Function at 0x47333f
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1698
call fcn.0052d050
push ebx
push esi
push edi
lea eax, [ebp - 0xc70]
push eax
call fcn.00472032
xor edi, edi
cmp dword [str.Crescendo], edi
mov dword [ebp - 8], edi
mov esi, 0x104
mov ebx, SysReAllocString
je 0x473678
mov dword [ebp - 4], str.Crescendo
cmp byte [edi + 0x5a5758], 0
jne 0x47365d
mov eax, dword [ebp - 4]
push dword [eax]
call fcn.0047205f
test al, al
jne 0x47365d
mov edi, dword [edi + 0x5a5754]
push edi
mov dword [ebp - 0xc], edi
push str.SoftwareClasses._s
lea edi, [ebp - 0x248]
call fcn.0044b138
pop ecx
pop ecx
mov edi, 0x53ec98
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
lea eax, [ebp - 0x450]
call fcn.004010db
cmp word [ebp - 0x450], 0
jne 0x4734d6
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0x450]
call fcn.004010db
cmp word [ebp - 0x450], 0
jne 0x4734d6
push dword [ebp - 0xc]
lea edi, [ebp - 0x1490]
push str.softwaremicrosoftwindowscurrentversionexplorer_fileexts._suserchoice
call fcn.0044b138
pop ecx
pop ecx
push 0x53ec98
push str.Progid
mov eax, edi
push eax
push ebx
lea eax, [ebp - 0x860]
call fcn.004010db
cmp word [ebp - 0x860], 0
je 0x4734a5
mov eax, edi
push str.Applications_
push eax
call fcn.00520981
test eax, eax
pop ecx
pop ecx
jne 0x47365d
lea eax, [ebp - 0x860]
push eax
push str.SoftwareClasses_s
lea edi, [ebp - 0x1698]
call fcn.0044b138
pop ecx
pop ecx
mov eax, edi
push eax
push ebx
call fcn.0042382f
test al, al
jne 0x473493
mov eax, edi
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0042382f
test al, al
je 0x47365d
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x860]
call fcn.00401016
cmp word [ebp - 0x450], 0
jne 0x4734d6
push dword [ebp - 0xc]
lea edi, [ebp - 0x450]
push str._sfile
call fcn.0044b138
pop ecx
pop ecx
mov eax, edi
push eax
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
call fcn.00423784
lea eax, [ebp - 0x450]
push eax
push str.SoftwareClasses_s
lea edi, [ebp - 0x248]
call fcn.0044b138
pop ecx
pop ecx
mov edi, 0x53ec98
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
lea eax, [ebp - 0xa68]
call fcn.004010db
cmp word [ebp - 0xa68], 0
jne 0x47354c
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0xa68]
call fcn.004010db
cmp word [ebp - 0xa68], 0
jne 0x47354c
push str.Unhandled_Extension_Handler_Finder
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
call fcn.00423784
lea eax, [ebp - 0x248]
push eax
push str._s_shell
lea edi, [ebp - 0x658]
call fcn.0044b138
pop ecx
pop ecx
push 0x53ec98
push 0
mov eax, edi
push eax
push ebx
lea eax, [ebp - 0xa68]
call fcn.004010db
cmp word [ebp - 0xa68], 0
jne 0x47365d
push 0x53ec98
push 0
mov eax, edi
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0xa68]
call fcn.004010db
cmp word [ebp - 0xa68], 0
jne 0x47365d
lea eax, [ebp - 0x248]
push eax
push str._s_shellopen
lea edi, [ebp - 0xe78]
call fcn.0044b138
pop ecx
pop ecx
mov eax, edi
push eax
push ebx
call fcn.0042382f
test al, al
jne 0x47365d
mov eax, edi
