Function at 0x210280ca
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x334
mov dword [ebp - 0x330], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x32c], 0
mov dword [ebp - 0x334], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x11c], 0
cmp dword [ebp + 0xc], 0
je 0x21028126
mov eax, dword [ebp + 0xc]
mov byte [eax], 0
lea ecx, [ebp - 0x330]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
je 0x2102813c
jmp 0x2102838e
lea edx, [ebp - 8]
push edx
call dword [sym.imp.SHELL32.dll_SHGetDesktopFolder]
test eax, eax
je 0x2102814f
jmp 0x21028389
lea eax, [ebp - 0x118]
push eax
push 0x2104c950
push 1
push 0
push 0x2104c940
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
je 0x21028173
jmp 0x21028384
lea ecx, [ebp - 0xc]
push ecx
push 0x2104c970
mov edx, dword [ebp - 0x118]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x118]
push ecx
call dword [eax]
test eax, eax
je 0x21028196
jmp 0x2102837f
push 0
mov edx, dword [ebp + 8]
push edx
push 0x104
lea eax, [ebp - 0x324]
push eax
call fcn.210028a1
push 0
lea ecx, [ebp - 0x324]
push ecx
mov edx, dword [ebp - 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc]
push ecx
call dword [eax + 0x14]
test eax, eax
je 0x210281cb
jmp 0x2102837a
lea edx, [ebp - 0x32c]
push edx
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x118]
push edx
call dword [ecx + 0x10]
lea eax, [ebp - 0x334]
push eax
push 4
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
test eax, eax
je 0x210281fe
jmp 0x21028375
mov ecx, dword [ebp - 0x334]
push ecx
mov edx, dword [ebp - 0x32c]
push edx
mov eax, dword [ebp - 0x330]
push eax
call fcn.21028399
test eax, eax
jne 0x21028221
jmp 0x21028370
cmp dword [ebp + 0xc], 0
je 0x210282b6
lea ecx, [ebp - 4]
push ecx
push 0x2104c960
push 0
mov edx, dword [ebp - 0x334]
push edx
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
mov edx, dword [ebp - 8]
push edx
call dword [ecx + 0x14]
test eax, eax
je 0x21028252
jmp 0x2102836b
mov eax, dword [ebp - 0x334]
push eax
call fcn.21027ff1
mov ecx, dword [ebp - 0x32c]
add ecx, eax
mov dword [ebp - 0x328], ecx
lea edx, [ebp - 0x114]
push edx
push 0x2000
mov eax, dword [ebp - 0x328]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov eax, dword [ebp - 4]
push eax
call dword [edx + 0x2c]
test eax, eax
je 0x21028294
jmp 0x21028366
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0x328]
push ecx
mov edx, dword [ebp - 0x330]
push edx
call fcn.21027f6d
mov dword [ebp - 0x11c], 1
cmp dword [ebp - 0x32c], 0
je 0x210282e2
mov eax, dword [ebp - 0x32c]
push eax
mov ecx, dword [ebp - 0x330]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x330]
push eax
call dword [edx + 0x14]
cmp dword [ebp - 4], 0
je 0x210282f4
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov eax, dword [ebp - 4]
push eax
call dword [edx + 8]
cmp dword [ebp - 0xc], 0
je 0x21028306
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xc]
push eax
call dword [edx + 8]
cmp dword [ebp - 0x118], 0
je 0x21028321
mov ecx, dword [ebp - 0x118]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x118]
push eax
call dword [edx + 8]
cmp dword [ebp - 0x334], 0
je 0x21028343
mov ecx, dword [ebp - 0x334]
push ecx
mov edx, dword [ebp - 0x330]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x330]
push ecx
call dword [eax + 0x14]
cmp dword [ebp - 0x330], 0
je 0x2102835e
mov edx, dword [ebp - 0x330]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x330]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x11c]
jmp 0x21028393
jmp 0x210282c0
jmp 0x210282c0
jmp 0x210282c0
jmp 0x210282c0
jmp 0x210282c0
jmp 0x210282c0
jmp 0x210282c0
jmp 0x210282c0
jmp 0x210282c0
mov esp, ebp
pop ebp
ret 0xc