Function at 0x41c7b0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ddf07
mov eax, dword fs:[0]
push eax
sub esp, 0x4c4
mov eax, dword [0x67432c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x4cc], ecx
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.00480640
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.00480640
add esp, 0x18
mov dword [ebp - 0x424], 7
xor eax, eax
mov dword [ebp - 0x428], 0
lea ecx, [ebp - 0x438]
mov word [ebp - 0x438], ax
push eax
push 0x5e6948
call fcn.00402ad0
xor eax, eax
mov dword [ebp - 4], 0
push eax
push 0x5e6948
lea ecx, [ebp - 0x4c8]
mov dword [ebp - 0x4b4], 7
mov dword [ebp - 0x4b8], 0
mov word [ebp - 0x4c8], ax
call fcn.00402ad0
xor eax, eax
mov byte [ebp - 4], 1
push eax
push 0x5e6948
lea ecx, [ebp - 0x4b0]
mov dword [ebp - 0x49c], 7
mov dword [ebp - 0x4a0], 0
mov word [ebp - 0x4b0], ax
call fcn.00402ad0
mov byte [ebp - 4], 2
call fcn.0045209f
test al, al
je 0x41c8ce
push 0xc55985bb
pop esp
sbb byte [ecx - 0x3f], dl
xor al, 0x53
and eax, 0xfc4d211d
pop ebx
mov al, 0xa6
out dx, al
add edi, esi
pop ecx
pop edi
inc ebx
push ebp
dec esi
mov esp, 0x6a5f1897
add byte [edx + 0x17], ch
push 0
push 0x17
lea eax, [ebp - 0x420]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x41cf78
push 7
xor eax, eax
mov dword [ebp - 0x484], 7
push 0x5e7d40
lea ecx, [ebp - 0x498]
mov dword [ebp - 0x488], 0
mov word [ebp - 0x498], ax
call fcn.00402ad0
cmp dword [ebp - 0x484], 8
lea eax, [ebp - 0x498]
mov byte [ebp - 4], 3
cmovae eax, dword [ebp - 0x498]
push eax
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x218]
push 0x5e89d4
push eax
call fcn.00407f60
lea eax, [ebp - 0x218]
push eax
call fcn.00458c2f
add esp, 0x14
call fcn.00452351
test al, al
je 0x41c978
iretd
call fcn.004520e4
test al, al
je 0x41c999
pop esp
or ah, byte [edx - 0x37ee4243]
cwde
mov ah, bl
mov dl, 0x71
invalid
call fcn.0045216e
test al, al
je 0x41c9ba
and eax, 0x7fc19d4d
insb byte es:[edi], dx
and byte [edx - 0xb], cl
dec edx
cmc
pop ebx
jg 0x41c9a9
mov byte [edi - 0x50eaf870], cl
jmp 0x50af3251
cmp word [ebp - 0x218], 0
jne 0x41c9c8
xor ecx, ecx
jmp 0x41c9e0
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41c9d1
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.00402ad0
push 7
push 0x5e7d40
lea ecx, [ebp - 0x438]
call fcn.00405da0
push 4
push 0x5e89e4
lea ecx, [ebp - 0x438]
call fcn.00405da0
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmovae eax, dword [ebp - 0x438]
push eax
call ebx
mov eax, dword [0x679464]
test eax, eax
jne 0x41ca6c
push 0x15c
call fcn.0046d56f
add esp, 4
mov dword [ebp - 0x4d0], eax
mov byte [ebp - 4], 4
test eax, eax
je 0x41ca61
mov ecx, eax
call fcn.00443b90
jmp 0x41ca63
xor eax, eax
mov byte [ebp - 4], 3
mov dword [0x679464], eax
mov ecx, eax
call fcn.00471d44
push eax
lea ecx, [ebp - 0x480]
call fcn.004041e0
xor eax, eax
mov byte [ebp - 4], 5
push 0xffffffffffffffff
push eax
mov word [ebp - 0x450], ax
lea ecx, [ebp - 0x450]
lea eax, [ebp - 0x480]
mov dword [ebp - 0x43c], 7
push eax
mov dword [ebp - 0x440], 0
