Function at 0x429fa0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x575027
mov eax, dword fs:[0]
push eax
mov eax, 0xd4a8
call fcn.0054a430
mov eax, dword [0x5dbcc8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
lea edx, [ebp - 0xd45c]
mov dword [ebp - 0xd464], ecx
push edx
lea ecx, [ebp - 0xd458]
push ecx
mov dword [ebp - 0xd468], eax
mov eax, dword [ebp + 0xc]
xor edi, edi
push 0x18
mov dword [ebp - 0xd458], edi
call fcn.00409b10
add esp, 0xc
test al, al
je 0x42a47b
mov esi, dword [ebp - 0xd458]
cmp esi, edi
je 0x42a47b
call fcn.004457a5
xor ecx, ecx
cmp eax, edi
setne cl
cmp ecx, edi
jne 0x42a034
push 0x80004005
call fcn.0040d6e0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea ebx, [eax + 0x10]
mov dword [ebp - 0xd460], ebx
lea ecx, [ebp - 0xd4b4]
mov dword [ebp - 4], edi
call fcn.00562750
push edi
push edi
push esi
lea ecx, [ebp - 0xd4b4]
mov byte [ebp - 4], 1
call fcn.00564910
lea ecx, [ebp - 0xd4b4]
call fcn.00561e40
mov ecx, eax
call fcn.00561e40
mov edi, eax
test edi, edi
je 0x42a17f
mov eax, dword [edi + 0x20]
mov ecx, str.data
add eax, 8
lea ecx, [ecx]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x42a0b0
test dl, dl
je 0x42a0ac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x42a0b0
add eax, 2
add ecx, 2
test dl, dl
jne 0x42a090
xor eax, eax
jmp 0x42a0b5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x42a162
mov ecx, edi
call fcn.00561e40
test eax, eax
je 0x42a162
lea esp, [esp]
mov edx, dword [eax + 0x20]
mov esi, str.tmptoken
add edx, 8
jmp 0x42a0e0
mov cl, byte [edx]
cmp cl, byte [esi]
jne 0x42a100
test cl, cl
je 0x42a0fc
mov cl, byte [edx + 1]
cmp cl, byte [esi + 1]
jne 0x42a100
add edx, 2
add esi, 2
test cl, cl
jne 0x42a0e0
xor ecx, ecx
jmp 0x42a105
sbb ecx, ecx
sbb ecx, 0xffffffff
test ecx, ecx
mov ecx, eax
je 0x42a116
call fcn.00561e70
test eax, eax
jne 0x42a0d0
jmp 0x42a162
call fcn.00561f30
lea ecx, [ebp - 0xd45c]
push ecx
mov ebx, eax
call fcn.004046c0
add esp, 4
push eax
lea ecx, [ebp - 0xd460]
mov byte [ebp - 4], 2
call fcn.0040d610
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0xd45c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x42a162
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, edi
call fcn.00561e70
mov edi, eax
test edi, edi
jne 0x42a082
mov ebx, dword [ebp - 0xd460]
mov esi, dword [ebp - 0xd458]
push esi
call fcn.00444c84
add esp, 4
cmp dword [ebx - 0xc], 0
je 0x42a429
push 0x3ff
lea ecx, [ebp - 0x413]
push 0
push ecx
mov dword [ebp - 0xd458], 0
mov byte [ebp - 0x414], 0
call fcn.00549e40
mov eax, dword [ebp + 0x10]
add esp, 0xc
test eax, eax
je 0x42a215
cmp eax, 1
je 0x42a215
cmp eax, 2
jne 0x42a253
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x42a1e1
xor eax, eax
jmp 0x42a1f7
lea esi, [eax + eax]
mov eax, esi
call fcn.0054bbf0
mov eax, esp
push 3
push esi
push ebx
push eax
call fcn.0040c9b0
mov edx, dword [ebp - 0xd464]
push edx
push eax
lea eax, [ebp - 0x414]
push str.token_svipid_spayType2
push eax
call fcn.00546876
add esp, 0x10
