Function at 0x41bab0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5dddae
mov eax, dword fs:[0]
push eax
sub esp, 0x240
mov eax, dword [0x67432c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
add byte [eax], al
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 4], 2
call fcn.004520bc
test al, al
je 0x41bb13
sub ah, byte [ebx + 0x34]
outsd dx, dword [esi]
pop ss
mov edx, 0x3087dab6
fstp dword [eax + eax*8 + 0x54]
stosb byte es:[edi], al
sub eax, 0xcdd7c684
lcall 0x31ce, 0xd82f0bd8
retf
call fcn.0041b700
mov ecx, eax
mov edx, dword [eax]
mov eax, dword [edx + 0x60]
call eax
test al, al
je 0x41bd12
call fcn.00451f63
test al, al
je 0x41bb42
loop 0x41bb70
dec edx
cld
jae 0x41badc
mov es, esi
jp 0x41bb72
cmc
mov cl, 0xde
mov word [eax], fs
popfd
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00480620
add esp, 0xc
lea eax, [ebp - 0x218]
push 0
push 0x10
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x41bd12
add dword [eax], eax
add byte [ebp - 0x2177b], cl
call dword [eax - 0x73]
lea edi, [eax - 0x17000003]
fild dword [esi + edi*8 + 0x68016aff]
lodsb al, byte [esi]
imul ebx, dword [esi], 0xffffff8d
lea edi, [eax - 0x39000003]
inc ebp
cld
add ebp, eax
test dword [eax - 0x950002], esp
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x248]
call fcn.00404060
push 1
push 0x5e6bac
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 3
call fcn.00405c20
push 0xffffffffffffffff
push 0
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x248]
call fcn.00405b10
push 4
push 0x5e89ec
lea ecx, [ebp - 0x248]
call fcn.00405c20
call fcn.004523f8
test al, al
je 0x41bbe6
mov word [ebp - 0x77be1508], fs
test byte [edi - 0x5e605763], dl
std
mov ds, word [ecx]
mov esi, 0xac741dc6
test dword [ebx + 0x5b], edi
pop esp
pop esi
test dword [esi - 0x39], 0x6921e801
add eax, dword [eax]
call fcn.0045250c
test al, al
je 0x41bc0d
push eax
mov ch, 0x51
push edx
xchg ah, ah
mov cs, word [ebx + 0x16c2eaa6]
out 0x22, eax
in al, 0x8e
mov esp, dword [esi + 0x6716c2ea]
out 0x22, eax
inc esp
hlt
call fcn.00402310
mov ecx, eax
call fcn.00471d04
push eax
lea ecx, [ebp - 0x230]
call fcn.00404060
push 0xc
push str.WnConfig.exe
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 4
call fcn.00405c20
call fcn.00452551
test al, al
je 0x41bc60
wait
imul esi, ebx, 0xffffff9b
arpl word [esi - 0x4e], si
push edx
jecxz 0x41bbf4
sub eax, 0x807d5c8e
call 0xcf47897d
int3
cmp dword [ebp + 0x34], 8
lea esi, [ebp + 0x20]
lea edx, [ebp + 0x38]
cmovae esi, dword [ebp + 0x20]
lea ecx, [ebp - 0x230]
cmp dword [ebp + 0x4c], 8
lea eax, [ebp - 0x248]
push esi
cmovae edx, dword [ebp + 0x38]
cmp dword [ebp - 0x21c], 8
push 0
cmovae ecx, dword [ebp - 0x230]
cmp dword [ebp - 0x234], 8
push 0
cmovae eax, dword [ebp - 0x248]
push 1
push edx
push 0
push ecx
mov ecx, dword [ebp - 0x24c]
push eax
call int.0041bda0
mov esi, eax
mov eax, dword [ebp - 0x21c]
cmp eax, 8
jb 0x41bcd5
inc eax
lea ecx, [ebp - 0x230]
push eax
push dword [ebp - 0x230]
call fcn.00402c10
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x220], 0
cmp eax, 8
jb 0x41bd14
inc eax
lea ecx, [ebp - 0x248]
push eax
push dword [ebp - 0x248]
call fcn.00402c10
jmp 0x41bd14
xor esi, esi
mov eax, dword [ebp + 0x1c]
cmp eax, 8
jb 0x41bd29
inc eax
lea ecx, [ebp + 8]
push eax
push dword [ebp + 8]
call fcn.00402c10
xor eax, eax
mov dword [ebp + 0x1c], 7
mov word [ebp + 8], ax
mov eax, dword [ebp + 0x34]
mov dword [ebp + 0x18], 0
cmp eax, 8
jb 0x41bd52
inc eax
lea ecx, [ebp + 0x20]
push eax
push dword [ebp + 0x20]
call fcn.00402c10
mov ecx, dword [ebp + 0x4c]
xor eax, eax
mov dword [ebp + 0x34], 7
mov dword [ebp + 0x30], 0
mov word [ebp + 0x20], ax
cmp ecx, 8
jb 0x41bd7b
inc ecx
push ecx
push dword [ebp + 0x38]
lea ecx, [ebp + 0x38]
call fcn.00402c10
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046d802
mov esp, ebp
pop ebp
ret 0x48