call fcn.004029b0
push 0xc
push str.WnConfig.exe
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 6
call fcn.00405da0
cmp dword [ebp - 0x46c], 8
lea edx, [ebp - 0x480]
mov edi, dword [ebp - 0x4cc]
lea ecx, [ebp - 0x450]
cmovae edx, dword [ebp - 0x480]
lea eax, [ebp - 0x438]
cmp dword [ebp - 0x43c], 8
push 0x5e6948
cmovae ecx, dword [ebp - 0x450]
cmp dword [ebp - 0x424], 8
push edx
cmovae eax, dword [ebp - 0x438]
push 0
push 1
push 0
push ecx
push eax
mov ecx, edi
call int.0041c1e0
push 9
xor eax, eax
mov dword [ebp - 0x454], 7
push str.WnUpd.exe
lea ecx, [ebp - 0x468]
mov dword [ebp - 0x458], 0
mov word [ebp - 0x468], ax
call fcn.00402ad0
mov byte [ebp - 4], 7
call fcn.0045230c
test al, al
je 0x41cb76
xchg esp, eax
mov cl, 0xe0
dec ecx
invalid
cmp dword [ebp - 0x458], 0
je 0x41cc9c
call fcn.00452579
test al, al
je 0x41cba2
inc edx
jbe 0x41cc01
invalid
cmp word [ebp - 0x218], 0
jne 0x41cbb0
xor ecx, ecx
jmp 0x41cbcf
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41cbc0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.00402ad0
push 8
push 0x5e89f0
lea ecx, [ebp - 0x438]
call fcn.00405da0
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
cmovae eax, dword [ebp - 0x438]
push eax
call ebx
call fcn.00402320
mov ecx, eax
call fcn.00471d44
mov edx, eax
cmp word [edx], 0
jne 0x41cc23
xor ecx, ecx
jmp 0x41cc3f
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41cc30
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x450]
call fcn.00402ad0
push 9
push str.WnUpd.exe
lea ecx, [ebp - 0x450]
call fcn.00405da0
cmp dword [ebp - 0x43c], 8
lea ecx, [ebp - 0x450]
push 0x5e6948
cmovae ecx, dword [ebp - 0x450]
lea eax, [ebp - 0x438]
cmp dword [ebp - 0x424], 8
push 0
cmovae eax, dword [ebp - 0x438]
push 0
push 1
push 0
push ecx
push eax
mov ecx, edi
call int.0041c1e0
call fcn.004524aa
test al, al
je 0x41ccbd
insb byte es:[edi], dx
lds ecx, [ebp - 0x4b8d41a7]
adc dword [ebp + 0x6b606c0c], eax
jecxz 0x41cd24
adc cl, dl
pop edx
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp word [ebp - 0x218], 0
jne 0x41cccb
xor ecx, ecx
jmp 0x41cce3
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41ccd4
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x438]
call fcn.00402ad0
push 6
push 0x5e8a04
lea ecx, [ebp - 0x438]
call fcn.00405da0
cmp dword [ebp - 0x424], 8
lea eax, [ebp - 0x438]
cmovae eax, dword [ebp - 0x438]
push eax
call ebx
mov eax, dword [0x679464]
test eax, eax
jne 0x41cd57
push 0x15c
call fcn.0046d56f
add esp, 4
mov dword [ebp - 0x4d0], eax
mov byte [ebp - 4], 8
test eax, eax
je 0x41cd4c
mov ecx, eax
call fcn.00443b90
jmp 0x41cd4e
xor eax, eax
mov byte [ebp - 4], 7
mov dword [0x679464], eax
mov ecx, eax
call fcn.00471d44
mov edx, eax
cmp word [edx], 0
jne 0x41cd6a
xor ecx, ecx
jmp 0x41cd7f
mov ecx, edx
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41cd70
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x450]
call fcn.00402ad0
call fcn.004523db
test al, al
je 0x41cdb0
rcr byte [ebp + 0x5c8263f4], 1
xchg esp, eax
