Function at 0x41b5f9
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3b98
call fcn.00612c90
mov eax, dword [0x6ffe74]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov esi, str.sitelogin.dat
mov dword [ebp - 0x3b94], ecx
lea edi, [ebp - 0x18]
push ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
call fcn.00643470
pop ecx
xor ecx, ecx
cmp eax, 1
jae 0x41b673
lea eax, [ebp - 0xfbc]
push eax
push ecx
push ecx
push 0x1a
push ecx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jns 0x41b666
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.006122f0
leave
ret 4
mov eax, str._sOrbit_s
lea ebx, [ebp - 0xfbc]
jmp 0x41b678
mov eax, 0x6c643c
lea ecx, [ebp - 0x18]
push ecx
push ebx
push eax
lea eax, [ebp - 0x13a4]
push 0x3e8
push eax
call fcn.00402e0a
and dword [ebp - 0x3b90], 0
lea eax, [ebp - 0x13a4]
add esp, 0x14
push 0x6c63d0
push eax
lea eax, [ebp - 0x3b90]
push eax
call fcn.00649a00
add esp, 0xc
test eax, eax
jne 0x41b653
cmp dword [ebp - 0x3b90], eax
je 0x41b653
push dword [ebp - 0x3b90]
mov edi, 0x1388
lea eax, [ebp - 0x3ab4]
push edi
push eax
xor esi, esi
call fcn.006494dd
add esp, 0xc
test eax, eax
je 0x41b977
mov ebx, dword [ebp - 0x3b94]
lea eax, [ebp - 0x3ab4]
push eax
call fcn.00643470
pop ecx
test eax, eax
je 0x41b71a
lea eax, [ebp - 0x3ab4]
push eax
call fcn.00643470
dec eax
pop ecx
cmp eax, edi
jae 0x41b98b
mov byte [ebp + eax - 0x3ab4], 0
lea eax, [ebp - 0x3ab4]
push eax
lea eax, [ebp - 0x272c]
push edi
push eax
call fcn.006494f3
add esp, 0xc
lea eax, [ebp - 0x272c]
push eax
call fcn.00643470
pop ecx
inc eax
push eax
lea eax, [ebp - 0x272c]
push eax
call fcn.0064ffd4
push str._site
call fcn.00643470
add esp, 0xc
push eax
lea eax, [ebp - 0x272c]
push str._site
push eax
call fcn.0065106c
add esp, 0xc
test eax, eax
jne 0x41b78b
mov byte [ebp - 0xbd4], al
mov esi, eax
mov byte [ebp - 0x7ec], al
mov byte [ebp - 0x404], al
jmp 0x41b959
mov eax, esi
sub eax, 0
je 0x41b90a
sub eax, 1
je 0x41b8b9
sub eax, 1
jne 0x41b959
push 0x6c9d7c
call fcn.00643470
pop ecx
push eax
lea eax, [ebp - 0x272c]
push 0x6c9d7c
push eax
call fcn.0065106c
add esp, 0xc
test eax, eax
jne 0x41b959
push 0x6c9d7c
call fcn.00643470
pop ecx
lea ecx, [ebp - 0x3ab4]
add eax, ecx
push eax
lea eax, [ebp - 0x404]
push 0x3e8
push eax
call fcn.006494f3
add esp, 0xc
lea eax, [ebp - 0x404]
push eax
call fcn.00643470
pop ecx
test eax, eax
je 0x41b8b2
lea ecx, [ebp - 0x404]
call fcn.004045f9
push ecx
lea ecx, [ebp - 0x3b8c]
mov edi, eax
call fcn.00446eae
xor esi, esi
pop ecx
test edi, edi
jle 0x41b86f
cmp dword [ebp - 0x3abc], 0
jne 0x41b851
lea edx, [ebp - 0x3b24]
mov dword [ebp - 0x3abc], 1
lea ecx, [ebp - 0x3b8c]
call fcn.00446a9a
lea ecx, [ebp - 0x404]
add ecx, esi
lea eax, [ebp - 0x3b24]
push eax
mov edx, ecx
call fcn.00446bf6
add esi, 8
pop ecx
cmp esi, edi
jl 0x41b82d
movsx eax, byte [ebp + edi - 0x405]
mov ecx, 0x6c5bb9
add eax, edi
push 0xffffffffffffffff
push ecx
mov byte [ebp + eax - 0x40c], 0
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x7ec]
push eax
lea eax, [ebp - 0xbd4]
push eax
push ecx
push 0x89
push 5
mov ecx, ebx
call fcn.0043ee6b
mov edi, 0x1388
xor esi, esi
jmp 0x41b959
push 0x6c9d70
call fcn.00643470
pop ecx
push eax
lea eax, [ebp - 0x272c]
push 0x6c9d70
push eax
call fcn.0065106c
add esp, 0xc
test eax, eax
jne 0x41b959
push 0x6c9d70
call fcn.00643470
pop ecx
lea ecx, [ebp - 0x3ab4]
add eax, ecx
push eax
lea eax, [ebp - 0x7ec]
push 0x3e8
push eax
call fcn.006494f3
add esp, 0xc
push 2
pop esi
jmp 0x41b959
push str.site
call fcn.00643470
pop ecx
push eax
lea eax, [ebp - 0x272c]
push str.site
push eax
call fcn.0065106c
add esp, 0xc
test eax, eax
jne 0x41b959
push str.site
call fcn.00643470
pop ecx
lea ecx, [ebp - 0x272c]
add eax, ecx
push eax
lea eax, [ebp - 0xbd4]
push 0x3e8
push eax
call fcn.006494f3
xor esi, esi
add esp, 0xc
inc esi
push dword [ebp - 0x3b90]
lea eax, [ebp - 0x3ab4]
push edi
push eax
call fcn.006494dd
add esp, 0xc
test eax, eax
jne 0x41b6eb
push dword [ebp - 0x3b90]
call fcn.00649273
xor eax, eax
pop ecx
inc eax
jmp 0x41b655
call fcn.00612782
int3