Function at 0x483902
Capabilities:
Get common file path

Disassembly:
mov eax, 0x59c14a
call fcn.00596170
sub esp, 0x210
push esi
mov esi, dword [ebp + 8]
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
test eax, eax
je 0x4839dd
and word [ebp - 0x21c], 0
push ebx
push edi
push 0x208
lea eax, [ebp - 0x21a]
push 0
push eax
call fcn.0049cee0
add esp, 0xc
mov ebx, str._ALLUSERSPROFILE_
push ebx
xor ecx, ecx
call fcn.00401336
or edi, 0xffffffff
cmp eax, edi
jne 0x483979
mov ebx, str._APPDATA_
push ebx
xor ecx, ecx
call fcn.00401336
cmp eax, edi
jne 0x483979
mov ebx, str._TEMP_
push ebx
xor ecx, ecx
call fcn.00401336
cmp eax, edi
je 0x483989
lea eax, [ebp - 0x21c]
push eax
push ebx
call fcn.00484128
pop ecx
jmp 0x483a07
mov ebx, str._SYSTEM_
push ebx
xor ecx, ecx
call fcn.00401336
cmp eax, edi
je 0x4839ae
push 0x104
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
jmp 0x4839d1
mov ebx, str._WINDOWS_
push ebx
xor ecx, ecx
call fcn.00401336
cmp eax, edi
je 0x4839ea
push 0x104
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
ja 0x483a81
xor eax, eax
pop edi
pop ebx
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
leave
ret
mov ebx, str._CUR_MODULE_
push ebx
xor ecx, ecx
call fcn.00401336
cmp eax, edi
je 0x483a0e
lea eax, [ebp - 0x21c]
push eax
call fcn.00484081
test eax, eax
pop ecx
je 0x4839d9
jmp 0x483a81
mov ebx, str._CUR_EXE_MODULE_
push ebx
xor ecx, ecx
call fcn.00401336
cmp eax, edi
je 0x483a39
push 0x104
lea eax, [ebp - 0x21c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x4839d9
jmp 0x483a74
mov ebx, str._CUR_DIR_
push ebx
xor ecx, ecx
call fcn.00401336
cmp eax, edi
je 0x483a91
push 0x20a
lea eax, [ebp - 0x21c]
push 0
push eax
call fcn.0049cee0
add esp, 0xc
push 0x105
lea eax, [ebp - 0x21c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x21c]
push eax
push ebx
push esi
call fcn.0047de8f
jmp 0x483b01
mov ebx, str._DUBA_
push ebx
xor ecx, ecx
call fcn.00401336
cmp eax, edi
je 0x4839d9
call fcn.0044f3ef
test eax, eax
je 0x4839d9
lea eax, [ebp + 8]
push eax
call fcn.0044f484
pop ecx
and dword [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.0048158b
push dword [ebp + 8]
push ebx
push esi
call fcn.0047de8f
lea eax, [ebp + 8]
push eax
push esi
call fcn.00483b9f
test eax, eax
pop ecx
pop ecx
jne 0x483af3
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.004011c0
jmp 0x4839d9
mov dword [ebp - 4], edi
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.004011c0
push 0x3f
xor ecx, ecx
call fcn.0043218c
mov ebx, eax
cmp ebx, edi
je 0x483b85
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.004a1424
pop ecx
jmp 0x483b76
and word [ebp - 0x10], 0
xor eax, eax
lea edi, [ebp - 0xe]
stosw word es:[edi], ax
call fcn.004a1431
and eax, 0x8000000f
jns 0x483b3c
dec eax
or eax, 0xfffffff0
inc eax
push eax
lea eax, [ebp - 0x10]
push 0x5f1cfc
push eax
call fcn.004856e0
movzx edi, word [ebp - 0x10]
add esp, 0xc
test ebx, ebx
jl 0x483b94
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
cmp ebx, eax
mov dword [ebp + 8], eax
jge 0x483b94
call fcn.0044f805
mov word [eax + ebx*2], di
mov eax, dword [ebp + 8]
mov edx, esi
call fcn.004011d8
inc ebx
mov ecx, ebx
mov eax, esi
call fcn.0048575b
cmp ax, 0x3f
je 0x483b1f
mov eax, esi
call fcn.00482a2e
xor eax, eax
inc eax
jmp 0x4839db
push 0x80070057
call fcn.0040131e
int3