Function at 0x1003ce70
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101abe0c
mov eax, dword fs:[0]
push eax
sub esp, 0x424
mov eax, dword [0x10206370]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2e0], ecx
xor eax, eax
mov word [ebp - 0x21c], ax
push 0x206
push 0
lea ecx, [ebp - 0x21a]
push ecx
call fcn.101845c0
add esp, 0xc
push 0
push 0x10
lea edx, [ebp - 0x21c]
push edx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x1003cf95
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x220], esp
lea edx, [ebp - 0x21c]
push edx
call fcn.1000b560
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 4], 0
push ecx
mov ecx, esp
mov dword [ebp - 0x224], esp
push 0x101d6bc8
call fcn.1000b560
mov dword [ebp - 0x2ec], eax
mov ecx, dword [ebp - 0x2ec]
mov dword [ebp - 0x2f0], ecx
mov byte [ebp - 4], 1
push ecx
mov ecx, esp
mov dword [ebp - 0x228], esp
push 0x101d6be4
call fcn.1000b560
mov dword [ebp - 0x2f4], eax
mov edx, dword [ebp - 0x2f4]
mov dword [ebp - 0x2f8], edx
mov byte [ebp - 4], 2
push ecx
mov ecx, esp
mov dword [ebp - 0x22c], esp
push 0x101d6bf4
call fcn.10040430
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2e0]
call fcn.1003db40
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x230], esp
push str.shell:Personal
call fcn.1000b560
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x304], eax
mov dword [ebp - 4], 3
push ecx
mov ecx, esp
mov dword [ebp - 0x234], esp
push 0x101d6c1c
call fcn.1000b560
mov dword [ebp - 0x308], eax
mov ecx, dword [ebp - 0x308]
mov dword [ebp - 0x30c], ecx
mov byte [ebp - 4], 4
push ecx
mov ecx, esp
mov dword [ebp - 0x238], esp
push 0x101d6c38
call fcn.1000b560
mov dword [ebp - 0x310], eax
mov edx, dword [ebp - 0x310]
mov dword [ebp - 0x314], edx
mov byte [ebp - 4], 5
push ecx
mov ecx, esp
mov dword [ebp - 0x23c], esp
push 0x101d6c60
call fcn.1000b560
mov dword [ebp - 0x318], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2e0]
call fcn.1003db40
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x240], esp
push str.shell:My_Pictures
call fcn.1000b560
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x320], eax
mov dword [ebp - 4], 6
push ecx
mov ecx, esp
mov dword [ebp - 0x244], esp
push 0x101d6c8c
call fcn.1000b560
mov dword [ebp - 0x324], eax
mov ecx, dword [ebp - 0x324]
mov dword [ebp - 0x328], ecx
mov byte [ebp - 4], 7
push ecx
mov ecx, esp
mov dword [ebp - 0x248], esp
push 0x101d6ca8
call fcn.1000b560
mov dword [ebp - 0x32c], eax
mov edx, dword [ebp - 0x32c]
mov dword [ebp - 0x330], edx
mov byte [ebp - 4], 8
push ecx
mov ecx, esp
mov dword [ebp - 0x24c], esp
push 0x101d6cbc
call fcn.1000b560
mov dword [ebp - 0x334], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2e0]
call fcn.1003db40
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x250], esp
push str.shell:My_Music
call fcn.1000b560
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x33c], eax
mov dword [ebp - 4], 9
push ecx
mov ecx, esp
mov dword [ebp - 0x254], esp
push 0x101d6ce4
call fcn.1000b560
mov dword [ebp - 0x340], eax
mov ecx, dword [ebp - 0x340]
mov dword [ebp - 0x344], ecx
mov byte [ebp - 4], 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x258], esp
push 0x101d6d00
call fcn.1000b560
mov dword [ebp - 0x348], eax
mov edx, dword [ebp - 0x348]
mov dword [ebp - 0x34c], edx
mov byte [ebp - 4], 0xb
push ecx
mov ecx, esp
mov dword [ebp - 0x25c], esp
push 0x101d6d18
call fcn.1000b560
mov dword [ebp - 0x350], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2e0]
call fcn.1003db40
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x260], esp
push str.shell:Downloads
call fcn.1000b560
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x358], eax
mov dword [ebp - 4], 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x264], esp
push 0x101d6d40
call fcn.1000b560
mov dword [ebp - 0x35c], eax
mov ecx, dword [ebp - 0x35c]
mov dword [ebp - 0x360], ecx
mov byte [ebp - 4], 0xd
push ecx
mov ecx, esp
mov dword [ebp - 0x268], esp
push 0x101d6d5c
call fcn.1000b560
mov dword [ebp - 0x364], eax
mov edx, dword [ebp - 0x364]
mov dword [ebp - 0x368], edx
mov byte [ebp - 4], 0xe
push ecx
mov ecx, esp
mov dword [ebp - 0x26c], esp
push 0x101d6d70
call fcn.1000b560
mov dword [ebp - 0x36c], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2e0]
call fcn.1003db40
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x270], esp
push str.shell:MyComputerFolder
call fcn.1000b560
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x374], eax
mov dword [ebp - 4], 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x274], esp
push 0x101d6da8
call fcn.1000b560
mov dword [ebp - 0x378], eax
mov ecx, dword [ebp - 0x378]
mov dword [ebp - 0x37c], ecx
mov byte [ebp - 4], 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x278], esp
push 0x101d6dc4
call fcn.1000b560
mov dword [ebp - 0x380], eax
mov edx, dword [ebp - 0x380]
mov dword [ebp - 0x384], edx
mov byte [ebp - 4], 0x11
