Function at 0x1027975
Capabilities:
Get common file path

Disassembly:
push 0x6d4
mov eax, 0x103ef19
call fcn.01002325
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0x6e0], eax
mov eax, dword [ebp + 0x14]
push eax
push ebx
push edi
mov dword [ebp - 0x6c4], edi
mov dword [ebp - 0x6d4], ebx
mov dword [ebp - 0x6cc], eax
mov dword [ebp - 0x6c8], ecx
call fcn.010275b1
mov esi, eax
test esi, esi
jl 0x1027a17
push dword [ebp - 0x6cc]
push 0
push ebx
push edi
call fcn.01027809
mov esi, eax
test esi, esi
jl 0x1027a17
lea eax, [ebp - 0x6d5]
push eax
call fcn.010250bd
mov esi, eax
test esi, esi
jl 0x1027a17
and dword [ebp - 0x6c0], 0
lea eax, [ebp - 0x6c0]
push eax
push ebx
push edi
call fcn.0102f37d
test eax, eax
jge 0x1027a17
cmp dword [ebp - 0x6c0], 0
jbe 0x1027a17
push dword [ebp - 0x6cc]
push ebx
push edi
call fcn.010275b1
mov esi, eax
xor eax, eax
cmp dword [0x104a04c], 0x7d6
push 0x1002e08
setge al
lea ecx, [ebp - 0x6d0]
mov dword [ebp - 0x6dc], eax
call fcn.01008ac0
and dword [ebp - 4], 0
mov ebx, 0x8007000e
test esi, esi
jl 0x1027a79
mov esi, dword [ebp - 0x6d0]
neg esi
sbb esi, esi
and esi, 0x7ff8fff2
add esi, ebx
js 0x1027a79
push dword [ebp - 0x6cc]
push 0xffffffffffffffff
push dword [ebp - 0x6d0]
push dword [ebp - 0x6d4]
push edi
call fcn.010278ad
mov esi, eax
xor eax, eax
mov edi, 0x206
push edi
push eax
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x216]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
test esi, esi
jl 0x1027acd
lea eax, [ebp - 0x218]
push eax
push 1
push 0
push 0x24
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov esi, eax
test esi, esi
jl 0x1027acd
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
test eax, eax
jne 0x1027acd
mov esi, 0x80004005
xor eax, eax
push edi
push eax
mov word [ebp - 0x420], ax
lea eax, [ebp - 0x41e]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
test esi, esi
jl 0x1027b2c
lea eax, [ebp - 0x6c0]
push eax
lea eax, [ebp - 0x420]
push eax
mov dword [ebp - 0x6c0], 0x104
call dword [sym.imp.USERENV.dll_GetProfilesDirectoryW]
test eax, eax
je 0x1027b25
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashW]
test eax, eax
jne 0x1027b2c
mov esi, 0x80004005
jmp 0x1027b2c
call fcn.0100f26b
mov esi, eax
mov eax, dword [0x1020de8]
mov dword [ebp - 0x628], eax
mov eax, dword [0x1020dec]
push 0x200
mov dword [ebp - 0x624], eax
lea eax, [ebp - 0x620]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
test esi, esi
jl 0x1028259
mov ax, word [ebp - 0x218]
mov edi, 0x1011ef0
push edi
lea ecx, [ebp - 0x6bc]
mov word [ebp - 0x628], ax
call fcn.01011f55
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea eax, [ebp - 0x628]
push eax
mov eax, dword [ebp - 0x6bc]
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 1
call dword [eax + 0x10]
mov eax, dword [ebp - 0x6bc]
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea ecx, [ebp - 0x6bc]
push 0x1028418
call dword [eax + 0x10]
push dword [ebp - 0x6b8]
lea ecx, [ebp - 0x6c0]
call fcn.01008ac0
mov esi, dword [ebp - 0x6c0]
neg esi
sbb esi, esi
and esi, 0x7ff8fff2
add esi, ebx
mov byte [ebp - 4], 2
js 0x1027bfe
mov eax, dword [ebp - 0x6c8]
mov ecx, dword [eax]
push 0
push 0
push dword [ebp - 0x6c0]
push eax
call dword [ecx + 0xc]
mov esi, eax
push dword [ebp - 0x6c0]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 0
call fcn.01007e75
test esi, esi
jl 0x1028259
push edi
lea ecx, [ebp - 0x6bc]
call fcn.01011f55
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea eax, [ebp - 0x218]
push eax
mov eax, dword [ebp - 0x6bc]
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 3
call dword [eax + 0x10]
mov eax, dword [ebp - 0x6bc]
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea ecx, [ebp - 0x6bc]
