Function at 0x416310
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b4ec6
mov eax, dword fs:[0]
push eax
sub esp, 0x304
mov eax, dword [0x4e43e0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
push 0x208
lea eax, [ebp - 0x21c]
push 0
push eax
call fcn.004421a0
add esp, 0xc
lea eax, [ebp - 0x21c]
push 0
push 0x1a
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x21c]
push 0x4c1158
push eax
call esi
lea eax, [ebp - 0x21c]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectory]
push str.lds.set
lea eax, [ebp - 0x21c]
push eax
call esi
lea ecx, [ebp - 0x2f8]
call fcn.00409950
mov dword [ebp - 4], 0
push 0
mov byte [ebp - 4], 1
call fcn.0046e7e7
mov dword [ebp - 0x304], eax
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x240]
mov dword [ebp - 0x300], edx
push eax
call fcn.0046e29d
or esi, 0xffffffff
test eax, eax
lea eax, [ebp - 0x304]
mov ebx, esi
cmove ebx, dword [ebp - 0x240]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.0046e29d
test eax, eax
mov ecx, esi
lea eax, [ebp - 0x304]
cmove ecx, dword [ebp - 0x260]
push eax
lea eax, [ebp - 0x288]
mov dword [ebp - 0x2fc], ecx
push eax
call fcn.0046e29d
test eax, eax
mov ecx, esi
lea eax, [ebp - 0x304]
cmove ecx, dword [ebp - 0x280]
push eax
lea eax, [ebp - 0x2ac]
mov dword [ebp - 0x30c], ecx
push eax
call fcn.0046e29d
xor ecx, ecx
test eax, eax
lea eax, [ebp - 0x304]
cmove ecx, dword [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x310], ecx
push eax
call fcn.0046e29d
add esp, 0x2c
test eax, eax
jne 0x416474
mov edi, dword [ebp - 0x2c0]
inc edi
jmp 0x416476
xor edi, edi
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x2f4]
push eax
call fcn.0046e29d
add esp, 8
test eax, eax
jne 0x41649d
mov eax, dword [ebp - 0x2e0]
add eax, 0x76c
jmp 0x41649f
xor eax, eax
push ebx
push dword [ebp - 0x2fc]
push dword [ebp - 0x30c]
push dword [ebp - 0x310]
push edi
push eax
lea eax, [ebp - 0x2f8]
push str._04d__02d__02d__02d:_02d:_02d
push eax
call fcn.0040a940
add esp, 0x20
jmp 0x4164d3
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 4], 0
cmp dword [eax - 0xc], 0
jne 0x4164ee
lea edx, [eax - 0x10]
jmp 0x416583
push str.45476F8083D74BA28A2DD8ED399737B7
lea ecx, [ebp - 0x2fc]
call fcn.00406da0
lea eax, [ebp - 0x2fc]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x2f8]
push eax
lea eax, [ebp - 0x308]
push eax
call fcn.004341a0
mov edx, dword [ebp - 0x2fc]
add esp, 0xc
mov byte [ebp - 4], 0
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x416540
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x21c]
push eax
push dword [ebp - 0x308]
push 0x4be2c0
push 0x4c11f4
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edx, dword [ebp - 0x308]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41657a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2f8]
add edx, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x41659c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0042a228
mov esp, ebp
pop ebp
ret