Function at 0x46002c
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1698
call fcn.0059fbd0
push ebx
push esi
push edi
lea eax, [ebp - 0xc70]
push eax
call fcn.0045ed23
xor edi, edi
cmp dword [str.Crescendo], edi
mov dword [ebp - 8], edi
mov esi, 0x104
mov ebx, SysReAllocString
je 0x460365
mov dword [ebp - 4], str.Crescendo
cmp byte [edi + 0x6187c0], 0
jne 0x46034a
mov eax, dword [ebp - 4]
push dword [eax]
call fcn.0045ed50
test al, al
jne 0x46034a
mov edi, dword [edi + 0x6187bc]
push edi
mov dword [ebp - 0xc], edi
push str.SoftwareClasses._s
lea edi, [ebp - 0x248]
call fcn.004a9039
pop ecx
pop ecx
mov edi, 0x5b07d8
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
lea eax, [ebp - 0x450]
call fcn.00401132
cmp word [ebp - 0x450], 0
jne 0x4601c3
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0x450]
call fcn.00401132
cmp word [ebp - 0x450], 0
jne 0x4601c3
push dword [ebp - 0xc]
lea edi, [ebp - 0x1490]
push str.softwaremicrosoftwindowscurrentversionexplorer_fileexts._suserchoice
call fcn.004a9039
pop ecx
pop ecx
push 0x5b07d8
push str.Progid
mov eax, edi
push eax
push ebx
lea eax, [ebp - 0x860]
call fcn.00401132
cmp word [ebp - 0x860], 0
je 0x460192
mov eax, edi
push str.Applications_
push eax
call fcn.0058fe77
test eax, eax
pop ecx
pop ecx
jne 0x46034a
lea eax, [ebp - 0x860]
push eax
push str.SoftwareClasses_s
lea edi, [ebp - 0xe78]
call fcn.004a9039
pop ecx
pop ecx
mov eax, edi
push eax
push ebx
call fcn.00446b99
test al, al
jne 0x460180
mov eax, edi
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00446b99
test al, al
je 0x46034a
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x860]
call fcn.00401016
cmp word [ebp - 0x450], 0
jne 0x4601c3
push dword [ebp - 0xc]
lea edi, [ebp - 0x450]
push str._sfile
call fcn.004a9039
pop ecx
pop ecx
mov eax, edi
push eax
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
call fcn.00446aee
lea eax, [ebp - 0x450]
push eax
push str.SoftwareClasses_s
lea edi, [ebp - 0x248]
call fcn.004a9039
pop ecx
pop ecx
mov edi, 0x5b07d8
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
lea eax, [ebp - 0xa68]
call fcn.00401132
cmp word [ebp - 0xa68], 0
jne 0x460239
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0xa68]
call fcn.00401132
cmp word [ebp - 0xa68], 0
jne 0x460239
push 0x5df010
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
call fcn.00446aee
lea eax, [ebp - 0x248]
push eax
push str._s_shell
lea edi, [ebp - 0x658]
call fcn.004a9039
pop ecx
pop ecx
push 0x5b07d8
push 0
mov eax, edi
push eax
push ebx
lea eax, [ebp - 0xa68]
call fcn.00401132
cmp word [ebp - 0xa68], 0
jne 0x46034a
push 0x5b07d8
push 0
mov eax, edi
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0xa68]
call fcn.00401132
cmp word [ebp - 0xa68], 0
jne 0x46034a
lea eax, [ebp - 0x248]
push eax
push str._s_shellopen
lea edi, [ebp - 0x1288]
call fcn.004a9039
pop ecx
pop ecx
mov eax, edi
push eax
push ebx
call fcn.00446b99
test al, al
jne 0x46034a
mov eax, edi
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00446b99
test al, al
jne 0x46034a
mov eax, dword [ebp - 4]
push dword [eax]
lea eax, [ebp - 0xc70]
push eax
