Function at 0x40e6b0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4cb0bc
mov eax, dword fs:[0]
push eax
sub esp, 0x268
mov eax, dword [0x4f86c0]
xor eax, esp
mov dword [esp + 0x260], eax
push ebx
push esi
push edi
mov eax, dword [0x4f86c0]
xor eax, esp
push eax
lea eax, [esp + 0x278]
mov dword fs:[0], eax
mov edi, ecx
push 4
lea ecx, [edi + 0x374]
push 0x4e72e0
call fcn.004018d0
push 9
lea ebx, [edi + 0x38c]
push 0x4e71d0
mov ecx, ebx
call fcn.004018d0
push 0xc
push str.FeiRar__Inc.
lea ecx, [edi + 0x3a4]
call fcn.004018d0
push 0x18
push str.https:__feirar.softbd.cn
lea ecx, [edi + 0x3bc]
call fcn.004018d0
push 0xa
lea ecx, [edi + 0x404]
push str.FeiRar.exe
call fcn.004018d0
push 0xa
push str.uninst.exe
lea ecx, [edi + 0x41c]
call fcn.004018d0
push 6
lea ecx, [edi + 0x434]
push str.FeiRar
call fcn.004018d0
lea ecx, [esp + 0x1c]
call fcn.0041f410
lea esi, [edi + 0x288]
mov dword [esp + 0x14], eax
cmp esi, eax
je 0x40e7b6
cmp dword [esi + 0x14], 0x10
jb 0x40e79d
push dword [esi]
call fcn.004a7f26
mov eax, dword [esp + 0x18]
add esp, 4
mov dword [esi + 0x14], 0xf
mov ecx, esi
mov dword [esi + 0x10], 0
push eax
mov byte [esi], 0
call fcn.004022c0
cmp dword [esp + 0x30], 0x10
jb 0x40e7c9
push dword [esp + 0x1c]
call fcn.004a7f26
add esp, 4
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], 0
mov byte [esp + 0x1c], 0
lea eax, [esp + 0x1c]
mov dword [esp + 0x280], 0
push eax
push 0x4e6ddc
mov edx, str.SOFTWAREFeiRar
mov ecx, reloc.WS2_32.dll_bind
call fcn.00415fb0
add esp, 8
mov dword [esp + 0x280], 0xffffffff
test al, al
sete al
cmp dword [esp + 0x30], 0x10
mov byte [esp + 0x1b], al
jb 0x40e830
push dword [esp + 0x1c]
call fcn.004a7f26
mov al, byte [esp + 0x1f]
add esp, 4
lea ecx, [edi + 0x2ac]
mov byte [edi + 0x2a8], al
cmp ecx, ebx
je 0x40e84a
push 0xffffffffffffffff
push 0
push ebx
call fcn.00401720
push 0
call fcn.004a84b9
add esp, 4
mov dword [edi + 0x2a0], eax
mov dword [edi + 0x2a4], edx
lea ecx, [edi + 0x2c4]
cmp dword [0x4f971c], 0
je 0x40e887
cmp ecx, 0x4f970c
je 0x40e893
push 0xffffffffffffffff
push 0
push 0x4f970c
call fcn.00401720
jmp 0x40e893
push 5
push str.blank
call fcn.004018d0
lea ecx, [esp + 0x1c]
call fcn.00403530
mov ebx, eax
lea esi, [edi + 0x2dc]
cmp esi, ebx
je 0x40e8d1
cmp dword [esi + 0x14], 0x10
jb 0x40e8b8
push dword [esi]
call fcn.004a7f26
add esp, 4
mov dword [esi + 0x14], 0xf
mov ecx, esi
mov dword [esi + 0x10], 0
push ebx
mov byte [esi], 0
call fcn.004022c0
cmp dword [esp + 0x30], 0x10
jb 0x40e8e4
push dword [esp + 0x1c]
call fcn.004a7f26
add esp, 4
push 8
push str.standard
lea ecx, [edi + 0x328]
call fcn.004018d0
push 0xd
push str.192.168.1.102
lea ecx, [edi + 0x340]
call fcn.004018d0
push 6
