Function at 0x413004
Capabilities:
Get common file path

Disassembly:
push 0x274
mov eax, 0x4ae523
call fcn.0048f48f
mov edi, dword [ebp + 8]
xor ebx, ebx
push ebx
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x270], edi
call fcn.0042f326
mov dword [ebp - 4], ebx
push str.success
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 1
call fcn.0042f2f7
push 0x4c0c00
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 2
call fcn.0042f5f2
lea ecx, [ebp - 0x26c]
push ecx
mov ecx, eax
call fcn.0042f4ab
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 1
call fcn.0042f451
lea eax, [ebp - 0x258]
push eax
call fcn.004242b2
pop ecx
push eax
lea eax, [ebp - 0x234]
push eax
mov byte [ebp - 4], 3
call fcn.00438012
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 4
call fcn.0042f275
push str.MyDocumentsFolder
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 5
call fcn.0042f5f2
lea ecx, [ebp - 0x26c]
push ecx
mov ecx, eax
call fcn.0042f4ab
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 4
call fcn.0042f451
lea ecx, [ebp - 0x234]
call fcn.00401056
mov ecx, dword [ebp - 0x258]
mov byte [ebp - 4], 1
lea ecx, [ecx - 0x10]
call fcn.00407864
lea eax, [ebp - 0x258]
push eax
call fcn.00423f6a
pop ecx
push eax
lea eax, [ebp - 0x234]
push eax
mov byte [ebp - 4], 6
call fcn.00438012
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 7
call fcn.0042f275
push str.AppDataFolder
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 8
call fcn.0042f5f2
lea ecx, [ebp - 0x26c]
push ecx
mov ecx, eax
call fcn.0042f4ab
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 7
call fcn.0042f451
lea ecx, [ebp - 0x234]
call fcn.00401056
mov ecx, dword [ebp - 0x258]
mov byte [ebp - 4], 1
lea ecx, [ecx - 0x10]
call fcn.00407864
lea eax, [ebp - 0x258]
push eax
call fcn.0042414a
pop ecx
push eax
lea eax, [ebp - 0x234]
push eax
mov byte [ebp - 4], 9
call fcn.00438012
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0xa
call fcn.0042f275
push str.LocalAppDataFolder
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 0xb
call fcn.0042f5f2
lea ecx, [ebp - 0x26c]
push ecx
mov ecx, eax
call fcn.0042f4ab
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0xa
call fcn.0042f451
lea ecx, [ebp - 0x234]
call fcn.00401056
mov ecx, dword [ebp - 0x258]
mov byte [ebp - 4], 1
lea ecx, [ecx - 0x10]
call fcn.00407864
lea eax, [ebp - 0x258]
push eax
call fcn.0042421d
pop ecx
push eax
lea eax, [ebp - 0x234]
push eax
mov byte [ebp - 4], 0xc
call fcn.00438012
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0xd
call fcn.0042f275
push str.LocalLowAppDataFolder
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 0xe
call fcn.0042f5f2
lea ecx, [ebp - 0x26c]
push ecx
mov ecx, eax
call fcn.0042f4ab
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0xd
call fcn.0042f451
lea ecx, [ebp - 0x234]
call fcn.00401056
mov ecx, dword [ebp - 0x258]
mov byte [ebp - 4], 1
lea ecx, [ecx - 0x10]
call fcn.00407864
lea eax, [ebp - 0x258]
push eax
call fcn.0042439c
pop ecx
push eax
lea eax, [ebp - 0x234]
push eax
mov byte [ebp - 4], 0xf
call fcn.00438012
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x10
call fcn.0042f275
push str.ProgFiles32Folder
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 0x11
call fcn.0042f5f2
lea ecx, [ebp - 0x26c]
push ecx
mov ecx, eax
call fcn.0042f4ab
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x10
call fcn.0042f451
lea ecx, [ebp - 0x234]
call fcn.00401056
mov ecx, dword [ebp - 0x258]
mov byte [ebp - 4], 1
lea ecx, [ecx - 0x10]
call fcn.00407864
lea eax, [ebp - 0x258]
push eax
call fcn.004244c5
pop ecx
push eax
lea eax, [ebp - 0x234]
push eax
mov byte [ebp - 4], 0x12
call fcn.00438012
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x13
call fcn.0042f275
push str.ProgFiles64Folder
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 0x14
call fcn.0042f5f2
lea ecx, [ebp - 0x26c]
push ecx
mov ecx, eax
call fcn.0042f4ab
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x13
call fcn.0042f451
lea ecx, [ebp - 0x234]
call fcn.00401056
mov ecx, dword [ebp - 0x258]
mov byte [ebp - 4], 1
lea ecx, [ecx - 0x10]
call fcn.00407864
xor eax, eax
push 0x206
mov word [ebp - 0x21c], ax
lea eax, [ebp - 0x21a]
push ebx
push eax
call fcn.004913e0
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x25c]
call fcn.00401b1e
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x234]
push eax
mov byte [ebp - 4], 0x15
call fcn.00438012
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x16
call fcn.0042f275
push str.temp
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 0x17
call fcn.0042f5f2
lea ecx, [ebp - 0x26c]
push ecx
mov ecx, eax
call fcn.0042f4ab
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x16
call fcn.0042f451
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x15
call fcn.00401056
call fcn.0042bd20
lea ecx, [ebp - 0x26c]
push eax
call fcn.0042f3a9
push str.is64bitos
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 0x18
call fcn.0042f5f2
lea ecx, [ebp - 0x26c]
push ecx
mov ecx, eax
call fcn.0042f4ab
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x15
call fcn.0042f451
mov ecx, dword [ebp - 0x25c]
lea ecx, [ecx - 0x10]
call fcn.00407864
jmp 0x4134f7
push 8
pop esi
lea ecx, [ebp - 0x254]
mov dword [ebp - 4], ebx
call fcn.00430a82
push 0x505ab0
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x1d
call fcn.00408fd9
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x1e
call fcn.00432bf9
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x1f
jb 0x413545
mov eax, dword [eax]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401027
lea eax, [ebp - 0x270]
push eax
call fcn.00437fc7
add esp, 0x1c
push eax
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x20
call fcn.00402394
mov ecx, dword [ebp - 0x270]
lea ecx, [ecx - 0x10]
call fcn.00407864
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x1e
call fcn.00401056
mov eax, dword [0x507340]
imul eax, eax
push 0xc
cdq
pop ecx
idiv ecx
cmp edx, 0xa
jne 0x4135b3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x50
xor edx, edx
pop ecx
div ecx
inc edx
mov dword [0x507340], edx
mov word [edi], si
mov esi, dword [ebp - 0x25c]
push dword [esi - 0xc]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
test eax, eax
jne 0x4135cf
call fcn.00409bd9
lea ecx, [esi - 0x10]
mov dword [edi + 8], eax
call fcn.00407864
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], bl
call fcn.004090f2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x280]
call fcn.0042f451
call fcn.0048f3e1
ret