Function at 0x40b205
Capabilities:
Get common file path

Disassembly:
push 0x58
mov eax, 0x490aa0
call fcn.004543f8
mov esi, dword [ebp + 8]
mov dword [ebp - 0x5c], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 1
push eax
push ebx
push 0x1000
push 0x49ee10
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
mov edi, eax
lea ecx, [ebp - 0x40]
test edi, edi
jns 0x40b2e7
mov edx, edi
call fcn.00404ed6
sub esp, 0x18
mov byte [ebp - 4], 2
mov ecx, esp
mov dword [ebp - 0x5c], esp
mov edx, str.Unable_to_get_the_local_app_data_folder___Error_:
push eax
call fcn.00402ff3
pop ecx
mov byte [ebp - 4], 3
call fcn.0040d33a
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.0040d682
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 1
call fcn.00402dd0
mov edx, edi
lea ecx, [ebp - 0x40]
call fcn.0040353f
sub esp, 0x18
mov byte [ebp - 4], 4
lea eax, [ebp - 0x40]
mov dword [ebp - 0x5c], esp
mov ecx, esp
mov edx, str.___Windows_error_string_:
push eax
call fcn.00402ff3
pop ecx
mov byte [ebp - 4], 5
call fcn.0040d33a
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.0040d682
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 1
call fcn.00402dd0
push 0x4add08
mov ecx, esi
call fcn.00402d51
jmp 0x40b443
mov edx, dword [ebp - 0x60]
call fcn.00404cab
push eax
lea ecx, [ebp - 0x28]
call fcn.00402d04
lea ecx, [ebp - 0x40]
call fcn.00402dd0
push dword [ebp - 0x60]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
sub esp, 0x18
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.00402efd
call fcn.004040fd
add esp, 0x18
sub esp, 0x18
mov dword [ebp - 0x5c], esp
mov ecx, esp
cmp al, 1
jne 0x40b351
push str.The_resulting_log_file_path_was_empty_
call fcn.00402d51
mov byte [ebp - 4], 6
call fcn.0040d33a
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.0040d682
jmp 0x40b2d6
mov edi, 0x4ae9a8
push edi
call fcn.00402d51
sub esp, 0x18
mov byte [ebp - 4], 7
mov ecx, esp
lea eax, [ebp - 0x28]
push eax
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.00402efd
mov byte [ebp - 4], 1
call fcn.0040431b
add esp, 0x30
test al, al
jne 0x40b395
push edi
call fcn.0046eef0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.00402ea4
lea eax, [ebp + 0xc]
mov edx, str.temp_
push eax
lea ecx, [ebp - 0x58]
call fcn.00402f8e
push edi
mov edx, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x40]
call fcn.00403020
pop ecx
pop ecx
mov byte [ebp - 4], 9
mov ecx, eax
cmp dword [eax + 0x14], 0x10
jb 0x40b3c5
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00402ea4
lea ecx, [ebp - 0x40]
call fcn.00402dd0
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 1
call fcn.00402dd0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x64], esp
push edi
call fcn.00402d51
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov ecx, esp
lea eax, [ebp - 0x28]
push eax
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.00402efd
mov byte [ebp - 4], 1
call fcn.0040431b
add esp, 0x30
test al, al
jne 0x40b42c
push edi
call fcn.0046eef0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x28]
call fcn.00402ea4
mov byte [ebp - 0x5c], bl
lea eax, [ebp - 0x28]
push dword [ebp - 0x5c]
mov ecx, esi
mov dword [esi + 0x10], ebx
push eax
mov dword [esi + 0x14], ebx
call fcn.00402f6b
lea ecx, [ebp - 0x28]
call fcn.00402dd0
lea ecx, [ebp + 0xc]
call fcn.00402dd0
mov eax, esi
call fcn.004543a2
ret 0x1c