Function at 0x40aeb4
Capabilities:
Get common file path

Disassembly:
push ebp
sub esp, 0x240
lea ebp, [esp - 4]
mov eax, dword [0x4bc660]
xor eax, ebp
mov dword [ebp + 0x240], eax
push 0x20
mov eax, 0x4934ab
call fcn.004648f7
push ecx
mov esi, ecx
mov eax, esp
lea ecx, [esi + 0x30]
mov dword [ebp - 0x10], esp
mov dword [eax], 0xe4
call fcn.0040a29c
push ecx
mov eax, esp
lea ecx, [esi + 0x34]
mov dword [ebp - 0x10], esp
mov dword [eax], 0xe5
call fcn.0040a29c
push 0x49fa88
push 0x10
xor edi, edi
push edi
mov ebx, dword [sym.imp.GDI32.dll_CreateFontW]
push edi
push edi
push edi
push edi
push edi
push edi
push 0xc8
push edi
push edi
push edi
push 0xc
call ebx
push 0x49fa88
push 0x20
push edi
push edi
push edi
push edi
push edi
push edi
push edi
push 0xc8
push edi
push edi
push edi
mov dword [esi + 0x24], eax
push 0xc
mov dword [esi + 0x20], 0x996633
call ebx
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [esi + 0x2c], eax
push 0xd8
push dword [esi + 4]
mov dword [esi + 0x28], 0x996633
call ebx
push 4
push 0x16
push 0x42
push 0x60
push 0x49
push edi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0xd9
push dword [esi + 4]
call ebx
push 4
push 0x16
push 0x30
push 0x60
push 0x90
push edi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0xd8
push dword [esi + 4]
call ebx
lea ecx, [esi + 0x44]
push eax
call fcn.00461d90
push str.sQR
push dword [esi + 0x48]
call dword [sym.imp.USER32.dll_SetWindowTextW]
push 0x996633
lea ecx, [esi + 0x44]
call fcn.00461a2b
mov eax, 0xf0
push eax
push eax
push 0xef
push 0xee
push eax
lea ecx, [esi + 0x44]
call fcn.00461b50
push 0xd9
push dword [esi + 4]
call ebx
lea ebx, [esi + 0x8c]
push eax
mov ecx, ebx
call fcn.00461d90
push 0x49fa74
push dword [esi + 0x90]
call dword [sym.imp.USER32.dll_SetWindowTextW]
push 0x996633
mov ecx, ebx
call fcn.00461a2b
mov eax, 0xf3
push eax
push eax
push 0xf2
push 0xf1
push eax
mov ecx, ebx
call fcn.00461b50
push 7
pop ebx
push edi
lea ecx, [ebp]
mov dword [ebp + 0x18], ebx
call fcn.004024b4
push edi
lea ecx, [ebp + 0x1c]
mov dword [ebp - 4], edi
mov dword [ebp + 0x34], ebx
call fcn.004024b4
push 0x206
xor ebx, ebx
lea eax, [ebp + 0x3a]
push edi
inc ebx
push eax
mov byte [ebp - 4], bl
mov word [ebp + 0x38], di
call fcn.00466400
add esp, 0xc
push 0x104
lea eax, [ebp + 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea eax, [ebp + 0x38]
push eax
lea ecx, [ebp + 0x1c]
call fcn.00402180
mov eax, dword [ebp + 0x30]
dec eax
push eax
lea ecx, [ebp + 0x1c]
call fcn.0041b75b
cmp word [eax], 0x5c
je 0x40b0bb
push 0x49fa70
lea ecx, [ebp - 0x2c]
call fcn.004041c2
push 0xffffffffffffffff
push edi
push eax
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 2
call fcn.0040a9ca
push edi
push ebx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.004021c5
push 0x49fa58
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0040ae6a
add esp, 0xc
push 0xffffffffffffffff
push edi
push eax
lea ecx, [ebp]
mov byte [ebp - 4], 3
call fcn.004020ed
push edi
push ebx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.004021c5
cmp dword [ebp + 0x18], 8
mov eax, dword [ebp + 4]
jae 0x40b0f9
lea eax, [ebp + 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.SetLayeredWindowAttributes
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push ebx
push 0xff00ff
mov ecx, esi
mov dword [0x4beb14], eax
call fcn.0040a1ee
push edi
push ebx
lea ecx, [ebp + 0x1c]
call fcn.004021c5
push edi
push ebx
lea ecx, [ebp]
call fcn.004021c5
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x240]
xor ecx, ebp
call fcn.004648e8
add ebp, 0x244
leave
ret 0x10