Function at 0x4023d0
Capabilities:
Get common file path

Disassembly:
mov eax, 0x41a77f
call fcn.00404220
sub esp, 0x294
push ebx
push esi
push edi
mov edi, ecx
call fcn.004151fb
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x1c], eax
and dword [ebp - 4], 0
lea eax, [ebp - 0x160]
push eax
push 0x100
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
cmp dword [edi + 0xc0], 1
lea ecx, [ebp - 0x1c]
je 0x40241d
push 0x7c
jmp 0x402422
push 0x83
call fcn.00401bf9
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatA]
lea ecx, [ebp - 0x160]
dec ecx
cmp byte [eax + ecx], 0x5c
je 0x402455
push 0x41ba80
lea eax, [ebp - 0x160]
push eax
call esi
mov eax, dword [ebp - 0x1c]
push dword [eax - 0xc]
lea ecx, [ebp - 0x1c]
call fcn.004018e3
push eax
lea eax, [ebp - 0x160]
push eax
call esi
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
je 0x402882
push 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x58]
call fcn.00415d62
mov byte [ebp - 4], 1
call fcn.004151fb
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 2
call fcn.004151fb
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 3
call fcn.004151fb
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 4
call fcn.0041582f
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov esi, eax
lea eax, [esi + 1]
push eax
push 8
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
push esi
push eax
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x38], eax
call fcn.0041564a
lea ecx, [ebp - 0x58]
call fcn.004158d5
push dword [ebp - 0x38]
lea ecx, [ebp - 0x18]
call fcn.00401f32
lea eax, [ebp - 0x10]
push eax
push ecx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x40], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 5
call fcn.004018c5
lea eax, [ebp - 0x20]
push eax
mov ecx, edi
call fcn.00401e16
push 0xa
lea eax, [ebp - 0x60]
push eax
push esi
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 6
call fcn.004018e3
push eax
call fcn.004050ac
mov esi, eax
lea eax, [esi + esi*2]
lea eax, [eax*4 + 4]
push eax
mov dword [edi + 0xcc], esi
call fcn.0041480e
add esp, 0x10
test eax, eax
je 0x402599
push fcn.0040193f
push 0x401953
push esi
mov dword [eax], esi
add eax, 4
push 0xc
push eax
mov dword [ebp - 0x24], eax
call fcn.00404e8b
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
jmp 0x40259d
and dword [ebp - 0x30], 0
mov dword [ebp - 0x24], 1
call fcn.004151fb
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x14], esi
and dword [ebp - 0x2c], 0
cmp dword [edi + 0xcc], 0
mov byte [ebp - 4], 7
jbe 0x40281c
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x18]
call fcn.00401c39
lea eax, [ebp - 0x10]
push eax
push ecx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x3c], esp
mov ecx, esp
push eax
call fcn.004018c5
lea eax, [ebp - 0x44]
push eax
mov ecx, edi
call fcn.00401e16
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 8
call fcn.00401c39
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401485
push 0x41bb1e
push dword [ebp - 0x10]
call fcn.00404635
test eax, eax
pop ecx
pop ecx
je 0x4027e9
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x28]
call fcn.00401c39
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x18]
call fcn.00401c39
lea eax, [ebp - 0x10]
push eax
push ecx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x3c], esp
mov ecx, esp
push eax
call fcn.004018c5
lea eax, [ebp - 0x40]
push eax
mov ecx, edi
call fcn.00401e16
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 9
call fcn.00401c39
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
mov byte [ebp - 4], 7
call fcn.00401485
xor esi, esi
push esi
push str.NIKON
lea ecx, [ebp - 0x10]
call fcn.00401861
test eax, eax
jge 0x402792
push esi
push str.Nikon
lea ecx, [ebp - 0x10]
call fcn.00401861
test eax, eax
jge 0x402792
push esi
push str.FotoNation
lea ecx, [ebp - 0x10]
call fcn.00401861
test eax, eax
jge 0x402792
push esi
push str.Windows
lea ecx, [ebp - 0x10]
call fcn.00401861
test eax, eax
jge 0x402792
push esi
push str.TPkd
lea ecx, [ebp - 0x10]
call fcn.00401861
test eax, eax
jge 0x402792
push esi
push str.CLSID
lea ecx, [ebp - 0x10]
call fcn.00401861
test eax, eax
jge 0x402792
push esi
push str..nef
lea ecx, [ebp - 0x10]
call fcn.00401861
test eax, eax
jge 0x402792
push esi
push str.Nikon_Electronic_Image_Format
lea ecx, [ebp - 0x10]
call fcn.00401861
test eax, eax
jge 0x402792
push esi
push str.DragDropHandlers
lea ecx, [ebp - 0x10]
call fcn.00401861
test eax, eax
jge 0x402792
push esi
push str.Infinity
lea ecx, [ebp - 0x10]
call fcn.00401861
test eax, eax
jge 0x402792
push esi
push str.PictureProject
lea ecx, [ebp - 0x10]
call fcn.00401861
test eax, eax
jge 0x402792
push 0xffffffffffffffff
push esi
push 0x7f
call fcn.00417a1e
lea eax, [ebp - 0x14]
push 0x80
push eax
call fcn.00401d2a
mov eax, dword [ebp - 0x14]
mov edx, dword [eax - 0xc]
pop ecx
pop ecx
lea ecx, [edi + 0xd0]
push edx
mov dword [ebp - 0x24], esi
mov esi, dword [ecx]
push eax
call dword [esi + 0x38]
jmp 0x4027c0
push ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x3c], esp
mov ecx, esp
push eax
call fcn.004018c5
push ecx
lea eax, [ebp - 0x28]
mov dword [ebp - 0x5c], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0xa
call fcn.004018c5
mov ecx, dword [ebp - 0x34]
mov byte [ebp - 4], 7
call fcn.00401da9
push 0x41bb1e
push dword [ebp - 0x10]
call fcn.00404635
test eax, eax
pop ecx
pop ecx
je 0x4027e9
push dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push dword [ebp - 0x28]
push 0x6c
push eax
call fcn.00401d2a
add esp, 0x10
jmp 0x4027f3
lea ecx, [ebp - 0x14]
push 0x6f
call fcn.00401bf9
mov esi, dword [ebp - 0x14]
mov eax, dword [esi - 0xc]
lea ecx, [edi + 0xd0]
mov edx, dword [ecx]
push eax
push esi
call dword [edx + 0x38]
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
add dword [ebp - 0x34], 0xc
cmp eax, dword [edi + 0xcc]
jb 0x4025d1
push dword [ebp - 0x38]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x30]
push 0
mov dword [eax], ecx
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
lea ecx, [esi - 0x10]
call fcn.00401485
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00401485
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00401485
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00401485
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.00401485
mov ecx, dword [ebp - 0x48]
add ecx, 0xfffffff0
call fcn.00401485
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0
call fcn.00415976
mov esi, dword [ebp - 0x24]
jmp 0x4028c7
call fcn.004151fb
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp + 8], eax
push str.RemKeyList.txt
lea eax, [ebp + 8]
push 0x7a
push eax
mov byte [ebp - 4], 0xb
call fcn.00401d2a
mov esi, dword [ebp + 8]
add esp, 0xc
push dword [esi - 0xc]
lea ecx, [edi + 0xd0]
mov eax, dword [ecx]
push esi
call dword [eax + 0x38]
lea ecx, [esi - 0x10]
call fcn.00401485
xor esi, esi
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.00401485
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 8