Function at 0x2104726a
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x334
mov dword [ebp - 0x330], ecx
mov dword [ebp - 0x328], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x32c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x114], 0
cmp dword [ebp + 0xc], 0
je 0x210472bb
mov eax, dword [ebp + 0xc]
mov byte [eax], 0
mov ecx, dword [ebp - 0x330]
cmp dword [ecx], 0
je 0x210472de
mov edx, dword [ebp - 0x330]
cmp dword [edx + 4], 0
je 0x210472de
mov dword [ebp - 0x334], 1
jmp 0x210472e8
mov dword [ebp - 0x334], 0
cmp dword [ebp - 0x334], 0
jne 0x210472f8
xor eax, eax
jmp 0x210474ee
lea eax, [ebp - 0x328]
push eax
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
je 0x2104730e
jmp 0x210474e9
lea ecx, [ebp - 8]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
test eax, eax
je 0x21047321
jmp 0x210474e4
push 0
mov edx, dword [ebp + 8]
push edx
push 0x104
lea eax, [ebp - 0x31c]
push eax
call fcn.2100318b
push 0
lea ecx, [ebp - 0x31c]
push ecx
mov edx, dword [ebp - 0x330]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x330]
mov edx, dword [ecx + 4]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x14]
test eax, eax
je 0x21047362
jmp 0x210474df
lea edx, [ebp - 0x324]
push edx
mov eax, dword [ebp - 0x330]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x330]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x10]
lea eax, [ebp - 0x32c]
push eax
push 4
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
test eax, eax
je 0x21047399
jmp 0x210474da
mov ecx, dword [ebp - 0x32c]
push ecx
mov edx, dword [ebp - 0x324]
push edx
mov eax, dword [ebp - 0x328]
push eax
call fcn.210475cd
test eax, eax
jne 0x210473bc
jmp 0x210474d8
cmp dword [ebp + 0xc], 0
je 0x21047451
lea ecx, [ebp - 4]
push ecx
push 0x210765d0
push 0
mov edx, dword [ebp - 0x32c]
push edx
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
mov edx, dword [ebp - 8]
push edx
call dword [ecx + 0x14]
test eax, eax
je 0x210473ed
jmp 0x210474d6
mov eax, dword [ebp - 0x32c]
push eax
call fcn.2104758c
mov ecx, dword [ebp - 0x324]
add ecx, eax
mov dword [ebp - 0x320], ecx
lea edx, [ebp - 0x110]
push edx
push 0x2000
mov eax, dword [ebp - 0x320]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov eax, dword [ebp - 4]
push eax
call dword [edx + 0x2c]
test eax, eax
je 0x2104742f
jmp 0x210474d4
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x110]
push eax
mov ecx, dword [ebp - 0x320]
push ecx
mov edx, dword [ebp - 0x328]
push edx
call fcn.21047616
mov dword [ebp - 0x114], 1
cmp dword [ebp - 0x324], 0
je 0x2104747d
mov eax, dword [ebp - 0x324]
push eax
mov ecx, dword [ebp - 0x328]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x328]
push eax
call dword [edx + 0x14]
cmp dword [ebp - 4], 0
je 0x2104748f
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov eax, dword [ebp - 4]
push eax
call dword [edx + 8]
cmp dword [ebp - 0x32c], 0
je 0x210474b1
mov ecx, dword [ebp - 0x32c]
push ecx
mov edx, dword [ebp - 0x328]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x328]
push ecx
call dword [eax + 0x14]
cmp dword [ebp - 0x328], 0
je 0x210474cc
mov edx, dword [ebp - 0x328]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x328]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x114]
jmp 0x210474ee
jmp 0x2104745b
jmp 0x2104745b
jmp 0x2104745b
jmp 0x2104745b
jmp 0x2104745b
jmp 0x2104745b
jmp 0x2104745b
mov esp, ebp
pop ebp
ret 0xc