Function at 0x4a0c00
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4f2f89
push eax
mov eax, 0xf190
mov dword fs:[0], esp
call fcn.004e0dc0
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x1c], edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], edi
mov bl, 2
push 0x53d480
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], bl
call fcn.00404b30
mov eax, dword [0x537160]
mov byte [ebp - 4], 3
cmp eax, edi
jne 0x4a0ca5
cmp dword [0x53715c], edi
jne 0x4a0ca5
push 0xc
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [ebp - 0x2c], eax
cmp eax, edi
mov byte [ebp - 4], 4
je 0x4a0c7b
mov ecx, eax
call fcn.00431f10
jmp 0x4a0c7d
xor eax, eax
mov dword [0x53715c], eax
mov eax, dword [0x528890]
push eax
push 0x4031c0
mov ecx, 0x53bea0
mov byte [ebp - 4], 3
call fcn.00402190
mov dword [0x537160], 1
mov ecx, dword [ebp - 0x14]
mov esi, dword [0x53715c]
mov byte [ebp - 4], bl
mov edx, dword [ecx]
call dword [edx + 8]
mov eax, dword [esi]
lea ecx, [ebp - 0x1c]
push ecx
push esi
call dword [eax + 8]
test eax, eax
jl 0x4a0ff6
mov eax, dword [ebp - 0x1c]
cmp eax, edi
je 0x4a0ff6
push 0x5298d8
lea edx, [ebp - 0x24]
push eax
push edx
call fcn.004030d0
mov eax, dword [ebp - 0x1c]
push 0x52b5d0
lea ecx, [ebp - 0x20]
push eax
push ecx
call fcn.004030d0
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x28]
push ecx
push eax
mov edx, dword [eax]
mov byte [ebp - 4], 5
call dword [edx + 0x10]
test eax, eax
jl 0x4a0fec
mov dword [ebp - 0x10], edi
push 0x53d440
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 6
call fcn.00404b30
mov eax, dword [0x53716c]
mov bl, 7
cmp eax, edi
mov byte [ebp - 4], bl
jne 0x4a0d86
cmp dword [0x537168], edi
jne 0x4a0d86
push 0x110
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [ebp - 0x2c], eax
cmp eax, edi
mov byte [ebp - 4], 8
je 0x4a0d5c
push edi
mov ecx, eax
call fcn.00404a60
jmp 0x4a0d5e
xor eax, eax
mov edx, dword [0x528b70]
mov ecx, 0x53bea0
push edx
push 0x404a30
mov byte [ebp - 4], bl
mov dword [0x537168], eax
call fcn.00402190
mov dword [0x53716c], 1
mov ecx, dword [ebp - 0x14]
mov esi, dword [0x537168]
mov byte [ebp - 4], 6
mov eax, dword [ecx]
call dword [eax + 8]
mov ecx, dword [esi]
lea edx, [ebp - 0x10]
push edx
push esi
call dword [ecx + 0x74]
mov eax, 0x537100
test eax, eax
mov eax, dword [ebp - 0x10]
jne 0x4a0db7
cmp eax, edi
je 0x4a0e0d
jmp 0x4a0e72
cmp eax, edi
je 0x4a0e72
mov ecx, 0x537100
test ecx, ecx
jne 0x4a0dcc
xor eax, eax
jmp 0x4a0df6
push 0x537100
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
inc esi
lea eax, [esi + esi]
add eax, 3
and al, 0xfc
call fcn.004e0dc0
mov eax, esp
push edi
push esi
push 0x537100
push eax
call fcn.0044b520
mov edx, dword [ebp - 0x10]
push eax
push edx
call dword [sym.imp.MSVCRT.dll_wcscmp]
add esp, 8
test eax, eax
sete al
test al, al
je 0x4a0e72
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x13f]
mov byte [ebp - 0x140], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push eax
push 5
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x4a0e72
lea ecx, [ebp - 0x140]
push ecx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
test eax, eax
je 0x4a0e72
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea eax, [ebp - 0x140]
push 0xffffffffffffffff
push eax
call fcn.004048e0
add esp, 8
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
push ecx
push edx
push eax
push 0x80206
push 0
push 0
push 1
lea ecx, [ebp - 0xf19c]
call fcn.004253e0
lea ecx, [ebp - 0xf19c]
mov byte [ebp - 4], 9
call fcn.004254d0
cmp eax, 1
jne 0x4a0fd1
mov eax, dword [0x5371bc]
test eax, eax
je 0x4a0ebb
mov ebx, eax
test ebx, ebx
jne 0x4a0f15
lea ecx, [ebp - 0xf19c]
mov byte [ebp - 4], 6
call fcn.004d7640
mov ecx, dword [ebp - 0x10]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
push ecx
call esi
mov edx, dword [ebp - 0x28]
push edx
call esi
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 1
test eax, eax
je 0x4a0eed
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0
test eax, eax
je 0x4a0efe
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x4a102c
jmp 0x4a1026
xor esi, esi
mov dword [ebp - 0x18], esi
mov edx, dword [ebx]
lea eax, [ebp - 0x18]
push eax
push ebx
mov byte [ebp - 4], 0xa
call dword [edx + 0xc0]
mov eax, dword [ebp - 0x18]
cmp eax, esi
je 0x4a0fc3
mov dword [ebp - 0x38], esi
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 0xb
cmp eax, esi
mov dword [ebp - 0x30], esi
je 0x4a0f51
mov ecx, dword [eax]
lea edx, [ebp - 0x30]
push edx
push eax
call dword [ecx + 0x24]
lea ecx, [ebp - 0xf19c]
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x3c], 0xffffffff
call fcn.00425660
cmp eax, esi
mov dword [ebp - 0x14], eax
je 0x4a0fb9
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0xf19c]
push eax
call fcn.00425670
push esi
mov edi, eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push edi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x3c]
push 0
test eax, eax
lea edx, [ebp - 0x2c]
push ecx
mov ecx, dword [ebp - 0x34]
push edx
setne al
push eax
push esi
push ebx
mov dword [ebp - 0x38], esi
call fcn.004a11b0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4a0f71
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x18]
test eax, eax
mov byte [ebp - 4], 9
je 0x4a0fd1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0xf19c]
mov byte [ebp - 4], 6
call fcn.004d7640
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
xor edi, edi
mov eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x20]
mov byte [ebp - 4], 1
cmp eax, edi
je 0x4a1007
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0
cmp eax, edi
je 0x4a1018
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], 0xffffffff
cmp eax, edi
je 0x4a102c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc]
lea esp, [ebp - 0xf1a8]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret