Function at 0x1006926c
Capabilities:
Get common file path
Get file attributes
Get startup folder

Disassembly:
push 0x2e0
mov eax, 0x100f3d71
call fcn.100cca34
push 0x3c
pop ecx
push 0x3f
mov eax, 0x85
mov ebx, dword [ebp + 8]
mov word [ebp - 0x2a0], ax
pop eax
push 0x41
mov word [ebp - 0x29e], cx
mov word [ebp - 0x29c], ax
pop eax
push 0x4b
pop edx
push 0x4d
mov word [ebp - 0x29a], ax
pop eax
push 0x3b
mov word [ebp - 0x298], dx
pop edx
push 0x3d
mov word [ebp - 0x296], ax
mov word [ebp - 0x294], dx
pop edx
push 0x37
mov word [ebp - 0x292], cx
pop ecx
push 0x42
pop esi
mov word [ebp - 0x290], dx
mov word [ebp - 0x28e], cx
push 0x3a
mov word [ebp - 0x28c], ax
pop eax
mov word [ebp - 0x28a], dx
push 0x3e
mov word [ebp - 0x288], si
mov word [ebp - 0x286], ax
pop eax
push 0x50
mov word [ebp - 0x284], cx
mov word [ebp - 0x282], ax
pop eax
push 0x3c
pop edx
push 0x4d
mov word [ebp - 0x280], ax
mov word [ebp - 0x27e], dx
pop edx
push 0x4b
mov word [ebp - 0x27c], dx
pop edx
mov word [ebp - 0x27a], cx
push 0x4e
mov word [ebp - 0x278], dx
pop edx
push 0x3c
mov word [ebp - 0x276], si
mov word [ebp - 0x274], dx
pop edx
mov edi, dword [ebp + 0xc]
push 0x3f
mov word [ebp - 0x272], dx
mov word [ebp - 0x270], cx
pop ecx
mov word [ebp - 0x26e], cx
push 0x4d
pop ecx
push 0x4e
mov word [ebp - 0x26c], ax
mov word [ebp - 0x26a], cx
pop ecx
push 0x41
pop edx
mov word [ebp - 0x268], cx
push 0x3d
pop ecx
mov word [ebp - 0x266], dx
mov word [ebp - 0x264], si
push 0x3b
mov word [ebp - 0x262], cx
pop ecx
mov word [ebp - 0x260], cx
mov word [ebp - 0x25e], ax
mov word [ebp - 0x25c], ax
add eax, 0x37
mov word [ebp - 0x25a], dx
mov word [ebp - 0x258], cx
lea ecx, [ebp - 0x2a0]
mov word [ebp - 0x256], ax
xor eax, eax
mov word [ebp - 0x254], ax
mov ax, word [ebp - 0x2a0]
mov esi, dword [edi]
lea eax, [ebp - 0x218]
push 0x208
push eax
call fcn.10039bac
push eax
push edi
call dword [esi + 0x60]
test eax, eax
js 0x1006969f
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x2c0], ecx
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x2c0], ecx
mov dword [ebp - 0x2bc], 7
mov word [ebp - 0x2d0], ax
mov dword [ebp - 4], ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x2e8]
call fcn.10011b36
mov byte [ebp - 4], 1
push 0x5c
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.100678b0
add esp, 0xc
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2e8]
call fcn.1000b2cc
and dword [ebp - 0x2a8], 0
lea eax, [ebp - 0x2d0]
and dword [ebp - 0x2a4], 0
lea ecx, [ebp - 0x2b8]
push eax
call fcn.100395d3
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x224]
push 0x30
pop eax
mov word [ebp - 0x224], ax
push 0x6e
pop eax
mov word [ebp - 0x222], ax
push 0x71
pop eax
mov word [ebp - 0x220], ax
xor eax, eax
push 0x69
pop edi
mov word [ebp - 0x21e], di
mov word [ebp - 0x21c], ax
mov ax, word [ebp - 0x224]
call fcn.100496cf
mov esi, eax
push esi
call fcn.100ddd9c
pop ecx
push eax
push esi
lea ecx, [ebp - 0x2b8]
call fcn.1004e21e
lea eax, [ebp - 0x2ec]
push 0x104
push eax
call fcn.1006794a
pop ecx
pop ecx
mov byte [ebp - 4], 3
push 0
push 0x1c
push dword [ebp - 0x2ec]
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
jne 0x1006952c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
or esi, 0xe0ff0000
jmp 0x10069666
xor eax, eax
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x23c], 7
mov word [ebp - 0x250], ax
mov byte [ebp - 4], 4
mov esi, dword [ebp - 0x2ec]
push esi
call fcn.100ddd9c
pop ecx
push eax
push esi
lea ecx, [ebp - 0x250]
call fcn.1004e21e
push 0x64
pop eax
mov word [ebp - 0x238], di
lea ecx, [ebp - 0x238]
mov word [ebp - 0x236], ax
push 0x52
pop eax
mov word [ebp - 0x234], ax
push 0x59
pop eax
mov word [ebp - 0x232], ax
mov word [ebp - 0x230], ax
push 0x4f
pop eax
mov word [ebp - 0x22e], ax
push 0x56
pop eax
mov word [ebp - 0x22c], ax
push 0x4e
pop eax
mov word [ebp - 0x22a], ax
xor eax, eax
mov word [ebp - 0x228], di
mov word [ebp - 0x226], ax
mov ax, word [ebp - 0x238]
call fcn.1006ae58
mov esi, eax
push esi
call fcn.100ddd9c
pop ecx
push eax
push esi
lea ecx, [ebp - 0x250]
call fcn.1004e21e
cmp dword [ebp - 0x23c], 8
lea eax, [ebp - 0x250]
cmovae eax, dword [ebp - 0x250]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0x10
je 0x10069621
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
or esi, 0xe0ff0000
jmp 0x10069657
cmp dword [ebp - 0x2a4], 8
lea eax, [ebp - 0x2b8]
push dword [ebp - 0x2a8]
cmovae eax, dword [ebp - 0x2b8]
lea ecx, [ebp - 0x250]
push eax
call fcn.1004e21e
lea eax, [ebp - 0x250]
mov ecx, ebx
push eax
call fcn.1003fedf
xor esi, esi
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x250]
call fcn.1000b2cc
mov byte [ebp - 4], 2
cmp dword [ebp - 0x2ec], 0
je 0x1006967f
push dword [ebp - 0x2ec]
call fcn.100ccb15
pop ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2b8]
call fcn.1000b2cc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d0]
call fcn.1000b2cc
mov eax, esi
call fcn.100cc9de
ret