Function at 0x4765c0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x73c968
mov eax, dword fs:[0]
push eax
sub esp, 0x238
mov eax, dword [0x8312b0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0070dcd0
add esp, 0xc
lea eax, [ebp - 0x218]
push eax
push 0
push 0
push 0x24
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jns 0x476623
xor al, al
jmp 0x47696e
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x218]
push 0x7e9a74
push eax
xor bl, bl
call esi
mov dword [ebp - 0x240], 0
call fcn.00461ac0
test al, al
je 0x47667e
mov eax, dword [0x83ce68]
test eax, eax
jne 0x476675
push str.Wow64DisableWow64FsRedirection
push 0x7e6d10
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x83ce68], eax
test eax, eax
je 0x47667e
lea ecx, [ebp - 0x240]
push ecx
call eax
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x230]
push 0xa
xor eax, eax
mov dword [ebp - 0x220], 0
push str.atl100.dll
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.0044bdc0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x23c]
call fcn.0044c580
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0
call fcn.0044bf40
push 0xc
xor eax, eax
mov dword [ebp - 0x220], 0
push str.msvcp100.dll
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.0044bdc0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x23c]
call fcn.0044c580
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0
call fcn.0044bf40
push 0xc
xor eax, eax
mov dword [ebp - 0x220], 0
push str.msvcr100.dll
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.0044bdc0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x23c]
call fcn.0044c580
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0
call fcn.0044bf40
push 0xa
xor eax, eax
mov dword [ebp - 0x220], 0
push str.mfc100.dll
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.0044bdc0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x23c]
call fcn.0044c580
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0
call fcn.0044bf40
push 0xb
xor eax, eax
mov dword [ebp - 0x220], 0
push str.mfc100u.dll
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.0044bdc0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x23c]
call fcn.0044c580
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0
call fcn.0044bf40
push 0xb
xor eax, eax
mov dword [ebp - 0x220], 0
push str.mfcm100.dll
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.0044bdc0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x23c]
call fcn.0044c580
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0
call fcn.0044bf40
push 0xc
xor eax, eax
mov dword [ebp - 0x220], 0
push str.mfcm100u.dll
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.0044bdc0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x23c]
call fcn.0044c580
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0
call fcn.0044bf40
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.00473a70
test al, al
je 0x476926
push 0x7e9dcc
lea eax, [ebp - 0x218]
push eax
call esi
mov edx, str.10.0.40219.325
lea ecx, [ebp - 0x218]
call fcn.00461e90
mov bl, al
call fcn.00461ac0
test al, al
je 0x476961
mov eax, dword [0x83ce64]
mov esi, dword [ebp - 0x240]
test eax, eax
jne 0x47695e
push str.Wow64RevertWow64FsRedirection
push 0x7e6d44
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x83ce64], eax
test eax, eax
je 0x476961
push esi
call eax
lea ecx, [ebp - 0x23c]
call fcn.004635a0
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006f4f1e
mov esp, ebp
pop ebp
ret