push str.__s___extfind__s____L_
lea edi, [ebp - 0x1698]
call fcn.004a9039
lea eax, [ebp - 0x248]
push eax
push str._s_shellopencommand
lea edi, [ebp - 0x658]
call fcn.004a9039
add esp, 0x14
lea eax, [ebp - 0x1698]
push eax
push 0
mov eax, edi
push eax
push ebx
call fcn.00446aee
lea eax, [ebp - 0x248]
push eax
push str._sDefaultIcon
lea edi, [ebp - 0x1080]
call fcn.004a9039
pop ecx
pop ecx
push str._SystemRoot__system32_shell32.dll_19
push 0
mov eax, edi
push eax
push ebx
call fcn.00446aee
inc dword [ebp - 8]
mov edi, dword [ebp - 8]
imul edi, edi, 9
lea eax, [edi + 0x6187b8]
cmp dword [eax], 0
mov dword [ebp - 4], eax
jne 0x46006a
call fcn.004a5dca
neg al
sbb eax, eax
neg eax
xor edi, edi
add eax, ebx
cmp dword [0x61884c], edi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], edi
je 0x460737
mov dword [ebp - 0xc], 0x61884c
mov dword [ebp - 4], edi
mov dword [ebp - 0x14], 0x618854
mov eax, dword [ebp - 0xc]
push dword [eax]
call fcn.0045ed50
test al, al
jne 0x460716
mov eax, dword [ebp - 0x14]
cmp dword [eax], edi
je 0x460716
mov ecx, dword [ebp - 4]
lea ecx, [ecx + 0x618854]
mov dword [ebp - 0x1c], ecx
mov eax, dword [eax]
push eax
push str.SoftwareClasses._s
lea edi, [ebp - 0x248]
mov dword [ebp - 8], eax
call fcn.004a9039
pop ecx
pop ecx
mov edi, 0x5b07d8
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
lea eax, [ebp - 0x450]
call fcn.00401132
cmp word [ebp - 0x450], 0
jne 0x4604fa
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0x450]
call fcn.00401132
cmp word [ebp - 0x450], 0
jne 0x4604fa
push dword [ebp - 8]
lea edi, [ebp - 0x1080]
push str.softwaremicrosoftwindowscurrentversionexplorer_fileexts._suserchoice
call fcn.004a9039
pop ecx
pop ecx
push 0x5b07d8
push str.Progid
mov eax, edi
push eax
push ebx
lea eax, [ebp - 0x658]
call fcn.00401132
cmp word [ebp - 0x658], 0
je 0x4604c9
lea eax, [ebp - 0x658]
push str.Applications_
push eax
call fcn.0058fe77
test eax, eax
pop ecx
pop ecx
jne 0x460702
lea eax, [ebp - 0x658]
push eax
push str.SoftwareClasses_s
lea edi, [ebp - 0x1288]
call fcn.004a9039
pop ecx
pop ecx
mov eax, edi
push eax
push ebx
call fcn.00446b99
test al, al
jne 0x4604b7
mov eax, edi
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00446b99
test al, al
je 0x460702
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x658]
call fcn.00401016
cmp word [ebp - 0x450], 0
jne 0x4604fa
push dword [ebp - 8]
lea edi, [ebp - 0x450]
push str._sfile
call fcn.004a9039
pop ecx
pop ecx
mov eax, edi
push eax
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
call fcn.00446aee
mov eax, dword [ebp - 0xc]
push dword [eax]
lea eax, [ebp - 0xc70]
push eax
push str.__s___extfind__s____L_
lea edi, [ebp - 0xe78]
call fcn.004a9039
mov eax, dword [ebp - 4]
push dword [eax + 0x618850]
lea eax, [ebp - 0x450]
push eax
push str.SoftwareClasses_sShell_scommand
lea edi, [ebp - 0x248]
call fcn.004a9039
add esp, 0x18
lea eax, [ebp - 0xe78]
push eax
push 0
mov eax, edi
push eax
push ebx
call fcn.00446aee
mov eax, dword [ebp - 4]
push dword [eax + 0x618850]
lea eax, [ebp - 0x450]
push eax
push str.SoftwareClasses_sShell_s
call fcn.004a9039
mov edi, dword [ebp - 4]