push 0x102840c
call dword [eax + 0x10]
push dword [ebp - 0x6b8]
lea ecx, [ebp - 0x6c0]
call fcn.01008ac0
mov esi, dword [ebp - 0x6c0]
neg esi
sbb esi, esi
and esi, 0x7ff8fff2
add esi, ebx
mov byte [ebp - 4], 4
js 0x1027cac
mov eax, dword [ebp - 0x6c8]
mov ecx, dword [eax]
push 0
push 0
push dword [ebp - 0x6c0]
push eax
call dword [ecx + 0xc]
mov esi, eax
push dword [ebp - 0x6c0]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 0
call fcn.01007e75
test esi, esi
jl 0x1028259
push edi
lea ecx, [ebp - 0x6bc]
call fcn.01011f55
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea eax, [ebp - 0x218]
push eax
mov eax, dword [ebp - 0x6bc]
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 5
call dword [eax + 0x10]
mov eax, dword [ebp - 0x6bc]
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea ecx, [ebp - 0x6bc]
push 0x10283f8
call dword [eax + 0x10]
push dword [ebp - 0x6b8]
lea ecx, [ebp - 0x6c0]
call fcn.01008ac0
mov esi, dword [ebp - 0x6c0]
neg esi
sbb esi, esi
and esi, 0x7ff8fff2
add esi, ebx
mov byte [ebp - 4], 6
js 0x1027d5a
mov eax, dword [ebp - 0x6c8]
mov ecx, dword [eax]
push 0
push 0
push dword [ebp - 0x6c0]
push eax
call dword [ecx + 0xc]
mov esi, eax
push dword [ebp - 0x6c0]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 0
call fcn.01007e75
test esi, esi
jl 0x1028259
push edi
lea ecx, [ebp - 0x6bc]
call fcn.01011f55
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea eax, [ebp - 0x218]
push eax
mov eax, dword [ebp - 0x6bc]
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 7
call dword [eax + 0x10]
mov eax, dword [ebp - 0x6bc]
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea ecx, [ebp - 0x6bc]
push 0x1020de4
call dword [eax + 0x10]
push dword [ebp - 0x6b8]
lea ecx, [ebp - 0x6c0]
call fcn.01008ac0
mov esi, dword [ebp - 0x6c0]
neg esi
sbb esi, esi
and esi, 0x7ff8fff2
add esi, ebx
mov byte [ebp - 4], 8
js 0x1027e08
mov eax, dword [ebp - 0x6c8]
mov ecx, dword [eax]
push 0
push 0
push dword [ebp - 0x6c0]
push eax
call dword [ecx + 0xc]
mov esi, eax
push dword [ebp - 0x6c0]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 0
call fcn.01007e75
test esi, esi
jl 0x1028259
push edi
lea ecx, [ebp - 0x6bc]
call fcn.01011f55
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea eax, [ebp - 0x420]
push eax
mov eax, dword [ebp - 0x6bc]
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 9
call dword [eax + 0x10]
mov eax, dword [ebp - 0x6bc]
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea ecx, [ebp - 0x6bc]
push 0x10283c8
call dword [eax + 0x10]
push dword [ebp - 0x6b8]
lea ecx, [ebp - 0x6c0]
call fcn.01008ac0
mov esi, dword [ebp - 0x6c0]
neg esi
sbb esi, esi
and esi, 0x7ff8fff2
add esi, ebx
mov byte [ebp - 4], 0xa
js 0x1027eb6
mov eax, dword [ebp - 0x6c8]
mov ecx, dword [eax]
push 0
push 0
push dword [ebp - 0x6c0]
push eax
call dword [ecx + 0xc]
mov esi, eax
push dword [ebp - 0x6c0]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 0
call fcn.01007e75
test esi, esi
jl 0x1028259
push edi
lea ecx, [ebp - 0x6bc]
call fcn.01011f55
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea eax, [ebp - 0x420]
push eax
mov eax, dword [ebp - 0x6bc]
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 0xb
call dword [eax + 0x10]
mov eax, dword [ebp - 0x6bc]
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea ecx, [ebp - 0x6bc]
push 0x10283a4
call dword [eax + 0x10]
push dword [ebp - 0x6b8]
lea ecx, [ebp - 0x6c0]
call fcn.01008ac0
mov esi, dword [ebp - 0x6c0]
neg esi
sbb esi, esi
and esi, 0x7ff8fff2
add esi, ebx
mov byte [ebp - 4], 0xc
js 0x1027f64
mov eax, dword [ebp - 0x6c8]
mov ecx, dword [eax]
push 0
push 0
push dword [ebp - 0x6c0]
push eax
call dword [ecx + 0xc]
