Function at 0x46a450
Capabilities:
Get common file path
Get startup folder

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe4
mov eax, dword [0x5402b0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor edi, edi
push edi
push 0x1a
push 0x550048
push edi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push str.ie8core_new.zip
push str.360se6
push 0x550048
push str._s_s_s
push 0x104
push 0x550258
call fcn.004c2807
push str.ie8core_new_
push str.360se6
push 0x550048
push str._s_s_s
push 0x104
push 0x550460
call fcn.004c2807
push str.ie8core_
push str.360se6
push 0x550048
push str._s_s_s
push 0x104
push 0x550670
call fcn.004c2807
add esp, 0x48
push str.ie8core_back_
push str.360se6
push 0x550048
push str._s_s_s
push 0x104
push 0x550880
call fcn.004c2807
xor eax, eax
add esp, 0x18
mov word [ebp - 0x54], ax
mov ebx, 7
push 1
mov eax, 0x5193a4
lea esi, [ebp - 0x58]
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x44], edi
call fcn.004017f0
xor ecx, ecx
push 1
mov eax, 0x5193a4
lea esi, [ebp - 0x3c]
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], edi
mov word [ebp - 0x38], cx
call fcn.004017f0
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0xac]
push eax
call fcn.0044e520
add esp, 4
push eax
mov ecx, esi
push ecx
lea ecx, [ebp - 0x90]
call fcn.0044d1b0
mov ecx, eax
lea edi, [ebp - 0xc8]
call fcn.0040e410
add esp, 4
mov ecx, eax
lea edi, [ebp - 0x74]
call fcn.0040e410
add esp, 4
mov ecx, eax
lea edi, [ebp - 0xe4]
call fcn.0040e410
add esp, 4
mov edi, str.doctorconfig.ini
mov ecx, eax
lea esi, [ebp - 0x20]
call fcn.0040e390
mov esi, 8
cmp dword [ebp - 0xcc], esi
jb 0x46a5be
mov edx, dword [ebp - 0xe0]
push edx
call fcn.004c097a
add esp, 4
xor edi, edi
xor eax, eax
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xd0], edi
mov word [ebp - 0xe0], ax
cmp dword [ebp - 0x5c], esi
jb 0x46a5e6
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.004c097a
add esp, 4
xor edx, edx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x60], edi
mov word [ebp - 0x70], dx
cmp dword [ebp - 0xb0], esi
jb 0x46a609
mov eax, dword [ebp - 0xc4]
push eax
call fcn.004c097a
add esp, 4
xor ecx, ecx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xb4], edi
mov word [ebp - 0xc4], cx
cmp dword [ebp - 0x78], esi
jb 0x46a632
mov edx, dword [ebp - 0x8c]
push edx
call fcn.004c097a
add esp, 4
xor eax, eax
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x7c], edi
mov word [ebp - 0x8c], ax
cmp dword [ebp - 0x24], esi
jb 0x46a652
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.004c097a
add esp, 4
xor edx, edx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], edi
mov word [ebp - 0x38], dx
cmp dword [ebp - 0x94], esi
jb 0x46a675
mov eax, dword [ebp - 0xa8]
push eax
call fcn.004c097a
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x98], edi
mov word [ebp - 0xa8], cx
cmp dword [ebp - 0x40], esi
jb 0x46a69b
mov edx, dword [ebp - 0x54]
push edx
call fcn.004c097a
add esp, 4
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 8], esi
jae 0x46a6a6
lea eax, [ebp - 0x1c]
push 0x104
push eax
push 0x550a90
call fcn.004c27bd
add esp, 0xc
cmp dword [ebp - 8], esi
pop edi
pop esi
pop ebx
jb 0x46a6cd
mov eax, dword [ebp - 0x1c]
push eax
call fcn.004c097a
add esp, 4
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov al, 1
call fcn.004c0985
mov esp, ebp
pop ebp
ret