Function at 0x10033545
Capabilities:
Get common file path

Disassembly:
push 0x234
mov eax, 0x100a32c5
call fcn.1009cc24
mov ebx, ecx
mov dword [ebp - 0x228], ebx
lea ecx, [ebx + 4]
mov dword [ebp - 0x230], ebx
call dword [sym.imp.fpsrvutl.dll_Ordinal_4936]
and dword [ebp - 4], 0
lea ecx, [ebx + 8]
call dword [sym.imp.fpsrvutl.dll_Ordinal_2954]
lea eax, [ebp - 0x22c]
mov byte [ebp - 4], 1
xorps xmm0, xmm0
lea ecx, [ebx + 0x10]
push eax
movlpd qword [ebp - 0x22c], xmm0
call dword [sym.imp.fpsrvutl.dll_Ordinal_1581]
mov byte [ebx + 0xc], 0
call dword [sym.imp.fpsrvutl.dll_Ordinal_4348]
mov edi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
push 0x1c
test eax, eax
je 0x100335b6
pop ecx
call dword [sym.imp.fpsrvutl.dll_Ordinal_5011]
jmp 0x100335b9
call edi
pop ecx
mov esi, eax
mov dword [ebp - 0x228], esi
mov byte [ebp - 4], 2
test esi, esi
je 0x100335fc
movsd xmm0, qword [0x100c7158]
push 0
push 1
push ecx
push ecx
movsd qword [esp], xmm0
mov ecx, esi
push 0x10035d48
push 0x10035d5d
push 0x10035db6
push 0x10031f22
push 0
call dword [sym.imp.fpsrvutl.dll_Ordinal_5937]
jmp 0x100335fe
xor esi, esi
mov byte [ebp - 4], 1
mov dword [ebx + 0x20], esi
call dword [sym.imp.fpsrvutl.dll_Ordinal_4348]
push 0x20
test eax, eax
je 0x1003361a
pop ecx
call dword [sym.imp.fpsrvutl.dll_Ordinal_5011]
jmp 0x1003361d
call edi
pop ecx
mov dword [ebp - 0x228], eax
mov byte [ebp - 4], 3
test eax, eax
je 0x10033635
mov ecx, eax
call dword [sym.imp.fpsrvutl.dll_Ordinal_5744]
jmp 0x10033637
xor eax, eax
mov byte [ebp - 4], 1
mov dword [ebx], eax
lea eax, [ebp - 0x21c]
push eax
xor eax, eax
push eax
push eax
push 0x1c
push eax
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
js 0x10033780
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x224]
call dword [sym.imp.fpsrvutl.dll_Ordinal_5312]
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 4
call dword [sym.imp.fpsrvutl.dll_Ordinal_3213]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x224]
cmp word [eax + ecx*2 - 2], 0x5c
je 0x1003369d
push 0x100b3f30
lea ecx, [ebp - 0x224]
call dword [sym.imp.fpsrvutl.dll_Ordinal_3702]
lea eax, [ebp - 0x224]
lea esi, [ebx + 8]
push eax
mov ecx, esi
call dword [sym.imp.fpsrvutl.dll_Ordinal_985]
push str.MicrosoftWebsiteCache_
lea ecx, [ebp - 0x220]
call dword [sym.imp.fpsrvutl.dll_Ordinal_5241]
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 5
push eax
mov ecx, esi
call dword [sym.imp.fpsrvutl.dll_Ordinal_1682]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x220]
mov edi, dword [sym.imp.fpsrvutl.dll_Ordinal_2017]
call edi
push dword [esi]
lea ecx, [ebx + 4]
call dword [sym.imp.fpsrvutl.dll_Ordinal_5525]
push str.Websites.xml
lea ecx, [ebp - 0x220]
call dword [sym.imp.fpsrvutl.dll_Ordinal_2836]
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebx + 4]
call dword [sym.imp.fpsrvutl.dll_Ordinal_2202]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x220]
mov esi, dword [sym.imp.fpsrvutl.dll_Ordinal_3409]
call esi
push dword [ebx + 8]
lea ecx, [ebp - 0x220]
call dword [sym.imp.fpsrvutl.dll_Ordinal_150]
push eax
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 7
call dword [sym.imp.fpsrvutl.dll_Ordinal_4804]
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 9
call esi
push 0
push 0
lea ecx, [ebp - 0x240]
call dword [sym.imp.fpsrvutl.dll_Ordinal_3988]
mov ecx, ebx
call fcn.10033b3a
lea ecx, [ebp - 0x240]
call dword [sym.imp.fpsrvutl.dll_Ordinal_974]
lea ecx, [ebp - 0x224]
call edi
jmp 0x10033784
mov byte [ebx + 0xc], 1
mov eax, ebx
call fcn.1009cbd6
ret