mov esi, eax
push dword [ebp - 0x6c0]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 0
call fcn.01007e75
test esi, esi
jl 0x1028259
push edi
lea ecx, [ebp - 0x6bc]
call fcn.01011f55
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea eax, [ebp - 0x420]
push eax
mov eax, dword [ebp - 0x6bc]
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 0xd
call dword [eax + 0x10]
mov eax, dword [ebp - 0x6bc]
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea ecx, [ebp - 0x6bc]
push 0x1028328
call dword [eax + 0x10]
push dword [ebp - 0x6b8]
lea ecx, [ebp - 0x6c0]
call fcn.01008ac0
mov esi, dword [ebp - 0x6c0]
neg esi
sbb esi, esi
and esi, 0x7ff8fff2
add esi, ebx
mov byte [ebp - 4], 0xe
js 0x1028012
mov eax, dword [ebp - 0x6c8]
mov ecx, dword [eax]
push 0
push 0
push dword [ebp - 0x6c0]
push eax
call dword [ecx + 0xc]
mov esi, eax
push dword [ebp - 0x6c0]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 0
call fcn.01007e75
test esi, esi
jl 0x1028259
push edi
lea ecx, [ebp - 0x6bc]
call fcn.01011f55
mov eax, dword [ebp - 0x6bc]
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea ecx, [ebp - 0x6bc]
push dword [ebp - 0x6e0]
mov byte [ebp - 4], 0xf
call dword [eax + 0x10]
mov eax, dword [ebp - 0x6bc]
push 0xffffffffffffffff
push dword [ebp - 0x6b0]
lea ecx, [ebp - 0x6bc]
push 0x1007db4
call dword [eax + 0x10]
push dword [ebp - 0x6b8]
lea ecx, [ebp - 0x6c0]
call fcn.01008ac0
mov esi, dword [ebp - 0x6c0]
mov edi, dword [ebp - 0x6c8]
neg esi
sbb esi, esi
and esi, 0x7ff8fff2
add esi, ebx
mov byte [ebp - 4], 0x10
js 0x10280bf
mov eax, dword [edi]
push 0
push 0
push dword [ebp - 0x6c0]
push edi
call dword [eax + 0xc]
mov esi, eax
push dword [ebp - 0x6c0]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [ebp - 0x6bc]
mov byte [ebp - 4], 0
call fcn.01007e75
test esi, esi
jl 0x1028259
cmp dword [ebp - 0x6dc], 0
je 0x1028113
push edi
push dword [ebp - 0x6cc]
push 1
push 0
push 1
push 0x16
push dword [ebp - 0x6d0]
push dword [ebp - 0x6d4]
push dword [ebp - 0x6c4]
call fcn.01026a0f
mov esi, eax
test esi, esi
jl 0x1028259
push edi
push dword [ebp - 0x6cc]
push dword [ebp - 0x6d0]
push dword [ebp - 0x6d4]
push dword [ebp - 0x6c4]
call fcn.01026d73
mov esi, eax
test esi, esi
jl 0x1028259
push edi
push dword [ebp - 0x6cc]
push 1
push 0
push 0
push 0x23
push dword [ebp - 0x6d0]
push dword [ebp - 0x6d4]
push dword [ebp - 0x6c4]
call fcn.01026a0f
mov esi, eax
test esi, esi
jl 0x1028259
push 0x10282d8
lea ecx, [ebp - 0x6c4]
call fcn.01008ac0
mov esi, dword [ebp - 0x6c4]
neg esi
sbb esi, esi
and esi, 0x7ff8fff2
add esi, ebx
mov byte [ebp - 4], 0x11
js 0x10281ad
mov eax, dword [edi]
push 0
push 0
push dword [ebp - 0x6c4]
push edi
call dword [eax + 0xc]
mov esi, eax
push dword [ebp - 0x6c4]
mov byte [ebp - 4], 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test esi, esi
jl 0x1028259
push 0x10282a4
lea ecx, [ebp - 0x6c4]
call fcn.01008ac0
mov esi, dword [ebp - 0x6c4]
neg esi
sbb esi, esi
and esi, 0x7ff8fff2
add esi, ebx
mov byte [ebp - 4], 0x12
js 0x10281ff
mov eax, dword [edi]
push 0
push 0
push dword [ebp - 0x6c4]
push edi
call dword [eax + 0xc]
mov esi, eax
push dword [ebp - 0x6c4]
mov byte [ebp - 4], 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test esi, esi
jl 0x1028259
push 0x1028270
lea ecx, [ebp - 0x6c4]
call fcn.01008ac0
mov esi, dword [ebp - 0x6c4]
neg esi
sbb esi, esi
and esi, 0x7ff8fff2
add esi, ebx
mov byte [ebp - 4], 0x13
js 0x102824d
mov eax, dword [edi]
push 0
push 0
push dword [ebp - 0x6c4]
push edi
call dword [eax + 0xc]
mov esi, eax
push dword [ebp - 0x6c4]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x6d0]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, esi
call fcn.01002362
ret 0x14