Function at 0x44d440
Capabilities:
Get common file path

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x50f1aa
push eax
mov dword fs:[0], esp
sub esp, 0x240
push ebx
push ebp
push esi
push edi
mov esi, ecx
call fcn.004f7db8
mov eax, dword [eax + 4]
xor ebp, ebp
cmp dword [eax + 0x9ec], ebp
je 0x44d4b7
cmp dword [esi + 0x4b0], ebp
je 0x44d4b7
mov eax, dword [esi + 0x54c]
or ebx, 0xffffffff
cmp eax, ebx
je 0x44d4ba
push eax
mov ecx, 0x55f6e0
call fcn.004b2ac0
mov edi, eax
cmp edi, ebp
je 0x44d4ab
lea eax, [esp + 0x10]
push eax
call fcn.004d41aa
mov eax, dword [eax]
mov dword [edi + 0x128], eax
mov ecx, 0x55f6e0
call fcn.004b13e0
jmp 0x44d4ba
or ebx, 0xffffffff
mov dword [0x55f6c4], ebp
mov eax, dword [esi + 0x458]
cmp eax, ebx
mov dword [esi + 0x430], ebp
mov dword [esi + 0x434], ebp
je 0x44d515
push eax
call sub.WSOCK32.dll_closesocket
lea ecx, [esp + 0x10]
push 0xe869
push ecx
mov dword [esi + 0x458], ebx
call fcn.0042e080
add esp, 8
mov eax, dword [eax]
mov ecx, esi
push eax
mov dword [esp + 0x25c], ebp
call fcn.00467d00
lea ecx, [esp + 0x10]
mov dword [esp + 0x258], ebx
call fcn.004dd111
mov eax, dword [esi + 0x45c]
cmp eax, ebx
je 0x44d52b
push eax
call sub.WSOCK32.dll_closesocket
mov dword [esi + 0x45c], ebx
call fcn.004f7db8
mov eax, dword [eax + 4]
mov dword [eax + 0x9ec], ebp
mov eax, dword [esi + 0x47c]
cmp eax, ebp
je 0x44d591
lea ebp, [esi + 0x470]
mov ecx, ebp
call fcn.004d7c58
mov edi, eax
test edi, edi
mov dword [esp + 0x14], edi
je 0x44d585
lea ecx, [edi + 8]
mov dword [esp + 0x258], 1
call fcn.004dd111
lea ecx, [edi + 4]
mov dword [esp + 0x258], ebx
call fcn.004dd111
push edi
call fcn.004dd783
add esp, 4
mov eax, dword [esi + 0x47c]
test eax, eax
jne 0x44d549
xor ebp, ebp
mov edx, dword [esi + 0x55c]
mov dword [esi + 0x4a4], ebp
mov eax, dword [edx + 8]
dec eax
mov dword [esp + 0x10], eax
js 0x44d611
mov eax, dword [esi + 0x55c]
lea edx, [esp + 0x48]
push edx
push 0x104
mov ecx, dword [eax + 4]
mov edi, dword [ecx + ebp*4]
mov ebx, dword [edi + 4]
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [esp + 0x14c]
lea ecx, [esp + 0x48]
push eax
push ebx
push 0x55615c
push ecx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
lea edx, [esp + 0x14c]
push edx
call fcn.004c47be
add esp, 4
test edi, edi
je 0x44d603
mov ecx, edi
call fcn.004dd111
push edi
call fcn.004dd783
add esp, 4
mov eax, dword [esp + 0x10]
inc ebp
cmp ebp, eax
jle 0x44d5a7
xor ebp, ebp
or ebx, 0xffffffff
mov ecx, dword [esi + 0x55c]
push ebx
push ebp
call fcn.004d6faf
mov ebx, dword [esi + 0x57c]
mov edi, ebp
dec ebx
js 0x44d64b
mov eax, dword [esi + 0x578]
mov ebp, dword [eax + edi*4]
test ebp, ebp
je 0x44d646
mov ecx, ebp
call fcn.004dd111
push ebp
call fcn.004dd783
add esp, 4
inc edi
cmp edi, ebx
jle 0x44d629
or ebp, 0xffffffff
lea ecx, [esi + 0x574]
push ebp
push 0
call fcn.004d6faf
mov ecx, dword [esi + 0x3a4]
mov edi, 0
mov ebx, dword [ecx + 8]
dec ebx
js 0x44d689
mov edx, dword [esi + 0x3a4]
