Function at 0x4c3725
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b8
push ebx
push esi
push edi
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x11c], 0
push 0x105
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
lea eax, [ebp - 0x10c]
push eax
call fcn.00523694
add esp, 4
movsx eax, byte [ebp + eax - 0x10d]
cmp eax, 0x5c
je 0x4c37b2
lea eax, [ebp - 0x10c]
push eax
call fcn.00523694
add esp, 4
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov byte [ebp + eax - 0x10c], 0x5c
mov eax, dword [ebp - 0x118]
mov byte [ebp + eax - 0x10b], 0
push 0x531f7c
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push 0x200
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004e483d
add esp, 0xc
push 0xc8
push 6
push 0
lea eax, [ebp - 0x10c]
push eax
call fcn.00477b6f
add esp, 0x10
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x4c3811
xor eax, eax
jmp 0x4c3b08
mov dword [ebp - 0x130], 1
lea eax, [ebp - 0x128]
push eax
push 0
push 0x531ae8
lea eax, [ebp - 0x10c]
push eax
call fcn.00477c64
add esp, 0x10
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x4c3850
jmp 0x4c3aa3
mov dword [ebp - 0x110], 1
push 0x64
mov eax, dword [0x531ae8]
push eax
call fcn.004751da
add esp, 8
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x4c3882
jmp 0x4c3aa3
push 0x67
mov eax, dword [0x531ae8]
push eax
call fcn.004751da
add esp, 8
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x4c38aa
jmp 0x4c3aa3
push 0x68
mov eax, dword [0x531ae8]
push eax
call fcn.004751da
add esp, 8
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x4c38d2
jmp 0x4c3aa3
push 0x65
mov eax, dword [0x531ae8]
push eax
call fcn.004751da
add esp, 8
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x4c38fa
jmp 0x4c3aa3
push 0x66
mov eax, dword [0x531ae8]
push eax
call fcn.004751da
add esp, 8
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x4c3922
jmp 0x4c3aa3
push 0x6f
mov eax, dword [0x531ae8]
push eax
call fcn.004751da
add esp, 8
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x4c394a
jmp 0x4c3aa3
lea eax, [ebp - 0x12c]
push eax
push 0x818
push 1
push 0x64
mov eax, dword [0x531ae8]
push eax
call fcn.004752d5
add esp, 0x14
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x4c3980
jmp 0x4c3aa3
lea eax, [ebp - 0x124]
push eax
push 0x532
push 0x70
push 0x64
mov eax, dword [0x531ae8]
push eax
call fcn.004752d5
add esp, 0x14
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x4c39b6
jmp 0x4c3aa3
mov eax, dword [ebp - 0x124]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x10], 0
mov dword [ebp - 0x120], 0
jmp 0x4c39e5
inc dword [ebp - 0x120]
cmp dword [ebp - 0x120], 4
jge 0x4c3a12
mov eax, dword [ebp - 0x120]
mov ecx, eax
shl eax, 6
add eax, ecx
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 4]
mov byte [ecx + eax*2 + 0x11a], 0
jmp 0x4c39df
mov eax, dword [ebp - 0x124]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [ebp - 0x124]
push eax
call fcn.004796fa
add esp, 4
mov eax, dword [ebp - 0x124]
push eax
call fcn.0047947b
add esp, 4
mov eax, dword [ebp - 0x12c]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
push eax
call fcn.004c2e99
add esp, 4
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x12c]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [ebp - 0x12c]
push eax
call fcn.0047947b
add esp, 4
cmp dword [ebp - 0x11c], 0
je 0x4c3a93
jmp 0x4c3aa3
push 0
mov eax, dword [0x531ae8]
push eax
call fcn.00477cca
add esp, 8
cmp dword [ebp - 0x11c], 0
je 0x4c3afd
cmp dword [ebp - 0x110], 0
je 0x4c3acb
mov eax, dword [0x531ae8]
push eax
call fcn.00477edb
add esp, 4
cmp dword [ebp - 0x130], 0
je 0x4c3af3
push 0x200
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.004e483d
add esp, 0xc
mov dword [0x531ae8], 0xffffffff
mov eax, dword [ebp - 0x11c]
jmp 0x4c3b08
pop edi
pop esi
pop ebx
leave
ret