Function at 0x417120
Capabilities:
Get common file path
Set file attributes

Disassembly:
sub esp, 0x12c
mov eax, dword [0x4b2a8c]
xor eax, esp
mov dword [esp + 0x128], eax
movzx eax, word [0x260dd88]
mov ecx, dword [0x260de70]
push esi
lea esi, [eax + ecx + 0x4b9000]
mov eax, esi
push edi
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x417150
sub eax, edx
lea edx, [esp + 0x2c]
push edx
push 0
push 0x4a75a8
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
test eax, eax
je 0x417415
push ebx
push 0x180
lea eax, [esp + 0x34]
push 0x8302
push eax
call fcn.004839c6
mov ecx, dword [0x260dd84]
add esp, 0xc
and ecx, 0x36
push ecx
lea edx, [esp + 0x34]
push edx
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
movzx eax, word [0x4b8be8]
push 0
push 0
push eax
push esi
mov word [0x260dd80], bx
call fcn.00407440
add esp, 4
push eax
push 2
push ebx
call fcn.00483c77
add esp, 4
push eax
push ebx
mov ecx, esi
call fcn.00407900
movzx eax, word [0x4b8be8]
add esp, 0x1c
test eax, eax
je 0x4171f3
cmp ebx, 0x14
jge 0x4171f3
shl eax, 4
mov byte [eax + ebx + 0x4b9018], bl
lea eax, [esp + 0x30]
mov ecx, eax
sub esi, ecx
mov ebx, 1
mov cl, byte [eax]
mov byte [esi + eax], cl
add eax, ebx
test cl, cl
jne 0x417200
movzx ecx, word [0x260dd88]
movzx eax, word [0x260dda6]
add ecx, edi
cmp ecx, 0xffff
jle 0x417239
lea edx, [ecx - 0x10000]
shr edx, 4
add edx, ebx
mov esi, edx
neg esi
shl esi, 4
add ecx, esi
add eax, edx
cmp byte [0x260def4], 0
mov word [0x260dd88], cx
mov cl, byte [0x260def6]
je 0x417396
test cl, cl
jne 0x417396
lea edi, [esp + 0xc]
call fcn.00434660
test eax, eax
jge 0x4172c0
cmp eax, 0xfffffffe
je 0x41727c
movzx edx, word [esp + 0xe]
mov ecx, 0xd
call fcn.0042d9f0
mov dx, word [esp + 0xc]
xor eax, eax
mov word [0x260dda6], dx
mov dword [0x260de70], eax
mov dword [0x260de74], eax
mov dword [0x260de78], eax
mov dword [0x260de7c], eax
mov dword [0x260de80], eax
pop ebx
pop edi
mov dword [0x260de84], eax
pop esi
mov ecx, dword [esp + 0x128]
xor ecx, esp
call fcn.00482caa
add esp, 0x12c
ret
mov bl, byte [esp + 0x2d]
mov di, word [esp + 0xe]
test bl, bl
je 0x4172db
cmp byte [esp + 0x24], 0
je 0x4172e8
cmp byte [esp + 0x26], 0
jne 0x4172e8
movzx edx, di
mov ecx, 0xd
call fcn.0042d9f0
test bl, bl
je 0x4172f3
cmp byte [esp + 0x24], 0
je 0x4172fa
cmp byte [esp + 0x27], 0
jne 0x41731e
mov al, byte [esp + 0x2b]
movzx cx, al
cmp word [esp + 0x10], cx
ja 0x417311
cmp byte [0x260de54], al
jbe 0x41731e
movzx edx, di
mov ecx, 0xd
call fcn.0042d9f0
lea esi, [esp + 0xc]
call fcn.004346f0
test eax, eax
jge 0x417338
movzx edx, di
mov ecx, 0xb
call fcn.0042d9f0
mov dx, word [esp + 0xc]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov word [0x260dda6], dx
mov edx, dword [esp + 0x20]
pop ebx
mov dword [0x260de70], eax
mov eax, dword [esp + 0x20]
mov dword [0x260de74], ecx
mov ecx, dword [esp + 0x24]
mov dword [0x260de78], edx
mov edx, dword [esp + 0x28]
pop edi
mov dword [0x260de7c], eax
mov dword [0x260de80], ecx
mov dword [0x260de84], edx
pop esi
mov ecx, dword [esp + 0x128]
xor ecx, esp
call fcn.00482caa
add esp, 0x12c
ret
mov word [0x260dda6], ax
movzx eax, ax
shl eax, 4
neg cl
sbb cl, cl
and cl, 3
mov edx, 0xffff
mov dword [0x260de70], eax
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x2b], cl
mov byte [esp + 0x2c], cl
mov byte [esp + 0x24], 0
mov byte [esp + 0x25], 0
mov byte [esp + 0x26], bl
mov byte [esp + 0x27], 0
mov ecx, dword [esp + 0x24]
mov byte [esp + 0x28], bl
mov byte [esp + 0x29], bl
mov byte [esp + 0x2a], 0
mov dword [0x260de78], edx
mov edx, dword [esp + 0x28]
mov byte [esp + 0x2d], bl
mov byte [esp + 0x2e], 0
mov byte [esp + 0x2f], 3
mov dword [0x260de74], eax
mov eax, dword [esp + 0x2c]
mov dword [0x260de7c], ecx
mov dword [0x260de80], edx
jmp 0x4172a3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
sub ecx, 0x50
je 0x41744c
sub ecx, 0x67
je 0x41744c
or word [0x260ddac], 1
pop edi
mov word [0x260dd80], ax
pop esi
mov ecx, dword [esp + 0x128]
xor ecx, esp
call fcn.00482caa
add esp, 0x12c
ret
or word [0x260ddac], 1
mov ecx, 5
mov word [0x260dd80], cx
mov ecx, dword [esp + 0x130]
pop edi
pop esi
xor ecx, esp
call fcn.00482caa
add esp, 0x12c
ret