Function at 0x106a2af
Capabilities:
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x6b4
mov eax, dword [0x10b0090]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x688], edi
call fcn.010185f7
mov dword [ebp - 0x694], eax
test eax, eax
jl 0x106a4df
and dword [ebp - 0x690], 0
mov esi, 0x104
push esi
xor eax, eax
lea ecx, [ebp - 0x20c]
inc eax
push ecx
push eax
mov dword [ebp - 0x680], eax
push edi
jmp 0x106a60f
mov edi, dword [sym.imp.SHLWAPI.dll_StrCmpICW]
push 0x106a6b8
lea eax, [ebp - 0x20c]
push eax
call edi
test eax, eax
jne 0x106a32b
or dword [ebx + 8], 1
jmp 0x106a5f5
push 0x106a6a8
lea eax, [ebp - 0x20c]
push eax
call edi
test eax, eax
jne 0x106a346
or dword [ebx + 8], 0x10
jmp 0x106a5f5
push 0x106a6a0
lea eax, [ebp - 0x20c]
push eax
call edi
test eax, eax
jne 0x106a361
or dword [ebx + 8], 8
jmp 0x106a5f5
push 0x106a694
lea eax, [ebp - 0x20c]
push eax
call edi
test eax, eax
lea eax, [ebp - 0x20c]
jne 0x106a4f7
and dword [ebp - 0x684], 0
and dword [ebp - 0x68c], 0
inc dword [ebp - 0x680]
push esi
push eax
push dword [ebp - 0x680]
push dword [ebp - 0x688]
call fcn.01069e06
test eax, eax
je 0x106a652
lea eax, [ebp - 0x67c]
push eax
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_GUIDFromStringW]
test eax, eax
lea eax, [ebp - 0x20c]
je 0x106a43f
push eax
push 0x27
lea eax, [ebp - 0x25c]
push eax
call fcn.010065a0
inc dword [ebp - 0x680]
push esi
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0x680]
push dword [ebp - 0x688]
call fcn.01069e06
test eax, eax
jne 0x106a418
push esi
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x25c]
push eax
call fcn.0106a1f4
test eax, eax
je 0x106a652
xor eax, eax
push eax
push eax
lea ecx, [ebp - 0x684]
push ecx
push eax
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHELL32.dll_SHParseDisplayName]
lea eax, [ebp - 0x67c]
mov dword [ebp - 0x68c], eax
jmp 0x106a48d
push 0x1065ab8
push eax
call edi
test eax, eax
jne 0x106a474
inc dword [ebp - 0x680]
push dword [ebp - 0x680]
mov dword [ebp - 0x690], 1
push dword [ebp - 0x688]
call fcn.0106a12b
mov dword [ebp - 0x684], eax
jmp 0x106a48d
xor eax, eax
push eax
push eax
lea ecx, [ebp - 0x684]
push ecx
push eax
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHELL32.dll_SHParseDisplayName]
cmp dword [ebp - 0x684], 0
je 0x106a4b5
push dword [ebp - 0x684]
push dword [ebp - 0x68c]
call fcn.0107b034
push dword [ebp - 0x684]
mov dword [ebx], eax
call dword [sym.imp.SHELL32.dll_ILFree]
cmp dword [ebp - 0x690], 0
je 0x106a5f5
xor eax, eax
cmp dword [ebx], eax
jne 0x106a4d4
push ebx
push eax
push eax
push 5
push eax
call dword [sym.imp.SHELL32.dll_SHGetFolderLocation]
push dword [ebp - 0x694]
call fcn.0101959d
xor eax, eax
cmp dword [ebx], eax
setne al
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0100204d
leave
ret 8
push 0x106a684
push eax
call edi
test eax, eax
jne 0x106a50c
or dword [ebx + 8], 4
jmp 0x106a5f5
push 0x1065ab8
lea eax, [ebp - 0x20c]
push eax
call edi
test eax, eax
je 0x106a621
push 0x106a670
lea eax, [ebp - 0x20c]
push eax
call edi
test eax, eax
jne 0x106a540
mov dword [ebx + 4], 1
jmp 0x106a5f5
push 0x106a65c
lea eax, [ebp - 0x20c]
push eax
call edi
test eax, eax
jne 0x106a590
inc dword [ebp - 0x680]
push dword [ebp - 0x680]
lea eax, [ebp - 0x6b4]
push dword [ebp - 0x688]
push eax
call fcn.01069fe3
mov esi, eax
lea edi, [ebp - 0x6a4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea edi, [ebx + 0xc]
lea esi, [ebp - 0x6a4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, 0x104
jmp 0x106a5f5
cmp dword [ebx], 0
jne 0x106a5f5
mov edi, dword [sym.imp.SHELL32.dll_ILCreateFromPathW]
lea eax, [ebp - 0x20c]
push eax
call edi
mov dword [ebp - 0x68c], eax
test eax, eax
jne 0x106a5ed
push esi
lea eax, [ebp - 0x66c]
push eax
call fcn.0107aa5c
test eax, eax
jl 0x106a5ed
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x66c]
push eax
lea eax, [ebp - 0x464]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
je 0x106a5ed
lea eax, [ebp - 0x464]
push eax
call edi
mov dword [ebp - 0x68c], eax
mov eax, dword [ebp - 0x68c]
mov dword [ebx], eax
inc dword [ebp - 0x680]
push esi
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0x680]
push dword [ebp - 0x688]
call fcn.01069e06
test eax, eax
je 0x106a4c2
jmp 0x106a30a
mov eax, dword [ebp - 0x680]
inc eax
push eax
push dword [ebp - 0x688]
call fcn.0106a12b
mov esi, eax
test esi, esi
je 0x106a649
push dword [ebx]
call dword [sym.imp.SHELL32.dll_ILFree]
mov dword [ebx], esi
jmp 0x106a4c2
cmp dword [ebx], 0
jne 0x106a4d4
xor eax, eax
jmp 0x106a4e6