Function at 0x404730
Capabilities:
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x42cba3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x420
push ebx
push ebp
mov ebp, ecx
push esi
push str.http:__update.myprotect.co.kr
lea ecx, [esp + 0x18]
call fcn.004212e1
push 0x43a764
lea ecx, [esp + 0x20]
mov dword [esp + 0x438], 0
call fcn.004212e1
push eax
lea eax, [esp + 0x18]
lea ecx, [esp + 0x28]
push eax
push ecx
mov byte [esp + 0x440], 1
call fcn.004214a2
push str.bin_
lea edx, [esp + 0x2c]
mov bl, 2
push eax
push edx
mov byte [esp + 0x440], bl
call fcn.00421508
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x438], 3
call fcn.004213ac
lea ecx, [esp + 0x28]
mov byte [esp + 0x434], bl
call fcn.00421273
lea ecx, [esp + 0x24]
mov byte [esp + 0x434], 1
call fcn.00421273
lea ecx, [esp + 0x1c]
mov byte [esp + 0x434], 0
call fcn.00421273
push 0x43eb64
lea ecx, [esp + 0x10]
call fcn.004212e1
push 0x43eb64
lea ecx, [esp + 0x14]
mov byte [esp + 0x438], 4
call fcn.004212e1
push 0x43eb64
lea ecx, [esp + 0x1c]
mov byte [esp + 0x438], 5
call fcn.004212e1
mov eax, dword [esp + 0x43c]
mov ebx, dword [esp + 0x444]
mov byte [esp + 0x434], 6
mov esi, dword [eax + 4]
test esi, esi
je 0x404918
push edi
mov eax, esi
mov esi, dword [esi]
add eax, 8
lea ecx, [esp + 0x10]
push eax
call fcn.004213ac
lea ecx, [esp + 0x10]
lea edx, [esp + 0x18]
push ecx
lea eax, [esp + 0x24]
push edx
push eax
call fcn.004214a2
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x43c], 7
call fcn.004213ac
lea ecx, [esp + 0x20]
mov byte [esp + 0x438], 6
call fcn.00421273
mov ecx, dword [esp + 0x10]
push str.uninst_myprotect.exe
push ecx
call fcn.0040e6c8
add esp, 8
test eax, eax
jne 0x4048d3
mov ecx, 0xff
lea edi, [esp + 0x31]
mov byte [esp + 0x30], al
lea edx, [esp + 0x30]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x400
push edx
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.DLL_GetSystemDirectoryA]
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x30]
push eax
jmp 0x4048db
mov eax, dword [esp + 0x10]
mov ecx, dword [ebp + 0x68]
push eax
push ecx
lea edx, [esp + 0x1c]
push str._s_s
push edx
call fcn.0041cce9
mov eax, dword [esp + 0x454]
add esp, 0x10
lea edx, [esp + 0x10]
mov ecx, dword [eax]
lea eax, [esp + 0x1c]
push ecx
push ebx
push edx
lea ecx, [esp + 0x20]
push eax
push ecx
mov ecx, ebp
call fcn.00404a00
test esi, esi
jne 0x404848
pop edi
push 0x43eb64
lea ecx, [esp + 0x24]
call fcn.004212e1
mov edx, dword [esp + 0xc]
lea eax, [esp + 0x20]
push edx
push 0x43a744
push eax
mov byte [esp + 0x440], 8
call fcn.0041cce9
mov ecx, dword [esp + 0x2c]
add esp, 0xc
push ecx
push 0x3ef
mov ecx, ebp
call fcn.004207b6
mov eax, dword [ebx]
mov edx, dword [ebp + 0xe8]
push 0
push eax
push 0x402
push edx
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [ebp + 0xe8]
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
lea ecx, [esp + 0x20]
mov byte [esp + 0x434], 6
call fcn.00421273
lea ecx, [esp + 0x18]
mov byte [esp + 0x434], 5
call fcn.00421273
lea ecx, [esp + 0x10]
mov byte [esp + 0x434], 4
call fcn.00421273
lea ecx, [esp + 0xc]
mov byte [esp + 0x434], 0
call fcn.00421273
lea ecx, [esp + 0x14]
mov dword [esp + 0x434], 0xffffffff
call fcn.00421273
mov ecx, dword [esp + 0x42c]
pop esi
pop ebp
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x42c
ret 0xc