Function at 0x482664
Capabilities:
Get common file path

Disassembly:
mov eax, 0x5980d9
call fcn.00595190
sub esp, 0x210
push esi
mov esi, dword [ebp + 8]
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
test eax, eax
je 0x48273f
and word [ebp - 0x21c], 0
push ebx
push edi
push 0x208
lea eax, [ebp - 0x21a]
push 0
push eax
call fcn.0049bf00
add esp, 0xc
mov ebx, str._ALLUSERSPROFILE_
push ebx
xor ecx, ecx
call fcn.0040132b
or edi, 0xffffffff
cmp eax, edi
jne 0x4826db
mov ebx, str._APPDATA_
push ebx
xor ecx, ecx
call fcn.0040132b
cmp eax, edi
jne 0x4826db
mov ebx, str._TEMP_
push ebx
xor ecx, ecx
call fcn.0040132b
cmp eax, edi
je 0x4826eb
lea eax, [ebp - 0x21c]
push eax
push ebx
call fcn.00482cbb
pop ecx
jmp 0x482769
mov ebx, str._SYSTEM_
push ebx
xor ecx, ecx
call fcn.0040132b
cmp eax, edi
je 0x482710
push 0x104
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
jmp 0x482733
mov ebx, str._WINDOWS_
push ebx
xor ecx, ecx
call fcn.0040132b
cmp eax, edi
je 0x48274c
push 0x104
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
ja 0x4827e3
xor eax, eax
pop edi
pop ebx
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
leave
ret
mov ebx, str._CUR_MODULE_
push ebx
xor ecx, ecx
call fcn.0040132b
cmp eax, edi
je 0x482770
lea eax, [ebp - 0x21c]
push eax
call fcn.00482c14
test eax, eax
pop ecx
je 0x48273b
jmp 0x4827e3
mov ebx, str._CUR_EXE_MODULE_
push ebx
xor ecx, ecx
call fcn.0040132b
cmp eax, edi
je 0x48279b
push 0x104
lea eax, [ebp - 0x21c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x48273b
jmp 0x4827d6
mov ebx, str._CUR_DIR_
push ebx
xor ecx, ecx
call fcn.0040132b
cmp eax, edi
je 0x4827f3
push 0x20a
lea eax, [ebp - 0x21c]
push 0
push eax
call fcn.0049bf00
add esp, 0xc
push 0x105
lea eax, [ebp - 0x21c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x21c]
push eax
push ebx
push esi
call fcn.0047dcc4
jmp 0x482863
mov ebx, str._DUBA_
push ebx
xor ecx, ecx
call fcn.0040132b
cmp eax, edi
je 0x48273b
call fcn.0044fc04
test eax, eax
je 0x48273b
lea eax, [ebp + 8]
push eax
call fcn.0044fc99
pop ecx
and dword [ebp - 4], 0
lea ecx, [ebp + 8]
call fcn.0048040e
push dword [ebp + 8]
push ebx
push esi
call fcn.0047dcc4
lea eax, [ebp + 8]
push eax
push esi
call fcn.00482901
test eax, eax
pop ecx
pop ecx
jne 0x482855
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.004011c0
jmp 0x48273b
mov dword [ebp - 4], edi
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
call fcn.004011c0
push 0x3f
xor ecx, ecx
call fcn.0043288b
mov ebx, eax
cmp ebx, edi
je 0x4828e7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.004a0444
pop ecx
jmp 0x4828d8
and word [ebp - 0x10], 0
xor eax, eax
lea edi, [ebp - 0xe]
stosw word es:[edi], ax
call fcn.004a0451
and eax, 0x8000000f
jns 0x48289e
dec eax
or eax, 0xfffffff0
inc eax
push eax
lea eax, [ebp - 0x10]
push 0x5f0cb4
push eax
call fcn.0048428f
movzx edi, word [ebp - 0x10]
add esp, 0xc
test ebx, ebx
jl 0x4828f6
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
cmp ebx, eax
mov dword [ebp + 8], eax
jge 0x4828f6
call fcn.0045001a
mov word [eax + ebx*2], di
mov eax, dword [ebp + 8]
mov edx, esi
call fcn.004011d8
inc ebx
mov ecx, ebx
mov eax, esi
call fcn.0048430a
cmp ax, 0x3f
je 0x482881
mov eax, esi
call fcn.00481790
xor eax, eax
inc eax
jmp 0x48273d
push 0x80070057
call fcn.00401313
int3