Option Explicit 
 
Wscript.Echo BrowseForFile( ) 
 
'Bypasses IE7+ c:\fakepath\file.txt problem 
Function BrowseForFile() 
    With CreateObject("WScript.Shell") 
        Dim fso : Set fso = CreateObject("Scripting.FileSystemObject") 
        Dim tempFolder : Set tempFolder = fso.GetSpecialFolder(2) 
        Dim tempName : tempName = fso.GetTempName() & ".hta" 
        Dim path : path = "HKCU\Volatile Environment\MsgResp" 
        With tempFolder.CreateTextFile(tempName) 
            .Write "<input type=file name=f>" & _ 
            "<script>f.click();(new ActiveXObject('WScript.Shell'))" & _ 
            ".RegWrite('HKCU\\Volatile Environment\\MsgResp', f.value);" & _ 
            "close();</script>" 
            .Close 
        End With 
        .Run tempFolder & "\" & tempName, 1, True 
        BrowseForFile = .RegRead(path) 
        .RegDelete path 
        fso.DeleteFile tempFolder & "\" & tempName 
    End With 
 
End Function