Function at 0x4640dd
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff7ac
push ebx
push esi
push edi
mov edi, eax
mov ebx, dword [ebp + 8]
xor edx, edx
mov dword [ebp - 0xc], edx
mov ecx, dword [ebx]
cmp ecx, dword [0x4c2d58]
je 0x464104
xor eax, eax
jmp 0x464354
mov edx, dword [ebx + 8]
sub edx, 0xfffffe67
je 0x4641df
sub edx, 4
je 0x4642f4
sub edx, 3
je 0x464221
sub edx, 0x18d
jne 0x464352
lea eax, [ebp - 8]
push eax
call sub.USER32.DLL_GetCursorPos
lea ecx, [ebp - 8]
push ecx
push edi
call sub.USER32.DLL_ScreenToClient
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1c], eax
push edx
push 0
push 0x1111
push dword [0x4c2d58]
call sub.USER32.DLL_SendMessageA
cmp dword [ebp - 0x14], 0
je 0x464352
push dword [ebp - 0x14]
push 9
push 0x110b
push dword [0x4c2d58]
call sub.USER32.DLL_SendMessageA
test byte [ebp - 0x18], 4
je 0x464352
lea ecx, [ebp - 8]
push ecx
push edi
call sub.USER32.DLL_ClientToScreen
mov dword [ebp - 0x48], 4
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x48]
mov dword [ebp - 0x44], eax
push edx
push 0
push 0x110c
push dword [0x4c2d58]
call sub.USER32.DLL_SendMessageA
test eax, eax
jne 0x4641c7
xor eax, eax
jmp 0x464354
mov esi, dword [ebp - 0x24]
lea eax, [ebp - 8]
push eax
mov ecx, dword [esi + 4]
mov edx, dword [esi]
mov eax, edi
call fcn.00463f40
jmp 0x464352
test eax, eax
jl 0x464352
mov esi, dword [ebx + 0x34]
mov eax, dword [esi]
push eax
mov edx, dword [eax]
call dword [edx + 8]
push dword [esi + 4]
mov ecx, dword [0x4c316c]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x14]
push dword [esi + 8]
mov edx, dword [0x4c316c]
push edx
mov ecx, dword [edx]
call dword [ecx + 0x14]
push esi
mov eax, dword [0x4c316c]
push eax
mov edx, dword [eax]
call dword [edx + 0x14]
jmp 0x464352
cmp dword [0x49fc88], 0
jne 0x464352
mov esi, dword [ebx + 0x5c]
test esi, esi
je 0x464352
lea eax, [ebp - 0x454]
push eax
push dword [esi + 8]
call sub.SHELL32.DLL_SHGetPathFromIDListA
test eax, eax
je 0x464352
cmp byte [0x4c2d68], 0
jne 0x464282
lea edx, [ebp - 0x10]
push edx
push 0x13
push 0
call sub.SHELL32.DLL_SHGetSpecialFolderLocation
push 0x4c2d68
push dword [ebp - 0x10]
call sub.SHELL32.DLL_SHGetPathFromIDListA
push dword [ebp - 0x10]
mov ecx, dword [0x4c316c]
push ecx
mov eax, dword [ecx]
call dword [eax + 0x14]
push 0x4c2d68
call fcn.0048d454
pop ecx
push eax
lea edx, [ebp - 0x454]
push edx
push 0x4c2d68
call fcn.0048d520
add esp, 0xc
test eax, eax
jne 0x4642d3
lea ecx, [ebp - 0x854]
mov edx, esi
push ecx
lea ecx, [esi + 4]
mov eax, edi
call fcn.00464ad8
test al, al
je 0x4642d3
lea eax, [ebp - 0x854]
push eax
lea edx, [ebp - 0x454]
push edx
call fcn.0048d424
add esp, 8
push 0
lea ecx, [ebp - 0x454]
push ecx
push 0x40a
push dword [0x4c2d58]
call sub.USER32.DLL_GetParent
push eax
call sub.USER32.DLL_SendMessageA
jmp 0x464352
test byte [ebx + 0x40], 0x40
jne 0x464352
mov esi, dword [ebx + 0x5c]
lea eax, [ebp - 0xc]
push eax
push 0x4a2f90
push 0
push dword [esi + 4]
mov edx, dword [esi]
push edx
mov ecx, dword [edx]
call dword [ecx + 0x14]
test eax, eax
jl 0x46432a
push dword [ebx + 0x3c]
mov ecx, dword [esi + 8]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x4c2d58]
call fcn.0046463c
mov eax, dword [ebx + 0x3c]
xor edx, edx
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x50], 0x464822
mov dword [ebp - 0x4c], edx
push ecx
push 0
push 0x1115
push dword [0x4c2d58]
call sub.USER32.DLL_SendMessageA
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4