Function at 0x41bb80
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5dddfe
mov eax, dword fs:[0]
push eax
sub esp, 0x240
mov eax, dword [0x67432c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 4], 2
call fcn.0045209f
test al, al
je 0x41bbe3
dec ebp
mov ebp, 0x85f5a5da
adc dword [edi - 0x12], edi
or al, 0x8a
out dx, eax
and al, bh
lodsd eax, dword [esi]
jbe 0x41bc0a
xchg edx, eax
das
and bh, al
mov word [ecx], cs
pop esi
mov al, byte [0xd745e135]
mov bl, 0xb8
call fcn.0041b7d0
mov ecx, eax
mov edx, dword [eax]
mov eax, dword [edx + 0x60]
call eax
test al, al
je 0x41bde2
call fcn.00451f46
test al, al
je 0x41bc12
hlt
sub edx, dword [ebp + 0x53]
leave
test dword [esi + 0x8682f94], ebx
add al, byte [eax]
add byte [ebp - 0x2177b], cl
jmp [edx]
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00480640
add esp, 0xc
lea eax, [ebp - 0x218]
push 0
push 0x10
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x41bde2
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x248]
call fcn.004041e0
push 1
push 0x5e6ba4
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 3
call fcn.00405da0
push 0xffffffffffffffff
push 0
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x248]
call fcn.00405c90
push 4
adc ah, byte [eax + 0x46afffe]
push 0x5e89e4
lea ecx, [ebp - 0x248]
call fcn.00405da0
call fcn.004523db
test al, al
je 0x41bcb6
add eax, eax
into
xchg dword [ecx + 6], esi
xchg ecx, eax
sub dword [esi], ebp
or dword [0x8a8de075], ebp
js 0x41bc7a
xor eax, 0x1dd9fb9d
adc al, 0xf5
stc
pop es
jo 0x41bc43
xor ebp, eax
xor al, 0x68
add eax, dword [eax]
call fcn.004524ef
test al, al
je 0x41bcdd
xor eax, 0x2c541b79
xchg edx, eax
iretd
call fcn.00402320
mov ecx, eax
call fcn.00471d44
push eax
lea ecx, [ebp - 0x230]
call fcn.004041e0
push 0xc
push str.WnConfig.exe
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 4
call fcn.00405da0
call fcn.00452534
test al, al
je 0x41bd30
adc al, 0xe4
insd dword es:[edi], dx
adc ebx, edx
cmp eax, 0xb5a9e77f
fsub dword [ebx + 0x4176b4b7]
or edi, dword [ebx - 0x639ceeb5]
bound ebp, qword [esi + 0x1fc42d15]
cmp dword [ebp + 0x34], 8
lea esi, [ebp + 0x20]
lea edx, [ebp + 0x38]
cmovae esi, dword [ebp + 0x20]
lea ecx, [ebp - 0x230]
cmp dword [ebp + 0x4c], 8
lea eax, [ebp - 0x248]
push esi
cmovae edx, dword [ebp + 0x38]
cmp dword [ebp - 0x21c], 8
push 0
cmovae ecx, dword [ebp - 0x230]
cmp dword [ebp - 0x234], 8
push 0
cmovae eax, dword [ebp - 0x248]
push 1
push edx
push 0
push ecx
mov ecx, dword [ebp - 0x24c]
push eax
call fcn.0041be70
mov esi, eax
mov eax, dword [ebp - 0x21c]
cmp eax, 8
jb 0x41bda5
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402c20
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x220], 0
cmp eax, 8
jb 0x41bde4
inc eax
lea ecx, [ebp - 0x248]
push eax
push dword [ebp - 0x248]
call fcn.00402c20
jmp 0x41bde4
xor esi, esi
mov eax, dword [ebp + 0x1c]
cmp eax, 8
jb 0x41bdf9
inc eax
lea ecx, [ebp + 8]
push eax
push dword [ebp + 8]
call fcn.00402c20
xor eax, eax
mov dword [ebp + 0x1c], 7
mov word [ebp + 8], ax
mov eax, dword [ebp + 0x34]
mov dword [ebp + 0x18], 0
cmp eax, 8
jb 0x41be22
inc eax
lea ecx, [ebp + 0x20]
push eax
push dword [ebp + 0x20]
call fcn.00402c20
mov ecx, dword [ebp + 0x4c]
xor eax, eax
mov dword [ebp + 0x34], 7
mov dword [ebp + 0x30], 0
mov word [ebp + 0x20], ax
cmp ecx, 8
jb 0x41be4b
inc ecx
push ecx
push dword [ebp + 0x38]
lea ecx, [ebp + 0x38]
call fcn.00402c20
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]