Function at 0x4cfd44
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x32
push 0
push 0
dec ecx
jne 0x4cfd4c
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x4d0280
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4d01a6
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
mov edx, 0x4d029c
call fcn.00404348
lea edx, [ebp - 0x14]
mov eax, 0x4d02c4
call fcn.004c6fc0
mov ecx, 0x4d02d0
mov edx, 0x4d02f0
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0x50]
lea eax, [ebp - 0x12c]
mov edx, dword [ebx + 4]
call fcn.00404b38
mov ecx, dword [ebp - 0x12c]
mov edx, 0x4d0304
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0x50]
lea ecx, [ebp - 0x134]
xor edx, edx
mov eax, dword [0x49b0dc]
call fcn.0049b380
mov edx, dword [ebp - 0x134]
lea eax, [ebp - 0x130]
call fcn.00404b38
mov ecx, dword [ebp - 0x130]
mov edx, 0x4d031c
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0x50]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x74]
cmp byte [eax + 0x10], 0
je 0x4cfe17
mov ecx, 0x4d0328
mov edx, 0x4d0330
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0x50]
jmp 0x4cfe29
mov ecx, 0x4d033c
mov edx, 0x4d0330
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0x50]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x74]
cmp byte [eax + 0x11], 0
je 0x4cfe49
mov ecx, 0x4d0328
mov edx, 0x4d0344
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0x50]
jmp 0x4cfe5b
mov ecx, 0x4d033c
mov edx, 0x4d0344
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0x50]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x74]
cmp byte [eax + 0x12], 0
je 0x4cfe7b
mov ecx, 0x4d0328
mov edx, 0x4d0350
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0x50]
jmp 0x4cfe8d
mov ecx, 0x4d033c
mov edx, 0x4d0350
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0x50]
push 0x104
lea eax, [ebp - 0x125]
push eax
call sub.kernel32.dll_GetWindowsDirectoryA
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x13c]
lea edx, [ebp - 0x125]
mov ecx, 0x105
call fcn.00404520
mov eax, dword [ebp - 0x13c]
mov ecx, 3
xor edx, edx
call fcn.004047d0
mov edx, dword [ebp - 0x138]
mov eax, dword [0x49b0dc]
call fcn.0049baa4
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
lea eax, [ebp - 8]
mov edx, 0x4d0378
call fcn.00404348
mov eax, dword [0x49b0dc]
call fcn.0049ba04
test al, al
je 0x4cff0b
lea eax, [ebp - 8]
mov edx, 0x4d0384
call fcn.00404348
lea eax, [ebp - 0xc]
mov edx, 0x4d0378
call fcn.00404348
mov eax, dword [0x49b0dc]
call fcn.0049b944
test al, al
je 0x4cff33
lea eax, [ebp - 0xc]
mov edx, 0x4d0384
call fcn.00404348
lea edx, [ebp - 0x10]
mov eax, dword [0x49b0dc]
call fcn.0049c47c
lea eax, [ebp - 0x148]
call fcn.0049cc28
push dword [ebp - 0x148]
push 0x4d0390
lea eax, [ebp - 0x14c]
push eax
fild qword [ebp - 0x20]
fdiv dword [0x4d039c]
fstp xword [ebp - 0x160]
wait
lea eax, [ebp - 0x160]
mov dword [ebp - 0x154], eax
mov byte [ebp - 0x150], 3
lea edx, [ebp - 0x154]
xor ecx, ecx
mov eax, 0x4d03a8
call fcn.0040a00c
push dword [ebp - 0x14c]
push 0x4d03b8
lea eax, [ebp - 0x164]
push eax
mov eax, dword [0x49b0dc]
call fcn.0049c500
fdiv dword [0x4d03c0]
