Function at 0x4010b0
Capabilities:
Get common file path
Print debug messages

Disassembly:
push 0xffffffffffffffff
push 0x497fdb
mov eax, dword fs:[0]
push eax
sub esp, 0x22c
mov eax, dword [0x4c1280]
xor eax, esp
mov dword [esp + 0x228], eax
push ebx
push ebp
push edi
mov eax, dword [0x4c1280]
xor eax, esp
push eax
lea eax, [esp + 0x23c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x24c]
xor edi, edi
push 0x20a
lea ebx, [esi + 8]
push edi
push ebx
mov dword [esi], 1
mov dword [esi + 4], edi
call fcn.00472990
xor eax, eax
add esp, 0xc
mov dword [esp + 0x28], 7
mov dword [esp + 0x24], edi
mov word [esp + 0x14], ax
mov dword [esp + 0x244], edi
call fcn.00401af0
test eax, eax
je 0x4011a3
push 0x208
lea edx, [esp + 0x32]
xor ecx, ecx
push edi
push edx
mov word [esp + 0x38], cx
call fcn.00472990
add esp, 0xc
push 0x104
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
jne 0x401176
push 0x4b12ac
lea ecx, [esp + 0x30]
push 0x105
push ecx
call fcn.00474cf2
add esp, 0xc
lea eax, [esp + 0x2c]
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x401180
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x30]
push edx
lea ecx, [esp + 0x18]
call fcn.00402110
jmp 0x401264
push 0x206
lea ecx, [esp + 0x32]
xor eax, eax
push edi
push ecx
mov word [esp + 0x38], ax
call fcn.00472990
add esp, 0xc
push edi
push 5
lea edx, [esp + 0x34]
push edx
push edi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
jne 0x4011e7
push 0x4b12b4
lea eax, [esp + 0x30]
push 0x104
push eax
call fcn.00472a0a
add esp, 0xc
lea eax, [esp + 0x2c]
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x4011f0
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x18]
call fcn.00402110
push 1
push 0x4b12bc
lea ecx, [esp + 0x18]
call fcn.00401d50
push 8
push 0x4b12c0
lea ecx, [esp + 0x18]
call fcn.00401d50
cmp dword [esp + 0x28], 8
mov eax, dword [esp + 0x14]
jae 0x40123d
lea eax, [esp + 0x14]
push edi
push eax
call fcn.00479ee9
add esp, 8
cmp eax, 0xffffffff
jne 0x401264
cmp dword [esp + 0x28], 8
mov eax, dword [esp + 0x14]
jae 0x40125b
lea eax, [esp + 0x14]
push eax
call fcn.00479e2e
add esp, 4
push 1
push 0x4b12bc
lea ecx, [esp + 0x18]
call fcn.00401d50
push 4
push str.slog
lea ecx, [esp + 0x18]
call fcn.00401d50
cmp dword [esp + 0x28], 8
mov eax, dword [esp + 0x14]
jae 0x401293
lea eax, [esp + 0x14]
push edi
push eax
call fcn.00479ee9
add esp, 8
cmp eax, 0xffffffff
jne 0x4012ba
cmp dword [esp + 0x28], 8
mov eax, dword [esp + 0x14]
jae 0x4012b1
lea eax, [esp + 0x14]
push eax
call fcn.00479e2e
add esp, 4
cmp dword [esp + 0x28], 8
mov eax, dword [esp + 0x14]
jae 0x4012c9
lea eax, [esp + 0x14]
push eax
lea edi, [esi + 0x212]
push 0x105
push edi
call fcn.00472a0a
push ebp
push edi
push str._s_s.log
push 0x105
push ebx
call fcn.00474cf2
add esp, 0x20
push ebx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
cmp dword [esp + 0x28], 8
jb 0x40130b
mov edx, dword [esp + 0x14]
push edx
call fcn.0047295c
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x23c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop ebp
pop ebx
mov ecx, dword [esp + 0x228]
xor ecx, esp
call fcn.00472a79
add esp, 0x238
ret 4