Function at 0x467000
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x298
mov eax, dword [0x594ccc]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
push ebx
mov word [ebp - 0x224], ax
mov eax, dword [ebp + 0x14]
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
sub eax, 1
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x210], 7
mov dword [ebp - 0x214], ebx
je 0x46720d
sub eax, 1
je 0x4671d7
sub eax, 1
jne 0x46724b
push 0x206
lea edx, [ebp - 0x20a]
xor ecx, ecx
push ebx
push edx
mov word [ebp - 0x20c], cx
call fcn.0051d250
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
push ebx
push ebx
push 0x1a
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jge 0x4670b8
xor ecx, ecx
push ebx
mov word [ebp - 0x25c], cx
push 0x576bd0
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x248], 7
mov dword [ebp - 0x24c], ebx
call fcn.0044fc50
jmp 0x4671b0
xor edx, edx
lea eax, [ebp - 0x20c]
mov word [ebp - 0x240], dx
mov dword [ebp - 0x22c], 7
mov dword [ebp - 0x230], ebx
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4670e0
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x244]
call fcn.0044fc50
push 0x11
push str.360TotalSecurity
lea ecx, [ebp - 0x244]
call fcn.00451500
lea edx, [ebp - 0x244]
cmp byte [ebp + 0xc], bl
jne 0x46717a
push 0xffffffffffffffff
xor ecx, ecx
push ebx
mov word [ebp - 0x25c], cx
push edx
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x248], 7
mov dword [ebp - 0x24c], ebx
call fcn.0044f8b0
cmp dword [ebp - 0x22c], 8
jb 0x46715f
mov eax, dword [ebp - 0x240]
push eax
call fcn.0051d230
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x22c], 7
mov dword [ebp - 0x230], ebx
mov word [ebp - 0x240], cx
jmp 0x4671b0
push edx
call fcn.004da3d0
add esp, 4
lea ecx, [ebp - 0x260]
test al, al
je 0x46719b
lea eax, [ebp - 0x244]
push eax
call fcn.00455700
jmp 0x4671a5
push 0x576bd0
call fcn.004597f0
lea ecx, [ebp - 0x244]
call fcn.00449950
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x260]
push ecx
lea ecx, [ebp - 0x228]
call fcn.0044f8b0
cmp dword [ebp - 0x248], 8
jb 0x467243
mov edx, dword [ebp - 0x25c]
push edx
jmp 0x46723b
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x298]
push 0x23
push ecx
call fcn.00466e50
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x228]
call fcn.0044f8b0
cmp dword [ebp - 0x280], 8
jb 0x467243
mov edx, dword [ebp - 0x294]
push edx
jmp 0x46723b
lea eax, [ebp - 0x27c]
push eax
call fcn.00466d70
add esp, 4
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x228]
call fcn.0044f8b0
cmp dword [ebp - 0x264], 8
jb 0x467243
mov ecx, dword [ebp - 0x278]
push ecx
call fcn.0051d230
add esp, 4
cmp dword [ebp - 0x214], ebx
jne 0x467297
push ebx
xor edx, edx
mov dword [esi + 0x18], 7
mov dword [esi + 0x14], ebx
push 0x576bd0
mov ecx, esi
mov word [esi + 4], dx
call fcn.0044fc50
cmp dword [ebp - 0x210], 8
jb 0x46731c
mov eax, dword [ebp - 0x224]
push eax
call fcn.0051d230
add esp, 4
pop edi
mov eax, esi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0051d23b
mov esp, ebp
pop ebp
ret
mov eax, edi
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4672a0
sub eax, edx
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x228]
call fcn.00451500
cmp byte [ebp + 0xc], bl
jne 0x4672e4
push 0xffffffffffffffff
xor ecx, ecx
mov dword [esi + 0x18], 7
mov dword [esi + 0x14], ebx
push ebx
lea edx, [ebp - 0x228]
mov word [esi + 4], cx
push edx
mov ecx, esi
call fcn.0044f8b0
jmp 0x467268
lea ecx, [ebp - 0x228]
push ecx
call fcn.004da3d0
add esp, 4
mov ecx, esi
test al, al
je 0x467307
lea edx, [ebp - 0x228]
push edx
call fcn.00455700
jmp 0x467311
push 0x576bd0
call fcn.004597f0
lea ecx, [ebp - 0x228]
call fcn.00449950
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.0051d23b
mov esp, ebp
pop ebp
ret