Function at 0x411f20
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x431eab
mov eax, dword fs:[0]
push eax
sub esp, 0xa08
mov eax, dword [0x43d76c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x9b4], ecx
push 1
push 0x17
lea eax, [ebp - 0x814]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
jne 0x411f6f
xor eax, eax
jmp 0x412462
lea ecx, [ebp - 0x814]
push ecx
lea ecx, [ebp - 0x834]
call fcn.00403990
mov dword [ebp - 4], 0
push 0x4348bc
lea ecx, [ebp - 0x834]
call fcn.00403a80
push 0x8b
lea edx, [ebp - 0x86c]
push edx
call fcn.00401d70
add esp, 8
mov dword [ebp - 0x9b8], eax
mov eax, dword [ebp - 0x9b8]
mov dword [ebp - 0x9bc], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x9bc]
push ecx
lea ecx, [ebp - 0x834]
call fcn.0040c030
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x86c]
call fcn.00403a00
push 0x4348c0
lea ecx, [ebp - 0x834]
call fcn.00403a80
lea ecx, [ebp - 0x834]
call fcn.00404b90
push eax
call fcn.00401e30
add esp, 4
test eax, eax
jne 0x412032
mov dword [ebp - 0x870], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x834]
call fcn.00403a00
mov eax, dword [ebp - 0x870]
jmp 0x412462
push 0x8c
lea edx, [ebp - 0x88c]
push edx
call fcn.00401d70
add esp, 8
mov dword [ebp - 0x9c0], eax
mov eax, dword [ebp - 0x9c0]
mov dword [ebp - 0x9c4], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x9c4]
call fcn.00404b90
push eax
mov ecx, dword [ebp - 0x9b4]
add ecx, 0x20
push ecx
lea edx, [ebp - 0x850]
push edx
call fcn.00413250
add esp, 0xc
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x88c]
call fcn.00403a00
lea eax, [ebp - 0x850]
push eax
call fcn.004033d0
add esp, 4
push 0x8f
lea ecx, [ebp - 0x8a8]
push ecx
call fcn.00401d70
add esp, 8
mov dword [ebp - 0x9c8], eax
mov edx, dword [ebp - 0x9c8]
mov dword [ebp - 0x9cc], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x9cc]
push eax
lea ecx, [ebp - 0x834]
push ecx
lea edx, [ebp - 0x8c4]
push edx
call fcn.0040bfa0
add esp, 0xc
mov dword [ebp - 0x9d0], eax
mov eax, dword [ebp - 0x9d0]
mov dword [ebp - 0x9d4], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x9d4]
call fcn.00404b90
push eax
push 0x8e
lea ecx, [ebp - 0x8e0]
push ecx
call fcn.00401d70
add esp, 8
mov dword [ebp - 0x9d8], eax
mov edx, dword [ebp - 0x9d8]
mov dword [ebp - 0x9dc], edx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x9dc]
call fcn.00404b90
push eax
lea ecx, [ebp - 0x850]
call fcn.00404b90
push eax
call fcn.00411750
add esp, 0xc
xor ecx, ecx
test eax, eax
setge cl
mov dword [ebp - 0x818], ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x8e0]
call fcn.00403a00
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x8c4]
call fcn.00403a00
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x8a8]
call fcn.00403a00
cmp dword [ebp - 0x818], 0
jne 0x4121cb
mov dword [ebp - 0x8e4], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x850]
call fcn.00403a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x834]
call fcn.00403a00
mov eax, dword [ebp - 0x8e4]
jmp 0x412462
push 0x97
lea edx, [ebp - 0x900]
push edx
call fcn.00401d70
add esp, 8
mov dword [ebp - 0x9e0], eax
mov eax, dword [ebp - 0x9e0]
mov dword [ebp - 0x9e4], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x9e4]
push ecx
lea edx, [ebp - 0x834]
push edx
lea eax, [ebp - 0x91c]
push eax
call fcn.0040bfa0
add esp, 0xc
mov dword [ebp - 0x9e8], eax
mov ecx, dword [ebp - 0x9e8]
mov dword [ebp - 0x9ec], ecx
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x9ec]
call fcn.00404b90
push eax
push 0x4348c4
push str.http:__ty.playcool.com
call fcn.00411750
add esp, 0xc
xor edx, edx
test eax, eax
setge dl
mov dword [ebp - 0x818], edx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x91c]
call fcn.00403a00
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x900]
call fcn.00403a00
push 0x93
lea eax, [ebp - 0x938]
push eax
call fcn.00401d70
add esp, 8
mov dword [ebp - 0x9f0], eax
mov ecx, dword [ebp - 0x9f0]
mov dword [ebp - 0x9f4], ecx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x9f4]
call fcn.00404b90
push eax
mov edx, dword [ebp - 0x9b4]
add edx, 0x20
push edx
lea eax, [ebp - 0x954]
push eax
call fcn.00413250
add esp, 0xc
mov dword [ebp - 0x9f8], eax
mov ecx, dword [ebp - 0x9f8]
mov dword [ebp - 0x9fc], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x9fc]
push edx
lea ecx, [ebp - 0x850]
call fcn.00403a30
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x954]
call fcn.00403a00
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x938]
call fcn.00403a00
push 0x95
lea eax, [ebp - 0x970]
push eax
call fcn.00401d70
add esp, 8
mov dword [ebp - 0xa00], eax
mov ecx, dword [ebp - 0xa00]
mov dword [ebp - 0xa04], ecx
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0xa04]
push edx
lea eax, [ebp - 0x834]
push eax
lea ecx, [ebp - 0x98c]
push ecx
call fcn.0040bfa0
add esp, 0xc
mov dword [ebp - 0xa08], eax
mov edx, dword [ebp - 0xa08]
mov dword [ebp - 0xa0c], edx
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0xa0c]
call fcn.00404b90
push eax
push 0x94
lea eax, [ebp - 0x9a8]
push eax
call fcn.00401d70
add esp, 8
mov dword [ebp - 0xa10], eax
mov ecx, dword [ebp - 0xa10]
mov dword [ebp - 0xa14], ecx
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0xa14]
call fcn.00404b90
push eax
lea ecx, [ebp - 0x850]
call fcn.00404b90
push eax
call fcn.00411750
add esp, 0xc
xor edx, edx
test eax, eax
setge dl
mov dword [ebp - 0x818], edx
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x9a8]
call fcn.00403a00
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x98c]
call fcn.00403a00
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x970]
call fcn.00403a00
cmp dword [ebp - 0x818], 0
jne 0x41242f
mov dword [ebp - 0x9ac], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x850]
call fcn.00403a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x834]
call fcn.00403a00
mov eax, dword [ebp - 0x9ac]
jmp 0x412462
mov eax, dword [ebp - 0x818]
mov dword [ebp - 0x9b0], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x850]
call fcn.00403a00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x834]
call fcn.00403a00
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00421275
mov esp, ebp
pop ebp
ret