Function at 0x460610
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffb68
push ebx
push esi
push edi
mov esi, eax
xor eax, eax
mov dword [ebp - 4], eax
lea edx, [ebp - 4]
push edx
call sub.SHELL32.DLL_SHGetDesktopFolder
test eax, eax
jl 0x460814
mov dword [ebp - 8], 0xf0000000
push 0xffff0000
push 0
push 0x1101
push dword [esi]
call sub.USER32.DLL_SendMessageA
lea ecx, [ebp - 0xc]
push ecx
push 0
push 0
call sub.SHELL32.DLL_SHGetSpecialFolderLocation
lea eax, [ebp - 8]
push eax
lea edx, [ebp - 0xc]
push edx
push 1
mov ecx, dword [ebp - 4]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x24]
push 0x28
push 0
lea edx, [ebp - 0x3c]
push edx
call fcn.00498cfc
add esp, 0xc
mov dword [ebp - 0x3c], 0x27
test byte [ebp - 5], 0x80
je 0x460696
mov dword [ebp - 0x1c], 1
or dword [ebp - 0x3c], 0x40
push 0xc
mov ecx, dword [0x4cd5f4]
push ecx
mov eax, dword [ecx]
call dword [eax + 0xc]
mov edi, eax
test edi, edi
jne 0x4606b1
xor eax, eax
jmp 0x460825
lea edx, [ebp - 0x470]
push edx
push 0
mov ecx, 1
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.004608c8
lea ecx, [ebp - 0x470]
xor eax, eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], 0x104
mov edx, dword [ebp - 0xc]
call fcn.0046082c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
call fcn.00460898
mov dword [edi + 4], eax
lea ecx, [ebp - 0x3c]
mov edx, dword [ebp - 0x10]
mov eax, esi
call fcn.004609b8
mov edx, dword [ebp - 4]
mov dword [edi], edx
mov ecx, dword [ebp - 4]
push ecx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xc]
xor eax, eax
call fcn.0046082c
mov dword [edi + 8], eax
mov dword [ebp - 0x18], edi
push esi
lea esi, [ebp - 0x3c]
lea edi, [ebp - 0x68]
mov ecx, 0xa
rep movsd dword es:[edi], dword [esi]
pop esi
xor eax, eax
mov dword [ebp - 0x6c], eax
lea edx, [ebp - 0x70]
mov dword [ebp - 0x70], 0xffff0000
push edx
push 0
push 0x1100
push dword [esi]
call sub.USER32.DLL_SendMessageA
mov ebx, eax
push dword [ebp - 0xc]
push ebx
mov ecx, dword [ebp - 4]
mov edx, dword [esi]
mov eax, esi
call fcn.004609e8
push ebx
push 2
push 0x1102
push dword [esi]
call sub.USER32.DLL_SendMessageA
lea eax, [ebp - 0x14]
push eax
push 0x11
push 0
call sub.SHELL32.DLL_SHGetSpecialFolderLocation
push ebx
push 4
push 0x110a
push dword [esi]
call sub.USER32.DLL_SendMessageA
mov ebx, eax
test ebx, ebx
je 0x4607f6
mov dword [ebp - 0x498], 4
mov dword [ebp - 0x494], ebx
lea edx, [ebp - 0x498]
push edx
push 0
push 0x110c
push dword [esi]
call sub.USER32.DLL_SendMessageA
mov edi, dword [ebp - 0x474]
push dword [edi + 8]
push dword [ebp - 0x14]
push 0
mov eax, dword [ebp - 4]
push eax
mov edx, dword [eax]
call dword [edx + 0x1c]
test eax, eax
jne 0x4607e1
push ebx
push 2
push 0x1102
push dword [esi]
call sub.USER32.DLL_SendMessageA
mov dword [esi + 4], ebx
jmp 0x4607f6
push ebx
push 1
push 0x110a
push dword [esi]
call sub.USER32.DLL_SendMessageA
mov ebx, eax
test ebx, ebx
jne 0x46078d
push dword [ebp - 0x10]
mov ecx, dword [0x4cd5f4]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x14]
push dword [ebp - 0xc]
mov edx, dword [0x4cd5f4]
push edx
mov ecx, dword [edx]
call dword [ecx + 0x14]
cmp dword [ebp - 4], 0
je 0x460823
mov eax, dword [ebp - 4]
push eax
mov edx, dword [eax]
call dword [edx + 8]
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret