Function at 0x464231
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff7ac
push ebx
push esi
push edi
mov edi, eax
mov ebx, dword [ebp + 8]
xor edx, edx
mov dword [ebp - 0xc], edx
mov ecx, dword [ebx]
cmp ecx, dword [0x4c0dd0]
je 0x464258
xor eax, eax
jmp 0x4644a8
mov edx, dword [ebx + 8]
sub edx, 0xfffffe67
je 0x464333
sub edx, 4
je 0x464448
sub edx, 3
je 0x464375
sub edx, 0x18d
jne 0x4644a6
lea eax, [ebp - 8]
push eax
call sub.USER32.DLL_GetCursorPos
lea ecx, [ebp - 8]
push ecx
push edi
call sub.USER32.DLL_ScreenToClient
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1c], eax
push edx
push 0
push 0x1111
push dword [0x4c0dd0]
call sub.USER32.DLL_SendMessageA
cmp dword [ebp - 0x14], 0
je 0x4644a6
push dword [ebp - 0x14]
push 9
push 0x110b
push dword [0x4c0dd0]
call sub.USER32.DLL_SendMessageA
test byte [ebp - 0x18], 4
je 0x4644a6
lea ecx, [ebp - 8]
push ecx
push edi
call sub.USER32.DLL_ClientToScreen
mov dword [ebp - 0x48], 4
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x48]
mov dword [ebp - 0x44], eax
push edx
push 0
push 0x110c
push dword [0x4c0dd0]
call sub.USER32.DLL_SendMessageA
test eax, eax
jne 0x46431b
xor eax, eax
jmp 0x4644a8
mov esi, dword [ebp - 0x24]
lea eax, [ebp - 8]
push eax
mov ecx, dword [esi + 4]
mov edx, dword [esi]
mov eax, edi
call fcn.00464094
jmp 0x4644a6
test eax, eax
jl 0x4644a6
mov esi, dword [ebx + 0x34]
mov eax, dword [esi]
push eax
mov edx, dword [eax]
call dword [edx + 8]
push dword [esi + 4]
mov ecx, dword [0x4c11e4]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x14]
push dword [esi + 8]
mov edx, dword [0x4c11e4]
push edx
mov ecx, dword [edx]
call dword [ecx + 0x14]
push esi
mov eax, dword [0x4c11e4]
push eax
mov edx, dword [eax]
call dword [edx + 0x14]
jmp 0x4644a6
cmp dword [0x49fd6c], 0
jne 0x4644a6
mov esi, dword [ebx + 0x5c]
test esi, esi
je 0x4644a6
lea eax, [ebp - 0x454]
push eax
push dword [esi + 8]
call sub.SHELL32.DLL_SHGetPathFromIDListA
test eax, eax
je 0x4644a6
cmp byte [0x4c0de0], 0
jne 0x4643d6
lea edx, [ebp - 0x10]
push edx
push 0x13
push 0
call sub.SHELL32.DLL_SHGetSpecialFolderLocation
push 0x4c0de0
push dword [ebp - 0x10]
call sub.SHELL32.DLL_SHGetPathFromIDListA
push dword [ebp - 0x10]
mov ecx, dword [0x4c11e4]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x14]
push 0x4c0de0
call fcn.0048d918
pop ecx
push eax
lea edx, [ebp - 0x454]
push edx
push 0x4c0de0
call fcn.0048d9e4
add esp, 0xc
test eax, eax
jne 0x464427
lea ecx, [ebp - 0x854]
mov edx, esi
push ecx
lea ecx, [esi + 4]
mov eax, edi
call fcn.00464c2c
test al, al
je 0x464427
lea eax, [ebp - 0x854]
push eax
lea edx, [ebp - 0x454]
push edx
call fcn.0048d8e8
add esp, 8
push 0
lea ecx, [ebp - 0x454]
push ecx
push 0x40a
push dword [0x4c0dd0]
call sub.USER32.DLL_GetParent
push eax
call sub.USER32.DLL_SendMessageA
jmp 0x4644a6
test byte [ebx + 0x40], 0x40
jne 0x4644a6
mov esi, dword [ebx + 0x5c]
lea eax, [ebp - 0xc]
push eax
push 0x4a3008
push 0
push dword [esi + 4]
mov edx, dword [esi]
push edx
mov ecx, dword [edx]
call dword [ecx + 0x14]
test eax, eax
jl 0x46447e
push dword [ebx + 0x3c]
mov ecx, dword [esi + 8]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x4c0dd0]
call fcn.00464790
mov eax, dword [ebx + 0x3c]
xor edx, edx
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x50], 0x464976
mov dword [ebp - 0x4c], edx
push ecx
push 0
push 0x1115
push dword [0x4c0dd0]
call sub.USER32.DLL_SendMessageA
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4