Function at 0x4b1bbe
Capabilities:
Get common file path

Disassembly:
push 0x84c
mov eax, 0x4dd155
call fcn.004be9c5
xor edi, edi
push 0x7fe
lea eax, [ebp - 0x812]
mov esi, ecx
push edi
push eax
mov dword [ebp - 0x834], esi
mov word [ebp - 0x814], di
call fcn.004be240
add esp, 0xc
xor ecx, ecx
lea eax, [ebp - 0x830]
mov dword [ebp - 0x818], 7
call fcn.004024d0
add esi, 0x1c
push esi
push str.DownloadProxy.Downloader.1
mov dword [ebp - 4], edi
call dword [sym.imp.ole32.dll_CLSIDFromProgID]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ebx, [ebp - 0x814]
movsd dword es:[edi], dword [esi]
call fcn.004b4754
add esp, 0x10
test eax, eax
jne 0x4b1c4c
xor edi, edi
lea esi, [ebp - 0x830]
call fcn.0040c0b0
mov eax, edi
call fcn.004bea48
ret
lea eax, [ebp - 0x830]
push eax
lea edx, [ebp - 0x814]
call fcn.00402500
push 1
lea eax, [ebp - 0x830]
call fcn.00485410
xor ebx, ebx
lea esi, [ebp - 0x830]
call fcn.004021a0
mov eax, esi
push eax
call fcn.004a7a83
mov ebx, eax
inc ebx
or eax, 0xffffffff
call fcn.004021a0
lea ebx, [ebp - 0x850]
mov edi, esi
call fcn.0047c650
lea ebx, [ebp - 0x848]
mov esi, eax
call fcn.0047c6a0
lea ebx, [ebp - 0x858]
mov dword [ebp - 0x83c], eax
call fcn.0047c650
push dword [esi + 4]
mov ecx, dword [ebp - 0x83c]
push dword [esi]
push dword [ecx + 4]
push dword [ecx]
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x840]
call fcn.004b45b9
mov esi, dword [ebp - 0x834]
add esp, 0x18
push 0xffffffffffffffff
xor edi, edi
push edi
lea ecx, [esi + 0x1238]
lea eax, [ebp - 0x830]
call fcn.004020f0
cmp dword [esi + 0x1230], edi
jne 0x4b1da0
push 0x400
lea eax, [ebp - 0x814]
push edi
push eax
call fcn.004be240
add esp, 0xc
push edi
push 0x2b
lea eax, [ebp - 0x814]
push eax
push edi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x4b1da0
lea edi, [esi + 0x121c]
push edi
lea edx, [ebp - 0x814]
call fcn.00402500
push edi
mov edx, str.TencentQQDownload
call fcn.00403550
lea ebx, [ebp - 0x858]
call fcn.0047c650
lea ebx, [ebp - 0x848]
mov dword [ebp - 0x834], eax
call fcn.0047c6a0
lea ebx, [ebp - 0x850]
mov dword [ebp - 0x83c], eax
call fcn.0047c650
mov ecx, dword [ebp - 0x834]
push dword [ecx + 4]
push dword [ecx]
mov ecx, dword [ebp - 0x83c]
push dword [ecx + 4]
push dword [ecx]
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x838]
call fcn.004b45b9
add esp, 0x18
xor edi, edi
cmp dword [esi + 0x1214], edi
jne 0x4b1e1c
cmp dword [esi + 0x44], edi
je 0x4b1dbe
push 0xffffffffffffffff
push edi
lea eax, [esi + 0x30]
lea ecx, [esi + 0x1200]
call fcn.004020f0
lea edi, [esi + 0x1200]
lea ebx, [ebp - 0x858]
call fcn.0047c650
lea ebx, [ebp - 0x848]
mov dword [ebp - 0x834], eax
call fcn.0047c6a0
lea ebx, [ebp - 0x850]
mov dword [ebp - 0x83c], eax
call fcn.0047c650
mov ecx, dword [ebp - 0x834]
push dword [ecx + 4]
push dword [ecx]
mov ecx, dword [ebp - 0x83c]
push dword [ecx + 4]
push dword [ecx]
push dword [eax + 4]
push dword [eax]
lea eax, [ebp - 0x838]
call fcn.004b45b9
add esp, 0x18
xor edi, edi
cmp dword [esi + 0x1230], edi
je 0x4b1e43
push edi
lea eax, [esi + 0x121c]
lea edx, [ebp - 0x830]
call fcn.004853e0
cmp eax, 0xffffffff
je 0x4b1e43
xor edi, edi
inc edi
jmp 0x4b1c39
lea eax, [esi + 0x1200]
lea ecx, [ebp - 0x830]
call fcn.0047c990
test al, al
jne 0x4b1e3b
jmp 0x4b1c39