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0042382f
test al, al
jne 0x47365d
mov eax, dword [ebp - 4]
push dword [eax]
lea eax, [ebp - 0xc70]
push eax
push str.__s___extfind__s____L_
lea edi, [ebp - 0x1288]
call fcn.0044b138
lea eax, [ebp - 0x248]
push eax
push str._s_shellopencommand
lea edi, [ebp - 0x658]
call fcn.0044b138
add esp, 0x14
lea eax, [ebp - 0x1288]
push eax
push 0
mov eax, edi
push eax
push ebx
call fcn.00423784
lea eax, [ebp - 0x248]
push eax
push str._sDefaultIcon
lea edi, [ebp - 0x1080]
call fcn.0044b138
pop ecx
pop ecx
push str._SystemRoot__system32_shell32.dll_19
push 0
mov eax, edi
push eax
push ebx
call fcn.00423784
inc dword [ebp - 8]
mov edi, dword [ebp - 8]
imul edi, edi, 9
lea eax, [edi + 0x5a5750]
cmp dword [eax], 0
mov dword [ebp - 4], eax
jne 0x47337d
call fcn.00457d18
neg al
sbb eax, eax
neg eax
xor edi, edi
add eax, ebx
cmp dword [str.WavePad], edi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], edi
je 0x4739e3
mov dword [ebp - 0xc], str.WavePad
mov dword [ebp - 8], edi
mov dword [ebp - 0x14], 0x5a57ec
mov eax, dword [ebp - 0xc]
push dword [eax]
call fcn.0047205f
test al, al
jne 0x4739c2
mov eax, dword [ebp - 0x14]
cmp dword [eax], edi
je 0x4739c2
mov ecx, dword [ebp - 8]
lea ecx, [ecx + 0x5a57ec]
mov dword [ebp - 0x1c], ecx
mov eax, dword [eax]
push eax
push str.SoftwareClasses._s
lea edi, [ebp - 0x248]
mov dword [ebp - 4], eax
call fcn.0044b138
pop ecx
pop ecx
mov edi, 0x53ec98
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
lea eax, [ebp - 0x450]
call fcn.004010db
cmp word [ebp - 0x450], 0
jne 0x47380d
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0x450]
call fcn.004010db
cmp word [ebp - 0x450], 0
jne 0x47380d
push dword [ebp - 4]
lea edi, [ebp - 0x1080]
push str.softwaremicrosoftwindowscurrentversionexplorer_fileexts._suserchoice
call fcn.0044b138
pop ecx
pop ecx
push 0x53ec98
push str.Progid
mov eax, edi
push eax
push ebx
lea eax, [ebp - 0x658]
call fcn.004010db
cmp word [ebp - 0x658], 0
je 0x4737dc
lea eax, [ebp - 0x658]
push str.Applications_
push eax
call fcn.00520981
test eax, eax
pop ecx
pop ecx
jne 0x4739ae
lea eax, [ebp - 0x658]
push eax
push str.SoftwareClasses_s
lea edi, [ebp - 0xe78]
call fcn.0044b138
pop ecx
pop ecx
mov eax, edi
push eax
push ebx
call fcn.0042382f
test al, al
jne 0x4737ca
mov eax, edi
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0042382f
test al, al
je 0x4739ae
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x658]
call fcn.00401016
cmp word [ebp - 0x450], 0
jne 0x47380d
push dword [ebp - 4]
lea edi, [ebp - 0x450]
push str._sfile
call fcn.0044b138
pop ecx
pop ecx
mov eax, edi
push eax
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
call fcn.00423784
mov eax, dword [ebp - 0xc]
push dword [eax]
lea eax, [ebp - 0xc70]
push eax
push str.__s___extfind__s____L_
lea edi, [ebp - 0x1288]
call fcn.0044b138
mov eax, dword [ebp - 8]
push dword [eax + 0x5a57e8]
lea edi, [ebp - 0x248]
push dword [ebp - 4]
