Function at 0x42e0e0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x554680
mov eax, dword fs:[0]
push eax
sub esp, 0x2bc
mov eax, dword [0x5d3070]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x278], ebx
xor eax, eax
mov dword [ebp - 0x27c], ebx
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x22c], 7
mov dword [ebp - 0x230], 0
mov word [ebp - 0x240], ax
xor esi, esi
mov dword [ebp - 4], eax
xorps xmm0, xmm0
mov dword [ebp - 0x220], eax
movq qword [ebp - 0x228], xmm0
mov dword [ebp - 0x228], esi
mov dword [ebp - 0x224], esi
mov dword [ebp - 0x220], esi
mov byte [ebp - 4], 2
cmp edx, 0xf
ja case.0x42e17b.4
jmp dword [edx*4 + 0x42e938]
sub esp, 8
lea ecx, [ebp - 0x274]
call fcn.0042ee80
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 3
call fcn.0042de40
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 4
push ecx
mov edx, eax
lea ecx, [ebp - 0x2b0]
call fcn.0041cb10
add esp, 4
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 5
cmp ecx, eax
je 0x42e1d2
push 0xffffffffffffffff
push 0
push eax
call fcn.0040e230
lea ecx, [ebp - 0x2b0]
call fcn.00404700
lea ecx, [ebp - 0x294]
call fcn.00404700
lea ecx, [ebp - 0x274]
call fcn.00404700
jmp 0x42e707
movups xmm0, xmmword [0x5c0308]
jmp 0x42e700
movups xmm0, xmmword [0x5c0338]
jmp 0x42e700
movups xmm0, xmmword [0x5c0348]
jmp 0x42e700
movups xmm0, xmmword [0x5c0348]
push 0x5c3e38
lea ecx, [ebp - 0x274]
movups xmmword [ebp - 0x250], xmm0
call fcn.0040f040
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x228]
call fcn.0042e9e0
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 2
call fcn.0040f270
push 0x5c3e40
lea ecx, [ebp - 0x274]
call fcn.0040f040
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x228]
call fcn.0042e9e0
lea ecx, [ebp - 0x274]
call fcn.0040f270
mov esi, dword [ebp - 0x228]
jmp 0x42e707
movups xmm0, xmmword [0x5c0348]
push 0x5c3e38
lea ecx, [ebp - 0x274]
movups xmmword [ebp - 0x250], xmm0
call fcn.0040f040
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x228]
call fcn.0042e9e0
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 2
call fcn.0040f270
push 0x5c3e40
lea ecx, [ebp - 0x274]
call fcn.0040f040
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x228]
call fcn.0042e9e0
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 2
call fcn.0040f270
push str.Backups
lea ecx, [ebp - 0x274]
call fcn.0040f040
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x228]
call fcn.0042e9e0
lea ecx, [ebp - 0x274]
call fcn.0040f270
mov esi, dword [ebp - 0x228]
jmp 0x42e707
movups xmm0, xmmword [0x5c0348]
push 0x5c3e38
lea ecx, [ebp - 0x274]
movups xmmword [ebp - 0x250], xmm0
call fcn.0040f040
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x228]
call fcn.0042e9e0
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 2
call fcn.0040f270
push 0x5c3e40
lea ecx, [ebp - 0x274]
call fcn.0040f040
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x228]
call fcn.0042e9e0
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 2
call fcn.0040f270
push str.logs
lea ecx, [ebp - 0x274]
call fcn.0040f040
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x228]
call fcn.0042e9e0
lea ecx, [ebp - 0x274]
call fcn.0040f270
mov esi, dword [ebp - 0x228]
jmp 0x42e707
push 0x208
lea eax, [ebp - 0x21c]
push 0
push eax
call fcn.004679d0
add esp, 0xc
lea eax, [ebp - 0x21c]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
jne 0x42e45f
mov dword [ebx + 0x14], 7
xor eax, eax
mov dword [ebx + 0x10], 0
mov word [ebx], ax
lea ecx, [ebp - 0x228]
call fcn.0042e980
lea ecx, [ebp - 0x240]
call fcn.00404700
jmp 0x42e917
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x2b0]
call fcn.0042a480
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0xe
push ecx
mov ecx, eax
call fcn.0042a980
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0xf
cmp ecx, eax
je 0x42e49b
push 0xffffffffffffffff
push 0
push eax
call fcn.0040e230
lea ecx, [ebp - 0x294]
call fcn.00404700
lea ecx, [ebp - 0x2b0]
call fcn.00404700
jmp 0x42e707
push 0x208
lea eax, [ebp - 0x21c]
push 0
push eax
call fcn.004679d0
add esp, 0xc
lea eax, [ebp - 0x21c]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x42e431
sub esp, 8
lea ecx, [ebp - 0x274]
call fcn.0042ef70
lea eax, [ebp - 0x21c]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x2c8]
call fcn.0042a480
lea ecx, [ebp - 0x2b0]
mov byte [ebp - 4], 0x11
push ecx
mov ecx, eax
call fcn.0042a980
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x12
push ecx
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.0041cb10
add esp, 4
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0x13
cmp ecx, eax
je 0x42e551
push 0xffffffffffffffff
push 0
push eax
call fcn.0040e230
lea ecx, [ebp - 0x294]
call fcn.00404700
lea ecx, [ebp - 0x2b0]
call fcn.00404700
lea ecx, [ebp - 0x2c8]
call fcn.00404700
lea ecx, [ebp - 0x274]
call fcn.00404700
jmp 0x42e707
movups xmm0, xmmword [0x5c0318]
jmp 0x42e700
movups xmm0, xmmword [0x5c02d8]
jmp 0x42e700
movups xmm0, xmmword [0x5c02f8]
push str.Apple_Computer
lea ecx, [ebp - 0x274]
movups xmmword [ebp - 0x250], xmm0
call fcn.0040f040
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x228]
call fcn.0042e9e0
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 2
call fcn.0040f270
push str.MobileSync
lea ecx, [ebp - 0x274]
call fcn.0040f040
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x228]
call fcn.0042e9e0
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 2
call fcn.0040f270
push str.Backup
lea ecx, [ebp - 0x274]
call fcn.0040f040
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x228]
call fcn.0042e9e0
lea ecx, [ebp - 0x274]
call fcn.0040f270
mov esi, dword [ebp - 0x228]
jmp 0x42e707
push 0x208
lea eax, [ebp - 0x21c]
push 0
push eax
call fcn.004679d0
add esp, 0xc
lea eax, [ebp - 0x21c]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x42e431
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x294]
call fcn.0042a480
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 4], 0x17
push ecx
mov ecx, eax
call fcn.0042a980
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0x18
cmp ecx, eax
je 0x42e6bc
push 0xffffffffffffffff
push 0
push eax
call fcn.0040e230
lea ecx, [ebp - 0x2c8]
call fcn.00404700
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 2
call fcn.00404700
push ecx
lea ecx, [ebp - 0x240]
call fcn.0042f500
push ecx
lea ecx, [ebp - 0x240]
call fcn.0042f660
jmp 0x42e707
movups xmm0, xmmword [0x5c02e8]
jmp 0x42e700
movups xmm0, xmmword [0x5c0328]
movups xmmword [ebp - 0x250], xmm0
cmp dword [ebp - 0x230], 0
sete al
test al, al
je 0x42e82b
mov edi, dword [sym.imp.ole32.dll_CoTaskMemFree]
xorps xmm0, xmm0
movq qword [ebp - 0x258], xmm0
mov dword [ebp - 0x258], edi
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x25c], 0
push eax
push 0
push 0
lea eax, [ebp - 0x250]
push eax
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
mov ecx, dword [ebp - 0x25c]
mov dword [ebp - 0x278], ecx
mov dword [ebp - 0x254], ecx
mov byte [ebp - 4], 0x19
test eax, eax
je 0x42e7ad
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0
mov dword [ebx + 0x14], 7
cmp dword [ebx + 0x14], 8
mov dword [ebx + 0x10], 0
jb 0x42e792
mov eax, dword [ebx]
jmp 0x42e794
mov eax, ebx
xor edx, edx
mov word [eax], dx
mov byte [ebp - 4], 0x1b
test ecx, ecx
je 0x42e444
push ecx
call edi
jmp 0x42e444
push ecx
lea ecx, [ebp - 0x2c8]
call fcn.0042a480
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0x1c
cmp ecx, eax
je 0x42e7d1
push 0xffffffffffffffff
push 0
push eax
call fcn.0040e230
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 4], 0x19
call fcn.00404700
mov edi, dword [ebp - 0x224]
cmp esi, edi
sete al
test al, al
jne 0x42e816
nop
cmp esi, edi
je 0x42e810
cmp dword [esi + 0x10], 0
sete al
test al, al
jne 0x42e80b
push esi
lea ecx, [ebp - 0x240]
call fcn.0040bb80
add esi, 0x18
jmp 0x42e7f0
mov esi, dword [ebp - 0x228]
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x278]
test eax, eax
je 0x42e82b
push eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
test esi, esi
je 0x42e866
push dword [ebp - 0x278]
mov edx, dword [ebp - 0x224]
push ecx
mov ecx, esi
call fcn.0042f7c0
mov ecx, dword [ebp - 0x220]
mov eax, 0x2aaaaaab
sub ecx, esi
add esp, 8
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push esi
call fcn.0042ed10
lea ecx, [ebp - 0x240]
mov dword [ebp - 4], 0
call fcn.00439670
xor eax, eax
mov dword [ebx + 0x14], 7
push 0xffffffffffffffff
mov dword [ebx + 0x10], 0
mov ecx, ebx
push eax
mov word [ebx], ax
lea eax, [ebp - 0x240]
push eax
call fcn.0040e230
jmp 0x42e8f9
xor eax, eax
mov dword [ebx + 0x14], 7
mov dword [ebx + 0x10], 0
mov word [ebx], ax
mov eax, dword [ebp - 0x22c]
cmp eax, 8
jb 0x42e917
inc eax
lea ecx, [ebp - 0x240]
push eax
push dword [ebp - 0x240]
call fcn.0040e780
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0044d318
mov esp, ebp
pop ebp
ret