Function at 0x4044fa
Capabilities:
Get common file path
Get program files directory
Get startup folder

Disassembly:
push 0x438
mov eax, 0x4525c9
call fcn.00442764
mov ebx, dword [ebp + 8]
lea esi, [ebx + 4]
mov edi, esi
mov dword [ebp - 0x444], ebx
mov dword [ebx], vtable.PathConverter.0
call fcn.0040102d
and dword [ebp - 4], 0
lea edi, [ebx + 0x24]
call fcn.0040102d
lea edi, [ebx + 0x44]
call fcn.0040102d
lea edi, [ebx + 0x64]
call fcn.0040102d
lea edi, [ebx + 0x84]
call fcn.0040102d
lea edi, [ebx + 0xa4]
call fcn.0040102d
xor eax, eax
push 0x40e
mov byte [ebp - 4], 5
push eax
mov word [ebp - 0x420], ax
lea eax, [ebp - 0x41e]
push eax
call fcn.0043e4b0
add esp, 0xc
push 1
push 0x24
lea eax, [ebp - 0x420]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x43c]
call fcn.00401238
mov edi, vtable.TString.0
mov dword [ebp - 0x440], edi
lea eax, [ebp - 0x440]
mov byte [ebp - 4], 6
call fcn.004011e0
push 0
mov byte [ebp - 4], 5
push 1
lea esi, [ebp - 0x43c]
mov dword [ebp - 0x440], edi
call fcn.0040146e
push 0x45702c
lea eax, [ebx + 8]
push eax
call fcn.00402d5e
push 0x410
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.0043e4b0
add esp, 0xc
lea eax, [ebp - 0x420]
push eax
push 0x104
call dword [sym.imp.KERNEL32.DLL_GetTempPathW]
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x43c]
call fcn.00401238
mov dword [ebp - 0x440], edi
lea eax, [ebp - 0x440]
lea esi, [ebx + 0x24]
mov byte [ebp - 4], 7
call fcn.004011e0
mov byte [ebp - 4], 5
mov dword [ebp - 0x440], edi
push 0
push 1
lea esi, [ebp - 0x43c]
call fcn.0040146e
push 0x410
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.0043e4b0
add esp, 0xc
push 1
push 0x28
lea eax, [ebp - 0x420]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x43c]
call fcn.00401238
mov dword [ebp - 0x440], edi
lea eax, [ebp - 0x440]
lea esi, [ebx + 0x44]
mov byte [ebp - 4], 8
call fcn.004011e0
push 0
mov byte [ebp - 4], 5
push 1
lea esi, [ebp - 0x43c]
mov dword [ebp - 0x440], edi
call fcn.0040146e
push 0x45702c
lea eax, [ebx + 0x48]
push eax
call fcn.00402d5e
push 0x410
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.0043e4b0
add esp, 0xc
push 1
push 0x1a
lea eax, [ebp - 0x420]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x43c]
call fcn.00401238
mov dword [ebp - 0x440], edi
lea eax, [ebp - 0x440]
lea esi, [ebx + 0x64]
mov byte [ebp - 4], 9
call fcn.004011e0
push 0
mov byte [ebp - 4], 5
push 1
lea esi, [ebp - 0x43c]
mov dword [ebp - 0x440], edi
call fcn.0040146e
push 0x45702c
lea eax, [ebx + 0x68]
push eax
call fcn.00402d5e
push 0x410
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.0043e4b0
add esp, 0xc
push 1
push 0x26
lea eax, [ebp - 0x420]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x43c]
call fcn.00401238
mov dword [ebp - 0x440], edi
lea eax, [ebp - 0x440]
lea esi, [ebx + 0x84]
mov byte [ebp - 4], 0xa
call fcn.004011e0
push 0
mov byte [ebp - 4], 5
push 1
lea esi, [ebp - 0x43c]
mov dword [ebp - 0x440], edi
call fcn.0040146e
push 0x45702c
lea eax, [ebx + 0x88]
push eax
call fcn.00402d5e
push 0x410
xor esi, esi
lea eax, [ebp - 0x420]
push esi
push eax
call fcn.0043e4b0
add esp, 0xc
push 1
push esi
lea eax, [ebp - 0x420]
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x43c]
call fcn.00401238
mov dword [ebp - 0x440], edi
lea eax, [ebp - 0x440]
lea esi, [ebx + 0xa4]
mov byte [ebp - 4], 0xb
call fcn.004011e0
push 0
mov byte [ebp - 4], 5
push 1
lea esi, [ebp - 0x43c]
mov dword [ebp - 0x440], edi
call fcn.0040146e
push 0x45702c
lea eax, [ebx + 0xa8]
push eax
call fcn.00402d5e
mov eax, ebx
call fcn.004427e7
ret 4