Function at 0x4dab80
Capabilities:
Get common file path

Disassembly:
sub esp, 0x400
lea eax, [esp + 0x200]
push ebx
push ebp
push esi
push edi
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea edi, [esp + 0x210]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x290]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push str.LOCALS1Temp
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x418]
push esi
call fcn.004f2d80
add esp, 8
test eax, eax
je 0x4dabf1
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x400
ret
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
xor ebx, ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
xor ebp, ebp
cmp ecx, ebx
jle 0x4dac16
cmp byte [eax + esi], 0x5c
jne 0x4dac0c
inc ebp
inc eax
cmp eax, ecx
jl 0x4dac05
cmp ebp, 2
jge 0x4dac2b
cmp ecx, 4
jge 0x4dac2b
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x400
ret
lea ecx, [esp + 0x210]
lea edx, [esp + 0x10]
push ecx
push str._sDocuments_and_Settings
push edx
mov byte [esp + 0x21e], bl
call fcn.004f175f
lea edi, [esp + 0x1c]
or ecx, 0xffffffff
xor eax, eax
push 0x100
repne scasb al, byte es:[edi]
not ecx
lea eax, [esp + 0x120]
dec ecx
push esi
push eax
mov edi, ecx
call fcn.004f27c0
lea ecx, [esp + 0x128]
lea edx, [esp + 0x28]
push ecx
push edx
mov byte [esp + edi + 0x130], bl
call fcn.004f61e0
add esp, 0x20
test eax, eax
jne 0x4dac9c
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x400
ret
lea eax, [esp + 0x210]
lea ecx, [esp + 0x10]
push eax
push str._sProgram_FilesInternet_Explorer
push ecx
mov byte [esp + 0x1c], bl
call fcn.004f175f
lea edi, [esp + 0x1c]
or ecx, 0xffffffff
xor eax, eax
push 0x100
repne scasb al, byte es:[edi]
not ecx
lea edx, [esp + 0x120]
dec ecx
push esi
push edx
mov edi, ecx
mov byte [esp + 0x128], bl
call fcn.004f27c0
lea eax, [esp + 0x128]
lea ecx, [esp + 0x28]
push eax
push ecx
mov byte [esp + edi + 0x130], bl
call fcn.004f61e0
add esp, 0x20
test eax, eax
jne 0x4dad11
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x400
ret
lea edx, [esp + 0x210]
lea eax, [esp + 0x10]
push edx
push str._sUsers
push eax
mov byte [esp + 0x1c], bl
call fcn.004f175f
lea edi, [esp + 0x1c]
or ecx, 0xffffffff
xor eax, eax
push 0x100
repne scasb al, byte es:[edi]
not ecx
dec ecx
push esi
mov edi, ecx
lea ecx, [esp + 0x124]
push ecx
mov byte [esp + 0x128], bl
call fcn.004f27c0
lea edx, [esp + 0x128]
lea eax, [esp + 0x28]
push edx
push eax
mov byte [esp + edi + 0x130], bl
call fcn.004f61e0
add esp, 0x20
test eax, eax
jne 0x4dad86
pop edi
pop esi
pop ebp
mov eax, 3
pop ebx
add esp, 0x400
ret
lea ecx, [esp + 0x210]
lea edx, [esp + 0x10]
push ecx
push str._sAppPatch
push edx
mov byte [esp + 0x1c], bl
call fcn.004f175f
lea edi, [esp + 0x1c]
or ecx, 0xffffffff
xor eax, eax
push 0x100
repne scasb al, byte es:[edi]
not ecx
lea eax, [esp + 0x120]
dec ecx
push esi
push eax
mov edi, ecx
mov byte [esp + 0x128], bl
call fcn.004f27c0
lea ecx, [esp + 0x128]
lea edx, [esp + 0x28]
push ecx
push edx
mov byte [esp + edi + 0x130], bl
call fcn.004f61e0
add esp, 0x20
test eax, eax
jne 0x4dadfb
pop edi
pop esi
pop ebp
mov eax, 4
pop ebx
add esp, 0x400
ret
lea eax, [esp + 0x290]
lea ecx, [esp + 0x10]
push eax
push str._sCursors
push ecx
mov byte [esp + 0x1c], bl
call fcn.004f175f
lea edi, [esp + 0x1c]
or ecx, 0xffffffff
xor eax, eax
push 0x100
repne scasb al, byte es:[edi]
not ecx
lea edx, [esp + 0x120]
dec ecx
push esi
push edx
mov edi, ecx
mov byte [esp + 0x128], bl
call fcn.004f27c0
lea eax, [esp + 0x128]
lea ecx, [esp + 0x28]
push eax
push ecx
mov byte [esp + edi + 0x130], bl
call fcn.004f61e0
add esp, 0x20
test eax, eax
jne 0x4dae70
pop edi
pop esi
pop ebp
mov eax, 2
pop ebx
add esp, 0x400
ret
lea edx, [esp + 0x290]
lea eax, [esp + 0x10]
push edx
push str._sFonts
push eax
mov byte [esp + 0x1c], bl
call fcn.004f175f
lea edi, [esp + 0x1c]
or ecx, 0xffffffff
xor eax, eax
push 0x100
repne scasb al, byte es:[edi]
not ecx
dec ecx
push esi
mov edi, ecx
lea ecx, [esp + 0x124]
push ecx
mov byte [esp + 0x128], bl
call fcn.004f27c0
lea edx, [esp + 0x128]
lea eax, [esp + 0x28]
push edx
push eax
mov byte [esp + edi + 0x130], bl
call fcn.004f61e0
add esp, 0x20
test eax, eax
jne 0x4daee5
pop edi
pop esi
pop ebp
mov eax, 2
pop ebx
add esp, 0x400
ret
lea ecx, [esp + 0x290]
lea edx, [esp + 0x10]
push ecx
push str._sTasks
push edx
mov byte [esp + 0x1c], bl
call fcn.004f175f
lea edi, [esp + 0x1c]
or ecx, 0xffffffff
xor eax, eax
push 0x100
repne scasb al, byte es:[edi]
not ecx
lea eax, [esp + 0x120]
dec ecx
push esi
push eax
mov edi, ecx
mov byte [esp + 0x128], bl
call fcn.004f27c0
lea ecx, [esp + 0x128]
lea edx, [esp + 0x28]
push ecx
push edx
mov byte [esp + edi + 0x130], bl
call fcn.004f61e0
add esp, 0x20
test eax, eax
jne 0x4daf5a
pop edi
pop esi
pop ebp
mov eax, 2
pop ebx
add esp, 0x400
ret
lea eax, [esp + 0x290]
lea ecx, [esp + 0x310]
push eax
push str._s_system32
push ecx
call fcn.004f175f
lea edi, [esp + 0x29c]
or ecx, 0xffffffff
xor eax, eax
push 0x100
repne scasb al, byte es:[edi]
not ecx
lea edx, [esp + 0x20]
dec ecx
push esi
push edx
mov edi, ecx
call fcn.004f27c0
lea eax, [esp + 0x2a8]
lea ecx, [esp + 0x28]
push eax
push ecx
mov byte [esp + edi + 0x30], bl
call fcn.004f61e0
add esp, 0x20
test eax, eax
jne 0x4dafc9
cmp ebp, 2
jge 0x4dafc9
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x400
ret
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x400
ret