Function at 0x445ce0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52c339
mov eax, dword fs:[0]
push eax
sub esp, 0x2c0
mov eax, dword [0x5d3b14]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov edi, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x220], eax
lea ecx, [ebp - 0x244]
call dword [0x55535c]
mov dword [ebp - 4], 0
call dword [0x555380]
mov esi, eax
mov ecx, dword [esi + 0x2ad4]
mov ecx, dword [ecx + 0xc]
add ecx, 0x2ad4
add ecx, esi
call dword [0x555288]
mov ecx, eax
call dword [0x555334]
test al, al
je 0x445e1e
push 0x208
push 0
lea eax, [ebp - 0x21c]
push eax
call fcn.00515fd2
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0
push 0
push 0x10
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
je 0x445e00
call dword [0x555fe4]
mov edi, eax
mov ecx, dword [edi]
mov esi, dword [ecx + 8]
push 0x55b07d
lea ecx, [ebp - 0x288]
call dword [0x555358]
mov byte [ebp - 4], 1
push str._____msg.vmuiAppVM.captureScreen.desktopError_Error_accessing_the_desktop_directory._Make_sure_that_your_desktop_folder_exists.
lea eax, [ebp - 0x2ac]
push eax
call dword [0x554a44]
add esp, 8
mov byte [ebp - 4], 2
push 1
lea ecx, [ebp - 0x288]
push ecx
push eax
mov ecx, esi
call dword [0x55604c]
mov ecx, edi
call esi
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2ac]
call dword [0x555348]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x288]
jmp 0x4460e1
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x268], esp
lea eax, [ebp - 0x21c]
push eax
call dword [0x555350]
mov byte [ebp - 4], 3
jmp 0x445e3a
lea ecx, [esi + 0x2ad0]
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x268], esp
push eax
call dword [0x555280]
mov byte [ebp - 4], 4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x244]
call dword [0x555304]
push dword [ebp - 0x220]
lea eax, [ebp - 0x264]
push eax
mov ecx, ebx
call fcn.00445380
mov byte [ebp - 4], 5
push str..png
lea ecx, [ebp - 0x288]
call dword [0x555358]
mov byte [ebp - 4], 6
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0x264]
call dword [0x5552dc]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x288]
call dword [0x555348]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x224]
call dword [0x554b08]
mov byte [ebp - 4], 8
sub esp, 0x20
mov eax, esp
mov dword [ebp - 0x268], esp
lea ecx, [ebp - 0x264]
push ecx
lea ecx, [ebp - 0x244]
push ecx
push eax
lea ecx, [ebp - 0x224]
call dword [0x554de4]
mov byte [ebp - 4], 9
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x244]
call dword [0x555304]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x224]
call dword [0x554b14]
mov dword [ebp - 4], 5
push 0
lea ecx, [ebp - 0x244]
call dword [0x555340]
push eax
push edi
call fcn.00516825
add esp, 0xc
test al, al
jne 0x445fd5
call dword [0x555fe4]
mov ebx, eax
mov ecx, dword [ebx]
mov edi, dword [ecx + 8]
push 0x55b07d
lea ecx, [ebp - 0x288]
call dword [0x555358]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x244]
call dword [0x555340]
mov esi, eax
push str._____msg.vmuiAppVM.captureScreen.writeErrorFormat_Error_writing_screenshot_to___s_._Make_sure_you_have_permission_to_save_the_file.
lea eax, [ebp - 0x2cc]
push eax
call dword [0x554a44]
add esp, 8
mov byte [ebp - 4], 0xf
mov ecx, eax
call dword [0x555340]
push esi
push eax
lea eax, [ebp - 0x2ac]
push eax
call dword [0x554a40]
add esp, 0xc
mov byte [ebp - 4], 0x10
push 1
lea ecx, [ebp - 0x288]
push ecx
push eax
mov ecx, edi
call dword [0x55604c]
mov ecx, ebx
call edi
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2ac]
call dword [0x555348]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2cc]
call dword [0x555348]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x288]
call dword [0x555348]
mov byte [ebp - 4], 0
jmp 0x4460db
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x264]
call dword [0x555348]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x244]
call dword [0x555348]
mov al, 1
jmp 0x4460fc
lea ecx, [ebp - 0x264]
call dword [0x555348]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x244]
call dword [0x555348]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005150f0
mov esp, ebp
pop ebp
ret 8