push str.feirar
lea ecx, [edi + 0x358]
call fcn.004018d0
lea eax, [edi + 0x404]
mov edx, str.SoftwareMicrosoftWindowsCurrentVersionApp_Paths_
push eax
lea ecx, [esp + 0x20]
call fcn.00406740
mov ebx, eax
lea esi, [edi + 0x3ec]
add esp, 4
cmp esi, ebx
je 0x40e967
cmp dword [esi + 0x14], 0x10
jb 0x40e94e
push dword [esi]
call fcn.004a7f26
add esp, 4
mov dword [esi + 0x14], 0xf
mov ecx, esi
mov dword [esi + 0x10], 0
push ebx
mov byte [esi], 0
call fcn.004022c0
cmp dword [esp + 0x30], 0x10
jb 0x40e97a
push dword [esp + 0x1c]
call fcn.004a7f26
add esp, 4
lea eax, [edi + 0x374]
mov edx, 0x4e738c
push eax
lea ecx, [esp + 0x20]
call fcn.00406740
mov ebx, eax
lea esi, [edi + 0x3d4]
add esp, 4
cmp esi, ebx
je 0x40e9c7
cmp dword [esi + 0x14], 0x10
jb 0x40e9ae
push dword [esi]
call fcn.004a7f26
add esp, 4
mov dword [esi + 0x14], 0xf
mov ecx, esi
mov dword [esi + 0x10], 0
push ebx
mov byte [esi], 0
call fcn.004022c0
cmp dword [esp + 0x30], 0x10
jb 0x40e9da
push dword [esp + 0x1c]
call fcn.004a7f26
add esp, 4
mov ecx, dword [0x4fc158]
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], 0
mov byte [esp + 0x1c], 0
call fcn.00419a70
push dword [edi + 4]
lea esi, [edi + 0x554]
mov ecx, esi
call fcn.00419b30
test byte [esi + 0xc], 2
mov ebx, dword [sym.imp.USER32.dll_GetParent]
mov byte [esi + 0xf], 6
je 0x40ea27
push dword [esi + 4]
call ebx
push eax
mov ecx, esi
call fcn.00419db0
test byte [esi + 0xc], 2
mov word [esi + 0x10], 0
je 0x40ea40
push dword [esi + 4]
call ebx
push eax
mov ecx, esi
call fcn.00419db0
test byte [esi + 0xc], 2
mov byte [esi + 0xd], 0x32
je 0x40ea57
push dword [esi + 4]
call ebx
push eax
mov ecx, esi
call fcn.00419db0
push 0
push 0x1c
lea eax, [esp + 0x6c]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
cmp word [esp + 0x64], 0
jne 0x40ea74
xor ecx, ecx
jmp 0x40ea8f
lea ecx, [esp + 0x64]
lea edx, [ecx + 2]
jmp 0x40ea80
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40ea80
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x68]
push eax
lea ecx, [edi + 0x574]
call fcn.00408930
push 6
push str.TEMP_
lea ecx, [edi + 0x574]
call fcn.00405a50
lea ecx, [edi + 0x574]
call fcn.00403790
push str.feirar.zip
lea edx, [edi + 0x574]
lea ecx, [esp + 0x20]
call fcn.00406830
mov ebx, eax
lea esi, [edi + 0x58c]
add esp, 4
cmp esi, ebx
je 0x40eb0b
cmp dword [esi + 0x14], 8
jb 0x40eaf0
push dword [esi]
call fcn.004a7f26
add esp, 4
xor eax, eax
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov ecx, esi
push ebx
mov word [esi], ax
call fcn.00408440
cmp dword [esp + 0x30], 8
jb 0x40eb1e
push dword [esp + 0x1c]
call fcn.004a7f26
add esp, 4
lea ebx, [edi + 0x5a4]
mov ecx, ebx
call fcn.00403f80
push 0x4e6770
sub esp, 0x18