push str.SoftwareClassesSystemFileAssociations._sShell_scommand
call fcn.0044b138
add esp, 0x18
lea eax, [ebp - 0x1288]
push eax
push 0
mov eax, edi
push eax
push dword [ebp - 0x18]
call fcn.00423784
mov eax, dword [ebp - 8]
push dword [eax + 0x5a57e8]
push dword [ebp - 4]
push str.SoftwareClassesSystemFileAssociations._sShell_s
call fcn.0044b138
mov eax, dword [ebp - 8]
add esp, 0xc
push dword [eax + 0x5a57e0]
mov eax, edi
push 0
push eax
push dword [ebp - 0x18]
call fcn.00423784
lea eax, [ebp - 0x450]
push eax
push str.SoftwareClasses_sShell
call fcn.0044b138
pop ecx
pop ecx
mov edi, 0x53ec98
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
lea eax, [ebp - 0x860]
call fcn.004010db
cmp word [ebp - 0x860], 0
jne 0x47393d
push edi
push 0
lea eax, [ebp - 0x248]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0x860]
call fcn.004010db
xor edi, edi
cmp word [ebp - 0x860], di
jne 0x47393d
mov eax, 0x55acb0
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], str.docx
mov dword [ebp - 0x38], 0x55ace0
mov dword [ebp - 0x34], 0x5804b0
mov dword [ebp - 0x30], str.xlsx
mov dword [ebp - 0x2c], 0x55aca8
mov dword [ebp - 0x28], 0x5804c4
mov dword [ebp - 0x24], str.pptx
mov dword [ebp - 0x20], edi
mov ecx, dword [ebp - 4]
call fcn.00401031
test eax, eax
je 0x473a80
mov eax, dword [ebp + edi*4 - 0x3c]
inc edi
test eax, eax
jne 0x473924
lea eax, [ebp - 0x450]
push eax
push str.SoftwareClasses_sDefaultIcon
lea edi, [ebp - 0x248]
call fcn.0044b138
pop ecx
pop ecx
push 0x53ec98
push 0
mov eax, edi
push eax
push ebx
lea eax, [ebp - 0x658]
call fcn.004010db
cmp word [ebp - 0x658], 0
jne 0x4739ae
push 0x53ec98
push 0
mov eax, edi
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea eax, [ebp - 0x658]
call fcn.004010db
cmp word [ebp - 0x658], 0
jne 0x4739ae
push str._SystemRoot__system32_shell32.dll_19
push 0
lea eax, [ebp - 0x248]
push eax
push ebx
call fcn.00423784
mov eax, dword [ebp - 0x1c]
add eax, 4
cmp dword [eax], 0
mov dword [ebp - 0x1c], eax
jne 0x4736d3
xor edi, edi
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
add dword [ebp - 0x14], 0x5c
imul eax, eax, 0x5c
mov dword [ebp - 8], eax
lea eax, [eax + 0x5a57e4]
cmp dword [eax], edi
mov dword [ebp - 0xc], eax
jne 0x4736aa
call fcn.0040131d
test al, al
je 0x473a0d
lea eax, [ebp - 0xc70]
push eax
call fcn.00472981
call fcn.0040134a
test al, al
je 0x473a0d
lea eax, [ebp - 0xc70]
push eax
call fcn.00472b06
lea eax, [ebp - 0xc70]
push eax
call fcn.00472bcb
lea eax, [ebp - 0x860]
push eax
push edi
push edi
push 6
push edi
mov word [ebp - 0x860], di
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
cmp word [ebp - 0x860], di
je 0x473a69
push str..lnk
push str.NCH_Software_Download_Site
lea eax, [ebp - 0x860]
push eax
lea eax, [ebp - 0x1080]
push eax
call fcn.0044a0d6
push str.https:__www.nch.com.au_index.html
lea eax, [ebp - 0x1080]
push eax
call fcn.00458326
push edi
push edi
push 0x2000
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
pop edi
pop esi
pop ebx
leave
push 0x5675cc
jmp 0x47399f