add esp, 0xc
push dword [edi + 0x618848]
lea eax, [ebp - 0x248]
push 0
push eax
push ebx
call fcn.00446aee
push dword [edi + 0x618850]
lea edi, [ebp - 0x248]
push dword [ebp - 8]
push str.SoftwareClassesSystemFileAssociations._sShell_scommand
call fcn.004a9039
add esp, 0xc
lea eax, [ebp - 0xe78]
push eax
push 0
mov eax, edi
push eax
push dword [ebp - 0x18]
call fcn.00446aee
mov eax, dword [ebp - 4]
push dword [eax + 0x618850]
push dword [ebp - 8]
push str.SoftwareClassesSystemFileAssociations._sShell_s
call fcn.004a9039
mov eax, dword [ebp - 4]
add esp, 0xc
push dword [eax + 0x618848]
mov eax, edi
push 0
push eax
push dword [ebp - 0x18]
call fcn.00446aee
lea eax, [ebp - 0x450]
push eax
push str.SoftwareClasses_sShell
call fcn.004a9039
pop ecx
pop ecx
mov edi, 0x5b07d8
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
lea eax, [ebp - 0x860]
call fcn.00401132
cmp word [ebp - 0x860], 0
jne 0x460691
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0x860]
call fcn.00401132
xor edi, edi
cmp word [ebp - 0x860], di
jne 0x460691
mov eax, 0x5d9d34
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], str.docx
mov dword [ebp - 0x38], 0x5d9d64
mov dword [ebp - 0x34], 0x5df2a8
mov dword [ebp - 0x30], str.xlsx
mov dword [ebp - 0x2c], 0x5d9d2c
mov dword [ebp - 0x28], 0x5df2bc
mov dword [ebp - 0x24], str.pptx
mov dword [ebp - 0x20], edi
mov ecx, dword [ebp - 8]
call fcn.0040106a
test eax, eax
je 0x4607d4
mov eax, dword [ebp + edi*4 - 0x3c]
inc edi
test eax, eax
jne 0x460678
lea eax, [ebp - 0x450]
push eax
push str.SoftwareClasses_sDefaultIcon
lea edi, [ebp - 0x248]
call fcn.004a9039
pop ecx
pop ecx
push 0x5b07d8
push 0
mov eax, edi
push eax
push ebx
lea eax, [ebp - 0x658]
call fcn.00401132
cmp word [ebp - 0x658], 0
jne 0x460702
push 0x5b07d8
push 0
mov eax, edi
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0x658]
call fcn.00401132
cmp word [ebp - 0x658], 0
jne 0x460702
push str._SystemRoot__system32_shell32.dll_19
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
call fcn.00446aee
mov eax, dword [ebp - 0x1c]
add eax, 4
cmp dword [eax], 0
mov dword [ebp - 0x1c], eax
jne 0x4603c0
xor edi, edi
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
add dword [ebp - 0x14], 0x5c
imul eax, eax, 0x5c
mov dword [ebp - 4], eax
lea eax, [eax + 0x61884c]
cmp dword [eax], edi
mov dword [ebp - 0xc], eax
jne 0x460397
call fcn.00401340
test al, al
je 0x460761
lea eax, [ebp - 0xc70]
push eax
call fcn.0045f672
call fcn.0040136d
test al, al
je 0x460761
lea eax, [ebp - 0xc70]
push eax
call fcn.0045f7f7
lea eax, [ebp - 0xc70]
push eax
call fcn.0045f8bc
lea eax, [ebp - 0x860]
push eax
push edi
push edi
push 6
push edi
mov word [ebp - 0x860], di
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
cmp word [ebp - 0x860], di
je 0x4607bd
push str..lnk
push 0x5df2d0
lea eax, [ebp - 0x860]
push eax
lea eax, [ebp - 0x1080]
push eax
call fcn.004a2dab
push str.https:__www.nch.com.au_ko_index.html
lea eax, [ebp - 0x1080]
push eax
call fcn.004a640e
push edi
push edi
push 0x2000
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
pop edi
pop esi
pop ebx
leave
ret
push 0x5dadf8
jmp 0x4606f3