push ecx
mov ecx, esp
mov dword [ebp - 0x27c], esp
push 0x101d6dec
call fcn.1000b560
mov dword [ebp - 0x388], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2e0]
call fcn.1003db40
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x280], esp
push str.shell32.dll_Control_RunDLL
call fcn.1000b560
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x390], eax
mov dword [ebp - 4], 0x12
push ecx
mov ecx, esp
mov dword [ebp - 0x284], esp
push str.rundll32.exe
call fcn.1000b560
mov dword [ebp - 0x394], eax
mov ecx, dword [ebp - 0x394]
mov dword [ebp - 0x398], ecx
mov byte [ebp - 4], 0x13
push ecx
mov ecx, esp
mov dword [ebp - 0x288], esp
push 0x101d6e48
call fcn.1000b560
mov dword [ebp - 0x39c], eax
mov edx, dword [ebp - 0x39c]
mov dword [ebp - 0x3a0], edx
mov byte [ebp - 4], 0x14
push ecx
mov ecx, esp
mov dword [ebp - 0x28c], esp
push 0x101d6e6c
call fcn.1000b560
mov dword [ebp - 0x3a4], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2e0]
call fcn.1003db40
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x290], esp
push str.shell:PrintersFolder
call fcn.1000b560
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 4], 0x15
push ecx
mov ecx, esp
mov dword [ebp - 0x294], esp
push 0x101d6ea4
call fcn.1000b560
mov dword [ebp - 0x3b0], eax
mov ecx, dword [ebp - 0x3b0]
mov dword [ebp - 0x3b4], ecx
mov byte [ebp - 4], 0x16
push ecx
mov ecx, esp
mov dword [ebp - 0x298], esp
push 0x101d6ec0
call fcn.1000b560
mov dword [ebp - 0x3b8], eax
mov edx, dword [ebp - 0x3b8]
mov dword [ebp - 0x3bc], edx
mov byte [ebp - 4], 0x17
push ecx
mov ecx, esp
mov dword [ebp - 0x29c], esp
push 0x101d6ee4
call fcn.1000b560
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2e0]
call fcn.1003db40
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x2a0], esp
push str.ms_settings:
call fcn.1000b560
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 4], 0x18
push ecx
mov ecx, esp
mov dword [ebp - 0x2a4], esp
push 0x101d6f10
call fcn.1000b560
mov dword [ebp - 0x3cc], eax
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp - 0x3d0], ecx
mov byte [ebp - 4], 0x19
push ecx
mov ecx, esp
mov dword [ebp - 0x2a8], esp
push str.9hncN
call fcn.1000b560
mov dword [ebp - 0x3d4], eax
mov edx, dword [ebp - 0x3d4]
mov dword [ebp - 0x3d8], edx
mov byte [ebp - 4], 0x1a
push ecx
mov ecx, esp
mov dword [ebp - 0x2ac], esp
push 0x101d6f54
call fcn.1000b560
mov dword [ebp - 0x3dc], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2e0]
call fcn.1003db40
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x2b0], esp
push str.shell:ConnectionsFolder
call fcn.1000b560
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x3e4], eax
mov dword [ebp - 4], 0x1b
push ecx
mov ecx, esp
mov dword [ebp - 0x2b4], esp
push 0x101d6f8c
call fcn.1000b560
mov dword [ebp - 0x3e8], eax
mov ecx, dword [ebp - 0x3e8]
mov dword [ebp - 0x3ec], ecx
mov byte [ebp - 4], 0x1c
push ecx
mov ecx, esp
mov dword [ebp - 0x2b8], esp
push str._f:y
call fcn.1000b560
mov dword [ebp - 0x3f0], eax
mov edx, dword [ebp - 0x3f0]
mov dword [ebp - 0x3f4], edx
mov byte [ebp - 4], 0x1d
push ecx
mov ecx, esp
mov dword [ebp - 0x2bc], esp
push 0x101d6fd8
call fcn.1000b560
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2e0]
call fcn.1003db40
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x2c0], esp
push 0x101d6fe0
call fcn.1000b560
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x400], eax
mov dword [ebp - 4], 0x1e
push ecx
mov ecx, esp
mov dword [ebp - 0x2c4], esp
push str.ExcuteRunProcess
call fcn.1000b560
mov dword [ebp - 0x404], eax
mov ecx, dword [ebp - 0x404]
mov dword [ebp - 0x408], ecx
mov byte [ebp - 4], 0x1f
push ecx
mov ecx, esp
mov dword [ebp - 0x2c8], esp
push 0x101d7008
call fcn.1000b560
mov dword [ebp - 0x40c], eax
mov edx, dword [ebp - 0x40c]
mov dword [ebp - 0x410], edx
mov byte [ebp - 4], 0x20
push ecx
mov ecx, esp
mov dword [ebp - 0x2cc], esp
push 0x101d702c
call fcn.1000b560
mov dword [ebp - 0x414], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2e0]
call fcn.1003db40
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x2d0], esp
push 0x101d7034
call fcn.1000b560
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x41c], eax
mov dword [ebp - 4], 0x21
push ecx
mov ecx, esp
mov dword [ebp - 0x2d4], esp
push str.ExcuteRunSoftMgr
call fcn.1000b560
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0x420]
mov dword [ebp - 0x424], ecx
mov byte [ebp - 4], 0x22
push ecx
mov ecx, esp
mov dword [ebp - 0x2d8], esp
push 0x101d705c
call fcn.1000b560
mov dword [ebp - 0x428], eax
mov edx, dword [ebp - 0x428]
mov dword [ebp - 0x42c], edx
mov byte [ebp - 4], 0x23
push ecx
mov ecx, esp
mov dword [ebp - 0x2dc], esp
push 0x101d707c
call fcn.1000b560
mov dword [ebp - 0x430], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2e0]
call fcn.1003db40
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1017e01c
mov esp, ebp
pop ebp
ret