Function at 0x44205b
Capabilities:
Get common file path
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
mov eax, dword [ebp + 0x14]
push ebx
push esi
push edi
push 1
mov esi, ecx
pop edi
mov dword [eax], edi
mov ax, word [ebp + 0xc]
cmp ax, 0x806c
jne 0x4421c3
push edi
push ecx
mov ecx, esp
push str.tree_mode
mov dword [0x4c42f4], edi
call fcn.0040a4e8
mov ecx, esi
call fcn.004351d3
xor ebx, ebx
lea ecx, [esi + 0x49c0]
mov dword [0x4c7920], ebx
call fcn.0047715d
lea ecx, [esi + 0x506c]
call fcn.0047715d
lea ecx, [esi + 0x5718]
call fcn.0047715d
lea ecx, [esi + 0x5dc4]
call fcn.0047715d
lea ecx, [esi + 0x210]
push 0xffffffffffffffff
call fcn.00418bab
mov eax, dword [esi + 0x64c0]
lea edi, [esi + 0x1f0]
neg edi
mov dword [esi + 0x240], eax
lea eax, [esi + 0x1f4]
sbb edi, edi
lea ecx, [esi + 0x6474]
and edi, eax
lea eax, [esi + 0x6470]
neg eax
push dword [edi]
sbb eax, eax
and eax, ecx
push dword [eax]
call dword [sym.imp.USER32.dll_SetParent]
mov ecx, esi
call fcn.0043f0cc
lea ecx, [esi + 0x264]
mov dword [ebp - 4], eax
call fcn.00431c19
lea eax, [ebp + 0x14]
mov dword [ebp + 0x14], ebx
push eax
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov ecx, dword [ebp - 4]
mov dword [ebp + 0xc], ebx
cmp ecx, ebx
je 0x442160
lea eax, [ebp - 8]
push eax
call fcn.0046e156
mov ecx, eax
add eax, 4
neg ecx
sbb ecx, ecx
and ecx, eax
mov eax, dword [ecx]
lea ecx, [ebp - 8]
mov dword [ebp + 0xc], eax
call fcn.0048996a
push dword [ebp + 0xc]
lea ecx, [esi + 0x264]
push dword [ebp + 0x14]
call fcn.00431b54
cmp dword [edi], ebx
je 0x44219d
cmp dword [esi + 0x24c], ebx
push 1
je 0x44218d
push ebx
lea ecx, [esi + 0x210]
call fcn.00418b49
jmp 0x44219d
push 0x96
lea ecx, [esi + 0x210]
call fcn.00418ed4
push 1
mov ecx, esi
call fcn.0043bd0d
mov ecx, esi
call fcn.004423a6
push dword [0x4c42f4]
lea ecx, [esi + 0x5c]
call fcn.00414423
push 1
pop edi
jmp 0x44239d
cmp ax, 0x806d
jne 0x442267
push 2
pop eax
push eax
push ecx
mov ecx, esp
push str.tree_mode
mov dword [0x4c42f4], eax
call fcn.0040a4e8
mov ecx, esi
call fcn.004351d3
mov ebx, dword [sym.imp.USER32.dll_ShowWindow]
push 0
mov dword [0x4c7920], edi
push dword [esi + 0x6474]
call ebx
lea ecx, [esi + 0x49c0]
call fcn.0047715d
lea ecx, [esi + 0x506c]
call fcn.0047715d
lea ecx, [esi + 0x5718]
call fcn.0047715d
lea ecx, [esi + 0x5dc4]
call fcn.0047715d
push edi
lea ecx, [esi + 0x210]
call fcn.00418bab
lea ecx, [esi + 0x264]
call fcn.00431c19
push 5
push dword [esi + 0x6474]
call ebx
mov ecx, esi
call fcn.004423a6
push dword [0x4c42f4]
lea ecx, [esi + 0x5c]
call fcn.00414423
jmp 0x44239d
cmp ax, 0x806b
jne 0x4422d8
xor ebx, ebx
push ebx
push ecx
mov ecx, esp
push str.tree_mode
mov dword [0x4c42f4], ebx
call fcn.0040a4e8
mov ecx, esi
call fcn.004351d3
lea ecx, [esi + 0x49c0]
mov dword [0x4c7920], ebx
call fcn.0047715d
lea ecx, [esi + 0x506c]
call fcn.0047715d
lea ecx, [esi + 0x5718]
call fcn.0047715d
lea ecx, [esi + 0x5dc4]
call fcn.0047715d
push edi
lea ecx, [esi + 0x210]
call fcn.00418bab
lea ecx, [esi + 0x264]
call fcn.00431c19
jmp 0x44224d
cmp ax, 0x806a
jne 0x4422f6
mov eax, dword [0x4c42f4]
inc dword [0x4c42f4]
push eax
mov ecx, esi
call fcn.0044240d
jmp 0x44239d
cmp ax, 0x413
jb 0x44239d
cmp ax, 0x415
ja 0x44239d
mov ecx, dword [0x4b9504]
cmp ax, 0x413
jne 0x44231d
and dword [0x4b9504], 0
cmp ax, 0x414
jne 0x442329
mov dword [0x4b9504], edi
cmp ax, 0x415
jne 0x442339
mov dword [0x4b9504], 2
cmp ecx, dword [0x4b9504]
je 0x44234c
call fcn.0043318d
inc dword [0x4b7348]
lea ecx, [esi + 0x710]
call fcn.0048dbc7
lea ecx, [esi + 0x4c78]
call fcn.0048dbc7
lea ecx, [esi + 0x5324]
call fcn.0048dbc7
lea ecx, [esi + 0x59d0]
call fcn.0048dbc7
lea ecx, [esi + 0x607c]
call fcn.0048dbc7
push dword [0x4b9504]
push ecx
mov ecx, esp
push 0x4b47ec
call fcn.0040a4e8
mov ecx, esi
call fcn.004351d3
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x10