jmp 0x42a253
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x42a228
xor eax, eax
jmp 0x42a23e
lea esi, [eax + eax]
mov eax, esi
call fcn.0054bbf0
mov eax, esp
push 3
push esi
push ebx
push eax
call fcn.0040c9b0
push eax
lea ecx, [ebp - 0x414]
push str.token_spayType1
push ecx
call fcn.00546876
add esp, 0xc
lea edx, [ebp - 0xd45c]
push edx
lea eax, [ebp - 0xd458]
push eax
lea ecx, [ebp - 0x414]
push ecx
call fcn.00409c00
add esp, 0xc
test al, al
je 0x42a429
mov eax, dword [ebp - 0xd458]
test eax, eax
je 0x42a429
lea edi, [ebp - 0x84c]
call fcn.00403880
lea edx, [ebp - 0x830]
push edx
mov esi, edi
mov byte [ebp - 4], 3
call fcn.00409d00
add esp, 4
mov byte [ebp - 4], 5
call fcn.00403bd0
push 0x3ff
lea eax, [ebp - 0x813]
push 0
push eax
mov byte [ebp - 0x814], 0
call fcn.00549e40
add esp, 0xc
push 1
push 0x1c
lea ecx, [ebp - 0x814]
push ecx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
lea esi, [ebp - 0xd454]
call fcn.00403050
cmp dword [ebp - 0x81c], 0x10
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0xd454], 0x544547
jae 0x42a309
lea eax, [ebp - 0x830]
push eax
lea edx, [ebp - 0xd054]
push str.http:__pc.mapps.m1905.cn_Pay_returnPayUrl_request_s
push edx
call fcn.00546876
lea eax, [ebp - 0xa854]
add esp, 0xc
push eax
call fcn.00404b10
add esp, 4
push 0x5a52f8
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x42a344
xor edi, edi
jmp 0x42a360
lea esi, [eax + eax]
mov eax, esi
call fcn.0054bbf0
mov eax, esp
push 3
push esi
push 0x5a52f8
push eax
call fcn.0040c9b0
mov edi, eax
push str.1905Cache1
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x42a377
xor eax, eax
jmp 0x42a391
lea esi, [eax + eax]
mov eax, esi
call fcn.0054bbf0
mov eax, esp
push 3
push esi
push str.1905Cache1
push eax
call fcn.0040c9b0
push edi
push eax
lea ecx, [ebp - 0x814]
push ecx
push str._s_s_sVIPPayUrl.xml
lea edx, [ebp - 0x8054]
push 0x2800
push edx
call fcn.005468fa
mov eax, dword [ebp - 0xd468]
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0xd464]
lea edx, [ebp - 0x8054]
push edx
push eax
mov dword [ebp - 0x3054], ecx
mov ecx, dword [ebp + 0x10]
push ecx
push 0x23
lea edx, [ebp - 0x304c]
push str.type_dnType_dvipId_s_saveFile_s
push edx
mov dword [ebp - 0x3050], 0x402
call fcn.00546876
add esp, 0x30
mov eax, 0xcc08
lea esi, [ebp - 0xd454]
call fcn.0054a430
mov edi, esp
mov ecx, 0x3302
rep movsd dword es:[edi], dword [esi]
call fcn.004028a0
mov eax, dword [ebp - 0xd458]
push eax
call fcn.00444c84
add esp, 4
lea esi, [ebp - 0x830]
call fcn.00403bd0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0xd480]
mov dword [ebp - method.TiXmlDocument.virtual_0], vtable.TiXmlDocument.0
cmp eax, 0x5e4810
je 0x42a44d
push eax
call fcn.00444c84
add esp, 4
lea ecx, [ebp - 0xd4b4]
call fcn.005624c0
lea eax, [ebx - 0x10]
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42a47b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea esp, [ebp - 0xd4c4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00545eb2
mov esp, ebp
pop ebp
ret 0xc