Function at 0x49f3d8
Capabilities:
Get common file path

Disassembly:
mov eax, 0x4bf92f
call fcn.004be928
sub esp, 0xa4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x40], edx
mov esi, ecx
mov dword [ebp - 0x3c], esi
xor ebx, ebx
cmp dword [esi + 0x10], ebx
jne 0x49f404
xor al, al
jmp 0x49f84b
lea eax, [ebp - 0x40]
push eax
push ebx
push 0x2e62
call fcn.004a3880
add esp, 0xc
cmp dword [esi + 0x14], 0x10
jb 0x49f420
mov ecx, dword [esi]
jmp 0x49f422
mov ecx, esi
push 3
pop edi
mov dword [ebp - 0x44], ecx
cmp dword [esi + 0x14], 0x10
jb 0x49f432
mov edx, dword [esi]
jmp 0x49f434
mov edx, esi
mov eax, dword [esi + 0x10]
add eax, edx
cmp ecx, eax
je 0x49f718
mov al, byte [ecx]
cmp al, 0x30
jl 0x49f68d
cmp al, 0x39
jg 0x49f68d
mov dword [ebp - 0x1c], 0xfff6
mov dword [ebp - 0x14], 0xecf4a416
push edi
lea ecx, [ebp - 0x84]
call fcn.0043557d
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x1c], ebx
lea edx, [ebp - 0x84]
lea ecx, [ebp - 0x94]
call fcn.0049e60c
mov dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x84]
mov dword [eax + 4], ebx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov ecx, 0xfffe
cmp ecx, eax
sbb ecx, ecx
add ecx, 0xfffff5b5
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 0xffffffff
setg al
imul eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, 0x7fce6bb2
setle cl
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp eax, ecx
setl dl
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x84]
call fcn.0043564f
push ebx
push 0x3f49
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x40]
push eax
push 0x36d0
push 0x676d
call fcn.004a3813
add esp, 0x18
mov dword [ebp - 0x24], 0x461e
cmp dword [ebp - 0x24], 0x46c4
jle 0x49f57c
push 0x1ed9
push 0x2211
push 0x19ce
call dword [sym.imp.USER32.dll_SetClassLongA]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x1c], 0xdce
mov eax, ebx
and eax, edi
cdq
push edx
push eax
mov ecx, 0xab56b8
call fcn.00435439
add ebx, esi
dec dword [ebp - 0x1c]
jne 0x49f549
inc esi
cmp esi, 0x2e3
push 0
pop ebx
jl 0x49f53f
inc edi
cmp edi, 0x928
jl 0x49f53d
mov esi, dword [ebp - 0x3c]
push 3
pop edi
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x1c], 0x4eea2a3b
xor eax, eax
inc eax
mov dword [ebp - 0x1c], eax
push eax
lea ecx, [ebp - 0x90]
call fcn.0043557d
mov dword [ebp - 0x1c], 0x21afa9b6
mov dword [ebp - 0x20], ebx
jmp 0x49f5b5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xa0], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x49f5a8
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x20]
call fcn.0049eb1f
mov dword [ebp - 0x20], ebx
jmp 0x49f5db
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x48], 0xf1a969ac
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x49f5cd
mov dword [ebp - 0x14], ebx
jmp 0x49f629
push 1
lea ecx, [ebp - 0x68]
call fcn.0043557d
lea edx, [ebp - 0x68]
lea ecx, [ebp - 0x58]
call fcn.0049ec10
mov eax, dword [ebp - 0x68]
mov dword [eax], ebx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + eax*4 - 0xa0]
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa0], ecx
mov eax, dword [ebp - 0x68]
inc dword [eax]
cmp dword [eax], 2
jle 0x49f600
lea ecx, [ebp - 0x68]
call fcn.0043564f
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jle 0x49f5e6
inc dword [ebp - 0x48]
lea ecx, [ebp - 0x90]
call fcn.0043564f
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x24], 0x44e9
jge 0x49f658
mov edx, str.qzmophfhd_zehejn_qamd_ckjclu_kpybhskh
mov ecx, 0xab56b8
call fcn.004371ef
or dword [ebp - 4], 0xffffffff
jmp 0x49f684
mov ecx, dword [ebp - 0x44]
inc ecx
jmp 0x49f425
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 0x38], ebx
jmp 0x49f708
movdqa xmm0, xmmword [0xaaa830]
movdqu xmmword [ebp - 0xb0], xmm0
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
push dword [ebp - 0x58]
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xb0]
push eax
push ebx
lea ecx, [ebp - 0x54]
call fcn.00437747
lea eax, [ebp - 0x38]
push eax
lea edx, [ebp - 0x34]
lea ecx, [ebp - 0x54]
call fcn.0049eed7
pop ecx
mov dword [ebp - 0x34], ebx
jmp 0x49f6f7
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x49f6f4
push ebx
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xfffffffd
jge 0x49f6e4
lea ecx, [ebp - 0x54]
call fcn.0043564f
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xffffffeb
jle 0x49f69c
mov eax, dword [ebp - 0x40]
mov dword [eax], ebx
jmp 0x49f3fd
mov dword [ebp - 0x14], 0x7b18
mov dword [ebp - 0x2c], 0xffffffff
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jl 0x49f75c
mov dword [ebp - 0x5c], 2
mov dword [ebp - 0x14], 0x17
jmp 0x49f746
call fcn.0049f0c9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x25
jge 0x49f73e
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x2c]
call fcn.0049f149
jmp 0x49f830
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x2c], ebx
jmp 0x49f811
mov dword [ebp - 0x3c], 1
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x49f795
push ebx
push ebx
push ebx
push 0x8ac
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
mov dword [ebp - 0x14], ebx
jmp 0x49f7af
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x49f7ac
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x49f79a
mov dword [ebp - 0x14], ebx
jmp 0x49f809
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x1c], 0xe56e31bb
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x49f7dc
push 0x15dd
push ebx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
xor edx, edx
cmp eax, 5
setge dl
mov eax, dword [ebp - 0x70]
sub edx, eax
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x1c], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x49f7b9
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edi
jle 0x49f777
mov byte [ebp - 0x2e], bl
cmp byte [ebp - 0x2e], 0
je 0x49f830
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x49f849
push 0x2f6
push 0x93d
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret