Function at 0x420a7c
Capabilities:
Encode data using xor
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe8c
mov eax, 0x4c9a5c
push ebx
push esi
push edi
mov esi, dword [ebp + 0xc]
call fcn.0049fef4
xor edx, edx
mov dword [ebp - 0x58], edx
xor ecx, ecx
mov dword [ebp - 0x5c], ecx
xor eax, eax
mov dword [ebp - 0x6c], eax
mov byte [ebp - 0x6d], 0
push 0x104
lea edx, [ebp - 0x174]
push edx
call sub.KERNEL32.DLL_GetWindowsDirectoryA
push 0x4c5f11
lea ecx, [ebp - 0x174]
push ecx
call fcn.0049fb64
add esp, 8
push 0x4c5f13
lea eax, [ebp - 0x174]
push eax
call fcn.0049fb64
add esp, 8
mov ebx, dword [ebp + 0x10]
push 0
push ebx
push esi
call fcn.004a1cf8
add esp, 0xc
push esi
push 1
push 4
lea eax, [ebp - 0x60]
push eax
call fcn.004a1c1c
add esp, 0x10
cmp dword [ebp - 0x60], 0x32000
jg 0x420e35
mov edx, dword [ebp - 0x60]
push edx
call fcn.0049f2bc
pop ecx
mov dword [ebp - 0x58], eax
sub ebx, dword [ebp - 0x60]
push 0
push ebx
push esi
call fcn.004a1cf8
add esp, 0xc
push esi
push 1
mov ecx, dword [ebp - 0x60]
push ecx
mov eax, dword [ebp - 0x58]
push eax
call fcn.004a1c1c
add esp, 0x10
sub ebx, 4
push 0
push ebx
push esi
call fcn.004a1cf8
add esp, 0xc
push esi
push 1
push 4
lea edx, [ebp - 0x64]
push edx
call fcn.004a1c1c
add esp, 0x10
sub ebx, 4
push 0
push ebx
push esi
call fcn.004a1cf8
add esp, 0xc
push esi
push 1
push 4
lea ecx, [ebp - 0x68]
push ecx
call fcn.004a1c1c
add esp, 0x10
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x60]
jne 0x420e35
xor edx, edx
mov ecx, dword [ebp - 0x58]
mov eax, ecx
cmp edx, dword [ebp - 0x60]
jge 0x420b9f
xor byte [eax], 0x64
inc edx
inc eax
cmp edx, dword [ebp - 0x60]
jl 0x420b95
mov edx, dword [ebp - 0x60]
push edx
mov ecx, dword [ebp - 0x58]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.00429974
add esp, 0xc
movzx eax, ax
cmp eax, dword [ebp - 0x64]
jne 0x420e35
mov word [ebp - 0x44], 8
lea edx, [ebp - 0x174]
lea eax, [ebp - 4]
call fcn.004adb50
inc dword [ebp - 0x38]
mov eax, dword [eax]
call fcn.00496ba8
cmp al, 1
lea eax, [ebp - 4]
sete dl
and edx, 1
push edx
mov edx, 2
dec dword [ebp - 0x38]
call fcn.004adc4c
pop ecx
test cl, cl
je 0x420d9e
mov word [ebp - 0x44], 0x14
push 0x40
lea edx, [ebp - 0x174]
mov word [ebp - 0x44], 0x20
lea eax, [ebp - 8]
call fcn.004adb50
inc dword [ebp - 0x38]
mov ecx, dword [eax]
mov dl, 1
mov eax, dword [0x4890c4]
call fcn.0048c254
mov dword [ebp - 0x6c], eax
dec dword [ebp - 0x38]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004adc4c
mov word [ebp - 0x44], 0
jmp 0x420c84
mov eax, dword [ebp - 0x6c]
call fcn.0048c04c
cmp eax, dword [ebp - 0x60]
jne 0x420ccd
mov edx, dword [ebp - 0x60]
push edx
call fcn.0049f2bc
pop ecx
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [ebp - 0x60]
push eax
mov edx, dword [ebp - 0x5c]
push edx
mov ecx, dword [ebp - 0x58]
push ecx
call fcn.0049fcf4
add esp, 0xc
test eax, eax
jne 0x420ccd
mov byte [ebp - 0x6d], 1
jmp 0x420e35
mov ebx, dword [ebp - 0x6c]
mov dword [ebp - 0x14], ebx
test ebx, ebx
je 0x420cf5
mov eax, dword [ebx]
mov dword [ebp - 0x10], eax
mov word [ebp - 0x44], 0x44
mov edx, 3
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x44], 0x38
xor edx, edx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x6c], edx
lea edx, [ebp - 0x174]
mov word [ebp - 0x44], 0x50
call fcn.004adb50
inc dword [ebp - 0x38]
mov ecx, dword [eax]
push ecx
mov eax, dword [ebp + 8]
push eax
call fcn.004299bc
add esp, 8
dec dword [ebp - 0x38]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004adc4c
mov word [ebp - 0x44], 0x5c
lea edx, [ebp - 0x174]
lea eax, [ebp - 0x1c]
call fcn.004adb50
inc dword [ebp - 0x38]
mov eax, dword [eax]
call fcn.00496ba8
cmp al, 1
lea eax, [ebp - 0x1c]
sete dl
and edx, 1
push edx
mov edx, 2
dec dword [ebp - 0x38]
call fcn.004adc4c
pop ecx
test cl, cl
je 0x420d9e
mov word [ebp - 0x44], 0x68
mov edx, str.gvcd_error_2
lea eax, [ebp - 0x20]
call fcn.004adb50
inc dword [ebp - 0x38]
mov eax, dword [eax]
call fcn.00470060
dec dword [ebp - 0x38]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.004adc4c
jmp 0x420e35
mov word [ebp - 0x44], 0x74
push 0xffff
lea edx, [ebp - 0x174]
mov word [ebp - 0x44], 0x80
lea eax, [ebp - 0x24]
call fcn.004adb50
inc dword [ebp - 0x38]
mov ecx, dword [eax]
mov dl, 1
mov eax, dword [0x4890c4]
call fcn.0048c254
mov dword [ebp - 0x6c], eax
dec dword [ebp - 0x38]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.004adc4c
mov word [ebp - 0x44], 0
jmp 0x420e23
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x58]
mov ebx, dword [eax]
call dword [ebx + 8]
mov byte [ebp - 0x6d], 1
cmp dword [ebp - 0x58], 0
je 0x420e45
mov eax, dword [ebp - 0x58]
push eax
call fcn.0049f0e4
pop ecx
cmp dword [ebp - 0x5c], 0
je 0x420e55
mov edx, dword [ebp - 0x5c]
push edx
call fcn.0049f0e4
pop ecx
cmp dword [ebp - 0x6c], 0
je 0x420e83
mov ebx, dword [ebp - 0x6c]
mov dword [ebp - 0x30], ebx
test ebx, ebx
je 0x420e83
mov eax, dword [ebx]
mov dword [ebp - 0x2c], eax
mov word [ebp - 0x44], 0xa4
mov edx, 3
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x44], 0x98
mov al, byte [ebp - 0x6d]
mov edx, dword [ebp - 0x54]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret