Function at 0x4d10a0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1384
call fcn.0042bac0
mov eax, dword [0x506380]
xor eax, ebp
mov dword [ebp - 4], eax
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0x160], eax
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x140], 0
push 0
lea eax, [ebp - 0x140]
push eax
push 0
push 0x72
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
cmp dword [ebp - 0x140], 0
je 0x4d1144
cmp dword [ebp + 8], 0
je 0x4d112e
cmp dword [ebp + 0xc], 0
je 0x4d112e
mov ecx, dword [ebp + 0xc]
shl ecx, 1
push ecx
push 0
mov edx, dword [ebp + 8]
push edx
call fcn.0041de10
add esp, 0xc
push 0x4f8b0c
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041ab6c
add esp, 0xc
push str.ScreenSaver
push 9
call fcn.004ce850
add esp, 8
mov al, 1
jmp 0x4d18f0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x384], 0
mov edx, dword [ebp - 0x37c]
sub edx, 1
mov dword [ebp - 0x380], edx
mov eax, dword [ebp - 0x160]
sub eax, 1
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], 0
mov ecx, dword [ebp - 0x160]
sub ecx, 1
mov dword [ebp - 0x378], ecx
mov edx, dword [ebp - 0x37c]
sub edx, 1
mov dword [ebp - 0x374], edx
mov eax, dword [ebp - 0x134]
push eax
mov ecx, dword [ebp - 0x138]
push ecx
call dword [sym.imp.USER32.dll_WindowFromPoint]
mov dword [ebp - 0x370], eax
mov edx, dword [ebp - 0x380]
push edx
mov eax, dword [ebp - 0x384]
push eax
call dword [sym.imp.USER32.dll_WindowFromPoint]
mov dword [ebp - 0x15c], eax
mov ecx, dword [ebp - 0x154]
push ecx
mov edx, dword [ebp - 0x158]
push edx
call dword [sym.imp.USER32.dll_WindowFromPoint]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x374]
push eax
mov ecx, dword [ebp - 0x378]
push ecx
call dword [sym.imp.USER32.dll_WindowFromPoint]
mov dword [ebp - 0x13c], eax
lea edx, [ebp - 0x36c]
push edx
mov eax, dword [ebp - 0x370]
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
lea ecx, [ebp - 0x148]
push ecx
mov edx, dword [ebp - 0x15c]
push edx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
lea eax, [ebp - 0x14c]
push eax
mov ecx, dword [ebp - 0x150]
push ecx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
lea edx, [ebp - 0x144]
push edx
mov eax, dword [ebp - 0x13c]
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [ebp - 0x370]
cmp ecx, dword [ebp - 0x15c]
jne 0x4d134f
mov edx, dword [ebp - 0x150]
cmp edx, dword [ebp - 0x13c]
jne 0x4d134f
mov eax, dword [ebp - 0x15c]
cmp eax, dword [ebp - 0x150]
jne 0x4d134f
cmp dword [ebp + 8], 0
je 0x4d1339
cmp dword [ebp + 0xc], 0
je 0x4d1339
push 0x208
push 0
lea ecx, [ebp - 0x590]
push ecx
call fcn.0041de10
add esp, 0xc
push 0x104
lea edx, [ebp - 0x590]
push edx
mov eax, dword [ebp - 0x36c]
push eax
call fcn.004cfe40
add esp, 0xc
movzx ecx, al
test ecx, ecx
je 0x4d1339
push 0
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x590]
push edx
lea ecx, [ebp - 0x6b8]
call fcn.004d7f50
mov eax, dword [ebp + 0xc]
shl eax, 1
push eax
push 0
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041de10
add esp, 0xc
lea ecx, [ebp - 0x6b8]
call fcn.004d77e0
push eax
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0041ab6c
add esp, 0xc
lea ecx, [ebp - 0x6b8]
call fcn.004d78b0
push str.4_corners_one_hWnd
push 9
call fcn.004ce850
add esp, 8
mov al, 1
jmp 0x4d18f0
push 0x104
lea ecx, [ebp - 0x368]
push ecx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push 0
push 0
push 0
push 0
push 0x4f8b64
lea edx, [ebp - 0x368]
push edx
lea ecx, [ebp - 0x130]
call fcn.004d7f50
lea ecx, [ebp - 0x130]
call fcn.004d7870
push eax
mov eax, dword [ebp - 0x36c]
push eax
call fcn.004d0560
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x4d13bf
mov byte [ebp - 0x1379], 0
lea ecx, [ebp - 0x130]
call fcn.004d78b0
mov al, byte [ebp - 0x1379]
jmp 0x4d18f0
lea ecx, [ebp - 0x130]
call fcn.004d7870
push eax
mov edx, dword [ebp - 0x148]
push edx
call fcn.004d0560
add esp, 8
movzx eax, al
test eax, eax
je 0x4d13fe
mov byte [ebp - 0x137a], 0
lea ecx, [ebp - 0x130]
call fcn.004d78b0
mov al, byte [ebp - 0x137a]
jmp 0x4d18f0
lea ecx, [ebp - 0x130]
call fcn.004d7870
push eax
mov ecx, dword [ebp - 0x14c]
push ecx
call fcn.004d0560
add esp, 8
movzx edx, al
test edx, edx
je 0x4d143d
mov byte [ebp - 0x137b], 0
lea ecx, [ebp - 0x130]
call fcn.004d78b0
mov al, byte [ebp - 0x137b]
jmp 0x4d18f0
lea ecx, [ebp - 0x130]
call fcn.004d7870
push eax
mov eax, dword [ebp - 0x144]
push eax
call fcn.004d0560
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x4d147c
mov byte [ebp - 0x137c], 0
lea ecx, [ebp - 0x130]
call fcn.004d78b0
mov al, byte [ebp - 0x137c]
jmp 0x4d18f0
mov edx, dword [ebp - 0x36c]
cmp edx, dword [ebp - 0x148]
jne 0x4d1581
mov eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x14c]
jne 0x4d1581
mov ecx, dword [ebp - 0x14c]
cmp ecx, dword [ebp - 0x144]
jne 0x4d1581
cmp dword [ebp + 8], 0
je 0x4d1555
cmp dword [ebp + 0xc], 0
je 0x4d1555
push 0x208
push 0
lea edx, [ebp - 0x8c0]
push edx
call fcn.0041de10
add esp, 0xc
push 0x104
lea eax, [ebp - 0x8c0]
push eax
mov ecx, dword [ebp - 0x36c]
push ecx
call fcn.004cfe40
add esp, 0xc
movzx edx, al
test edx, edx
je 0x4d1555
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x8c0]
push eax
lea ecx, [ebp - 0x9e8]
call fcn.004d7f50
mov ecx, dword [ebp + 0xc]
shl ecx, 1
push ecx
push 0
mov edx, dword [ebp + 8]
push edx
call fcn.0041de10
add esp, 0xc
lea ecx, [ebp - 0x9e8]
call fcn.004d77e0
push eax
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041ab6c
add esp, 0xc
lea ecx, [ebp - 0x9e8]
call fcn.004d78b0
push str.4_corners_one_process_id
push 9
call fcn.004ce850
add esp, 8
mov byte [ebp - 0x137d], 1
lea ecx, [ebp - 0x130]
call fcn.004d78b0
mov al, byte [ebp - 0x137d]
jmp 0x4d18f0
mov dword [ebp - 0x116c], 0x4f8bb4
mov dword [ebp - 0x1168], str.360SE.exe
mov dword [ebp - 0x1164], str.360chrome.exe
mov dword [ebp - 0x1160], 0x4f8c00
mov dword [ebp - 0x115c], 0x4f8c18
mov dword [ebp - 0x1158], 0x4f8c34
mov dword [ebp - 0x1154], str.twchrome.exe
mov dword [ebp - 0x1150], 0x4f8c6c
mov dword [ebp - 0x114c], str.chrome.exe
mov dword [ebp - 0x1148], 0x4f8c9c
mov dword [ebp - 0x1144], 0x4f8cc0
mov dword [ebp - 0x1140], str.ttraveler.exe
mov dword [ebp - 0x113c], 0x4f8d00
mov dword [ebp - 0x1138], str.SaaYaa.exe
mov dword [ebp - 0x1134], 0xe
push 0x208
push 0
lea edx, [ebp - 0x1378]
push edx
call fcn.0041de10
add esp, 0xc
push 0x104
lea eax, [ebp - 0x1378]
push eax
mov ecx, dword [ebp - 0x36c]
push ecx
call fcn.004cfe40
add esp, 0xc
movzx edx, al
test edx, edx
jne 0x4d166c
mov byte [ebp - 0x137e], 0
lea ecx, [ebp - 0x130]
call fcn.004d78b0
mov al, byte [ebp - 0x137e]
jmp 0x4d18f0
push 0x208
push 0
lea eax, [ebp - 0xbf8]
push eax
call fcn.0041de10
add esp, 0xc
push 0x104
lea ecx, [ebp - 0xbf8]
push ecx
mov edx, dword [ebp - 0x36c]
push edx
call fcn.004cfe40
add esp, 0xc
movzx eax, al
test eax, eax
jne 0x4d16c1
mov byte [ebp - 0x137f], 0
lea ecx, [ebp - 0x130]
call fcn.004d78b0
mov al, byte [ebp - 0x137f]
jmp 0x4d18f0
push 0x208
push 0
lea ecx, [ebp - 0x1130]
push ecx
call fcn.0041de10
add esp, 0xc
push 0x104
lea edx, [ebp - 0x1130]
push edx
mov eax, dword [ebp - 0x36c]
push eax
call fcn.004cfe40
add esp, 0xc
movzx ecx, al
test ecx, ecx
jne 0x4d1716
mov byte [ebp - 0x1380], 0
lea ecx, [ebp - 0x130]
call fcn.004d78b0
mov al, byte [ebp - 0x1380]
jmp 0x4d18f0
push 0x208
push 0
lea edx, [ebp - 0xf28]
push edx
call fcn.0041de10
add esp, 0xc
push 0x104
lea eax, [ebp - 0xf28]
push eax
mov ecx, dword [ebp - 0x36c]
push ecx
call fcn.004cfe40
add esp, 0xc
movzx edx, al
test edx, edx
jne 0x4d176b
mov byte [ebp - 0x1381], 0
lea ecx, [ebp - 0x130]
call fcn.004d78b0
mov al, byte [ebp - 0x1381]
jmp 0x4d18f0
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x1378]
push eax
lea ecx, [ebp - 0xd20]
call fcn.004d7f50
mov dword [ebp - 0x9ec], 0
mov dword [ebp - 0x9ec], 0
jmp 0x4d17ac
mov ecx, dword [ebp - 0x9ec]
add ecx, 1
mov dword [ebp - 0x9ec], ecx
mov edx, dword [ebp - 0x9ec]
cmp edx, dword [ebp - 0x1134]
jge 0x4d17e4
mov eax, dword [ebp - 0x9ec]
mov ecx, dword [ebp + eax*4 - 0x116c]
push ecx
lea ecx, [ebp - 0xd20]
call fcn.004d77e0
push eax
call fcn.0041a656
add esp, 8
test eax, eax
jne 0x4d17e2
jmp 0x4d17e4
jmp 0x4d179d
mov edx, dword [ebp - 0x9ec]
cmp edx, dword [ebp - 0x1134]
jne 0x4d181a
mov byte [ebp - 0x1382], 0
lea ecx, [ebp - 0xd20]
call fcn.004d78b0
lea ecx, [ebp - 0x130]
call fcn.004d78b0
mov al, byte [ebp - 0x1382]
jmp 0x4d18f0
lea eax, [ebp - 0xbf8]
push eax
lea ecx, [ebp - 0x1378]
push ecx
call fcn.0041a656
add esp, 8
test eax, eax
jne 0x4d18cd
lea edx, [ebp - 0xf28]
push edx
lea eax, [ebp - 0xbf8]
push eax
call fcn.0041a656
add esp, 8
test eax, eax
jne 0x4d18cd
lea ecx, [ebp - 0x1130]
push ecx
lea edx, [ebp - 0xf28]
push edx
call fcn.0041a656
add esp, 8
test eax, eax
jne 0x4d18cd
cmp dword [ebp + 8], 0
je 0x4d18a8
cmp dword [ebp + 0xc], 0
je 0x4d18a8
mov eax, dword [ebp + 0xc]
shl eax, 1
push eax
push 0
mov ecx, dword [ebp + 8]
push ecx
call fcn.0041de10
add esp, 0xc
lea ecx, [ebp - 0xd20]
call fcn.004d77e0
push eax
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.0041ab6c
add esp, 0xc
mov byte [ebp - 0x1383], 1
lea ecx, [ebp - 0xd20]
call fcn.004d78b0
lea ecx, [ebp - 0x130]
call fcn.004d78b0
mov al, byte [ebp - 0x1383]
jmp 0x4d18f0
lea ecx, [ebp - 0xd20]
call fcn.004d78b0
mov byte [ebp - 0x1384], 0
lea ecx, [ebp - 0x130]
call fcn.004d78b0
mov al, byte [ebp - 0x1384]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041a0cf
mov esp, ebp
pop ebp
ret