Function at 0x408923
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x46d368
mov eax, dword fs:[0]
push eax
sub esp, 0x3a8
mov eax, dword [0x488280]
xor eax, esp
mov dword [esp + 0x3a0], eax
push ebx
push esi
push edi
mov eax, dword [0x488280]
xor eax, esp
push eax
lea eax, [esp + 0x3b8]
mov dword fs:[0], eax
mov esi, ecx
xor edi, edi
mov dword [esp + 0x20], edi
call fcn.004088b3
test al, al
je 0x408a10
xor eax, eax
push 0x208
mov word [esp + 0x1a0], ax
lea eax, [esp + 0x1a2]
push edi
push eax
call fcn.0042b410
add esp, 0xc
lea eax, [esp + 0x19c]
push eax
push edi
push edi
push 5
push edi
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
je 0x408a06
push 1
push ecx
lea ecx, [esp + 0xdc]
call fcn.00411b3f
lea eax, [esp + 0xd4]
mov dword [esp + 0x3c0], edi
test eax, eax
je 0x4089e1
mov edx, str.Cant_get_path
lea ecx, [esp + 0xe4]
call fcn.0040a46c
or dword [esp + 0x3c0], 0xffffffff
lea ecx, [esp + 0xd4]
call fcn.00411856
push 0x479dd0
mov ecx, esi
call fcn.00403e32
jmp 0x408bb6
lea eax, [esp + 0x19c]
push eax
jmp 0x4089fa
mov dword [esp + 0x14], edi
lea eax, [esp + 0x14]
xor ebx, ebx
push eax
push 0x47aaac
inc ebx
push ebx
push edi
push 0x471590
mov dword [esp + 0x3d4], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x408b5b
mov eax, dword [esp + 0x14]
test eax, eax
je 0x408b5b
mov dword [esp + 0x18], edi
lea edx, [esp + 0x18]
mov byte [esp + 0x3c0], 3
mov ecx, dword [eax]
push edx
push 0x471550
push eax
call dword [ecx + 0x18]
test eax, eax
js 0x408b32
mov eax, dword [esp + 0x18]
test eax, eax
je 0x408b32
lea edx, [esp + 0x1c]
mov dword [esp + 0x1c], edi
mov ecx, dword [eax]
push edx
push 0x8000
push eax
call dword [ecx + 0x18]
test eax, eax
jns 0x408af5
push ebx
push ecx
lea ecx, [esp + 0x2c]
call fcn.00411b3f
lea eax, [esp + 0x24]
mov byte [esp + 0x3c0], 5
test eax, eax
je 0x408aba
mov edx, str.Cant_get_folder_path
lea ecx, [esp + 0x34]
call fcn.0040a46c
lea ecx, [esp + 0x24]
mov byte [esp + 0x3c0], 3
call fcn.00411856
push 0x479dd0
mov ecx, esi
call fcn.00403e32
mov byte [esp + 0x3c0], bl
mov eax, dword [esp + 0x18]
test eax, eax
je 0x408ba0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x408ba0
push dword [esp + 0x1c]
lea ecx, [esp + 0x188]
call fcn.00403e32
push dword [esp + 0x1c]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
lea eax, [esp + 0x184]
mov dword [esp + 0x1c], edi
push eax
mov ecx, esi
call fcn.00403e63
push edi
push ebx
lea ecx, [esp + 0x18c]
call fcn.004041b3
jmp 0x408ad7
push ebx
push ecx
lea ecx, [esp + 0x2c]
call fcn.00411b3f
lea eax, [esp + 0x24]
mov byte [esp + 0x3c0], 4
test eax, eax
je 0x408aba
mov edx, str.Cant_get_path
jmp 0x408ab1
push ebx
push ecx
lea ecx, [esp + 0x2c]
call fcn.00411b3f
lea eax, [esp + 0x24]
mov byte [esp + 0x3c0], 2
test eax, eax
je 0x408b84
mov edx, str.Cant_get_path_manager
lea ecx, [esp + 0x34]
call fcn.0040a46c
lea ecx, [esp + 0x24]
mov byte [esp + 0x3c0], bl
call fcn.00411856
push 0x479dd0
mov ecx, esi
call fcn.00403e32
or dword [esp + 0x3c0], 0xffffffff
mov eax, dword [esp + 0x14]
test eax, eax
je 0x408bb6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
mov ecx, dword [esp + 0x3b8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3a0]
xor ecx, esp
call fcn.00420225
mov esp, ebp
pop ebp
ret