Function at 0x411515
Capabilities:
Get common file path

Disassembly:
push ebp
lea ebp, [esp - 0x3ac]
sub esp, 0x42c
mov eax, dword [0x597f54]
xor eax, ebp
mov dword [ebp + 0x3a8], eax
mov eax, dword [ebp + 0x3b4]
push ebx
push esi
mov dword [ebp - 0x78], eax
mov eax, dword [ebp + 0x3b8]
push edi
xor edi, edi
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0x3bc]
push edi
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x70], edi
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
jl 0x4117c4
lea eax, [ebp - 0x70]
push eax
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
jl 0x4117c4
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
lea eax, [ebp - 0x64]
push eax
push 0x17
push edi
call esi
test eax, eax
jge 0x41159c
lea eax, [ebp - 0x64]
push eax
push 2
push edi
call esi
mov ebx, dword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
lea eax, [ebp + 0x2a4]
push eax
push dword [ebp - 0x64]
call ebx
mov eax, dword [ebp - 0x70]
push dword [ebp - 0x64]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
lea eax, [ebp - 0x64]
push eax
push 0x19
push edi
call esi
test eax, eax
jge 0x4115d0
lea eax, [ebp - 0x64]
push eax
push 0x10
push edi
call esi
lea eax, [ebp - 0x60]
push eax
push dword [ebp - 0x64]
call ebx
mov eax, dword [ebp - 0x70]
push dword [ebp - 0x64]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x68]
push eax
push 0x54a8b0
push 1
push edi
push 0x54a8c0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x4117c4
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
lea edx, [ebp - 0x6c]
push edx
push 0x54a900
push eax
call dword [ecx]
test eax, eax
jl 0x4117c4
lea eax, [ebp + 0x2a4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp byte [ebp + eax + 0x2a3], 0x5c
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatA]
je 0x411651
push 0x52f0fc
lea eax, [ebp + 0x2a4]
push eax
call ebx
push dword [ebp - 0x80]
lea eax, [ebp + 0x2a4]
push eax
call ebx
cmp dword [ebp + 0x3c0], edi
mov ebx, dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov esi, 0x1000
je 0x411692
lea eax, [ebp + 0x2a4]
push eax
call fcn.004e51dd
pop ecx
push edi
test eax, eax
lea eax, [ebp + 0x2a4]
push eax
push 1
jne 0x41168f
push 8
jmp 0x411690
push esi
call ebx
cmp dword [ebp + 0x3c4], edi
jne 0x4116a2
cmp dword [ebp + 0x3c8], edi
je 0x4116ac
push edi
lea eax, [ebp - 0x60]
push eax
push 1
push esi
call ebx
mov esi, dword [sym.imp.USER32.dll_LoadStringA]
push 0x40
lea eax, [ebp + 0x1a4]
push eax
push 0x10
push dword [ebp - 0x78]
call esi
push 0x40
lea eax, [ebp + 0xa4]
push eax
push 0x11
push dword [ebp - 0x78]
call esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea eax, [ebp + 0x1a4]
push eax
call esi
test eax, eax
je 0x4117b1
lea eax, [ebp + 0xa4]
push eax
call esi
test eax, eax
je 0x4117b1
mov esi, dword [ebp + 0x3c8]
lea eax, [ebp + 0xa4]
push eax
lea eax, [ebp + 0x1a4]
push eax
push dword [ebp - 0x74]
lea eax, [ebp + 0x2a4]
push dword [ebp - 0x6c]
push dword [ebp - 0x68]
push eax
push dword [ebp + 0x3c0]
push esi
call fcn.004114ce
add esp, 0x20
test eax, eax
je 0x4117c4
cmp dword [ebp + 0x3c4], edi
jne 0x411741
cmp esi, edi
je 0x41178e
lea eax, [ebp + 0xa4]
push eax
lea eax, [ebp + 0x1a4]
push eax
push dword [ebp - 0x74]
lea eax, [ebp - 0x60]
push dword [ebp - 0x6c]
push dword [ebp - 0x68]
push eax
push dword [ebp + 0x3c0]
push esi
call fcn.004114ce
add esp, 0x20
test eax, eax
je 0x4117c4
cmp esi, edi
je 0x41178e
lea eax, [ebp + 0x2a4]
push eax
call fcn.004e51b3
pop ecx
push edi
lea eax, [ebp + 0x2a4]
push eax
push 1
push 2
call ebx
mov eax, dword [ebp - 0x6c]
cmp eax, edi
je 0x41179b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x68]
cmp eax, edi
je 0x4117a8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 0x7c], 1
jmp 0x4117c4
push 0x30
push str.Setup
push str.No_main_application_icon__or_file__was_defined.
push edi
call dword [sym.imp.USER32.dll_MessageBoxA]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [ebp + 0x3a8]
mov eax, dword [ebp - 0x7c]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004e2867
add ebp, 0x3ac
leave
ret