Function at 0x41d600
Capabilities:
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x480b1e
mov eax, dword fs:[0]
push eax
mov eax, 0x2888
call fcn.0044fa10
mov eax, dword [0x49eb88]
xor eax, esp
mov dword [esp + 0x2884], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x49eb88]
xor eax, esp
push eax
lea eax, [esp + 0x289c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x28b4]
mov ecx, dword [esp + 0x28d4]
mov edx, dword [esp + 0x28d8]
mov ebp, dword [esp + 0x28ac]
mov ebx, dword [esp + 0x28c8]
mov dword [esp + 0x2c], eax
mov eax, 1
xor edi, edi
push 0x2450
mov dword [esp + 0x20], ecx
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], eax
lea ecx, [esp + 0x38]
xor eax, eax
push edi
push ecx
mov dword [esp + 0x34], edx
mov dword [esp + 0x24], edi
mov word [esp + 0x3c], ax
call fcn.00450880
add esp, 0xc
cmp dword [esp + 0x28c0], edi
jne 0x41d6af
cmp ebx, edi
jne 0x41d6af
xor eax, eax
jmp 0x41d987
push edi
lea edx, [esp + 0x34]
push edx
push ebp
call fcn.004127b0
add esp, 0xc
test eax, eax
je 0x41d983
push 0x62d38
call fcn.00450acc
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x28a4], edi
cmp eax, edi
je 0x41d6ed
mov ecx, eax
call fcn.0041a850
mov esi, eax
jmp 0x41d6ef
xor esi, esi
mov dword [esp + 0x28a4], 0xffffffff
cmp esi, edi
je 0x41d983
push 0x1048
lea edi, [esi + 0x5d550]
push 0
push edi
call fcn.00450880
push ebp
push 0x494598
push 0x824
push edi
call fcn.0044fdd8
mov ecx, dword [esp + 0x28e0]
mov eax, dword [esp + 0x28d8]
mov edx, dword [esp + 0x28ec]
add esp, 0x1c
mov dword [esi + 0x26a8], ecx
push ebx
mov ecx, esi
mov dword [esi + 0x2468], 1
mov dword [esi + 0x62cd4], eax
mov dword [esi + 0x26a0], 0x41d550
mov dword [esi + 0x269c], edx
call fcn.0041b670
mov eax, dword [esp + 0x28cc]
push eax
mov ecx, esi
call fcn.0041b670
mov edi, dword [esp + 0x28b0]
push edi
mov ecx, esi
call fcn.0041b670
test edi, edi
je 0x41d881
cmp dword [esp + 0x28b8], 0
jne 0x41d881
lea ecx, [esp + 0x14]
push ecx
push 0
push ebp
mov dword [esp + 0x20], 0
call dword [sym.imp.WININET.dll_GetUrlCacheEntryInfoW]
test eax, eax
jne 0x41d881
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x41d881
mov edx, dword [esp + 0x14]
push edx
call fcn.0044e92a
mov edi, eax
add esp, 4
test edi, edi
je 0x41d881
mov eax, dword [esp + 0x14]
push eax
push 0
push edi
call fcn.00450880
mov ecx, dword [esp + 0x20]
add esp, 0xc
lea edx, [esp + 0x14]
push edx
push edi
push ebp
mov dword [edi], ecx
call dword [sym.imp.WININET.dll_GetUrlCacheEntryInfoW]
test eax, eax
je 0x41d86d
mov eax, dword [edi + 8]
push eax
mov ecx, esi
mov dword [esp + 0x28], 0
mov dword [esp + 0x1c], 1
call fcn.0041d4e0
cmp dword [esp + 0x28c0], 0
je 0x41d84d
mov ecx, dword [edi + 8]
mov edx, dword [esp + 0x1c]
push ecx
push 0x494598
push 0x104
push edx
call fcn.0044fdd8
add esp, 0x10
jmp 0x41d86d
mov eax, dword [esp + 0x28d0]
mov ecx, dword [esp + 0x28cc]
push eax
push esi
push ecx
push ebx
mov dword [esp + 0x30], 0
call dword [sym.imp.USER32.dll_PostMessageW]
push edi
call fcn.00451364
add esp, 4
cmp dword [esp + 0x24], 0
je 0x41d972
mov edi, dword [esp + 0x1c]
xor edx, edx
push 0x208
push edx
lea eax, [esp + 0x2696]
push eax
mov word [esp + 0x2698], dx
call fcn.00450880
mov ebx, dword [esp + 0x28cc]
add esp, 0xc
test ebx, ebx
jne 0x41d8b9
lea edi, [esp + 0x268c]
jmp 0x41d8c1
test edi, edi
je 0x41d972
cmp dword [esp + 0x28b0], 0
je 0x41d8de
mov ecx, dword [esp + 0x2c]
push 0
push edi
push ecx
push 0
push ebp
call dword [sym.imp.WININET.dll_CreateUrlCacheEntryW]
jmp 0x41d92c
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0x248e]
push eax
mov word [esp + 0x2490], dx
call fcn.00450880
add esp, 0xc
lea ecx, [esp + 0x2484]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x485e58
lea edx, [esp + 0x2490]
push edx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
xor eax, eax
cmp ax, word [edi]
je 0x41d972
push edi
mov ecx, esi
call fcn.0041d4e0
mov ecx, esi
call fcn.0041d3c0
test eax, eax
je 0x41d972
test ebx, ebx
je 0x41d9af
mov ecx, esi
call fcn.004128f0
mov eax, dword [esp + 0x28]
test eax, eax
je 0x41d961
mov ecx, dword [esi + 0x5d118]
mov dword [eax], ecx
cmp dword [esi + 0x5d118], 7
jne 0x41d972
mov dword [esp + 0x18], 1
cmp dword [esp + 0x20], 0
je 0x41d983
mov edx, dword [esi]
mov eax, dword [edx]
push 1
mov ecx, esi
call eax
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x289c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2884]
xor ecx, esp
call fcn.0044f9f3
add esp, 0x2894
ret
mov dword [esp + 0x18], 1
jmp 0x41d983