Function at 0x10240db
Capabilities:
Get common file path

Disassembly:
push 0x230
mov eax, 0x1030bd4
call fcn.0102ada8
xor eax, eax
push 0x206
mov word [ebp - 0x218], ax
xor ebx, ebx
lea eax, [ebp - 0x216]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
mov dword [ebp - 0x238], ebx
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x230], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x23c], ebx
mov dword [ebp - 0x21c], ebx
push 0x2001f
push 0x100b720
push 0x80000002
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 4
call fcn.0101c571
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, eax
cmp edi, ebx
je 0x1024182
push edi
push 0x100b720
push 0x100b6e4
push 1
push 0x10
push 0x1035128
call fcn.0102c6ab
add esp, 0x18
jmp 0x10243c5
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x218]
push eax
push 0x100b6cc
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x224], 0x104
call fcn.0101f2aa
mov edi, eax
cmp edi, ebx
je 0x10241bd
push edi
push 0x100b6cc
push 0x100b688
jmp 0x102416c
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x220]
call fcn.01022fe8
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x22c]
call fcn.0102048c
lea ecx, [ebp - 0x22c]
call fcn.01022e8b
mov edi, eax
cmp edi, ebx
jge 0x1024238
push edi
push 0x100b620
push 1
push 0x10
push 0x1035128
call fcn.0102c6ab
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
add esp, 0x14
push ebx
call esi
push ebx
call esi
push dword [ebp - 0x22c]
call esi
push dword [ebp - 0x220]
call esi
lea ecx, [ebp - 0x238]
call fcn.0101c4fe
mov eax, edi
call fcn.0102ae3a
ret
lea ecx, [ebp - 0x22c]
call fcn.01023687
test eax, eax
jne 0x1024265
push 0x100b5ec
push 1
push 0x10
push 0x1035128
call fcn.0102c6ab
add esp, 0x10
push 5
pop edi
jmp 0x10243c9
lea eax, [ebp - 0x228]
push eax
push ebx
push 0x400
push 0x101b81c
mov dword [ebp - 0x228], ebx
call sub.SHELL32.dll_SHGetKnownFolderPath
mov edi, eax
cmp edi, ebx
je 0x1024293
push edi
push 0x100b5a8
jmp 0x10241f8
push dword [ebp - 0x228]
lea ecx, [ebp - 0x21c]
call fcn.01022fe8
push 0x100b594
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0102361c
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 5
call fcn.0102048c
push dword [ebp - 0x224]
mov byte [ebp - 4], 4
call esi
push 0x100b588
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0102361c
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 6
call fcn.0102048c
push dword [ebp - 0x224]
mov byte [ebp - 4], 4
call esi
push 0x100b574
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0102361c
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 7
call fcn.0102048c
push dword [ebp - 0x224]
mov byte [ebp - 4], 4
call esi
cmp dword [ebp - 0x228], ebx
je 0x1024357
push dword [ebp - 0x228]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 0x228], ebx
lea ecx, [ebp - 0x220]
call fcn.01023894
mov ebx, 0x1035128
test eax, eax
je 0x102437e
push eax
push 0x100b528
push 1
push 0x10
push ebx
call fcn.0102c6ab
add esp, 0x14
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x21c]
call fcn.01023d18
mov edi, eax
test edi, edi
je 0x10243ab
push edi
push 0x100b4e0
push 1
push 0x10
push ebx
call fcn.0102c6ab
add esp, 0x14
jmp 0x10243c3
push 1
push dword [ebp - 0x220]
lea ecx, [ebp - 0x238]
push 0x100b4b8
call fcn.0101c5d0
xor ebx, ebx
cmp edi, ebx
jle 0x10243d5
and edi, 0xffff
or edi, 0x80070000
push dword [ebp - 0x21c]
jmp 0x1024210