Function at 0x405794
Capabilities:
Get common file path
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43056a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x950
mov dword [ebp - 0x94c], ecx
push 0x104
push 0
lea eax, [ebp - 0x920]
push eax
call fcn.00415b10
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x920]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea edx, [ebp - 0x920]
push edx
lea ecx, [ebp - 0x930]
call fcn.00425fbc
mov dword [ebp - 4], 0
push 3
lea eax, [ebp - 0x940]
push eax
lea ecx, [ebp - 0x930]
call fcn.004235d9
mov dword [ebp - 0x950], eax
mov ecx, dword [ebp - 0x950]
mov dword [ebp - 0x954], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x954]
push edx
lea ecx, [ebp - 0x930]
call fcn.00426087
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x940]
call fcn.00425f4e
lea ecx, [ebp - 0x930]
call fcn.00426450
lea eax, [ebp - 0x930]
push eax
lea ecx, [ebp - 0x934]
call fcn.00425cc3
mov byte [ebp - 4], 2
push 0x444744
lea ecx, [ebp - 0x934]
call fcn.0042632a
push 0x80
lea ecx, [ebp - 0x934]
call fcn.00408ae0
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 0x444750
lea ecx, [ebp - 0x924]
call fcn.00425fbc
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x924]
push ecx
lea edx, [ebp - 0x930]
push edx
lea eax, [ebp - 0x944]
push eax
call fcn.0042617d
mov dword [ebp - 0x958], eax
mov ecx, dword [ebp - 0x958]
mov dword [ebp - 0x95c], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x95c]
push edx
lea ecx, [ebp - 0x924]
call fcn.00426087
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x944]
call fcn.00425f4e
mov dword [ebp - 0x928], 1
push 0x800
push 0
lea eax, [ebp - 0x80c]
push eax
call fcn.00415b10
add esp, 0xc
push 0x449bac
lea ecx, [ebp - 0x92c]
call fcn.00425fbc
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x81c]
call fcn.00426498
mov byte [ebp - 4], 6
push 0
push 0x3002
lea ecx, [ebp - 0x934]
call fcn.00408ae0
push eax
lea ecx, [ebp - 0x81c]
call fcn.004265aa
test eax, eax
je 0x405a7c
lea ecx, [ebp - 0x81c]
call fcn.00406300
push 0x800
lea ecx, [ebp - 0x80c]
push ecx
lea ecx, [ebp - 0x81c]
call fcn.004266c7
lea edx, [ebp - 0x80c]
push edx
lea ecx, [ebp - 0x92c]
call fcn.004260d7
mov dword [ebp - 0x93c], 0
lea ecx, [ebp - 0x924]
call fcn.00408ae0
push eax
lea ecx, [ebp - 0x92c]
call fcn.00423673
mov dword [ebp - 0x938], eax
cmp dword [ebp - 0x938], 0
jl 0x405a05
lea ecx, [ebp - 0x924]
call fcn.00406340
push eax
mov eax, dword [ebp - 0x938]
push eax
lea ecx, [ebp - 0x92c]
call fcn.004233a2
mov dword [ebp - 0x93c], 1
lea ecx, [ebp - 0x924]
call fcn.00408ae0
push eax
lea ecx, [ebp - 0x92c]
call fcn.00423673
mov dword [ebp - 0x938], eax
jmp 0x4059b5
cmp dword [ebp - 0x93c], 0
je 0x405a7c
push 0x44476c
lea ecx, [ebp - 0x92c]
call fcn.00423a0c
lea ecx, [ebp - 0x81c]
call fcn.00406300
lea ecx, [ebp - 0x92c]
call fcn.00406340
push eax
lea ecx, [ebp - 0x92c]
call fcn.00406340
push eax
lea ecx, [ebp - 0x92c]
call fcn.0042637e
push eax
lea ecx, [ebp - 0x81c]
call fcn.00426701
push 0xffffffffffffffff
lea ecx, [ebp - 0x92c]
call fcn.004263cd
lea ecx, [ebp - 0x92c]
call fcn.00406340
push eax
lea ecx, [ebp - 0x81c]
call fcn.00426878
lea ecx, [ebp - 0x81c]
call fcn.004267c5
mov dword [ebp - 0x948], 1
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x81c]
call fcn.004264ed
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x92c]
call fcn.00425f4e
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x924]
call fcn.00425f4e
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x934]
call fcn.00425f4e
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x930]
call fcn.00425f4e
mov eax, dword [ebp - 0x948]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret