Function at 0x44dedc
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1048
call fcn.005482e0
mov eax, dword [0x5afee0]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 0x1048], 0
push esi
push edi
push 0x5d8044
lea ecx, [ebx + 0x3c]
call fcn.00406430
lea esi, [ebx + 0x20]
push 0x5d824c
mov ecx, esi
call fcn.00406430
cmp dword [esi + 0x18], 8
jb 0x44df23
mov esi, dword [esi + 4]
jmp 0x44df26
add esi, 4
test esi, esi
je 0x44df35
mov edi, esi
call fcn.0044e650
mov edi, eax
jmp 0x44df38
xor edi, edi
inc edi
xor eax, eax
mov esi, 0x206
push esi
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.00537010
add esp, 0xc
mov eax, edi
neg eax
sbb eax, eax
and eax, 0xffffffeb
push 0
add eax, 0x17
push eax
lea eax, [ebp - 0x414]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x44e179
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebx + 0x74]
call fcn.00406430
xor eax, eax
push esi
push eax
mov word [ebp - 0xc34], ax
lea eax, [ebp - 0xc32]
push eax
call fcn.00537010
add esp, 0xc
push 0x57d948
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0xc34]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp - 0xc34]
push eax
lea ecx, [ebx + 0x90]
call fcn.00406430
xor eax, eax
push esi
push eax
mov word [ebp - 0x61c], ax
lea eax, [ebp - 0x61a]
push eax
call fcn.00537010
add esp, 0xc
mov eax, edi
neg eax
sbb eax, eax
and eax, 0xfffffff5
push 0
add eax, 0x16
push eax
lea eax, [ebp - 0x61c]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x44e179
lea eax, [ebp - 0x61c]
push eax
lea ecx, [ebx + 0xac]
call fcn.00406430
xor eax, eax
push esi
push eax
mov word [ebp - 0x824], ax
lea eax, [ebp - 0x822]
push eax
call fcn.00537010
add esp, 0xc
neg edi
sbb edi, edi
push 0
and edi, 0xfffffff7
add edi, 0x19
push edi
mov edi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x824]
push eax
push 0
call edi
test eax, eax
je 0x44e179
lea eax, [ebp - 0x824]
push eax
lea ecx, [ebx + 0xc8]
call fcn.00406430
xor eax, eax
push esi
push eax
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push eax
call fcn.00537010
add esp, 0xc
push 0
push 0x1a
lea eax, [ebp - 0x20c]
push eax
push 0
call edi
test eax, eax
je 0x44e179
xor eax, eax
push esi
push eax
mov word [ebp - 0xa2c], ax
lea eax, [ebp - 0xa2a]
push eax
call fcn.00537010
mov edi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
add esp, 0xc
push str.MicrosoftInternet_ExplorerQuick_Launch
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0xa2c]
push eax
call edi
lea eax, [ebp - 0xa2c]
push eax
lea ecx, [ebx + 0xe4]
call fcn.00406430
xor eax, eax
push esi
push eax
mov word [ebp - 0x1044], ax
lea eax, [ebp - 0x1042]
push eax
call fcn.00537010
add esp, 0xc
push 0x583dd0
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x1044]
push eax
call edi
lea eax, [ebp - 0x1044]
push eax
lea ecx, [ebx + 0x100]
call fcn.00406430
xor eax, eax
push esi
push eax
mov word [ebp - 0xe3c], ax
lea eax, [ebp - 0xe3a]
push eax
call fcn.00537010
add esp, 0xc
push 0x583e50
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0xe3c]
push eax
call edi
lea eax, [ebp - 0xe3c]
push eax
lea ecx, [ebx + 0x11c]
call fcn.00406430
mov dword [ebp - 0x1048], 1
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x1048]
pop edi
xor ecx, ebp
pop esi
call fcn.0052f7d0
leave
ret