Function at 0x41beab
Capabilities:
Get common file path

Disassembly:
push 0x328
mov eax, 0x48bc73
call fcn.0045cdd3
mov eax, dword [ebp + 8]
xor edi, edi
push edi
push 0xffffffffffffffff
push 0x49d9e6
mov ecx, eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], edi
call fcn.00417813
lea eax, [ebp - 0x21c]
mov dword [ebp - 4], edi
push eax
push 0x1a
push edi
mov dword [ebp - 0x224], 1
mov dword [ebp - 0x21c], edi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
test eax, eax
jne 0x41c17f
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x21c]
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
push dword [ebp - 0x21c]
mov esi, eax
neg esi
sbb esi, esi
and esi, 0x7fffbffb
call dword [sym.imp.ole32.dll_CoTaskMemFree]
push edi
push 0xffffffffffffffff
add esi, 0x80004005
je 0x41bf6f
push str.Unable_to_find_user_path
lea ecx, [ebp - 0x240]
mov dword [ebp - method.RSException.virtual_0], vtable.RSException.0
call fcn.00417813
push 0x4b0a7c
lea eax, [ebp - 0x244]
push eax
call sub.MSVCR120.dll__CxxThrowException
push 0x49fe00
lea ecx, [ebp - 0x240]
call fcn.00417813
mov ebx, eax
push edi
push 0xffffffffffffffff
push str.Acrobat
lea ecx, [ebp - 0x2d4]
mov dword [ebp - 4], 1
call fcn.00417813
mov edi, eax
push 0
push 0xffffffffffffffff
push str.Adobe
lea ecx, [ebp - 0x2a4]
mov byte [ebp - 4], 2
call fcn.00417813
mov esi, eax
push 0xffffffffffffffff
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x274]
call fcn.00417865
mov ecx, eax
movzx eax, word [0x4c6108]
push eax
push ecx
lea eax, [ebp - 0x31c]
mov byte [ebp - 4], 4
push eax
call fcn.00413e85
push esi
push eax
lea eax, [ebp - 0x2bc]
mov byte [ebp - 4], 5
push eax
call fcn.00413e39
mov ecx, eax
movzx eax, word [0x4c6108]
push eax
push ecx
lea eax, [ebp - 0x2ec]
mov byte [ebp - 4], 6
push eax
call fcn.00413e85
push edi
push eax
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 7
push eax
call fcn.00413e39
mov ecx, eax
movzx eax, word [0x4c6108]
push eax
push ecx
lea eax, [ebp - 0x334]
mov byte [ebp - 4], 8
push eax
call fcn.00413e85
push ebx
push eax
lea eax, [ebp - 0x304]
mov byte [ebp - 4], 9
push eax
call fcn.00413e39
add esp, 0x48
mov ecx, eax
movzx eax, word [0x4c6108]
mov byte [ebp - 4], 0xa
push eax
push ecx
lea eax, [ebp - 0x28c]
push eax
call fcn.00413e85
add esp, 0xc
mov esi, dword [ebp - 0x220]
mov ecx, esi
push 0xffffffffffffffff
push eax
mov byte [ebp - 4], 0xb
call fcn.0043231d
lea ecx, [ebp - 0x27c]
call fcn.0041394e
lea ecx, [ebp - 0x284]
call fcn.0041394e
lea ecx, [ebp - 0x2f4]
call fcn.0041394e
lea ecx, [ebp - 0x2fc]
call fcn.0041394e
lea ecx, [ebp - 0x324]
call fcn.0041394e
lea ecx, [ebp - 0x32c]
call fcn.0041394e
lea ecx, [ebp - 0x24c]
call fcn.0041394e
lea ecx, [ebp - 0x254]
call fcn.0041394e
lea ecx, [ebp - 0x2dc]
call fcn.0041394e
lea ecx, [ebp - 0x2e4]
call fcn.0041394e
lea ecx, [ebp - 0x2ac]
call fcn.0041394e
lea ecx, [ebp - 0x2b4]
call fcn.0041394e
lea ecx, [ebp - 0x30c]
call fcn.0041394e
lea ecx, [ebp - 0x314]
call fcn.0041394e
lea ecx, [ebp - 0x264]
call fcn.0041394e
lea ecx, [ebp - 0x26c]
call fcn.0041394e
lea ecx, [ebp - 0x294]
call fcn.0041394e
lea ecx, [ebp - 0x29c]
call fcn.0041394e
lea ecx, [ebp - 0x2c4]
call fcn.0041394e
lea ecx, [ebp - 0x2cc]
call fcn.0041394e
lea ecx, [ebp - 0x230]
call fcn.0041394e
lea ecx, [ebp - 0x238]
call fcn.0041394e
jmp 0x41c185
mov esi, dword [ebp - 0x220]
mov eax, esi
call fcn.0045cd82
ret