Function at 0x4640a1
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff7ac
push ebx
push esi
push edi
mov edi, eax
mov ebx, dword [ebp + 8]
xor edx, edx
mov dword [ebp - 0xc], edx
mov ecx, dword [ebx]
cmp ecx, dword [0x4c2d60]
je 0x4640c8
xor eax, eax
jmp 0x464318
mov edx, dword [ebx + 8]
sub edx, 0xfffffe67
je 0x4641a3
sub edx, 4
je 0x4642b8
sub edx, 3
je 0x4641e5
sub edx, 0x18d
jne 0x464316
lea eax, [ebp - 8]
push eax
call sub.USER32.DLL_GetCursorPos
lea ecx, [ebp - 8]
push ecx
push edi
call sub.USER32.DLL_ScreenToClient
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1c], eax
push edx
push 0
push 0x1111
push dword [0x4c2d60]
call sub.USER32.DLL_SendMessageA
cmp dword [ebp - 0x14], 0
je 0x464316
push dword [ebp - 0x14]
push 9
push 0x110b
push dword [0x4c2d60]
call sub.USER32.DLL_SendMessageA
test byte [ebp - 0x18], 4
je 0x464316
lea ecx, [ebp - 8]
push ecx
push edi
call sub.USER32.DLL_ClientToScreen
mov dword [ebp - 0x48], 4
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x48]
mov dword [ebp - 0x44], eax
push edx
push 0
push 0x110c
push dword [0x4c2d60]
call sub.USER32.DLL_SendMessageA
test eax, eax
jne 0x46418b
xor eax, eax
jmp 0x464318
mov esi, dword [ebp - 0x24]
lea eax, [ebp - 8]
push eax
mov ecx, dword [esi + 4]
mov edx, dword [esi]
mov eax, edi
call fcn.00463f04
jmp 0x464316
test eax, eax
jl 0x464316
mov esi, dword [ebx + 0x34]
mov eax, dword [esi]
push eax
mov edx, dword [eax]
call dword [edx + 8]
push dword [esi + 4]
mov ecx, dword [0x4c3174]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x14]
push dword [esi + 8]
mov edx, dword [0x4c3174]
push edx
mov ecx, dword [edx]
call dword [ecx + 0x14]
push esi
mov eax, dword [0x4c3174]
push eax
mov edx, dword [eax]
call dword [edx + 0x14]
jmp 0x464316
cmp dword [0x49fcfc], 0
jne 0x464316
mov esi, dword [ebx + 0x5c]
test esi, esi
je 0x464316
lea eax, [ebp - 0x454]
push eax
push dword [esi + 8]
call sub.SHELL32.DLL_SHGetPathFromIDListA
test eax, eax
je 0x464316
cmp byte [0x4c2d70], 0
jne 0x464246
lea edx, [ebp - 0x10]
push edx
push 0x13
push 0
call sub.SHELL32.DLL_SHGetSpecialFolderLocation
push 0x4c2d70
push dword [ebp - 0x10]
call sub.SHELL32.DLL_SHGetPathFromIDListA
push dword [ebp - 0x10]
mov ecx, dword [0x4c3174]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x14]
push 0x4c2d70
call fcn.0048d788
pop ecx
push eax
lea edx, [ebp - 0x454]
push edx
push 0x4c2d70
call fcn.0048d854
add esp, 0xc
test eax, eax
jne 0x464297
lea ecx, [ebp - 0x854]
mov edx, esi
push ecx
lea ecx, [esi + 4]
mov eax, edi
call fcn.00464a9c
test al, al
je 0x464297
lea eax, [ebp - 0x854]
push eax
lea edx, [ebp - 0x454]
push edx
call fcn.0048d758
add esp, 8
push 0
lea ecx, [ebp - 0x454]
push ecx
push 0x40a
push dword [0x4c2d60]
call sub.USER32.DLL_GetParent
push eax
call sub.USER32.DLL_SendMessageA
jmp 0x464316
test byte [ebx + 0x40], 0x40
jne 0x464316
mov esi, dword [ebx + 0x5c]
lea eax, [ebp - 0xc]
push eax
push 0x4a2f98
push 0
push dword [esi + 4]
mov edx, dword [esi]
push edx
mov ecx, dword [edx]
call dword [ecx + 0x14]
test eax, eax
jl 0x4642ee
push dword [ebx + 0x3c]
mov ecx, dword [esi + 8]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x4c2d60]
call fcn.00464600
mov eax, dword [ebx + 0x3c]
xor edx, edx
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x50], 0x4647e6
mov dword [ebp - 0x4c], edx
push ecx
push 0
push 0x1115
push dword [0x4c2d60]
call sub.USER32.DLL_SendMessageA
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4