Function at 0x4a02f0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4f0589
push eax
mov eax, 0xf1b8
mov dword fs:[0], esp
call fcn.004dd860
push ebx
xor ebx, ebx
push esi
push edi
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x1c], ebx
push 0x53a3c0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call fcn.00404b80
mov eax, dword [0x534040]
mov byte [ebp - 4], 3
cmp eax, ebx
jne 0x4a0394
cmp dword [0x53403c], ebx
jne 0x4a0394
push 0xc
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [ebp - 0x34], eax
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x4a036a
mov ecx, eax
call fcn.00431c60
jmp 0x4a036c
xor eax, eax
mov dword [0x53403c], eax
mov eax, dword [0x525888]
push eax
push 0x4031b0
mov ecx, 0x538d90
mov byte [ebp - 4], 3
call fcn.00402180
mov dword [0x534040], 1
mov ecx, dword [ebp - 0x20]
mov esi, dword [0x53403c]
mov byte [ebp - 4], 2
mov edx, dword [ecx]
call dword [edx + 8]
mov eax, dword [esi]
lea ecx, [ebp - 0x24]
push ecx
push esi
call dword [eax + 8]
test eax, eax
jl 0x4a0758
mov eax, dword [ebp - 0x24]
cmp eax, ebx
je 0x4a0758
push 0x526890
lea edx, [ebp - 0x28]
push eax
push edx
call fcn.004030c0
mov eax, dword [ebp - 0x24]
push 0x5285b0
lea ecx, [ebp - 0x1c]
push eax
push ecx
call fcn.004030c0
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x38]
push ecx
push eax
mov edx, dword [eax]
mov byte [ebp - 4], 5
call dword [edx + 0x10]
test eax, eax
jl 0x4a074e
mov dword [ebp - 0x10], ebx
mov edx, dword [0x53a380]
mov ecx, 0x53a380
mov byte [ebp - 4], 6
mov dword [ebp - 0x34], 0x53a380
call dword [edx + 4]
mov eax, dword [0x53404c]
mov byte [ebp - 4], 7
cmp eax, ebx
jne 0x4a047d
cmp dword [0x534048], ebx
jne 0x4a047d
push 0x110
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [ebp - 0x4c], eax
cmp eax, ebx
mov byte [ebp - 4], 8
je 0x4a0453
push ebx
mov ecx, eax
call fcn.00404ab0
jmp 0x4a0455
xor eax, eax
mov dword [0x534048], eax
mov eax, dword [0x525b68]
push eax
push 0x404a80
mov ecx, 0x538d90
mov byte [ebp - 4], 7
call fcn.00402180
mov dword [0x53404c], 1
mov edx, dword [0x53a380]
mov esi, dword [0x534048]
mov ecx, 0x53a380
mov byte [ebp - 4], 6
call dword [edx + 8]
mov eax, dword [esi]
lea ecx, [ebp - 0x10]
push ecx
push esi
call dword [eax + 0x74]
mov eax, dword [ebp - 0x10]
mov edx, 0x533fe0
test edx, edx
jne 0x4a04b4
cmp eax, ebx
je 0x4a0506
jmp 0x4a0565
cmp eax, ebx
je 0x4a0565
mov eax, 0x533fe0
test eax, eax
je 0x4a04ef
push 0x533fe0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
inc esi
lea eax, [esi + esi]
add eax, 3
and al, 0xfc
call fcn.004dd860
mov eax, esp
push ebx
push esi
push 0x533fe0
push eax
call fcn.0044b2c0
mov ecx, dword [ebp - 0x10]
push eax
push ecx
call dword [sym.imp.MSVCRT.dll_wcscmp]
add esp, 8
test eax, eax
sete al
cmp al, bl
je 0x4a0565
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x167]
mov byte [ebp - 0x168], bl
rep stosd dword es:[edi], eax
lea edx, [ebp - 0x14]
mov dword [ebp - 0x14], ebx
stosw word es:[edi], ax
push edx
push 5
push ebx
stosb byte es:[edi], al
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x4a0565
lea ecx, [ebp - 0x168]
push ecx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
test eax, eax
je 0x4a0565
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea eax, [ebp - 0x168]
push 0xffffffffffffffff
push eax
call fcn.00404920
add esp, 8
