Function at 0x4031f0
Capabilities:
Get common file path
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4275f0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x102c
call fcn.0040dd60
push ebx
push esi
push edi
push 0
lea ecx, [esp + 0x2c]
call fcn.004010f0
mov esi, dword [ebp + 0x10]
push esi
lea ecx, [esp + 0x10]
mov dword [esp + 0x1048], 0
call fcn.00402310
mov eax, dword [esp + 0xc]
push 0x2f
push eax
mov byte [esp + 0x104c], 1
call fcn.0040e194
add esp, 8
test eax, eax
jne 0x40325c
or eax, 0xffffffff
jmp 0x403260
sub eax, dword [esp + 0xc]
inc eax
push eax
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x14]
call fcn.00402080
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x1048], 2
call fcn.00401fd0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x1044], 1
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4032a8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
xor eax, eax
mov byte [esp + 0x838], 0
mov ecx, 0xff
lea edi, [esp + 0x839]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x838]
push eax
push 0x400
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea ecx, [esp + 0x838]
push ecx
lea ecx, [esp + 0x1c]
call fcn.00402310
lea edx, [esp + 0xc]
push edx
push eax
lea eax, [esp + 0x1c]
mov bl, 3
push eax
mov byte [esp + 0x1050], bl
call fcn.00403140
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x1048], 4
call fcn.00401fd0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x1044], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40333a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x1044], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x403360
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0xc]
push 0
push 0
push 0
push 0
push eax
push esi
lea ecx, [esp + 0x40]
call fcn.004014d0
test eax, eax
je 0x4033ce
mov eax, dword [esp + 0xc]
add eax, 0xfffffff0
mov byte [esp + 0x1044], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4033a1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x28]
mov dword [esp + 0x1044], 0xffffffff
call fcn.00401110
xor eax, eax
mov ecx, dword [esp + 0x103c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
xor eax, eax
mov byte [esp + 0xc38], 0
mov ecx, 0xff
lea edi, [esp + 0xc39]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [esp + 0xc]
push eax
push 0x400
lea ecx, [esp + 0xc40]
push ecx
push 0x4287c8
push str.version
push str.config
call ebx
mov esi, dword [ebp + 0xc]
lea eax, [esp + 0xc38]
lea esp, [esp]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x403447
test cl, cl
je 0x403440
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x403447
add eax, 2
add esi, 2
test cl, cl
jne 0x403420
xor eax, eax
or esi, 0xffffffff
jmp 0x403450
sbb eax, eax
mov esi, 0xffffffff
sbb eax, esi
test eax, eax
je 0x40371c
xor eax, eax
mov byte [esp + 0x438], 0
mov ecx, 0xff
lea edi, [esp + 0x439]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [esp + 0xc]
push eax
push 0x400
lea ecx, [esp + 0x440]
push ecx
push 0x4287c8
push str.download
push str.config
call ebx
lea edx, [esp + 0x438]
push edx
lea ecx, [esp + 0x14]
call fcn.00402310
mov eax, dword [esp + 0x10]
push 0x2f
push eax
mov byte [esp + 0x104c], 5
call fcn.0040e194
add esp, 8
test eax, eax
jne 0x4034c6
mov eax, esi
jmp 0x4034ca
sub eax, dword [esp + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x18]
call fcn.00402080
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x1048], 6
call fcn.00401fd0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x1044], 5
lea edx, [eax + 0xc]
mov ecx, esi
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x403511
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x838]
push eax
lea ecx, [esp + 0x1c]
call fcn.00402310
lea ecx, [esp + 0x10]
push ecx
push eax
lea edx, [esp + 0x1c]
push edx
mov byte [esp + 0x1050], 7
call fcn.00403140
add esp, 0xc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x1048], 8
call fcn.00401fd0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x1044], 7
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x403574
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x1044], 5
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x403599
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [ebp + 0x18]
mov ecx, dword [esp + 0x10]
push eax
push 0
push 0
push 0
push ecx
lea edx, [esp + 0x44c]
push edx
lea ecx, [esp + 0x40]
call fcn.004014d0
test eax, eax
je 0x403630
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0x1044], 1
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4035e2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0xc]
add eax, 0xfffffff0
mov byte [esp + 0x1044], 0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x403607
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea ecx, [esp + 0x28]
mov dword [esp + 0x1044], esi
call fcn.00401110
xor eax, eax
mov ecx, dword [esp + 0x103c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
call fcn.0041b713
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x18], eax
mov byte [esp + 0x1044], 9
call fcn.0041b713
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea ebx, [eax + 0x10]
mov dword [esp + 0x14], ebx
push 0x66
mov byte [esp + 0x1048], 0xa
call fcn.0041b708
test eax, eax
je 0x403681
push 0x66
push eax
lea ecx, [esp + 0x1c]
call fcn.00401bb0
mov ebx, dword [esp + 0x14]
mov ecx, dword [ebp + 8]
lea eax, [esp + 0xc38]
push eax
push ecx
lea edx, [esp + 0x20]
push ebx
push edx
call fcn.00403120
mov edi, dword [esp + 0x28]
add esp, 0x10
push 0
push 0x1044
push edi
call fcn.0042277f
cmp eax, 7
jne 0x40374d
lea eax, [ebx - 0x10]
mov byte [esp + 0x1044], 9
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4036d6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [edi - 0x10]
mov byte [esp + 0x1044], 5
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4036f7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0x1044], 1
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40371c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0xc]
add eax, 0xfffffff0
mov byte [esp + 0x1044], 0
lea ecx, [eax + 0xc]
mov edx, esi
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x403741
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov dword [esp + 0x1044], esi
jmp 0x403983
mov esi, dword [ebp + 0x14]
xor eax, eax
mov byte [esp + 0x38], 0
mov ecx, 0xff
lea edi, [esp + 0x39]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea edx, [esp + 0x38]
stosb byte es:[edi], al
mov eax, esi
sub edx, esi
lea ecx, [ecx]
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x403770
lea eax, [esp + 0x38]
push 0x5c
push eax
call fcn.0040e930
add esp, 8
push str.__SILENT
lea ecx, [esp + 0x20]
mov byte [eax], 0
call fcn.00402310
push eax
lea ecx, [esp + 0x24]
push esi
push ecx
mov byte [esp + 0x1050], 0xb
call fcn.00402170
mov eax, dword [eax]
push 1
lea edx, [esp + 0x48]
push edx
push eax
call fcn.00402ff0
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
add esp, 0x18
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4037de
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x1044], 0xa
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x403804
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x403876
push str.__VERYSILENT__DIR_
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x2c]
push ecx
call fcn.004020b0
lea edx, [esp + 0x44]
push edx
push eax
lea eax, [esp + 0x34]
push eax
mov byte [esp + 0x105c], 0xc
call fcn.004020b0
push 0x428788
push eax
lea ecx, [esp + 0x3c]
push ecx
mov byte [esp + 0x1068], 0xd
call fcn.004020b0
mov eax, dword [eax]
push 0
push 0
push eax
call fcn.00402ff0
add esp, 0x30
lea ecx, [esp + 0x1c]
call fcn.00401a00
lea ecx, [esp + 0x20]
call fcn.00401a00
lea ecx, [esp + 0x24]
jmp 0x4038df
push str.__DIR_
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x28]
push eax
call fcn.004020b0
lea ecx, [esp + 0x44]
push ecx
push eax
lea edx, [esp + 0x30]
push edx
mov byte [esp + 0x105c], 0xe
call fcn.004020b0
push 0x428788
push eax
lea eax, [esp + 0x44]
push eax
mov byte [esp + 0x1068], 0xf
call fcn.004020b0
mov eax, dword [eax]
push 0
push 0
push eax
call fcn.00402ff0
add esp, 0x30
lea ecx, [esp + 0x24]
call fcn.00401a00
lea ecx, [esp + 0x1c]
call fcn.00401a00
lea ecx, [esp + 0x20]
call fcn.00401a00
lea eax, [ebx - 0x10]
mov byte [esp + 0x1044], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x403906
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x1044], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40392c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0x1044], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x403952
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0xc]
add eax, 0xfffffff0
mov byte [esp + 0x1044], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x403978
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov dword [esp + 0x1044], 0xffffffff
lea ecx, [esp + 0x28]
call fcn.00401110
mov ecx, dword [esp + 0x103c]
pop edi
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x18