Function at 0x1007b100
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x124c
call fcn.100bcc70
mov eax, dword [0x101d7380]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword fs:[0x2c]
mov ecx, dword [0x102b3658]
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [eax + ecx*4]
mov eax, dword [0x102b06b8]
push edi
mov edi, dword [ebp + 0xc]
cmp eax, dword [esi + 4]
jg 0x1007b6ce
mov eax, dword [0x102b06c8]
cmp eax, dword [esi + 4]
jg 0x1007b722
mov eax, dword [0x102b06d8]
cmp eax, dword [esi + 4]
jg 0x1007b776
test ebx, ebx
je 0x1007b16c
mov dword [ebx], 0x102b06bc
test edi, edi
je 0x1007b176
mov dword [edi], 0x102b06dc
cmp byte [0x102b06aa], 0
je 0x1007b189
cmp byte [ebp + 0x10], 0
je 0x1007b6b8
mov eax, dword [0x102b06b4]
mov byte [0x102b06aa], 1
test eax, eax
je 0x1007b1c0
push eax
mov dword [0x102b06b0], 0
mov dword [0x102b06ac], 0
call fcn.1008ce30
add esp, 4
mov dword [0x102b06b4], 0
mov eax, dword [0x102b06c4]
test eax, eax
je 0x1007b1f0
push eax
mov dword [0x102b06c0], 0
mov dword [0x102b06bc], 0
call fcn.1008ce30
add esp, 4
mov dword [0x102b06c4], 0
push 0xffc
lea eax, [ebp - 0x120c]
mov dword [ebp - 0x1210], 0x2f3a43
push 0
push eax
call fcn.100be840
add esp, 0xc
cmp byte [ebp - 0x1210], 0x5a
jg 0x1007b290
nop dword [eax]
lea eax, [ebp - 0x1240]
push eax
lea eax, [ebp - 0x1210]
push eax
call fcn.100cdffb
add esp, 8
cmp eax, 0xffffffff
je 0x1007b27e
mov eax, dword [ebp - 0x123a]
and eax, 0xf000
cmp eax, 0x4000
jne 0x1007b27e
mov esi, dword [0x102b06cc]
mov ecx, 0x102b06cc
lea eax, [esi + 1]
push eax
call fcn.1007c760
shl esi, 0xc
lea ecx, [ebp - 0x1210]
add esi, dword [0x102b06d4]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [esi], al
lea esi, [esi + 1]
test al, al
jne 0x1007b270
mov al, byte [ebp - 0x1210]
inc al
mov byte [ebp - 0x1210], al
cmp al, 0x5a
jle 0x1007b220
mov eax, dword [0x102b06cc]
lea esi, [eax + 7]
cmp esi, dword [0x102b06b0]
jle 0x1007b2e9
mov eax, esi
shl eax, 0xc
push eax
call fcn.1008ce00
mov edi, eax
add esp, 4
mov eax, dword [0x102b06b4]
test eax, eax
je 0x1007b2d8
mov ecx, dword [0x102b06ac]
shl ecx, 0xc
push ecx
push eax
push edi
call fcn.100be2c0
push dword [0x102b06b4]
call fcn.1008ce30
add esp, 0x10
mov eax, dword [0x102b06cc]
mov dword [0x102b06b4], edi
mov dword [0x102b06b0], esi
lea esi, [eax + 7]
cmp esi, dword [0x102b06c0]
jle 0x1007b33a
imul eax, esi, 0x410
push eax
call fcn.1008ce00
mov edi, eax
add esp, 4
mov eax, dword [0x102b06c4]
test eax, eax
je 0x1007b32e
imul ecx, dword [0x102b06bc], 0x410
push ecx
push eax
push edi
call fcn.100be2c0
push dword [0x102b06c4]
call fcn.1008ce30
add esp, 0x10
mov dword [0x102b06c4], edi
mov dword [0x102b06c0], esi
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor ebx, ebx
mov dword [ebp - 0x1244], ebx
nop dword [eax + eax]
xor eax, eax
mov word [ebp - 0x210], ax
mov dword [ebp - 0x1248], eax
lea eax, [ebp - 0x1248]
push eax
push dword [ebx + 0x101036e4]
push 0
call sub.SHELL32.dll_SHGetSpecialFolderLocation
test eax, eax
js 0x1007b532
lea eax, [ebp - 0x210]
push eax
push dword [ebp - 0x1248]
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov ebx, eax
mov dword [ebp - 0x124c], 0
lea eax, [ebp - 0x124c]
shr ebx, 0x1f
push eax
xor bl, 1
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
cmp eax, 0x80004005
je 0x1007b3d8
mov ecx, dword [ebp - 0x124c]
test ecx, ecx
je 0x1007b3d8
push dword [ebp - 0x1248]
mov eax, dword [ecx]
push ecx
call dword [eax + 0x14]
mov eax, dword [ebp - 0x124c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
jmp 0x1007b3e6
push dword [ebp - 0x1248]
call fcn.100c50dc
add esp, 4
test bl, bl
je 0x1007b52c
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x210]
mov byte [0x102b06e0], 0
push eax
push 0
push 0xfde9
call esi
push 0
push 0
push eax
push 0x102b06e0
push 0xffffffffffffffff
lea eax, [ebp - 0x210]
push eax
push 0
push 0xfde9
call esi
mov esi, dword [0x102b06ac]
mov ecx, 0x102b06ac
lea eax, [esi + 1]
push eax
call fcn.1007c760
shl esi, 0xc
mov ecx, 0x102b06e0
add esi, dword [0x102b06b4]
