Function at 0x407f50
Capabilities:
Get common file path

Disassembly:
sub esp, 0x51c
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp]
push eax
push 0x43014c
push 1
push 0
push 0x43015c
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
je 0x407f8b
call dword [sym.imp.ole32.dll_CoUninitialize]
or eax, 0xffffffff
add esp, 0x51c
ret
mov eax, dword [esp]
lea edx, [esp + 4]
push edx
push 0x43016c
mov ecx, dword [eax]
push eax
call dword [ecx]
test eax, eax
je 0x407fbe
mov eax, dword [esp]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 0xfffffffe
add esp, 0x51c
ret
push edi
mov ecx, 0x7f
xor eax, eax
lea edi, [esp + 0x15]
mov byte [esp + 0x14], 0
push 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea edx, [esp + 0x18]
push 0
push edx
push 0
stosb byte es:[edi], al
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
mov eax, dword [esp + 0x524]
lea ecx, [esp + 0x14]
push eax
push ecx
lea edx, [esp + 0x21c]
push str._s_s.lnk
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [esp + 0x318]
lea ecx, [esp + 0x214]
push 0x207
push eax
push 0xffffffffffffffff
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov eax, dword [esp + 8]
lea ecx, [esp + 0x318]
push 0
push ecx
mov edx, dword [eax]
push eax
call dword [edx + 0x14]
test eax, eax
pop edi
je 0x408068
mov eax, dword [esp + 4]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esp]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 0xfffffffd
add esp, 0x51c
ret
mov eax, dword [esp]
lea ecx, [esp + 8]
push ecx
push 0x43013c
mov edx, dword [eax]
push eax
call dword [edx]
test eax, eax
je 0x4080a5
mov eax, dword [esp + 4]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esp]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 0xfffffffc
add esp, 0x51c
ret
mov eax, dword [esp + 8]
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], 0
push ecx
mov edx, dword [eax]
push eax
call dword [edx + 0x18]
test eax, eax
je 0x4080f0
mov eax, dword [esp + 8]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp]
push eax
mov edx, dword [eax]
call dword [edx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 0xfffffffb
add esp, 0x51c
ret
mov eax, dword [esp + 0xc]
mov ecx, eax
and ecx, 0x2000
cmp ecx, 0x2000
je 0x4081f5
mov ecx, dword [esp + 8]
or ah, 0x20
push eax
push ecx
mov edx, dword [ecx]
call dword [edx + 0x1c]
test eax, eax
je 0x40814a
mov eax, dword [esp + 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 4]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esp]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 0xfffffffa
add esp, 0x51c
ret
mov eax, dword [esp + 4]
push 1
push 0
push eax
mov edx, dword [eax]
call dword [edx + 0x18]
test eax, eax
je 0x40818c
mov eax, dword [esp + 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 4]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esp]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 0xfffffff8
add esp, 0x51c
ret
mov eax, dword [esp + 4]
push 0
push eax
mov edx, dword [eax]
call dword [edx + 0x1c]
test eax, eax
mov eax, dword [esp + 8]
je 0x4081cc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 4]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esp]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 0xfffffff7
add esp, 0x51c
ret
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [esp + 4]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp]
push eax
mov edx, dword [eax]
call dword [edx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
add esp, 0x51c
ret
mov eax, dword [esp + 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 4]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esp]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
add esp, 0x51c
ret