Function at 0x4fcb1c
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffc04
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x3fc], ecx
mov dword [ebp - 0x3f8], ecx
mov dword [ebp - 0x3f4], ecx
mov dword [ebp - 0x3f0], ecx
mov dword [ebp - 0x3ec], ecx
mov dword [ebp - 0x3e8], ecx
mov dword [ebp - 0x3e4], ecx
mov dword [ebp - 0x2dc], ecx
mov dword [ebp - 0x2e0], ecx
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.00404258
lea edi, [ebp - 0x1d4]
xor eax, eax
push ebp
push 0x4fce38
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x104
lea eax, [ebp - 0x2d8]
push eax
call sub.kernel32.dll_GetWindowsDirectoryA
test eax, eax
jne 0x4fcbb7
push 0x30
push 0x4fce48
push 0x4fce5c
mov eax, ebx
call fcn.004388a8
push eax
call sub.user32.dll_MessageBoxA_1
jmp 0x4fcdfd
mov eax, dword [ebp - 4]
mov edx, 0x4fce7c
call fcn.004041b4
jne 0x4fcbce
mov esi, dword [ebx + 0x318]
jmp 0x4fcbd4
mov esi, dword [ebx + 0x320]
mov eax, dword [esi + 0x20c]
call fcn.0046271c
lea eax, [ebp - 0x3e0]
lea edx, [ebp - 0x2d8]
call fcn.00402eb4
lea edx, [ebp - 0x3e0]
lea eax, [ebp - 0x2e0]
call fcn.00404048
push dword [ebp - 0x2e0]
push 0x4fce90
push dword [ebp - 4]
lea eax, [ebp - 0x2dc]
mov edx, 3
call fcn.00404164
mov edx, dword [ebp - 0x2dc]
mov eax, edi
call fcn.004062aa
mov eax, edi
call fcn.004066bb
call fcn.00402884
jmp 0x4fcdb0
lea edx, [ebp - 8]
mov eax, edi
call fcn.00404464
mov eax, edi
call fcn.00406658
call fcn.00402884
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 8]
call fcn.004091ac
mov eax, dword [ebp - 0x3e4]
call fcn.00404268
call fcn.00409ca8
mov edx, eax
lea eax, [ebp - 8]
call fcn.00403fdc
mov eax, dword [ebp - 8]
call fcn.00404268
mov edx, eax
lea eax, [ebp - 0x3e8]
call fcn.00403fdc
mov edx, dword [ebp - 0x3e8]
mov eax, 0x4fce9c
call fcn.00404390
dec eax
je 0x4fccf3
mov eax, dword [ebp - 8]
call fcn.00404268
mov edx, eax
lea eax, [ebp - 0x3ec]
call fcn.00403fdc
mov edx, dword [ebp - 0x3ec]
mov eax, 0x4fceac
call fcn.00404390
dec eax
je 0x4fccf3
mov eax, dword [ebp - 8]
call fcn.00404268
mov edx, eax
lea eax, [ebp - 0x3f0]
call fcn.00403fdc
mov edx, dword [ebp - 0x3f0]
mov eax, 0x4fceb8
call fcn.00404390
dec eax
jne 0x4fcd18
mov eax, dword [esi + 0x20c]
call fcn.004625e8
mov ebx, eax
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004620bc
mov dl, 1
mov eax, ebx
call fcn.00462060
jmp 0x4fcdb0
mov eax, dword [ebp - 8]
call fcn.00404268
mov edx, eax
lea eax, [ebp - 0x3f4]
call fcn.00403fdc
mov edx, dword [ebp - 0x3f4]
mov eax, 0x4fcec8
call fcn.00404390
dec eax
je 0x4fcd90
mov eax, dword [ebp - 8]
call fcn.00404268
mov edx, eax
lea eax, [ebp - 0x3f8]
call fcn.00403fdc
mov edx, dword [ebp - 0x3f8]
mov eax, 0x4fced8
call fcn.00404390
dec eax
je 0x4fcd90
mov eax, dword [ebp - 8]
call fcn.00404268
mov edx, eax
lea eax, [ebp - 0x3fc]
call fcn.00403fdc
mov edx, dword [ebp - 0x3fc]
mov eax, 0x4fcee8
call fcn.00404390
dec eax
jne 0x4fcdb0
mov eax, dword [esi + 0x20c]
call fcn.004625e8
mov ebx, eax
mov edx, dword [ebp - 8]
mov eax, ebx
call fcn.004620bc
xor edx, edx
mov eax, ebx
call fcn.00462060
mov eax, edi
call fcn.00406450
call fcn.00402884
test al, al
je 0x4fcc3d
mov eax, edi
call fcn.00406414
call fcn.00402884
mov eax, dword [esi + 0x20c]
call fcn.00462628
test eax, eax
jne 0x4fcdfd
xor edx, edx
mov eax, esi
call fcn.00463df8
mov eax, dword [esi + 0x20c]
call fcn.004625e8
mov edx, 0x4fcef8
call fcn.004620bc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4fce3f
lea eax, [ebp - 0x3fc]
mov edx, 7
call fcn.00403e48
lea eax, [ebp - 0x2e0]
mov edx, 2
call fcn.00403e48
lea eax, [ebp - 8]
mov edx, 2
call fcn.00403e48
ret