Function at 0x40e6b0
Capabilities:
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x549506
mov eax, dword fs:[0]
push eax
sub esp, 0x250
mov eax, dword [0x5b2920]
xor eax, esp
mov dword [esp + 0x24c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5b2920]
xor eax, esp
push eax
lea eax, [esp + 0x264]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x274]
xor esi, esi
push 0x206
lea eax, [esp + 0x5e]
mov ebx, ecx
mov edi, edx
push esi
push eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], esi
mov word [esp + 0x64], si
call fcn.00516c20
add esp, 0xc
lea ecx, [esp + 0x58]
push ecx
push esi
push esi
push 0x801a
push esi
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jl 0x40e906
cmp ebp, esi
je 0x40e8ed
mov eax, ebp
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x40e744
sub eax, edx
sar eax, 1
mov dword [esp + 0x18], eax
mov edi, esi
je 0x40e869
mov ebx, 8
cmp word [ebp + edi*2], 0x5c
jne 0x40e858
cmp edi, esi
je 0x40e858
lea eax, [esp + 0x58]
mov dword [esp + 0x38], 7
mov dword [esp + 0x34], esi
mov word [esp + 0x24], si
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x40e790
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x5c]
push edx
lea ecx, [esp + 0x28]
call fcn.004029f0
lea eax, [edi + 1]
mov dword [esp + 0x26c], esi
push eax
push ebp
lea ecx, [esp + 0x44]
mov dword [esp + 0x5c], 7
mov dword [esp + 0x58], esi
mov word [esp + 0x48], si
call fcn.004029f0
push 0xffffffffffffffff
push esi
lea ecx, [esp + 0x44]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x278], 1
call fcn.00402230
cmp dword [esp + 0x38], ebx
mov eax, dword [esp + 0x24]
jae 0x40e7fb
lea eax, [esp + 0x24]
push eax
call fcn.00512ad1
add esp, 4
cmp eax, esi
je 0x40e816
call fcn.00512b38
cmp dword [eax], 0x11
jne 0x40e8c7
cmp dword [esp + 0x54], ebx
jb 0x40e829
mov edx, dword [esp + 0x40]
push edx
call fcn.004e946d
add esp, 4
mov dword [esp + 0x26c], 0xffffffff
cmp dword [esp + 0x38], ebx
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], esi
mov word [esp + 0x40], si
jb 0x40e858
mov eax, dword [esp + 0x24]
push eax
call fcn.004e946d
add esp, 4
add edi, 1
cmp edi, dword [esp + 0x18]
jb 0x40e764
mov ebx, dword [esp + 0x14]
push ebp
lea edx, [esp + 0x5c]
push 0x104
push edx
call fcn.00512a57
mov edi, dword [esp + 0x28]
add esp, 0xc
cmp edi, esi
je 0x40e897
push edi
lea eax, [esp + 0x5c]
push 0x104
push eax
call fcn.00512a57
add esp, 0xc
lea eax, [esp + 0x58]
mov dword [ebx + 0x18], 7
mov dword [ebx + 0x14], esi
mov word [ebx + 4], si
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, si
jne 0x40e8b0
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0x5c]
push ecx
jmp 0x40e91a
mov esi, dword [esp + 0x14]
push 0x5660e8
mov ecx, esi
call fcn.004029b0
lea ecx, [esp + 0x3c]
call fcn.00402790
lea ecx, [esp + 0x20]
call fcn.00402790
mov eax, esi
jmp 0x40e923
push 0x5664c4
lea ecx, [esp + 0x5c]
push 0x104
push ecx
call fcn.00512a57
jmp 0x40e87d
push esi
mov dword [ebx + 0x18], 7
mov dword [ebx + 0x14], esi
mov word [ebx + 4], si
push 0x5660e8
mov ecx, ebx
call fcn.004029f0
mov eax, ebx
mov ecx, dword [esp + 0x264]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x24c]
xor ecx, esp
call fcn.0050fe87
add esp, 0x25c
ret