mov eax, dword [edx + 4]
mov ecx, dword [eax + edi*4]
test ecx, ecx
je 0x44d684
mov edx, dword [ecx]
push 1
call dword [edx + 4]
inc edi
cmp edi, ebx
jle 0x44d66d
mov ecx, dword [esi + 0x3a4]
push ebp
push 0
call fcn.004d6faf
mov ecx, esi
call fcn.0042e870
mov ecx, dword [esi + 0x4b0]
test ecx, ecx
je 0x44d6d1
mov eax, dword [esi + 0x4a8]
cmp eax, 0x1a9
je 0x44d6d1
cmp eax, 0x1aa
je 0x44d6d1
test ecx, ecx
je 0x44d6c7
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov dword [esi + 0x4b0], 0
lea ecx, [esp + 0x10]
push 0xfb
push ecx
mov dword [esi + 0x54c], ebp
call fcn.0042e080
add esp, 8
mov ecx, dword [esi + 0x3c]
mov eax, dword [eax]
mov edi, 2
push eax
mov edx, dword [ecx]
mov dword [esp + 0x25c], edi
call dword [edx + 0x50]
lea ecx, [esp + 0x10]
mov dword [esp + 0x258], ebp
call fcn.004dd111
call fcn.004dd995
test eax, eax
je 0x44d722
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x44d724
xor eax, eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, eax
call fcn.004da5a5
call fcn.004f7db8
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x704]
test ecx, ecx
je 0x44d7da
cmp dword [esp + 0x24], edi
jne 0x44d7da
mov edx, dword [0x5580a0]
mov dword [esp + 0x14], edx
mov dword [esp + 0x258], 3
call fcn.004f7db8
call fcn.004f7db8
mov eax, dword [eax + 0xc]
push edi
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
mov edi, eax
lea eax, [esp + 0x18]
push 0xfb
push eax
call fcn.0042e080
add esp, 8
mov ebx, dword [eax]
mov byte [esp + 0x258], 4
call fcn.004dd995
test eax, eax
je 0x44d7aa
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x44d7ac
xor eax, eax
push ebx
push edi
lea ecx, [eax + 0x8e4]
call fcn.004b0040
lea ecx, [esp + 0x18]
mov byte [esp + 0x258], 3
call fcn.004dd111
lea ecx, [esp + 0x14]
mov dword [esp + 0x258], ebp
call fcn.004dd111
mov eax, dword [esi + 0x254]
push 0
push 0
push 0x14b
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x55cdc0
lea ecx, [esi + 0x238]
call fcn.004dcbff
call fcn.004f7db8
mov ecx, dword [eax + 4]
call fcn.00444e00
push 0x55cdc0
lea ecx, [esi + 0x550]
call fcn.004dd29a
push 0x55cdc0
lea ecx, [esi + 0x570]
call fcn.004dd29a
mov eax, dword [esi + 0x44c]
test eax, eax
jne 0x44d848
mov ecx, esi
call fcn.00467520
mov dword [esi + 0x44c], 1
mov ecx, dword [esi + 0x1c]
push 0xa
push ecx
mov dword [esi + 0x5a4], 0
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x55eec8]
push eax
mov edx, dword [eax]
call dword [edx + 0x20]
call fcn.004c437f
call fcn.004dd995
pop edi
pop esi
pop ebp
pop ebx
test eax, eax
je 0x44d884
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x44d886
xor eax, eax
push 0
push 0
lea ecx, [eax + 0x81c]
call fcn.004e6adb
mov ecx, eax
call fcn.0042e870
call fcn.004dd995
test eax, eax
je 0x44d8ae
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x44d8b0
xor eax, eax
push 0
push 0
lea ecx, [eax + 0x758]
call fcn.004e6adb
mov ecx, eax
call fcn.004801b0
mov ecx, dword [esp + 0x240]
mov dword fs:[0], ecx
add esp, 0x24c
ret