Function at 0x405120
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43872b
mov eax, dword fs:[0]
push eax
sub esp, 0x140
mov eax, dword [0x449080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00403bb0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x138]
push ecx
call fcn.00403890
add esp, 8
cmp dword [ebp - 0x138], 0
je 0x40518c
cmp dword [ebp - 0x134], 0
jne 0x405193
xor al, al
jmp 0x4053f0
mov edx, dword [ebp - 0x134]
push edx
call fcn.004018d0
add esp, 4
mov eax, dword [ebp - 0x134]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00402850
add esp, 8
lea edx, [ebp - 0x114]
push edx
push 0
push 0
push 0x23
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
push str.MicrosoftWindows.logstxt
push 0x104
lea eax, [ebp - 0x114]
push eax
call fcn.0041c804
add esp, 0xc
push 0
lea ecx, [ebp - 0x114]
push ecx
lea ecx, [ebp - 0x12c]
call fcn.00405750
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x134]
push edx
lea eax, [ebp - 0x12c]
push eax
call fcn.00402850
add esp, 8
lea ecx, [ebp - 0x114]
push ecx
call fcn.00404dd0
add esp, 4
movzx edx, al
test edx, edx
je 0x405331
lea eax, [ebp - 0x114]
push eax
call fcn.00404ed0
add esp, 4
movzx ecx, al
test ecx, ecx
je 0x40529f
push 0x43beb8
push 0x44a1f8
call fcn.00405eb0
add esp, 8
push str.Files_downloaded_and_moved_successfully._Proceeding_to_setup_services.
push eax
call fcn.00405eb0
add esp, 8
mov dword [ebp - 0x13c], eax
push 0x4093e0
mov ecx, dword [ebp - 0x13c]
call fcn.0040c800
call fcn.00404ca0
lea edx, [ebp - 0x114]
push edx
call fcn.00404c10
add esp, 4
mov eax, dword [ebp + 8]
push eax
call fcn.00404f70
add esp, 4
jmp 0x40532c
push 0x43bf58
push 0x44a2b8
call fcn.00405eb0
add esp, 8
push str.Failed_to_download_and_setup_files._Skipping_service_setup.
push eax
call fcn.00405eb0
add esp, 8
push 0x43becc
push eax
call fcn.00405eb0
add esp, 8
mov dword [ebp - 0x140], eax
push 0x314
mov ecx, dword [ebp - 0x140]
call fcn.0040c250
push 0x43bec8
push eax
call fcn.00405eb0
add esp, 8
mov dword [ebp - 0x144], eax
push 0x4093e0
mov ecx, dword [ebp - 0x144]
call fcn.0040c800
nop
mov byte [ebp - 0x12d], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12c]
call fcn.0040bfc0
mov al, byte [ebp - 0x12d]
jmp 0x4053f0
jmp 0x4053bb
push 0x43c028
push 0x44a2b8
call fcn.00405eb0
add esp, 8
push str.Failed_to_create_or_change_directory._Skipping_file_download_and_service_setup.
push eax
call fcn.00405eb0
add esp, 8
push 0x43bf70
push eax
call fcn.00405eb0
add esp, 8
mov dword [ebp - 0x148], eax
push 0x318
mov ecx, dword [ebp - 0x148]
call fcn.0040c250
push 0x43bf6c
push eax
call fcn.00405eb0
add esp, 8
mov dword [ebp - 0x14c], eax
push 0x4093e0
mov ecx, dword [ebp - 0x14c]
call fcn.0040c800
nop
mov byte [ebp - 0x12e], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12c]
call fcn.0040bfc0
mov al, byte [ebp - 0x12e]
jmp 0x4053f0
mov ecx, dword [ebp - 0x134]
push ecx
mov edx, dword [ebp - 0x138]
push edx
call fcn.00403a10
add esp, 8
mov byte [ebp - 0x12f], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12c]
call fcn.0040bfc0
mov al, byte [ebp - 0x12f]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004173a4
mov esp, ebp
pop ebp
ret