Function at 0x44e5cc
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x47c
mov eax, dword [0x56afe8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, ecx
mov esi, 0x527fb4
push esi
lea ecx, [ebp - 0x464]
call fcn.00402af5
push esi
lea ecx, [ebp - 0x46c]
call fcn.00402af5
push esi
lea ecx, [ebp - 0x468]
call fcn.00402af5
lea esi, [edi + 0x12c]
test esi, esi
je 0x44e61e
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [edi + 0xec]
push eax
lea ecx, [ebp - 0x464]
call fcn.00402bd6
lea eax, [edi + 0xbc]
push eax
lea ecx, [ebp - 0x46c]
call fcn.00402bd6
lea eax, [edi + 0xe8]
push eax
lea ecx, [ebp - 0x468]
call fcn.00402bd6
mov eax, dword [edi + 0xf0]
mov edi, dword [edi + 0xf4]
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x47c], edi
test esi, esi
je 0x44e677
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [ebp - 0x464]
xor ebx, ebx
cmp dword [esi - 0xc], ebx
jne 0x44e7ef
mov edi, dword [ebp - 0x46c]
push 0x2f
push edi
call sub.msvcrt.dll_wcsrchr
pop ecx
pop ecx
test eax, eax
jne 0x44e6a1
or eax, 0xffffffff
jmp 0x44e6a5
sub eax, edi
sar eax, 1
lea ecx, [eax + 1]
mov eax, dword [edi - 0xc]
sub eax, ecx
push eax
push ecx
lea eax, [ebp - 0x464]
push eax
lea ecx, [ebp - 0x46c]
call fcn.004216b7
push 0x410
lea eax, [ebp - 0x424]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x424]
push eax
push 0x208
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push dword [ebp - 0x464]
lea eax, [ebp - 0x424]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x424]
push eax
call fcn.0041505c
pop ecx
test eax, eax
je 0x44e7dc
lea eax, [ebp - 0x460]
push eax
push ebx
lea eax, [ebp - 0x424]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
test eax, eax
je 0x44e7dc
push 8
lea eax, [ebp - 0x478]
push ebx
push eax
call sub.msvcrt.dll_memset
mov edx, dword [ebp - 0x444]
add esp, 0xc
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x474], edx
mov dword [ebp - 0x478], eax
cmp edx, dword [ebp - 0x470]
jne 0x44e7dc
cmp eax, dword [ebp - 0x47c]
jne 0x44e7dc
mov ecx, 0x1400000
cmp eax, ecx
ja 0x44e77b
test edx, edx
jg 0x44e77b
push 0x3200000
jmp 0x44e77c
push ecx
xor eax, eax
lea edi, [ebp - 0x14]
stosd dword es:[edi], eax
push ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x424]
push eax
call fcn.00430113
push 0x10
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x43c]
push eax
call fcn.0044e1d1
add esp, 0x1c
lea eax, [ebp - 0x43c]
cmp dword [ebp - 0x428], 8
jb 0x44e7c0
mov eax, dword [ebp - 0x43c]
push eax
lea ecx, [ebp - 0x468]
call fcn.0043ac41
neg eax
lea ecx, [ebp - 0x43c]
sbb ebx, ebx
inc ebx
call fcn.00410d88
mov ecx, dword [ebp - 0x464]
lea ecx, [ecx - 0x10]
call fcn.004042e9
jmp 0x44e935
cmp dword [esi - 4], 1
jle 0x44e809
push dword [esi - 0xc]
lea ecx, [ebp - 0x464]
call fcn.004038d8
mov esi, dword [ebp - 0x464]
push esi
call fcn.0041505c
pop ecx
test eax, eax
je 0x44e935
cmp dword [esi - 4], 1
jle 0x44e832
push dword [esi - 0xc]
lea ecx, [ebp - 0x464]
call fcn.004038d8
mov esi, dword [ebp - 0x464]
lea eax, [ebp - 0x460]
push eax
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
test eax, eax
je 0x44e935
push 8
lea eax, [ebp - 0x478]
push ebx
push eax
call sub.msvcrt.dll_memset
mov ecx, dword [ebp - 0x444]
add esp, 0xc
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x474], ecx
mov dword [ebp - 0x478], eax
cmp ecx, dword [ebp - 0x470]
jne 0x44e935
cmp eax, edi
jne 0x44e935
cmp eax, 0x1400000
ja 0x44e8bc
test ecx, ecx
jg 0x44e8bc
xor eax, eax
lea edi, [ebp - 0x14]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
cmp dword [esi - 4], 1
jle 0x44e8b5
push dword [esi - 0xc]
lea ecx, [ebp - 0x464]
call fcn.004038d8
mov esi, dword [ebp - 0x464]
push 0x3200000
jmp 0x44e8e4
xor eax, eax
lea edi, [ebp - 0x14]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
cmp dword [esi - 4], 1
jle 0x44e8df
push dword [esi - 0xc]
lea ecx, [ebp - 0x464]
call fcn.004038d8
mov esi, dword [ebp - 0x464]
push 0x1400000
push ebx
lea eax, [ebp - 0x14]
push eax
push esi
call fcn.00430113
push 0x10
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x43c]
push eax
call fcn.0044e1d1
add esp, 0x1c
lea eax, [ebp - 0x43c]
cmp dword [ebp - 0x428], 8
jb 0x44e919
mov eax, dword [ebp - 0x43c]
push eax
lea ecx, [ebp - 0x468]
call fcn.0043ac41
neg eax
lea ecx, [ebp - 0x43c]
sbb ebx, ebx
inc ebx
call fcn.00410d88
mov ecx, dword [ebp - 0x468]
add ecx, 0xfffffff0
call fcn.004042e9
mov ecx, dword [ebp - 0x46c]
add ecx, 0xfffffff0
call fcn.004042e9
lea ecx, [esi - 0x10]
call fcn.004042e9
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00522d04
leave
ret