Function at 0x4a9f10
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x8e84
call fcn.006ab750
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor edi, edi
lea ecx, [esp + 0x868]
push ecx
push edi
push edi
push 0x1a
lea eax, [ebx + 0x50]
push edi
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], eax
mov word [esp + 0x87c], di
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
push str..dmp
push 0x6bc140
lea edx, [esp + 0x258]
push edx
lea eax, [esp + 0x874]
call fcn.004ad3a0
mov eax, dword [ebx + 0x31c]
push eax
push edi
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ecx, dword [ebx + 0x940]
push ecx
mov ecx, dword [ebx + 0x31c]
mov esi, eax
mov eax, dword [ebx + 0x320]
lea edx, [esp + 0x254]
push edx
push eax
push ecx
push esi
lea eax, [esp + 0x28]
call fcn.004a9350
test al, al
jne 0x4a9fb4
mov word [esp + 0x250], di
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov word [esp + 0x45a], di
push str.Settings
push str.SoftwareNCH_SoftwareDebut_s
mov esi, 0x104
lea edi, [esp + 0x50]
mov word [esp + 0x460], 0x31
call fcn.004af0d0
add esp, 8
push str.VersionCheckAfterCrash
push SysReAllocStringLen
lea esi, [esp + 0x460]
mov edx, edi
call fcn.004af710
lea edx, [ebx + 0x52c]
test edx, edx
je 0x4aa217
call fcn.004b6970
push str.Abnormal_Execution_Problem
push str.Debut_Video_Capture_Software_has_crashed_because_of_an_abnormal_exception._r_n_r_nHelp_us_fix_this_problem_by_clicking_Report_Bug_below__then_sharing_the_details_with_our_developers._r_n_r_nThank_you_for_your_help_
mov ecx, 0x6d13cc
mov eax, str.Report_Bug
call fcn.004f43c0
test al, al
je 0x4aa217
cmp word [esp + 0x250], 0
jne 0x4aa04e
mov word [esp + 0x660], 0
jmp 0x4aa129
push 0
call fcn.0069c84d
add esp, 4
lea esi, [esp + 0x10]
mov dword [esp + 0x10], eax
call fcn.004976e0
mov edi, dword [esp + 0x10]
lea esi, [esp + 0x48]
mov eax, edi
call fcn.004a75b0
test edi, edi
mov word [esp + 0x458], 0
je 0x4aa0c0
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x28]
push ecx
mov dword [esp + 0x18], edi
mov dword [esp + 0x4c], 0xffffffff
call fcn.0069c202
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
push edx
push eax
push ecx
push str._.2d__.2d__.2d
lea edx, [esp + 0x470]
call fcn.00401000
add esp, 0x18
mov edx, dword fs:[0x2c]
mov eax, dword [edx]
cmp byte [eax + 1], 0
jne 0x4aa0d4
call fcn.004af060
call fcn.0069d16b
cdq
mov ecx, 0x2710
idiv ecx
lea eax, [esp + 0x250]
mov esi, edx
call fcn.00401c60
test eax, eax
push esi
jne 0x4aa108
lea edx, [esp + 0x45c]
push edx
lea eax, [esp + 0x50]
push eax
push str.zero__s__s__04d.dmp
jmp 0x4aa11a
lea ecx, [esp + 0x45c]
push ecx
lea edx, [esp + 0x50]
push edx
push str._s__s__04d.dmp
lea edx, [esp + 0x670]
call fcn.00401000
add esp, 0x10
mov edx, dword [ebx + 0x93c]
lea eax, [esp + 0x660]
push eax
lea ecx, [esp + 0xe84]
push ecx
mov ecx, dword [ebx + 0x940]
call fcn.004a9e30
push str.Software
push str.SoftwareNCH_SoftwareDebut_s
mov esi, 0x104
lea edi, [esp + 0x50]
call fcn.004af0d0
add esp, 8
lea edx, [esp + 0xa70]
push edx
push 0x6bc0cc
push 0x6ccc50
mov ecx, edi
mov edx, SysReAllocStringLen
call fcn.004af7e0
lea eax, [esp + 0xc78]
push eax
call fcn.004abbc0
lea ecx, [esp + 0xc78]
push ecx
lea edx, [esp + 0xe84]
push edx
lea eax, [esp + 0xa78]
push eax
add ebx, 0x734
push ebx
push str.https:__www.nch.com.au_software_bug.html_softwareDebutversion10.25xiGUI__siid_sdata_sappbits32rdf_s
mov esi, 0x2002
lea edi, [esp + 0x4e9c]
call fcn.004af0d0
add esp, 0x14
mov esi, edi
call fcn.00401210
cmp word [esp + 0x250], 0
je 0x4aa217
push 0
push str.Uploading_crash_dump_file
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], 0x6dbbf0
call dword [0x6dbc10]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x664]
push edx
lea eax, [esp + 0x258]
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x30]
push edx
call fcn.00541660
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4