Function at 0x41b5e0
Capabilities:
Get common file path

Disassembly:
sub esp, 8
push ebx
push esi
push edi
push 0x46e
push 0x494100
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov ecx, dword [0x487004]
mov ebx, eax
movzx eax, byte [0x48706a]
cmp eax, ebx
ja 0x41b620
mov dl, byte [0x48700c]
mov eax, ebx
sub eax, ecx
add word [0x48700c], ax
mov byte [0x487058], dl
mov edx, dword [0x48700c]
mov esi, dword [0x48706c]
movzx edi, byte [0x487060]
lea eax, [edx + edx]
mov edx, eax
mov eax, dword [0x487068]
sub edx, eax
lea esi, [edx + esi - 0x4dc4]
movzx edx, byte [0x48705b]
add edx, edi
cmp edx, 0x37c
mov word [0x48700c], si
jne 0x41b67b
movzx edx, si
lea eax, [eax + edx + 0x51]
mov dword [0x487068], eax
imul eax, eax, 0x5a
add eax, ecx
mov si, ax
mov word [0x48700c], si
jmp 0x41b68f
add al, cl
sub al, 0x18
add byte [0x487061], al
mov dword [0x487068], 0x70af
movzx eax, si
push eax
call fcn.0041b440
add esp, 4
mov esi, eax
push 0x52de00
lea ecx, [esi + ebx + 0x51]
push 0x46e
mov dword [esp + 0x14], esi
mov dword [0x487068], ecx
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
movzx edx, byte [0x487069]
cmp edx, 0x5cd
mov word [0x48700c], ax
jne 0x41b6ed
movzx ecx, byte [0x487062]
mov eax, dword [0x487068]
add eax, ecx
mov dword [0x487068], eax
add al, al
sub al, 0x18
add byte [0x487008], al
push 0x42d24f
push 0
call fcn.0041d5da
add esp, 8
push 0x52ea00
push 1
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
cmp dword [0x487050], 6
je 0x41b72e
mov eax, dword [0x487068]
movzx edx, word [0x48700c]
lea eax, [eax + eax*2]
sub eax, edx
mov dword [esp + 0xc], eax
jmp 0x41b73d
lea eax, [esi + esi*2]
sub eax, dword [0x487068]
mov word [0x48700c], ax
push 0x48385a
push 0
call fcn.0041d5da
mov edx, dword [0x487018]
mov si, word [0x48700c]
mov ecx, dword [0x487004]
add esp, 8
mov eax, 0x48701c
push ebp
cmp ebx, dword [0x487010]
je 0x41b78b
movzx edi, si
mov ebp, 0xffffffe7
sub ebp, edi
sub ebp, dword [eax]
sub ebp, ebx
add ecx, ebp
cmp ebx, edx
je 0x41b78b
add eax, 8
cmp eax, 0x48706c
jl 0x41b765
mov cl, byte [0x48700c]
add cl, bl
movzx ebp, si
sub cl, 0x18
add byte [0x487008], cl
push ebp
call fcn.0041b440
sub eax, dword [0x487068]
mov edx, dword [esp + 0x14]
add esp, 4
add eax, 0xb23c
xor edi, edi
push edi
mov esi, eax
push 2
xor eax, eax
push eax
push edx
call fcn.0041d750
add esi, eax
mov eax, dword [0x487068]
adc edi, edx
add ebp, esi
lea eax, [eax + ebp - 0x18]
push eax
mov dword [0x487068], eax
call fcn.0041b310
movzx eax, word [0x48700c]
lea ecx, [esi + ebx + 0x51]
cdq
mov dword [0x487068], ecx
xor ebp, ebp
add esp, 4
mov ecx, ebx
sub ecx, eax
sbb ebp, edx
add esi, ecx
adc edi, ebp
cmp edi, edx
jb 0x41b84b
ja 0x41b80c
cmp esi, eax
jb 0x41b84b
mov al, byte [0x487008]
mov bp, word [0x48700c]
movzx ecx, al
movzx dx, al
mov eax, ecx
imul eax, dword [0x48704c]
sub si, dx
add bp, si
mov dword [0x48704c], eax
movzx eax, bp
imul eax, eax, 0x5a
add eax, ecx
cdq
mov word [0x48700c], bp
mov esi, eax
mov dword [esp + 0x14], edx
jmp 0x41b852
mov bp, word [0x48700c]
push ebx
call fcn.0041b440
add esp, 4
cmp byte [0x487068], 6
mov dword [0x487004], eax
je 0x41b874
lea edi, [esi + esi*2]
sub edi, dword [0x487068]
jmp 0x41b87f
mov ecx, dword [0x487068]
lea edi, [ecx + ecx*2]
sub edi, esi
mov esi, edi
imul esi, esi, 0x5a
mov dword [0x487068], edi
add esi, ebx
mov dword [esp + 0x14], 0
mov ecx, 0x2c
lea esp, [esp]
movzx edx, byte [0x487062]
cmp edi, edx
je 0x41b8bd
sub byte [ecx + 0x487058], al
sub ecx, 2
cmp ecx, 3
mov bp, 0xffe5
jg 0x41b8a0
mov word [0x48700c], bp
movzx edx, bp
mov eax, 0x4870c0
mov ecx, 0xffffffe5
pop ebp
cmp edx, dword [0x487038]
je 0x41b8ec
sub dword [eax], ebx
sub eax, 8
cmp eax, 0x48701c
mov dword [0x487004], ecx
jg 0x41b8d2
mov eax, 0x4870c0
cmp edx, dword [0x487038]
je 0x41b90b
sub dword [eax], ebx
sub eax, 8
cmp eax, 0x48701c
mov dword [0x487004], ecx
jg 0x41b8f1
push edx
call fcn.0041a650
mov edi, dword [0x487068]
mov edx, dword [0x487004]
mov cx, word [0x48700c]
add esp, 4
mov eax, 0x2c
lea esp, [esp]
movzx ebx, byte [0x487062]
cmp edi, ebx
je 0x41b94d
sub byte [eax + 0x487058], dl
sub eax, 2
cmp eax, 3
mov cx, 0xffe5
jg 0x41b930
lea eax, [edx + esi + 0x51]
movzx dx, byte [0x487008]
add dx, ax
pop edi
sub dx, 0x18
add cx, dx
pop esi
mov dword [0x487068], eax
mov word [0x48700c], cx
mov eax, 1
pop ebx
add esp, 8
ret 0xc