Function at 0x40bbdb
Capabilities:
Create directory
Extract resource via kernel32 functions
Get common file path

Disassembly:
push 0x24c
mov eax, 0x45f28c
call fcn.0044810a
xor ebx, ebx
mov edi, ecx
mov dword [ebp - 0x230], edi
cmp dword [0x49d3ac], ebx
je 0x40bc04
xor eax, eax
inc eax
jmp 0x40c1d2
xor esi, esi
inc esi
push str.InitUIStrings...
lea ecx, [ebp - 0x22c]
mov dword [0x49d3ac], esi
call fcn.00402060
push ebx
lea eax, [ebp - 0x22c]
push eax
push 2
mov dword [ebp - 4], ebx
call fcn.00411fb7
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x22c]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.0040253e
call fcn.00434892
push eax
lea ecx, [ebp - 0x22c]
call fcn.0040210b
mov dword [ebp - 4], esi
mov esi, 0x104
push esi
lea ecx, [ebp - 0x22c]
call fcn.004023c9
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x22c]
mov esi, eax
call fcn.0040c514
cmp esi, ebx
jne 0x40be8b
push str.GetTempPath_failed:
lea ecx, [ebp - 0x224]
call fcn.00402060
mov byte [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x224]
push eax
push 2
call fcn.00411fb7
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x224]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.0040253e
xor eax, eax
push 0x206
mov word [ebp - 0x220], ax
lea eax, [ebp - 0x21e]
push ebx
push eax
call fcn.004462a0
add esp, 0xc
lea eax, [ebp - 0x220]
push eax
push ebx
push ebx
push 0x8023
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov esi, eax
cmp esi, ebx
jge 0x40bdae
push str.SHGetFolderPath_CSIDL_COMMON_APPDATA_failed:
lea ecx, [ebp - 0x224]
call fcn.00402060
push esi
lea eax, [ebp - 0x224]
push eax
push 2
mov byte [ebp - 4], 3
call fcn.00411fb7
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x224]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.0040253e
push 0x46a660
lea ecx, [ebp - 0x230]
call fcn.00402060
push str.C:WindowsTempArmUI.ini
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 4
call fcn.00402060
lea eax, [ebp - 0x230]
push eax
lea ecx, [edi + 0x804]
lea esi, [ebp - 0x224]
mov byte [ebp - 4], 5
call fcn.0041283a
mov ecx, dword [ebp - 0x224]
add ecx, 0xfffffff0
mov esi, eax
call fcn.0040253e
mov ecx, dword [ebp - 0x230]
add ecx, 0xfffffff0
call fcn.0040253e
mov ecx, dword [ebp - 0x22c]
add ecx, 0xfffffff0
call fcn.0040253e
mov eax, esi
jmp 0x40c1d2
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x22c]
call fcn.004020d4
push str.AdobeARM_
lea ecx, [ebp - 0x22c]
call fcn.00409023
push ebx
push dword [ebp - 0x22c]
push ebx
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
mov esi, eax
cmp esi, 0xa1
je 0x40bdf1
cmp esi, 3
jne 0x40be8b
push str.SHCreateDirectoryEx___failed:
lea ecx, [ebp - 0x230]
call fcn.00402060
push esi
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x230]
push eax
push 2
mov byte [ebp - 4], 6
call fcn.00411b31
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x230]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040253e
push 0x46a660
lea ecx, [ebp - 0x228]
call fcn.00402060
push str.C:WindowsTempArmUI.ini
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 7
call fcn.00402060
lea eax, [ebp - 0x228]
push eax
lea ecx, [edi + 0x804]
lea esi, [ebp - 0x234]
mov byte [ebp - 4], 8
call fcn.0041283a
mov ecx, dword [ebp - 0x234]
add ecx, 0xfffffff0
mov esi, eax
call fcn.0040253e
mov ecx, dword [ebp - 0x228]
jmp 0x40bd91
push str.ArmUI.ini
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x228]
push eax
call fcn.00408f8a
add esp, 0xc
lea esi, [edi + 0xd4]
push eax
mov ecx, esi
mov byte [ebp - 4], 9
call fcn.00409162
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x228]
add ecx, 0xfffffff0
call fcn.0040253e
lea eax, [edi + 0x520]
push eax
lea ecx, [ebp - 0x224]
call fcn.004020a4
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x224]
cmp dword [eax - 0xc], ebx
jne 0x40bf19
lea eax, [ebp - 0x224]
push eax
lea eax, [edi + 0x86c]
push eax
call fcn.00414538
mov eax, dword [ebp - 0x224]
cmp dword [eax - 0xc], ebx
jne 0x40bf19
push 0x46a660
lea ecx, [ebp - 0x224]
call fcn.004020d4
push str.ARM_UI_INI
push 0x83
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x228], eax
cmp eax, ebx
jne 0x40bf8c
push str.FindResource_failed:
lea ecx, [ebp - 0x228]
call fcn.00402060
mov byte [ebp - 4], 0xb
push ebx
push esi
lea eax, [ebp - 0x228]
push eax
push 2
call fcn.00411b31
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x228]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040253e
lea eax, [ebp - 0x224]
push eax
lea ecx, [edi + 0x804]
call fcn.0041283a
mov esi, eax
mov ecx, dword [ebp - 0x224]
jmp 0x40bd91
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
cmp eax, ebx
jne 0x40bfae
push str.LoadResource_failed:
lea ecx, [ebp - 0x228]
call fcn.00402060
mov byte [ebp - 4], 0xc
jmp 0x40bf48
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push dword [ebp - 0x228]
mov dword [ebp - 0x234], eax
push ebx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x228], eax
call fcn.00432aed
lea ecx, [ebp - 0x244]
call fcn.00434fc1
push ebx
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0xd
call fcn.00401f93
lea ecx, [ebp - 0x258]
push ecx
mov byte [ebp - 4], 0xe
mov eax, dword [esi]
push 0x1021
push eax
lea ecx, [ebp - 0x244]
call fcn.004353d8
test eax, eax
jne 0x40c08c
push str.Open_file_failed:
lea ecx, [ebp - 0x228]
call fcn.00402060
push ebx
push esi
lea eax, [ebp - 0x228]
push eax
push 2
mov byte [ebp - 4], 0xf
call fcn.00411b31
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x228]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.0040253e
lea eax, [ebp - 0x224]
push eax
lea ecx, [edi + 0x804]
call fcn.0041283a
mov ecx, dword [ebp - 0x248]
add ecx, 0xfffffff0
mov esi, eax
mov dword [ebp - method.CFileException.virtual_0], vtable.CFileException.0
call fcn.0040253e
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0xa
call fcn.0043509c
jmp 0x40bf81
mov byte [ebp - 4], 0x10
push dword [ebp - 0x228]
lea ecx, [ebp - 0x244]
push dword [ebp - 0x234]
call fcn.00434cf7
lea ecx, [ebp - 0x244]
mov dword [ebp - 4], 0xe
call fcn.00434f5b
lea eax, [ebp - 0x224]
push eax
lea ecx, [edi + 0x804]
call fcn.0041283a
mov ecx, dword [ebp - 0x248]
add ecx, 0xfffffff0
mov dword [ebp - method.CFileException.virtual_0], vtable.CFileException.0
call fcn.0040253e
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0xa
call fcn.0043509c
mov ecx, dword [ebp - 0x224]
add ecx, 0xfffffff0
call fcn.0040253e
mov ecx, dword [ebp - 0x22c]
add ecx, 0xfffffff0
call fcn.0040253e
jmp 0x40bbfc
call fcn.00448166
ret