Function at 0x415be0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b3806
mov eax, dword fs:[0]
push eax
sub esp, 0x304
mov eax, dword [0x4e13b0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
push 0x208
lea eax, [ebp - 0x21c]
push 0
push eax
call fcn.00440bc0
add esp, 0xc
lea eax, [ebp - 0x21c]
push 0
push 0x1a
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x21c]
push 0x4bf114
push eax
call esi
lea eax, [ebp - 0x21c]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectory]
push str.lds.set
lea eax, [ebp - 0x21c]
push eax
call esi
lea ecx, [ebp - 0x2f8]
call fcn.00409930
mov dword [ebp - 4], 0
push 0
mov byte [ebp - 4], 1
call fcn.0046d120
mov dword [ebp - 0x304], eax
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x240]
mov dword [ebp - 0x300], edx
push eax
call fcn.0046ccbd
or esi, 0xffffffff
test eax, eax
lea eax, [ebp - 0x304]
mov ebx, esi
cmove ebx, dword [ebp - 0x240]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.0046ccbd
test eax, eax
mov ecx, esi
lea eax, [ebp - 0x304]
cmove ecx, dword [ebp - 0x260]
push eax
lea eax, [ebp - 0x288]
mov dword [ebp - 0x2fc], ecx
push eax
call fcn.0046ccbd
test eax, eax
mov ecx, esi
lea eax, [ebp - 0x304]
cmove ecx, dword [ebp - 0x280]
push eax
lea eax, [ebp - 0x2ac]
mov dword [ebp - 0x30c], ecx
push eax
call fcn.0046ccbd
xor ecx, ecx
test eax, eax
lea eax, [ebp - 0x304]
cmove ecx, dword [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x310], ecx
push eax
call fcn.0046ccbd
add esp, 0x2c
test eax, eax
jne 0x415d44
mov edi, dword [ebp - 0x2c0]
inc edi
jmp 0x415d46
xor edi, edi
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x2f4]
push eax
call fcn.0046ccbd
add esp, 8
test eax, eax
jne 0x415d6d
mov eax, dword [ebp - 0x2e0]
add eax, 0x76c
jmp 0x415d6f
xor eax, eax
push ebx
push dword [ebp - 0x2fc]
push dword [ebp - 0x30c]
push dword [ebp - 0x310]
push edi
push eax
lea eax, [ebp - 0x2f8]
push str._04d__02d__02d__02d:_02d:_02d
push eax
call fcn.0040a920
add esp, 0x20
jmp 0x415da3
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 4], 0
cmp dword [eax - 0xc], 0
jne 0x415dbe
lea edx, [eax - 0x10]
jmp 0x415e53
push str.45476F8083D74BA28A2DD8ED399737B7
lea ecx, [ebp - 0x2fc]
call fcn.00406d80
lea eax, [ebp - 0x2fc]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x2f8]
push eax
lea eax, [ebp - 0x308]
push eax
call fcn.00432bc0
mov edx, dword [ebp - 0x2fc]
add esp, 0xc
mov byte [ebp - 4], 0
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x415e10
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x21c]
push eax
push dword [ebp - 0x308]
push 0x4bc2b0
push 0x4bf1ac
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edx, dword [ebp - 0x308]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x415e4a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2f8]
add edx, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x415e6c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00428c45
mov esp, ebp
pop ebp
ret