Function at 0x46d2d0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c0
lea eax, [ebp - 0x2c0]
mov edx, str.FriendlyAppName
mov ecx, str.SoftwareClassesApplicationsRdpZapper.exe
push esi
push edi
push 0x297c
push str.Main.c
push 2
push 0x12c
push eax
xor esi, esi
call fcn.004702c0
add esp, 0x14
mov edi, 1
test eax, eax
mov edx, str.FriendlyAppName
cmove esi, edi
push 0x297f
push str.Main.c
push ecx
push 0
push 0x4f26f4
push edi
mov ecx, str.SoftwareClassesApplicationsRdpZapper.exe
call fcn.00470010
add esp, 0x18
push 0x2980
push str.Main.c
push ecx
push 0
push str.__s__0
push dword [0x59174c]
push str.__s__0
push 0
push 0
call fcn.0047f200
add esp, 0x14
xor edx, edx
mov ecx, str.SoftwareClassesApplicationsRdpZapper.exeDefaultIcon
push eax
push edi
call fcn.00470010
add esp, 0x18
push 0x2981
push str.Main.c
push ecx
push 0
push str.__s_____1_
push dword [0x59174c]
push str.__s_____1_
push 0
push 0
call fcn.0047f200
add esp, 0x14
xor edx, edx
mov ecx, str.SoftwareClassesApplicationsRdpZapper.exe_shellopencommand
push eax
push edi
call fcn.00470010
add esp, 0x18
mov edx, str..rdp
push 0x2982
push str.Main.c
push ecx
push 0
push 0x4eb673
push edi
mov ecx, str.SoftwareClassesApplicationsRdpZapper.exeSupportedTypes
call fcn.00470010
add esp, 0x18
mov edx, 0x4f26f4
push 0x2983
push str.Main.c
push ecx
push 0
push str.SoftwareRdpZapperCapabilities
push edi
mov ecx, str.SoftwareRegisteredApplications
call fcn.00470010
add esp, 0x18
push 0x2984
push str.Main.c
push ecx
push 0
push 0x4f26f4
push edi
mov edx, str.ApplicationName
mov ecx, str.SoftwareRdpZapperCapabilities
call fcn.00470010
add esp, 0x18
push 0x2985
push str.Main.c
push ecx
push 0
push str.__s__0
push dword [0x59174c]
push str.__s__0
push 0
push 0
call fcn.0047f200
add esp, 0x14
mov edx, str.ApplicationIcon
mov ecx, str.SoftwareRdpZapperCapabilities
push eax
push edi
call fcn.00470010
add esp, 0x18
mov edx, str.ApplicationDescription
push 0x2986
push str.Main.c
push ecx
push 0
push 0x4f3210
push edi
mov ecx, str.SoftwareRdpZapperCapabilities
call fcn.00470010
add esp, 0x18
mov edx, 0x4f26f4
push 0x2988
push str.Main.c
push ecx
push 0
push 0x4eb673
push 0
mov ecx, str.SoftwareClasses.rdpOpenWithProgids
call fcn.00470010
add esp, 0x18
xor edx, edx
push 0x2989
push str.Main.c
push ecx
push 0
push 0x4f26f4
push edi
mov ecx, str.SoftwareClassesRdpZapper
call fcn.00470010
add esp, 0x18
lea eax, [ebp - 0x194]
push 0x12b
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
xor edx, edx
mov al, 0x44
nop dword [eax]
lea ecx, [eax - 0x20]
cmp cl, 0x5e
ja 0x46d4f1
movsx ecx, al
mov al, byte [ecx + 0x4eecc8]
mov byte [ebp + edx - 0x68], al
inc edx
mov al, byte [edx + str.D0F0Yw_]
test al, al
jne 0x46d4e0
push 0x298d
push str.Main.c
push ecx
push 0
push str.__s_s__0
mov byte [ebp + edx - 0x68], al
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x194]
push eax
push str.__s_s__0
push 0
push 0
call fcn.0047f200
add esp, 0x18
xor edx, edx
mov ecx, str.SoftwareClassesRdpZapperDefaultIcon
push eax
push 1
call fcn.00470010
add esp, 0x18
push 0x298e
push str.Main.c
push ecx
push 0
push str.__s_____1_
push dword [0x59174c]
push str.__s_____1_
push 0
push 0
call fcn.0047f200
add esp, 0x14
xor edx, edx
mov ecx, str.SoftwareClassesRdpZapper_shellopencommand
push eax
push 1
call fcn.00470010
add esp, 0x18
mov edx, str..rdp
push 0x298f
push str.Main.c
push ecx
push 0
push 0x4f26f4
push 1
mov ecx, str.SoftwareRdpZapperCapabilitiesFileAssociations
call fcn.00470010
add esp, 0x18
mov edx, 0x4eb673
push 0x2991
push str.Main.c
push ecx
push 0
push 0x4f26f4
push 1
mov ecx, str.SoftwareClasses.rdp
call fcn.00470010
add esp, 0x18
xor edx, edx
push 0x2993
push str.Main.c
push ecx
push 0
push dword [0x59174c]
mov ecx, str.SoftwareMicrosoftWindowsCurrentVersionApp_PathsRdpZapper
push 1
call fcn.00470010
mov eax, dword [0x59174c]
add esp, 0x18
add eax, 0x384
mov edx, str.Path
push 0x2994
push str.Main.c
push ecx
push 0
push eax
push 1
mov ecx, str.SoftwareMicrosoftWindowsCurrentVersionApp_PathsRdpZapper
call fcn.00470010
add esp, 0x18
mov dword [ebp - 4], edi
push 0x2996
push str.Main.c
push ecx
push 0
lea eax, [ebp - 4]
mov edx, str.UseUrl
push eax
push 4
mov ecx, str.SoftwareMicrosoftWindowsCurrentVersionApp_PathsRdpZapper
call fcn.00470010
add esp, 0x18
mov eax, esi
pop edi
pop esi
mov esp, ebp
pop ebp
ret