or ah, cl
hlt
call fcn.0045223d
test al, al
je 0x41cdce
jp 0x41ce0e
sbb eax, 0x7bc6b4a
mov eax, ds
fnstenv [edx + 0x33ed6c3a]
cmp eax, dword [eax]
mov ebp, 0xc3e8d4cf
push ebp
add eax, dword [eax]
call fcn.00452396
test al, al
je 0x41cde9
punpcklwd mm6, dword [ebx]
jne 0x41ce34
ror byte [ebx + 0x6f510fdd], cl
sub ebp, dword [esi - 0x7fc0abd8]
mov word [edx + 0xc], gs
push 0xc
push 0x5e887c
lea ecx, [ebp - 0x450]
call fcn.00405da0
cmp dword [ebp - 0x43c], 8
lea ecx, [ebp - 0x450]
push 0x5e6948
cmovae ecx, dword [ebp - 0x450]
lea eax, [ebp - 0x438]
cmp dword [ebp - 0x424], 8
push 0
cmovae eax, dword [ebp - 0x438]
push 0
push 1
push 0
push ecx
mov ecx, dword [ebp - 0x4cc]
push eax
call int.0041c1e0
call fcn.004522c7
test al, al
je 0x41ce5a
inc ebx
lea esi, [eax - 0x72000005]
test eax, ecx
sti
invalid
sti
invalid
inc edx
in al, dx
div dh
or eax, 0x21ae4f24
sahf
and byte [ebx + 0x23f9e524], ah
in al, 0x85
or dword [esi + 0x35285e8], edx
add byte [eax + eax*8 - 0x79d7e18c], al
fcomp qword [ebp + 0x3f91f11e]
call fcn.004520e4
test al, al
je 0x41ce81
sub byte [esi - 0xee16224], al
xchg ecx, eax
aas
push ebx
invalid
aad 0x53
daa
sbb esi, dword [edi + 0x2ac9481b]
pop esp
dec ecx
stc
invalid
call fcn.004521b3
test al, al
je 0x41cea9
or byte [esp + ebx + 0x77eb786], dh
mov al, 0xf0
rcl dword [edi], 0xa3
mov dh, 0x4e
cmpsb byte [esi], byte es:[edi]
sub dword [ecx], edx
adc al, 0x89
pop ecx
and byte [ecx - 0x1a0a8712], dh
insb byte es:[edi], dx
je 0x41ce6f
mov eax, dword [ebp - 0x454]
cmp eax, 8
jb 0x41cec7
inc eax
lea ecx, [ebp - 0x468]
push eax
push dword [ebp - 0x468]
call fcn.00402c20
xor eax, eax
mov dword [ebp - 0x454], 7
mov word [ebp - 0x468], ax
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x458], 0
cmp eax, 8
jb 0x41cf02
inc eax
lea ecx, [ebp - 0x450]
push eax
push dword [ebp - 0x450]
call fcn.00402c20
xor eax, eax
mov dword [ebp - 0x43c], 7
mov word [ebp - 0x450], ax
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x440], 0
cmp eax, 8
jb 0x41cf3d
inc eax
lea ecx, [ebp - 0x480]
push eax
push dword [ebp - 0x480]
call fcn.00402c20
xor eax, eax
mov dword [ebp - 0x46c], 7
mov word [ebp - 0x480], ax
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x470], 0
cmp eax, 8
jb 0x41cf78
inc eax
lea ecx, [ebp - 0x498]
push eax
push dword [ebp - 0x498]
call fcn.00402c20
mov eax, dword [ebp - 0x49c]
cmp eax, 8
jb 0x41cf96
inc eax
lea ecx, [ebp - 0x4b0]
push eax
push dword [ebp - 0x4b0]
call fcn.00402c20
xor eax, eax
mov dword [ebp - 0x49c], 7
mov word [ebp - 0x4b0], ax
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x4a0], 0
cmp eax, 8
jb 0x41cfd1
inc eax
lea ecx, [ebp - 0x4c8]
push eax
push dword [ebp - 0x4c8]
call fcn.00402c20
xor eax, eax
mov dword [ebp - 0x4b4], 7
mov word [ebp - 0x4c8], ax
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x4b8], 0
cmp eax, 8
jb 0x41d00c
inc eax
lea ecx, [ebp - 0x438]
push eax
push dword [ebp - 0x438]
call fcn.00402c20
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046d81d
mov esp, ebp
pop ebp
ret