Function at 0x40fed0
Capabilities:
Get common file path
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x458
mov eax, dword [0x414004]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
mov word [ebp - 0x418], ax
push 0x40e
push 0
lea ecx, [ebp - 0x416]
push ecx
call fcn.00401b10
add esp, 0xc
lea edx, [ebp - 0x418]
push edx
mov eax, dword [ebp + 0x10]
push eax
call fcn.0040eeb0
add esp, 8
test eax, eax
je 0x40ff2f
lea ecx, [ebp - 0x418]
push ecx
call fcn.0040f550
add esp, 4
xor eax, eax
jmp 0x410161
push str.._CrashRpt.conf
call fcn.0040f0b0
add esp, 4
test eax, eax
jge 0x40ff47
xor eax, eax
jmp 0x410161
mov edx, dword [ebp + 8]
mov dword [0x416380], edx
push 0xffffff
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [0x416368], eax
push 0xc8c8c8
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [0x41636c], eax
cmp dword [0x4153f8], 0
je 0x40ff96
push 0x40
push 0
push 0
push 1
push 0x6d
mov eax, dword [0x416380]
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [0x416370], eax
jmp 0x40ffb2
push 0x40
push 0
push 0
push 1
push 0x6f
mov ecx, dword [0x416380]
push ecx
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [0x416370], eax
push 0x917520
push 0
push 0
push 0x1c
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov dword [ebp - 0x458], eax
mov edx, dword [0x91b924]
push edx
push 0x100
push 0x917520
call fcn.00401050
mov dword [ebp - 0x458], eax
mov eax, dword [ebp + 0x10]
push eax
push 0x100
push 0x917520
call fcn.00401050
mov dword [ebp - 0x458], eax
push 0
push 0x80
push 3
push 0
push 1
push closesocket
push 0x917520
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x4153f0], eax
cmp dword [0x4153f0], 0xffffffff
je 0x41014b
lea ecx, [ebp - 0x44c]
push ecx
mov edx, dword [0x4153f0]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
mov eax, dword [ebp - 0x428]
add eax, 2
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [0x416374], eax
cmp dword [0x416374], 0
jne 0x41006f
jmp 0x41015f
push 0
lea ecx, [ebp - 0x454]
push ecx
mov edx, dword [ebp - 0x428]
push edx
mov eax, dword [0x416374]
push eax
mov ecx, dword [0x4153f0]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 0
jne 0x4100a6
jmp 0x41015f
mov edx, dword [0x4153f0]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x454]
shr eax, 1
xor ecx, ecx
mov edx, dword [0x416374]
mov word [edx + eax*2], cx
call fcn.0040d8e0
push 0
push 0x40fac0
push 0
push 0x65
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp dword [0x4153f4], 0
je 0x4100ef
call fcn.0040ea90
cmp dword [0x416384], 0
je 0x410103
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x416368], 0
je 0x410119
mov ecx, dword [0x416368]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [0x41636c], 0
je 0x41012f
mov edx, dword [0x416368]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [0x416370], 0
je 0x410144
mov eax, dword [0x416370]
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
call fcn.0040d8d0
jmp 0x41015f
push 0x30
push str.CrashRpt_Monitor
push str.Incorrect_Parameters.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040142b
mov esp, ebp
pop ebp
ret 0x10