nop dword [eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [esi], al
lea esi, [esi + 1]
test al, al
jne 0x1007b450
mov ebx, dword [ebp - 0x1244]
mov edi, dword [0x102b06bc]
mov ecx, dword [0x102b06c0]
mov eax, dword [ebx + 0x101d6d18]
mov dword [ebp - 0x1244], eax
cmp edi, ecx
jne 0x1007b4ec
lea esi, [edi + 1]
test ecx, ecx
je 0x1007b492
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1007b497
mov eax, 8
cmp eax, esi
cmovg esi, eax
cmp esi, ecx
jle 0x1007b4ec
imul eax, esi, 0x410
push eax
call fcn.1008ce00
mov edi, eax
add esp, 4
mov eax, dword [0x102b06c4]
test eax, eax
je 0x1007b4da
imul ecx, dword [0x102b06bc], 0x410
push ecx
push eax
push edi
call fcn.100be2c0
push dword [0x102b06c4]
call fcn.1008ce30
add esp, 0x10
mov dword [0x102b06c4], edi
mov edi, dword [0x102b06bc]
mov dword [0x102b06c0], esi
lea eax, [edi + 1]
mov ecx, 0x102b06bc
push eax
call fcn.1007c7e0
mov eax, dword [ebp - 0x1244]
mov ecx, 0x101036d0
test eax, eax
cmovne ecx, eax
imul edx, edi, 0x410
add edx, dword [0x102b06c4]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx], al
lea edx, [edx + 1]
test al, al
jne 0x1007b516
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jmp 0x1007b53b
mov ebx, dword [ebp - 0x1244]
xor eax, eax
mov word [ebp - 0x210], ax
add ebx, 4
mov dword [ebp - 0x1244], ebx
cmp ebx, 0x1c
jl 0x1007b350
mov eax, dword [0x102b06cc]
mov esi, dword [0x102b06ac]
mov dword [0x102b06dc], esi
mov dword [ebp - 0x1244], eax
test eax, eax
jle 0x1007b6b8
xor ebx, ebx
nop
mov edi, dword [0x102b06d4]
lea eax, [esi + 1]
push eax
mov ecx, 0x102b06ac
call fcn.1007c760
add edi, ebx
mov ecx, 0x101036d0
cmovne ecx, edi
shl esi, 0xc
add esi, dword [0x102b06b4]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [esi], al
lea esi, [esi + 1]
test al, al
jne 0x1007b597
mov ecx, edi
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1007b5b0
sub ecx, edx
mov esi, edi
neg esi
sbb esi, esi
lea eax, [ecx - 1]
and esi, eax
jge 0x1007b5d9
mov esi, edi
lea ecx, [esi + 1]
nop dword [eax + eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x1007b5d0
sub esi, ecx
test esi, esi
jle 0x1007b5ec
push esi
push edi
push 0x102b16e0
call fcn.100cc980
add esp, 0xc
mov edi, dword [0x102b06bc]
mov ecx, dword [0x102b06c0]
mov byte [esi + 0x102b16e0], 0
cmp edi, ecx
jne 0x1007b66f
lea esi, [edi + 1]
test ecx, ecx
je 0x1007b615
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x1007b61a
mov eax, 8
cmp eax, esi
cmovg esi, eax
cmp esi, ecx
jle 0x1007b66f
imul eax, esi, 0x410
push eax
call fcn.1008ce00
mov edi, eax
add esp, 4
mov eax, dword [0x102b06c4]
test eax, eax
je 0x1007b65d
imul ecx, dword [0x102b06bc], 0x410
push ecx
push eax
push edi
call fcn.100be2c0
push dword [0x102b06c4]
call fcn.1008ce30
add esp, 0x10
mov dword [0x102b06c4], edi
mov edi, dword [0x102b06bc]
mov dword [0x102b06c0], esi
lea eax, [edi + 1]
mov ecx, 0x102b06bc
push eax
call fcn.1007c7e0
imul ecx, edi, 0x410
mov edx, 0x102b16e0
add ecx, dword [0x102b06c4]
nop
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x1007b690
add ebx, 0x1000
sub dword [ebp - 0x1244], 1
je 0x1007b6b8
mov esi, dword [0x102b06ac]
jmp 0x1007b570
mov ecx, dword [ebp - 4]
mov eax, 0x102b06ac
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100bcc4b
mov esp, ebp
pop ebp
ret
push 0x102b06b8
call fcn.100bcd17
add esp, 4
cmp dword [0x102b06b8], 0xffffffff
jne 0x1007b140
push 0x100ee220
mov dword [0x102b06b0], 0
mov dword [0x102b06ac], 0
mov dword [0x102b06b4], 0
call fcn.100bcc36
push 0x102b06b8
call fcn.100bccc6
add esp, 8
jmp 0x1007b140
push 0x102b06c8
call fcn.100bcd17
add esp, 4
cmp dword [0x102b06c8], 0xffffffff
jne 0x1007b151
push 0x100ee0e0
mov dword [0x102b06c0], 0
mov dword [0x102b06bc], 0
mov dword [0x102b06c4], 0
call fcn.100bcc36
push 0x102b06c8
call fcn.100bccc6
add esp, 8
jmp 0x1007b151
push 0x102b06d8
call fcn.100bcd17
add esp, 4
cmp dword [0x102b06d8], 0xffffffff
jne 0x1007b162
push 0x100ee1d0
mov dword [0x102b06d0], 0
mov dword [0x102b06cc], 0
mov dword [0x102b06d4], 0
call fcn.100bcc36
push 0x102b06d8
call fcn.100bccc6
add esp, 8
jmp 0x1007b162