Function at 0x412f20
Capabilities:
Get common file path

Disassembly:
push rbp
sub rsp, 0x4e0
mov rbp, rsp
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x4d8], 0
mov qword [rbp + 0x4a8], 0
mov qword [rbp + 0x4a0], 0
mov qword [rbp + 0x288], 0
mov qword [rbp + 0x280], 0
mov qword [rbp + 0x68], rbp
mov qword [rbp + 0x4f0], rcx
mov dword [rbp + 0x4f8], edx
nop
lea rcx, [0x00413358]
call sub.kernel32.dll_LoadLibraryW
mov rcx, rax
lea rdx, [0x0041336c]
call fcn.0040e8a0
mov qword [0x004343f8], rax
mov rcx, qword [rbp + 0x4f0]
call fcn.00409180
xor ecx, ecx
mov edx, 2
call sub.ole32.dll_CoInitializeEx
nop
lea rcx, [rbp + 0x4a8]
call fcn.0040bc70
mov rcx, rax
call sub.shell32.dll_SHGetDesktopFolder
xor ecx, ecx
mov edx, dword [rbp + 0x4f8]
xor r8, r8
xor r9, r9
lea rax, [rbp + 0x4c8]
mov qword [rsp + 0x20], rax
call sub.shell32.dll_SHGetFolderLocation
lea rcx, [rbp + 0x4a0]
call fcn.0040bc70
mov rcx, qword [rbp + 0x4a8]
mov rdx, qword [rbp + 0x4c8]
xor r8, r8
mov r9, qword [0x0042d890]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x4a8]
mov rax, qword [rax]
call qword [rax + 0x28]
cmp qword [rbp + 0x4a0], 0
je 0x413276
lea rcx, [rbp + 0x4d8]
call fcn.0040bc70
mov rcx, qword [rbp + 0x4a0]
xor edx, edx
mov r8d, 0xca0
mov r9, rax
mov rax, qword [rbp + 0x4a0]
mov rax, qword [rax]
call qword [rax + 0x20]
test eax, eax
jne 0x413276
jmp 0x413247
lea rcx, [rbp + 0x294]
mov edx, 0x20c
xor r8, r8
call fcn.00405c10
mov rcx, qword [rbp + 0x4a0]
mov rdx, qword [rbp + 0x4c0]
mov r8d, 0x4001
lea r9, [rbp + 0x294]
mov rax, qword [rbp + 0x4a0]
mov rax, qword [rax]
call qword [rax + 0x58]
lea rcx, [rbp + 0x294]
mov rdx, qword [rbp + 0x4c0]
lea r8, [rbp + 0x4b0]
call sub.shlwapi.dll_StrRetToStrW
cmp qword [rbp + 0x4b0], 0
je 0x413247
cmp dword [rbp + 0x4f8], 0x12
jne 0x413100
lea rcx, [rbp + 0x288]
lea rdx, [0x00413394]
call fcn.00409710
jmp 0x41310c
lea rcx, [rbp + 0x288]
call fcn.00409180
mov rcx, qword [rbp + 0x4c8]
mov rdx, qword [rbp + 0x4c0]
call sub.shell32.dll_ILCombine
mov qword [rbp + 0x4b8], rax
lea rcx, [rbp + 0x76]
mov edx, 0x20a
xor r8, r8
call fcn.00405c10
mov rcx, qword [rbp + 0x4b8]
lea rdx, [rbp + 0x76]
call sub.shell32.dll_SHGetPathFromIDListW
mov dword [rbp + 0x70], 0
lea rcx, [rbp + 0x60]
lea rdx, [rbp + 0x76]
mov r8d, 0x105
call fcn.0040a5d0
cmp qword [rbp + 0x60], 0
je 0x413185
lea rcx, [rbp + 0x58]
lea rdx, [rbp + 0x76]
mov r8d, 0x105
call fcn.0040a5d0
mov rax, qword [rbp + 0x58]
mov eax, dword [rax - 4]
mov dword [rbp + 0x70], eax
cmp dword [rbp + 0x70], 0
jle 0x4131d5
lea rcx, [rbp + 0x50]
mov rdx, qword [rbp + 0x4b0]
call fcn.0040a570
lea rcx, [rbp + 0x48]
lea rdx, [rbp + 0x76]
mov r8d, 0x105
call fcn.0040a5d0
lea rcx, [rbp + 0x280]
mov edx, 3
mov r8, qword [rbp + 0x50]
lea r9, [0x004133a8]
mov rax, qword [rbp + 0x48]
mov qword [rsp + 0x20], rax
call fcn.0040aa20
jmp 0x4131e8
lea rcx, [rbp + 0x280]
mov rdx, qword [rbp + 0x4b0]
call fcn.0040a570
mov rcx, qword [rbp + 0x4f0]
mov edx, 6
mov rax, qword [rbp + 0x4f0]
mov r8, qword [rax]
lea r9, [0x004133b8]
mov rax, qword [rbp + 0x288]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x280]
mov qword [rsp + 0x28], rax
lea rax, [0x004133c8]
mov qword [rsp + 0x30], rax
lea rax, [0x004133f0]
mov qword [rsp + 0x38], rax
call fcn.0040aa20
mov rcx, qword [rbp + 0x4b0]
call qword [0x004343f8]
mov rcx, qword [rbp + 0x4d8]
mov edx, 1
lea r8, [rbp + 0x4c0]
lea r9, [rbp + 0x4d4]
mov rax, qword [rbp + 0x4d8]
mov rax, qword [rax]
call qword [rax + 0x18]
test eax, eax
je 0x41307e
nop
call sub.ole32.dll_CoUninitialize
nop
lea rcx, [rbp + 0x48]
mov edx, 4
call fcn.00409260
lea rcx, [rbp + 0x280]
mov edx, 2
call fcn.00409260
lea rcx, [rbp + 0x4a0]
mov rdx, qword [0x00412908]
mov r8d, 2
call fcn.0040b130
lea rcx, [rbp + 0x4d8]
call fcn.0040bc70
mov rax, qword [rbp + 0x4f0]
lea rsp, [rbp + 0x4e0]
pop rbp
ret