Function at 0x4fcb38
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffc04
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x3fc], ecx
mov dword [ebp - 0x3f8], ecx
mov dword [ebp - 0x3f4], ecx
mov dword [ebp - 0x3f0], ecx
mov dword [ebp - 0x3ec], ecx
mov dword [ebp - 0x3e8], ecx
mov dword [ebp - 0x3e4], ecx
mov dword [ebp - 0x2dc], ecx
mov dword [ebp - 0x2e0], ecx
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.00404258
lea edi, [ebp - 0x1d4]
xor eax, eax
push ebp
push 0x4fce54
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x104
lea eax, [ebp - 0x2d8]
push eax
call sub.kernel32.dll_GetWindowsDirectoryA
test eax, eax
jne 0x4fcbd3
push 0x30
push 0x4fce64
push 0x4fce78
mov eax, ebx
call fcn.004388a8
push eax
call sub.user32.dll_MessageBoxA_1
jmp 0x4fce19
mov eax, dword [ebp - 4]
mov edx, 0x4fce98
call fcn.004041b4
jne 0x4fcbea
mov esi, dword [ebx + 0x318]
jmp 0x4fcbf0
mov esi, dword [ebx + 0x320]
mov eax, dword [esi + 0x20c]
call fcn.00462710
lea eax, [ebp - 0x3e0]
lea edx, [ebp - 0x2d8]
call fcn.00402eb4
lea edx, [ebp - 0x3e0]
lea eax, [ebp - 0x2e0]
call fcn.00404048
push dword [ebp - 0x2e0]
push 0x4fceac
push dword [ebp - 4]
lea eax, [ebp - 0x2dc]
mov edx, 3
call fcn.00404164
mov edx, dword [ebp - 0x2dc]
mov eax, edi
call fcn.004062aa
mov eax, edi
call fcn.004066bb
call fcn.00402884
jmp 0x4fcdcc
lea edx, [ebp - 8]
mov eax, edi
call fcn.00404464
mov eax, edi
call fcn.00406658
call fcn.00402884
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 8]
call fcn.004091ac
mov eax, dword [ebp - 0x3e4]
call fcn.00404268
call fcn.00409ca8
mov edx, eax
lea eax, [ebp - 8]
call fcn.00403fdc
mov eax, dword [ebp - 8]
call fcn.00404268
mov edx, eax
lea eax, [ebp - 0x3e8]
call fcn.00403fdc
mov edx, dword [ebp - 0x3e8]
mov eax, 0x4fceb8
call fcn.00404390
dec eax
je 0x4fcd0f
mov eax, dword [ebp - 8]
call fcn.00404268
mov edx, eax
lea eax, [ebp - 0x3ec]
call fcn.00403fdc
mov edx, dword [ebp - 0x3ec]
mov eax, 0x4fcec8
call fcn.00404390
dec eax
je 0x4fcd0f
mov eax, dword [ebp - 8]
call fcn.00404268
mov edx, eax
lea eax, [ebp - 0x3f0]
call fcn.00403fdc
mov edx, dword [ebp - 0x3f0]
mov eax, 0x4fced4
call fcn.00404390
dec eax
jne 0x4fcd34
mov eax, dword [esi + 0x20c]
call fcn.004625dc
mov ebx, eax
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004620b0
mov dl, 1
mov eax, ebx
call fcn.00462054
jmp 0x4fcdcc
mov eax, dword [ebp - 8]
call fcn.00404268
mov edx, eax
lea eax, [ebp - 0x3f4]
call fcn.00403fdc
mov edx, dword [ebp - 0x3f4]
mov eax, 0x4fcee4
call fcn.00404390
dec eax
je 0x4fcdac
mov eax, dword [ebp - 8]
call fcn.00404268
mov edx, eax
lea eax, [ebp - 0x3f8]
call fcn.00403fdc
mov edx, dword [ebp - 0x3f8]
mov eax, 0x4fcef4
call fcn.00404390
dec eax
je 0x4fcdac
mov eax, dword [ebp - 8]
call fcn.00404268
mov edx, eax
lea eax, [ebp - 0x3fc]
call fcn.00403fdc
mov edx, dword [ebp - 0x3fc]
mov eax, 0x4fcf04
call fcn.00404390
dec eax
jne 0x4fcdcc
mov eax, dword [esi + 0x20c]
call fcn.004625dc
mov ebx, eax
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004620b0
xor edx, edx
mov eax, ebx
call fcn.00462054
mov eax, edi
call fcn.00406450
call fcn.00402884
test al, al
je 0x4fcc59
mov eax, edi
call fcn.00406414
call fcn.00402884
mov eax, dword [esi + 0x20c]
call fcn.0046261c
test eax, eax
jne 0x4fce19
xor edx, edx
mov eax, esi
call fcn.00463dec
mov eax, dword [esi + 0x20c]
call fcn.004625dc
mov edx, 0x4fcf14
call fcn.004620b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4fce5b
lea eax, [ebp - 0x3fc]
mov edx, 7
call fcn.00403e48
lea eax, [ebp - 0x2e0]
mov edx, 2
call fcn.00403e48
lea eax, [ebp - 8]
mov edx, 2
call fcn.00403e48
ret