Function at 0x48e2a0
Capabilities:
Get common file path

Disassembly:
push 0x394
mov eax, 0x4707de
call fcn.00467994
mov edi, ecx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
and dword [ebp - 4], 0
mov dword [ebp - 0x36c], ecx
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x360], eax
add eax, 0x14
mov dword [ebp - 0x374], ecx
lea ecx, [ebp - 0x358]
push eax
call fcn.00437fc6
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 1
call fcn.00458630
push ecx
push 0x40b19c
lea ecx, [ebp - 0x358]
call fcn.00456431
push ecx
push 0x40b18c
lea ecx, [ebp - 0x358]
mov esi, eax
call fcn.00456431
push ecx
push 0x40b1ac
lea ecx, [ebp - 0x358]
mov ebx, eax
call fcn.00456431
cmp eax, 0xffffffff
je 0x48e622
cmp esi, eax
jg 0x48e33a
cmp ebx, eax
jle 0x48e622
push 0x412730
lea ecx, [ebp - 0x2c]
call fcn.0042ba3a
mov byte [ebp - 4], 2
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x4a30e4]
cmp eax, dword [ecx + 4]
jg 0x48e65d
lea ecx, [ebp - 0x358]
call fcn.004567c0
push ecx
mov edx, 0x4a2ca4
mov ecx, eax
call fcn.00453235
test al, al
je 0x48e61a
xor ebx, ebx
mov dword [ebp - 0x35c], ebx
lea eax, [ebp - 0x35c]
mov dword [ebp - 0x37c], ebx
mov dword [ebp - 0x380], eax
mov byte [ebp - 0x378], 1
lea eax, [ebp - 0x37c]
mov byte [ebp - 4], 5
push eax
push ebx
push ebx
push 0x4054c4
call dword [sym.imp.ext_ms_win_shell32_shellfolders_l1_1_0.dll_SHGetKnownFolderPath]
mov ecx, dword [ebp + 4]
test eax, eax
js 0x48e6a4
lea ecx, [ebp - 0x380]
mov byte [ebp - 4], 4
call fcn.00448fa8
push dword [ebp - 0x35c]
lea ecx, [ebp - 0x368]
call fcn.0042b2d0
lea ecx, [ebp - 0x368]
mov byte [ebp - 4], 6
call fcn.00462ecb
mov ecx, dword [ebp + 4]
test eax, eax
jns 0x48e40e
push eax
push 0x40b508
mov edx, 0x685
jmp 0x48e6af
lea ecx, [ebp - 0x1c0]
call fcn.0041b890
mov eax, ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x368]
mov ecx, dword [edi + 0x38]
push eax
call fcn.004675ab
mov ecx, dword [ebp + 4]
test eax, eax
jns 0x48e445
push eax
push 0x40b508
mov edx, 0x688
jmp 0x48e6af
push ebx
lea ecx, [ebp - 0x1c0]
call fcn.00434f80
push eax
lea ecx, [ebp - 0x370]
call fcn.0042b2d0
lea eax, [ebp - 0x370]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x3a0]
call fcn.00453ae1
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 0xa
call fcn.00438070
push dword [ebp - 0x360]
lea ecx, [ebp - 0x3a0]
call fcn.0041a35a
test eax, eax
je 0x48e5bd
mov esi, dword [ebp - 0x35c]
mov ecx, esi
mov dword [ebp - 0x360], ebx
call fcn.00462f96
mov ecx, dword [ebp + 4]
test eax, eax
jns 0x48e4c5
push eax
push 0x40b508
mov edx, 0x690
jmp 0x48e6af
xor ebx, ebx
mov ecx, edi
inc ebx
push ebx
push esi
call fcn.00460e51
mov ecx, dword [ebp + 4]
test eax, eax
jns 0x48e4e8
push eax
push 0x40b508
mov edx, 0x691
jmp 0x48e6af
lea ecx, [ebp - 0x354]
call fcn.0041b890
mov eax, ecx
mov byte [ebp - 4], 0xb
push eax
push esi
mov ecx, edi
call fcn.004611b5
mov ecx, dword [ebp + 4]
test eax, eax
jns 0x48e519
push eax
push 0x40b508
mov edx, 0x694
jmp 0x48e6af
push dword [ebp - 0x350]
lea ecx, [ebp - 0x364]
call fcn.0042b2d0
lea ecx, [ebp - 0x364]
mov byte [ebp - 4], 0xc
call fcn.00462df8
mov ecx, dword [ebp + 4]
test eax, eax
jns 0x48e550
push eax
push 0x40b508
mov edx, 0x697
jmp 0x48e6af
mov esi, dword [ebp - 0x374]
lea eax, [ebp - 0x360]
push esi
push eax
lea eax, [ebp - 0x364]
mov ecx, edi
push eax
call fcn.0046112a
mov ecx, dword [ebp + 4]
test eax, eax
jns 0x48e583
push eax
push 0x40b508
mov edx, 0x698
jmp 0x48e6af
cmp dword [ebp - 0x360], 0
je 0x48e596
mov eax, dword [ebp - 0x36c]
mov dword [eax], ebx
mov dword [esi], ebx
lea ecx, [ebp - 0x364]
call fcn.00438070
lea eax, [ebp - 0x344]
mov dword [ebp - 0x354], 0x401104
push eax
lea ecx, [ebp - 0x354]
call fcn.00434927
lea ecx, [ebp - 0x38c]
call fcn.00438070
lea ecx, [ebp - 0x390]
call fcn.00438070
lea ecx, [ebp - 0x3a0]
call fcn.0041de5f
lea eax, [ebp - 0x1b0]
mov dword [ebp - 0x1c0], 0x401104
push eax
lea ecx, [ebp - 0x1c0]
call fcn.00434927
lea ecx, [ebp - 0x368]
mov dword [ebp - fcn.004218f0], 0x401b08
call fcn.00438070
lea ecx, [ebp - 0x35c]
call fcn.00448fbf
lea ecx, [ebp - 0x2c]
call fcn.0042e2f9
lea ecx, [ebp - 0x358]
call fcn.00438070
xor eax, eax
jmp 0x48e655
call fcn.004678ce
ret 0xc
mov esi, 0x4a30e4
push esi
call fcn.0042c750
cmp dword [0x4a30e4], 0xffffffff
pop ecx
jne 0x48e364
push ecx
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 3
push eax
mov ecx, 0x4a2ca4
call fcn.004525c4
push 0x472620
call fcn.0042c50a
push esi
mov byte [ebp - 4], 2
call fcn.0042c6fe
pop ecx
pop ecx
jmp 0x48e364
push eax
push 0x40b508
mov edx, 0x681
call fcn.0047e814
int3