Function at 0x104d9e1
Capabilities:
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
push esi
mov esi, dword [ebp + 0x24]
push edi
mov dword [ebp - 0xc], ecx
test esi, esi
jne 0x104da14
mov esi, 0x80004003
lea ecx, [ebp + 0x1c]
call fcn.010061d0
lea ecx, [ebp + 0x20]
call fcn.010061d0
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0x20
xor ecx, ecx
push 2
pop edx
mov eax, 0x3f7a0
mul edx
seto cl
mov dword [esi], 1
neg ecx
or ecx, eax
push ecx
call sub.msvcrt.dll_void____cdecl_operator_new___unsigned_int_
pop ecx
mov dword [ebp - 8], eax
test eax, eax
jne 0x104da42
mov esi, 0x8007000e
jmp 0x104d9fb
mov eax, dword [0x1061024]
mov ecx, dword [ebp - 0xc]
mov dword [ebp + 0x24], eax
lea eax, [ebp + 0x24]
push eax
push dword [ebp + 0x10]
call fcn.0104d339
mov edi, eax
test edi, edi
jge 0x104da74
lea ecx, [ebp + 0x24]
call fcn.010061d0
push dword [ebp - 8]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov esi, edi
jmp 0x104d9fb
mov edi, dword [ebp + 0x14]
mov eax, dword [0x1061024]
mov dword [ebp - 4], eax
mov ebx, 0x1001d98
cmp edi, 5
je 0x104daa3
cmp edi, 0xd
je 0x104daa3
cmp edi, 0xe
je 0x104daa3
cmp edi, 0x27
je 0x104daa3
push ebx
lea ecx, [ebp - 4]
call fcn.0100864e
jmp 0x104db17
push 0x104
lea ecx, [ebp - 4]
call fcn.01007539
xor ecx, ecx
cmp eax, ecx
jne 0x104dad4
lea ecx, [ebp - 4]
call fcn.010061d0
lea ecx, [ebp + 0x24]
call fcn.010061d0
push dword [ebp - 8]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
jmp 0x104d9f6
push eax
push ecx
push ecx
or edi, 0x8000
push edi
push ecx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov edi, eax
test edi, edi
jge 0x104daf8
lea ecx, [ebp - 4]
call fcn.010061d0
jmp 0x104da5f
push 0xffffffffffffffff
lea ecx, [ebp - 4]
call fcn.01008355
mov ecx, dword [ebp - 0xc]
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x10]
call fcn.0104d13c
mov edi, eax
test edi, edi
jl 0x104daeb
push dword [ebp + 0xc]
lea ecx, [ebp + 0x10]
call fcn.010103e4
push ebx
lea ecx, [ebp + 0x14]
call fcn.01010421
push 2
mov ecx, dword [ebp - 0xc]
pop ebx
push dword [ebp + 8]
lea eax, [ebp + 0x20]
push eax
lea eax, [ebp + 0x24]
push eax
push 0
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebp + 0x14]
push eax
lea eax, [ebp + 0x10]
push eax
mov dword [esi], ebx
call fcn.0104d5ec
test eax, eax
jl 0x104dbce
mov ecx, dword [ebp - 0xc]
lea eax, [ebp + 0x10]
push eax
call fcn.0104ccd3
mov edi, eax
test edi, edi
jge 0x104db80
lea ecx, [ebp + 0x14]
call fcn.010061d0
lea ecx, [ebp + 0x10]
call fcn.010061d0
jmp 0x104daeb
mov ecx, dword [ebp - 0xc]
lea eax, [ebp + 0x10]
push eax
call fcn.010143f9
test eax, eax
jne 0x104dbc3
lea ecx, [ebp + 0x14]
call fcn.010061d0
lea ecx, [ebp + 0x10]
call fcn.010061d0
lea ecx, [ebp - 4]
call fcn.010061d0
lea ecx, [ebp + 0x24]
call fcn.010061d0
push dword [ebp - 8]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov esi, 0x80004005
jmp 0x104d9fb
mov dword [esi], 1
jmp 0x104dcdc
and eax, 0xffff
cmp eax, 0x4c7
jne 0x104dbec
mov dword [esi], ebx
jmp 0x104dcdc
push 0
push eax
lea ecx, [ebp + 0x24]
call fcn.0104cd67
push 0x7c
lea ecx, [ebp + 0x24]
call fcn.0104cbe9
cmp eax, 0xffffffff
jne 0x104dbe1
push 0x58
pop edi
push edi
lea eax, [ebp - 0x64]
push 0
push eax
call sub.msvcrt.dll_memset
mov eax, dword [ebp - 8]
xor ecx, ecx
add esp, 0xc
mov word [eax], cx
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], 0x3f7a0
mov dword [ebp - 0x30], 0x881004
cmp byte [ebp + 0x18], cl
je 0x104dc35
mov dword [ebp - 0x30], 0x881204
mov eax, dword [ebp + 8]
and dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 4]
cmp dword [eax - 8], 0
je 0x104dc51
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x64]
push eax
mov dword [esi], ebx
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
test eax, eax
je 0x104dcdc
push dword [ebp - 0x48]
lea ecx, [ebp + 0x18]
mov dword [esi], 1
call fcn.01010421
mov ecx, dword [ebp - 0xc]
lea eax, [ebp + 0x18]
push eax
call fcn.0104ccd3
mov esi, eax
test esi, esi
jge 0x104dcba
lea ecx, [ebp + 0x18]
call fcn.010061d0
lea ecx, [ebp + 0x14]
call fcn.010061d0
lea ecx, [ebp + 0x10]
call fcn.010061d0
lea ecx, [ebp - 4]
call fcn.010061d0
lea ecx, [ebp + 0x24]
call fcn.010061d0
push dword [ebp - 8]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
jmp 0x104d9fb
mov ecx, dword [ebp - 0xc]
lea eax, [ebp + 0x18]
push eax
call fcn.010143f9
lea ecx, [ebp + 0x18]
test eax, eax
jne 0x104dcd7
call fcn.010061d0
jmp 0x104db90
call fcn.010061d0
lea ecx, [ebp + 0x14]
call fcn.010061d0
lea ecx, [ebp + 0x10]
call fcn.010061d0
lea ecx, [ebp - 4]
call fcn.010061d0
lea ecx, [ebp + 0x24]
call fcn.010061d0
push dword [ebp - 8]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
xor esi, esi
jmp 0x104d9fb