Function at 0x41bc20
Capabilities:
Create thread
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4463dc
mov eax, dword fs:[0]
push eax
sub esp, 0x1dc
mov eax, dword [0x45a400]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push esi
mov ecx, 0x41af60
mov edi, edx
call fcn.00416f60
push 3
xor ebx, ebx
push 0x44bdc4
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x120], 0xf
mov dword [ebp - 0x124], ebx
mov byte [ebp - 0x134], bl
call fcn.0040366e
lea edx, [ebp - 0x134]
mov ecx, esi
mov dword [ebp - 4], ebx
call fcn.00417040
cmp dword [ebp - 0x120], 0x10
mov dword [ebp - 0x1e4], eax
jb 0x41bcb5
mov eax, dword [ebp - 0x134]
push eax
call fcn.00428258
add esp, 4
mov ecx, dword [ebp - 0x1e4]
mov eax, 0xf
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x124], ebx
mov byte [ebp - 0x134], bl
mov byte [ecx + 0x56], bl
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x190], ebx
mov byte [ebp - 0x1a0], bl
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x174], ebx
mov byte [ebp - 0x184], bl
mov byte [ebp - 0x167], bl
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x154], ebx
push 0xffffffffffffffff
push ebx
push edi
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 4], 1
call fcn.00403978
push 0x103
lea edx, [ebp - 0x117]
push ebx
push edx
mov byte [ebp - 0x118], bl
call fcn.0042a4a0
add esp, 0xc
lea eax, [ebp - 0x118]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
jne 0x41bdef
push 0x2f
mov esi, 0xf
push str.Cannot_detect_the_path_to_the_temporary_folder.
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x124], ebx
mov byte [ebp - 0x134], bl
call fcn.0040366e
push 0xffffffffffffffff
mov byte [ebp - 4], 2
push ebx
lea ecx, [ebp - 0x134]
push ecx
lea ecx, [ebp - 0x1dc]
mov dword [ebp - method.CLightInstallerException.virtual_0], vtable.CLightInstallerException.0
mov dword [ebp - 0x1c8], esi
mov dword [ebp - 0x1cc], ebx
mov byte [ebp - 0x1dc], bl
call fcn.00403978
push 0x455268
lea edx, [ebp - 0x1e0]
push edx
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1b0], ebx
mov byte [ebp - 0x1c0], bl
mov dword [ebp - 0x1a4], ebx
call fcn.0042a64b
lea eax, [ebp - 0x118]
mov dword [ebp - 0x13c], 0xf
mov dword [ebp - 0x140], ebx
mov byte [ebp - 0x150], bl
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x41be10
sub eax, edx
push eax
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x150]
call fcn.0040366e
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x140]
mov edi, 0x10
cmp eax, ebx
je 0x41be71
mov ecx, dword [ebp - 0x150]
cmp dword [ebp - 0x13c], edi
jae 0x41be53
lea ecx, [ebp - 0x150]
cmp byte [ecx + eax - 1], 0x5c
je 0x41be71
push 0x44b3dc
mov ebx, 1
lea eax, [ebp - 0x150]
call fcn.004031ee
xor ebx, ebx
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x150]
push ecx
lea ecx, [ebp - 0x184]
call fcn.00403978
mov ebx, dword [ebp - 0x1e4]
add ebx, 8
lea ecx, [ebp - 0x1a0]
call fcn.00419b70
lea edx, [ebp - 0x1e4]
push edx
xor ebx, ebx
push ebx
push esi
push 0x417190
push ebx
push ebx
mov word [esi + 0x18], 1
call fcn.004293ea
add esp, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x13c], edi
jb 0x41bed8
mov eax, dword [ebp - 0x150]
push eax
call fcn.00428258
add esp, 4
mov esi, 0xf
mov dword [ebp - 0x13c], esi
mov dword [ebp - 0x140], ebx
mov byte [ebp - 0x150], bl
cmp dword [ebp - 0x170], edi
jb 0x41bf06
mov ecx, dword [ebp - 0x184]
push ecx
call fcn.00428258
add esp, 4
mov dword [ebp - 0x170], esi
mov dword [ebp - 0x174], ebx
mov byte [ebp - 0x184], bl
cmp dword [ebp - 0x18c], edi
jb 0x41bf2f
mov edx, dword [ebp - 0x1a0]
push edx
call fcn.00428258
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00428263
mov esp, ebp
pop ebp
ret