Function at 0x49d3f0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x88
push 0
push 0
dec ecx
jne 0x49d3f8
push ebx
push esi
mov ebx, dword [ebp + 8]
xor eax, eax
push ebp
push 0x49d6e7
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 1], 0
lea eax, [ebp - 0x41c]
xor ecx, ecx
mov edx, 0x400
call fcn.00403010
push 0x400
lea eax, [ebp - 0x41c]
push eax
call sub.kernel32.dll_GetSystemDirectoryA
lea edx, [ebp - 0xc]
lea eax, [ebp - 0x41c]
call fcn.004097b0
lea eax, [ebp - 0x10]
push eax
mov ecx, 3
mov edx, 1
mov eax, dword [ebp - 0xc]
call fcn.00404aa4
lea edx, [ebp - 0x420]
mov eax, dword [ebp - 0x10]
call fcn.00465d7c
mov eax, dword [ebp - 0x420]
lea edx, [ebp - 0x14]
call fcn.00408c20
mov eax, dword [ebp - 0x14]
mov edx, 0x49d704
call fcn.00404990
jne 0x49d497
lea eax, [ebp - 0x18]
mov edx, 0x49d714
call fcn.0040462c
jmp 0x49d4a4
lea eax, [ebp - 0x18]
mov edx, 0x49d724
call fcn.0040462c
lea eax, [ebp - 0x424]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
call fcn.00404898
mov eax, dword [ebp - 0x424]
call fcn.004093ec
test al, al
jne 0x49d4e5
lea eax, [ebp - 0x428]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
call fcn.00404898
mov eax, dword [ebp - 0x428]
call fcn.0040295c
call fcn.004028bc
push dword [ebp - 0x10]
push dword [ebp - 0x18]
push 0x49d734
lea eax, [ebp - 0x42c]
mov edx, 3
call fcn.0040490c
mov eax, dword [ebp - 0x42c]
call fcn.004093ec
test al, al
jne 0x49d53a
push dword [ebp - 0x10]
push dword [ebp - 0x18]
push 0x49d734
lea eax, [ebp - 0x430]
mov edx, 3
call fcn.0040490c
mov eax, dword [ebp - 0x430]
call fcn.0040295c
call fcn.004028bc
push dword [ebp - 0x10]
push dword [ebp - 0x18]
push 0x49d734
push 0x49d744
lea eax, [ebp - 0x434]
mov edx, 4
call fcn.0040490c
mov eax, dword [ebp - 0x434]
call fcn.004093ec
test al, al
jne 0x49d599
push dword [ebp - 0x10]
push dword [ebp - 0x18]
push 0x49d734
push 0x49d744
lea eax, [ebp - 0x438]
mov edx, 4
call fcn.0040490c
mov eax, dword [ebp - 0x438]
call fcn.0040295c
call fcn.004028bc
push dword [ebp - 0x10]
push dword [ebp - 0x18]
push 0x49d734
push 0x49d744
push 0x49d754
lea eax, [ebp - 0x43c]
mov edx, 5
call fcn.0040490c
mov eax, dword [ebp - 0x43c]
call fcn.004093ec
test al, al
jne 0x49d602
push dword [ebp - 0x10]
push dword [ebp - 0x18]
push 0x49d734
push 0x49d744
push 0x49d754
lea eax, [ebp - 0x440]
mov edx, 5
call fcn.0040490c
mov eax, dword [ebp - 0x440]
call fcn.0040295c
call fcn.004028bc
push dword [ebp - 0x10]
push dword [ebp - 0x18]
push 0x49d734
push 0x49d744
push 0x49d754
push 0x49d788
lea eax, [ebp - 0x1c]
mov edx, 6
call fcn.0040490c
mov eax, dword [ebp - 0x1c]
call fcn.004093dc
test al, al
je 0x49d646
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.00409248
mov esi, eax
jmp 0x49d655
mov edx, 2
mov eax, dword [ebp - 0x1c]
call fcn.004092c8
mov esi, eax
xor eax, eax
mov dword [ebp - 8], eax
lea edx, [ebp - 8]
mov ecx, 4
mov eax, esi
call fcn.004092d0
test bl, bl
je 0x49d68a
inc dword [ebp - 8]
xor ecx, ecx
xor edx, edx
mov eax, esi
call fcn.00409328
lea edx, [ebp - 8]
mov ecx, 4
mov eax, esi
call fcn.004092fc
mov eax, esi
call fcn.0040936c
test bl, bl
jne 0x49d6bc
cmp dword [ebp - 8], 0x14
jl 0x49d6bc
mov byte [ebp - 1], 1
push 0x40030
push 0x49d794
push 0x49d7a4
push 0
call sub.user32.dll_MessageBoxW
push 1
call sym.Other.dll_Other_JCSYQ
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49d6ee
lea eax, [ebp - 0x440]
mov edx, 9
call fcn.004045b8
lea eax, [ebp - 0x1c]
mov edx, 5
call fcn.004045b8
ret