lea esi, [edi + 0x434]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push esi
mov byte [ecx], 0
call fcn.00401720
xor edx, edx
lea ecx, [esp + 0x68]
call fcn.004039a0
add esp, 0x18
mov edx, eax
mov dword [esp + 0x284], 1
lea ecx, [esp + 0x20]
call fcn.00406920
add esp, 4
push 0xffffffffffffffff
push 0
push eax
mov ecx, ebx
mov byte [esp + 0x28c], 2
call fcn.00405980
cmp dword [esp + 0x30], 8
jb 0x40eba4
push dword [esp + 0x1c]
call fcn.004a7f26
add esp, 4
xor eax, eax
mov dword [esp + 0x280], 0xffffffff
cmp dword [esp + 0x60], 8
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], 0
mov word [esp + 0x1c], ax
jb 0x40ebd9
push dword [esp + 0x4c]
call fcn.004a7f26
add esp, 4
push esi
mov edx, str.SOFTWARE_
lea ecx, [esp + 0x50]
call fcn.00406740
lea esi, [edi + 0x53c]
mov dword [esp + 0x18], eax
add esp, 4
cmp esi, eax
je 0x40ec26
cmp dword [esi + 0x14], 0x10
jb 0x40ec0d
push dword [esi]
call fcn.004a7f26
mov eax, dword [esp + 0x18]
add esp, 4
mov dword [esi + 0x14], 0xf
mov ecx, esi
mov dword [esi + 0x10], 0
push eax
mov byte [esi], 0
call fcn.004022c0
cmp dword [esp + 0x60], 0x10
jb 0x40ec39
push dword [esp + 0x4c]
call fcn.004a7f26
add esp, 4
mov dword [esp + 0x48], 0xf
mov dword [esp + 0x44], 0
mov byte [esp + 0x34], 0
mov dword [esp + 0x280], 3
cmp dword [esi + 0x14], 0x10
jb 0x40ec63
mov edx, dword [esi]
jmp 0x40ec65
mov edx, esi
lea eax, [esp + 0x34]
mov ecx, reloc.WS2_32.dll_accept
push eax
push str.InstallPath
call fcn.00415fb0
add esp, 8
test al, al
je 0x40ecea
cmp dword [esp + 0x44], 0
je 0x40ecea
lea ecx, [esp + 0x34]
call fcn.00403d70
test al, al
je 0x40ecea
sub esp, 0x18
lea eax, [esp + 0x4c]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00401720
xor edx, edx
lea ecx, [esp + 0x64]
call fcn.004039a0
add esp, 0x18
mov ecx, ebx
push eax
call fcn.004053c0
cmp dword [esp + 0x60], 8
jb 0x40edae
push dword [esp + 0x4c]
call fcn.004a7f26
add esp, 4
jmp 0x40edae
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0xffffffffffffffff
push eax
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push ebx
mov word [ecx], ax
call fcn.004085c0
xor edx, edx
lea ecx, [esp + 0x64]
call fcn.00403b10
lea ecx, [esp + 0x4c]
mov dword [esp + 0x2c], eax
add esp, 0x18
cmp ecx, eax
je 0x40ed5b
cmp dword [esp + 0x48], 0x10
jb 0x40ed3c
push dword [esp + 0x34]
call fcn.004a7f26
mov eax, dword [esp + 0x18]
add esp, 4
push eax
lea ecx, [esp + 0x38]
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], 0
mov byte [esp + 0x38], 0
call fcn.004022c0
cmp dword [esp + 0x60], 0x10
jb 0x40ed6e
push dword [esp + 0x4c]
call fcn.004a7f26
add esp, 4
sub esp, 0x18
lea eax, [esp + 0x4c]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00401720
cmp dword [esi + 0x14], 0x10
jb 0x40ed9a
mov esi, dword [esi]
push str.InstallPath
mov edx, esi
mov ecx, reloc.WS2_32.dll_accept
call fcn.00416120
add esp, 0x1c
push 1
lea esi, [edi + 0x158]
push str.stepTabLayout
mov ecx, esi
call fcn.0042c9d0
mov dword [edi + 0x5bc], eax
test eax, eax
je 0x40eddd
lea ecx, [eax + 0x4a0]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov dword [edi + 0x60c], eax
push 1
push str.btn_install_start
mov ecx, esi
call fcn.0042c9d0
push 1
push str.btn_usercustom
mov ecx, esi
mov dword [edi + 0x5c8], eax
call fcn.0042c9d0
push 1
push str.opt_usercustom
mov ecx, esi
mov dword [edi + 0x5cc], eax
call fcn.0042c9d0
push 1
push str.hor_userdefine
mov ecx, esi
mov dword [edi + 0x5d0], eax
call fcn.0042c9d0
push 1
push str.btn_browsepath
mov ecx, esi
mov dword [edi + 0x5d4], eax
call fcn.0042c9d0
push 1
push str.btn_userprot
mov ecx, esi
mov dword [edi + 0x5d8], eax
call fcn.0042c9d0
push 1
push str.edit_installpath
mov ecx, esi
mov dword [edi + 0x5c4], eax
call fcn.0042c9d0
mov ecx, eax
mov dword [edi + 0x5dc], ecx
test ecx, ecx
je 0x40ee7d
cmp dword [ebx + 0x14], 8
jb 0x40ee77
mov ebx, dword [ebx]
mov eax, dword [ecx]
push ebx
call dword [eax + 0x2c]
push 1
push str.tab_install_view
mov ecx, esi
call fcn.0042c9d0
push 1
push str.lab_install_tip
mov ecx, esi
mov dword [edi + 0x5c0], eax
call fcn.0042c9d0
push 1
push str.pro_install
mov ecx, esi
mov dword [edi + 0x5f4], eax
call fcn.0042c9d0
mov dword [edi + 0x5f8], eax
test eax, eax
je 0x40eee9
cmp dword [eax + 0x594], 0
je 0x40eee9
cmp dword [eax + 0x590], 0
jg 0x40eee9
cmp dword [eax + 0x58c], 0
jl 0x40eee9
mov ecx, eax
mov dword [eax + 0x594], 0
call fcn.0043c860
push 1
push str.btn_open
mov ecx, esi
call fcn.0042c9d0
push 1
push str.check_userprot
mov ecx, esi
mov dword [edi + 0x5fc], eax
call fcn.0042c9d0
push 1
push str.check_desktop
mov ecx, esi
mov dword [edi + 0x5ec], eax
call fcn.0042c9d0
push 1
push str.check_task
mov ecx, esi
mov dword [edi + 0x5e0], eax
call fcn.0042c9d0
push 1
push str.check_program
mov ecx, esi
mov dword [edi + 0x5e4], eax
call fcn.0042c9d0
push 1
push str.check_autoupdate
mov ecx, esi
mov dword [edi + 0x5e8], eax
call fcn.0042c9d0
push 1
push str.check_qq
mov ecx, esi
mov dword [edi + 0x5f0], eax
call fcn.0042c9d0
push 1
push str.check_cqss
mov ecx, esi
mov dword [edi + 0x600], eax
call fcn.0042c9d0
push 0
push 0xbb8
push 0x3e8
push dword [edi + 4]
mov dword [edi + 0x604], eax
call dword [sym.imp.USER32.dll_SetTimer]
cmp dword [esp + 0x48], 0x10
jb 0x40efb1
push dword [esp + 0x34]
call fcn.004a7f26
add esp, 4
mov ecx, dword [esp + 0x278]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x260]
xor ecx, esp
call fcn.004a768e
mov esp, ebp
pop ebp
ret