fstp xword [ebp - 0x160]
wait
lea eax, [ebp - 0x160]
mov dword [ebp - 0x154], eax
mov byte [ebp - 0x150], 3
lea edx, [ebp - 0x154]
xor ecx, ecx
mov eax, 0x4d03cc
call fcn.0040a00c
push dword [ebp - 0x164]
push 0x4d03dc
push dword [ebp - 0x10]
push 0x4d03e8
lea eax, [ebp - 0x168]
push eax
mov eax, dword [0x49b0dc]
call fcn.0049c440
fdiv dword [0x4d039c]
fstp xword [ebp - 0x160]
wait
lea eax, [ebp - 0x160]
mov dword [ebp - 0x154], eax
mov byte [ebp - 0x150], 3
lea edx, [ebp - 0x154]
xor ecx, ecx
mov eax, 0x4d03f8
call fcn.0040a00c
push dword [ebp - 0x168]
push 0x4d0408
push dword [ebp - 8]
push 0x4d0418
push dword [ebp - 0xc]
lea eax, [ebp - 0x144]
mov edx, 0xd
call fcn.00404630
mov edx, dword [ebp - 0x144]
lea eax, [ebp - 0x140]
call fcn.00404b38
mov ecx, dword [ebp - 0x140]
mov edx, 0x4d0424
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0x50]
lea eax, [ebp - 0x170]
call fcn.004d08e4
mov edx, dword [ebp - 0x170]
lea eax, [ebp - 0x16c]
call fcn.00404b38
mov ecx, dword [ebp - 0x16c]
mov edx, 0x4d043c
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
call dword [esi + 0x50]
lea eax, [ebp - 0x174]
mov edx, dword [ebx + 8]
mov edx, dword [edx + 0x18c]
call fcn.00404b38
mov ecx, dword [ebp - 0x174]
mov edx, 0x4d0458
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax]
call dword [ebx + 0x50]
lea eax, [ebp - 0x17c]
call fcn.0049c824
mov edx, dword [ebp - 0x17c]
lea eax, [ebp - 0x178]
call fcn.00404b38
mov ecx, dword [ebp - 0x178]
mov edx, 0x4d0474
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax]
call dword [ebx + 0x50]
lea edx, [ebp - 0x184]
mov eax, 0x4d04a0
call fcn.0049cb44
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 0x180]
call fcn.00404b38
mov ecx, dword [ebp - 0x180]
mov edx, 0x4d04cc
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax]
call dword [ebx + 0x50]
mov dl, 1
mov eax, dword [0x47dfbc]
call fcn.0047e0c8
mov ebx, eax
lea edx, [ebp - 0x190]
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov eax, dword [ebp - 0x190]
lea edx, [ebp - 0x18c]
call fcn.00406498
mov eax, dword [ebp - 0x18c]
lea edx, [ebp - 0x188]
call fcn.004cef9c
mov ecx, dword [ebp - 0x188]
mov edx, 0x4d04f4
mov eax, ebx
call fcn.0047e1a0
push ebx
mov ecx, dword [ebp - 4]
mov dl, 1
mov eax, dword [0x4cf7b4]
call fcn.004cf8e0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4d01b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d028a
lea eax, [ebp - 0x190]
call fcn.004049bc
lea eax, [ebp - 0x18c]
call fcn.004042b0
lea eax, [ebp - 0x188]
mov edx, 2
call fcn.004042d4
lea eax, [ebp - 0x180]
call fcn.004049bc
lea eax, [ebp - 0x17c]
call fcn.004042b0
lea eax, [ebp - 0x178]
mov edx, 2
call fcn.004049d4
lea eax, [ebp - 0x170]
call fcn.004042b0
lea eax, [ebp - 0x16c]
call fcn.004049bc
lea eax, [ebp - 0x168]
mov edx, 2
call fcn.004042d4
lea eax, [ebp - 0x14c]
mov edx, 3
call fcn.004042d4
lea eax, [ebp - 0x140]
call fcn.004049bc
lea eax, [ebp - 0x13c]
mov edx, 3
call fcn.004042d4
lea eax, [ebp - 0x130]
mov edx, 2
call fcn.004049d4
lea eax, [ebp - 0x14]
call fcn.00406158
lea eax, [ebp - 0x10]
mov edx, 4
call fcn.004042d4
ret