Function at 0x1024446
Capabilities:
Get common file path

Disassembly:
push 0x230
mov eax, 0x1030fe8
call fcn.0102b282
xor eax, eax
push 0x206
mov word [ebp - 0x218], ax
xor ebx, ebx
lea eax, [ebp - 0x216]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebp - 0x238], ebx
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x230], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x23c], ebx
mov dword [ebp - 0x21c], ebx
push 0x2001f
push 0x100b9e0
push 0x80000002
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 4
call fcn.0101c831
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, eax
cmp edi, ebx
je 0x10244ed
push edi
push 0x100b9e0
push 0x100b9a4
push 1
push 0x10
push 0x1035128
call fcn.0102ca9a
add esp, 0x18
jmp 0x1024730
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x218]
push eax
push 0x100b98c
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x224], 0x104
call fcn.0101f7a6
mov edi, eax
cmp edi, ebx
je 0x1024528
push edi
push 0x100b98c
push 0x100b948
jmp 0x10244d7
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x220]
call fcn.01023353
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x22c]
call fcn.0102097e
lea ecx, [ebp - 0x22c]
call fcn.010231f6
mov edi, eax
cmp edi, ebx
jge 0x10245a3
push edi
push 0x100b8e0
push 1
push 0x10
push 0x1035128
call fcn.0102ca9a
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
add esp, 0x14
push ebx
call esi
push ebx
call esi
push dword [ebp - 0x22c]
call esi
push dword [ebp - 0x220]
call esi
lea ecx, [ebp - 0x238]
call fcn.0101c7be
mov eax, edi
call fcn.0102b314
ret
lea ecx, [ebp - 0x22c]
call fcn.010239f2
test eax, eax
jne 0x10245d0
push 0x100b8ac
push 1
push 0x10
push 0x1035128
call fcn.0102ca9a
add esp, 0x10
push 5
pop edi
jmp 0x1024734
lea eax, [ebp - 0x228]
push eax
push ebx
push 0x400
push 0x101badc
mov dword [ebp - 0x228], ebx
call sub.SHELL32.dll_SHGetKnownFolderPath
mov edi, eax
cmp edi, ebx
je 0x10245fe
push edi
push 0x100b868
jmp 0x1024563
push dword [ebp - 0x228]
lea ecx, [ebp - 0x21c]
call fcn.01023353
push 0x100b854
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x21c]
call fcn.01023987
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 5
call fcn.0102097e
push dword [ebp - 0x224]
mov byte [ebp - 4], 4
call esi
push 0x100b848
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x21c]
call fcn.01023987
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 6
call fcn.0102097e
push dword [ebp - 0x224]
mov byte [ebp - 4], 4
call esi
push 0x100b834
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x21c]
call fcn.01023987
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 7
call fcn.0102097e
push dword [ebp - 0x224]
mov byte [ebp - 4], 4
call esi
cmp dword [ebp - 0x228], ebx
je 0x10246c2
push dword [ebp - 0x228]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 0x228], ebx
lea ecx, [ebp - 0x220]
call fcn.01023bff
mov ebx, 0x1035128
test eax, eax
je 0x10246e9
push eax
push 0x100b7e8
push 1
push 0x10
push ebx
call fcn.0102ca9a
add esp, 0x14
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x21c]
call fcn.01024083
mov edi, eax
test edi, edi
je 0x1024716
push edi
push 0x100b7a0
push 1
push 0x10
push ebx
call fcn.0102ca9a
add esp, 0x14
jmp 0x102472e
push 1
push dword [ebp - 0x220]
lea ecx, [ebp - 0x238]
push 0x100b778
call fcn.0101c890
xor ebx, ebx
cmp edi, ebx
jle 0x1024740
and edi, 0xffff
or edi, 0x80070000
push dword [ebp - 0x21c]
jmp 0x102457b