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
push ecx
push edx
push eax
push 0x80206
push ebx
push ebx
push 1
lea ecx, [ebp - 0xf1c4]
call fcn.00425050
lea ecx, [ebp - 0xf1c4]
mov byte [ebp - 4], 9
call fcn.00425140
cmp eax, 1
jne 0x4a0735
mov eax, dword [0x5340ac]
cmp eax, ebx
je 0x4a0735
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], ebx
mov ecx, dword [eax]
lea edx, [ebp - 0x14]
push edx
push eax
mov byte [ebp - 4], 0xa
call dword [ecx + 0xc0]
mov eax, dword [ebp - 0x14]
cmp eax, ebx
je 0x4a0727
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0xf1c4]
mov byte [ebp - 4], 0xb
call fcn.004252d0
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x4a061a
mov ecx, dword [eax]
lea edx, [ebp - 0x50]
push edx
push eax
call dword [ecx + 0x90]
cmp dword [ebp - 0x50], ebx
je 0x4a0609
mov ecx, dword [0x5340ac]
cmp ecx, ebx
je 0x4a0609
call fcn.00448dd0
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
je 0x4a061a
mov ecx, dword [eax]
lea edx, [ebp - 0x34]
push edx
push eax
call dword [ecx + 0x24]
mov eax, dword [ebp - 0x2c]
mov edi, 1
cmp eax, ebx
je 0x4a071a
jmp 0x4a062f
mov edi, dword [ebp - 0x4c]
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0xf1c4]
push eax
call fcn.004252e0
mov ecx, dword [ebp - 0x18]
mov esi, eax
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ecx, dword [ebp - 0x20]
mov esi, eax
push edi
push esi
mov dword [ebp - 0x18], esi
call fcn.00448800
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x4c], ebx
cmp eax, ebx
je 0x4a0711
mov dl, byte [ebp - 0x2d]
mov dword [ebp - 0x44], ebx
mov byte [ebp - 0x48], dl
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xc
call fcn.004c3620
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x64]
push eax
push esi
mov byte [ebp - 4], 0xd
call fcn.004c3690
mov ecx, dword [ebp - 0x44]
cmp ecx, ebx
je 0x4a06d3
mov eax, dword [ebp - 0x40]
sub eax, ecx
sar eax, 4
cmp eax, ebx
jle 0x4a06d3
xor esi, esi
mov edi, eax
jmp 0x4a06b6
mov ecx, dword [ebp - 0x44]
mov eax, dword [esi + ecx + 4]
cmp eax, ebx
jne 0x4a06c3
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
mov ecx, dword [ebp - 0x20]
push ebx
push eax
call fcn.00448800
add esi, 0x10
dec edi
jne 0x4a06b3
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xc
call fcn.004c3660
mov edi, dword [ebp - 0x40]
mov esi, dword [ebp - 0x44]
cmp esi, edi
mov byte [ebp - 4], 0xb
je 0x4a06ff
push ebx
mov ecx, esi
call fcn.0043a500
add esi, 0x10
cmp esi, edi
jne 0x4a06ed
mov esi, dword [ebp - 0x44]
push esi
call sub.MFC42.DLL_operatordelete
add esp, 4
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
cmp dword [ebp - 0x2c], ebx
jne 0x4a062c
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x14]
cmp eax, ebx
mov byte [ebp - 4], 9
je 0x4a0735
mov edx, dword [eax]
push eax
call dword [edx + 8]
lea ecx, [ebp - 0xf1c4]
mov byte [ebp - 4], 6
call fcn.004bd6e0
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [ebp - 0x38]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x4a0769
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], bl
cmp eax, ebx
je 0x4a0779
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 4], 0xffffffff
cmp eax, ebx
je 0x4a078d
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov ecx, dword [ebp - 0xc]
lea esp, [ebp - 0xf1d0]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret