffffffff
call fcn.004186f7
mov ecx, dword [esp + 0x588]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebx
mov ecx, dword [esp + 0x578]
xor ecx, esp
call fcn.0044f3b0
add esp, 0x588
ret