Function at 0x438d00
Capabilities:
Get common file path
Get startup folder

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f063d
mov eax, dword fs:[0]
push eax
sub esp, 0x2e4
mov eax, dword [0x674ff8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 8
mov dword [ebp - 0x2ec], 0x730b40
mov dword [0x730b40], 0x643370
mov dword [0x730b44], 0
mov dword [0x730b48], 0
mov dword [0x730b4c], 0
mov dword [0x730b50], 0
mov dword [0x730b54], 0
call fcn.0047d13e
add esp, 4
test eax, eax
jne 0x438d87
call fcn.005c9b64
mov dword [0x730b44], eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [0x730b44]
mov dword [eax], 0x730b44
mov dword [ebp - 4], 0
push 8
mov dword [0x730b58], 0
mov dword [0x730b5c], 0
mov dword [0x730b60], 0
mov dword [0x730b64], 0
mov dword [0x730b68], 0
call fcn.0047d13e
add esp, 4
test eax, eax
jne 0x438df0
call fcn.005c9b64
mov dword [0x730b58], eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [0x730b58]
mov dword [eax], 0x730b58
mov byte [ebp - 4], 1
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x438e26
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730b7c], eax
mov byte [ebp - 4], 2
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x438e4c
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730b80], eax
mov byte [ebp - 4], 3
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x438e72
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730b84], eax
mov ecx, 0x730b88
mov byte [ebp - 4], 4
call fcn.004901ea
mov byte [ebp - 4], 5
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x438ea6
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730ba4], eax
mov byte [ebp - 4], 6
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x438ecc
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730ba8], eax
mov byte [ebp - 4], 7
call fcn.0047d277
mov ecx, eax
test ecx, ecx
jne 0x438ef2
push 0x80004005
call fcn.004050a0
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [0x730bac], eax
xor eax, eax
mov dword [0x730bb0], 8
mov dword [0x730bc8], 7
mov dword [0x730bc4], 0
mov word [0x730bb4], ax
push eax
push 0x63ca44
mov ecx, 0x730b84
mov byte [ebp - 4], 9
call fcn.004049c0
push 0x730b84
mov ecx, 0x730b80
call fcn.00404270
push 0x730b80
mov ecx, 0x730b7c
call fcn.00404270
mov ecx, 0x730b40
call fcn.00439460
mov ecx, 0x730b44
call fcn.0043d870
mov ecx, 0x730b58
call fcn.0043d870
push 0x63ca44
lea ecx, [ebp - 0x224]
mov dword [ebp - 0x224], 0
call fcn.00404b00
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x21c]
push 0x63ca44
mov dword [ebp - 0x21c], 0
call fcn.00404b00
push 0x208
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 0xb
push 0
push eax
call fcn.005c7190
add esp, 0xc
lea eax, [ebp - 0x218]
push 0
push 0x1c
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push 0x63d060
push str.Kakao
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x224]
push str._s_s_s_
push eax
call fcn.00404790
add esp, 0x14
lea eax, [ebp - 0x21c]
push dword [ebp - 0x224]
push str._slog_
push eax
call fcn.00404790
add esp, 0xc
lea ecx, [ebp - 0x22c]
call fcn.0040e930
push 0x63ca44
lea ecx, [ebp - 0x220]
mov dword [0x730ba0], 0
mov dword [ebp - 0x220], 0
call fcn.00404b00
mov byte [ebp - 4], 0xc
mov esi, dword [ebp - 0x21c]
cmp dword [esi - 4], 1
jle 0x43906c
push dword [esi - 0xc]
lea ecx, [ebp - 0x21c]
call fcn.00404da0
mov esi, dword [ebp - 0x21c]
sub esp, 0x18
mov edx, esp
mov dword [edx + 0x14], 7
mov dword [edx + 0x10], 0
cmp dword [edx + 0x14], 8
jb 0x439089
mov eax, dword [edx]
jmp 0x43908b
mov eax, edx
xor ecx, ecx
mov word [eax], cx
cmp word [esi], cx
je 0x4390af
mov ecx, esi
lea edi, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4390a0
sub ecx, edi
sar ecx, 1
push ecx
push esi
mov ecx, edx
call fcn.0040a0a0
call fcn.0040dd60
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x250]
push eax
call fcn.005ccc0f
or esi, 0xffffffff
test eax, eax
lea eax, [ebp - 0x22c]
mov edi, esi
cmove edi, dword [ebp - 0x250]
push eax
lea eax, [ebp - 0x274]
push eax
call fcn.005ccc0f
test eax, eax
mov ebx, esi
lea eax, [ebp - 0x22c]
cmove ebx, dword [ebp - 0x270]
push eax
lea eax, [ebp - 0x298]
push eax
call fcn.005ccc0f
test eax, eax
mov ecx, esi
lea eax, [ebp - 0x22c]
cmove ecx, dword [ebp - 0x290]
push eax
lea eax, [ebp - 0x2bc]
mov dword [ebp - 0x2e8], ecx
push eax
call fcn.005ccc0f
xor ecx, ecx
test eax, eax
lea eax, [ebp - 0x22c]
cmove ecx, dword [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x2e4], ecx
push eax
call fcn.005ccc0f
add esp, 0x40
test eax, eax
jne 0x439167
mov eax, dword [ebp - 0x2d0]
inc eax
jmp 0x439169
xor eax, eax
push edi
push ebx
push dword [ebp - 0x2e8]
push dword [ebp - 0x2e4]
push eax
push dword [ebp - 0x21c]
lea eax, [ebp - 0x220]
push str._s_02d_02d__02d_02d_02d.log
push eax
call fcn.00404790
mov eax, dword [0x730b88]
add esp, 0x20
mov ecx, 0x730b88
push 0
push 0x1022
push dword [ebp - 0x220]
call dword [eax + 0x24]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x220]
mov dword [0x730ba0], eax
add edx, 0xfffffff0
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4391d2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xa
mov eax, esi
mov edx, dword [ebp - 0x21c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4391f3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x224]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], esi
dec esi
test esi, esi
jg 0x439212
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, 0x730b40
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c2ae8
mov esp, ebp
pop ebp
ret