Function at 0x4433e0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x495787
mov eax, dword fs:[0]
push eax
sub esp, 0xe8
mov eax, dword [0x4be434]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
movzx eax, word [ebx + 0xc]
lea esi, [ebx + 0xc]
mov edi, dword [ebp + 8]
test ax, ax
jne 0x443438
push 0
push 0x1a
push esi
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
movzx eax, word [esi]
test ax, ax
je 0x443862
mov ecx, ebx
call fcn.00444910
cmp word [eax], 0
je 0x443862
cmp dword [edi + 0x10], 1
jbe 0x443862
xor eax, eax
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 7
mov word [ebp - 0x64], ax
cmp dword [edi + 0x14], 8
mov dword [ebp - 4], eax
mov eax, edi
jb 0x443474
mov eax, dword [edi]
cmp word [eax], 0x62
je 0x443483
xor bl, bl
mov al, bl
jmp 0x443864
push 3
push 0x4a41d8
lea ecx, [ebp - 0x64]
call fcn.00407630
mov ecx, 7
mov dword [ebp - 0x18], 0
xor eax, eax
mov dword [ebp - 0x14], ecx
mov word [ebp - 0x28], ax
cmp dword [edi + 0x10], 1
mov byte [ebp - 4], 1
jbe 0x443882
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x4434bf
mov eax, dword [edi]
movzx eax, word [eax + 2]
add eax, 0xffffff9a
cmp eax, 0x11
ja case.0x4434d6.103
movzx eax, byte [eax + 0x4438a0]
jmp dword [eax*4 + 0x443888]
mov eax, str.wpsoffice
jmp 0x4434fe
mov eax, 0x4a0e24
jmp 0x4434fe
mov eax, 0x4a0e2c
jmp 0x4434fe
mov eax, 0x49fd60
jmp 0x4434fe
mov eax, 0x4a0e34
push eax
lea ecx, [ebp - 0x28]
call fcn.0041c380
mov ecx, ebx
call fcn.004448f0
push eax
lea ecx, [ebp - 0xf4]
call fcn.00401a00
push str.Kingsoftoffice6cache_
push eax
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 2
push eax
call fcn.004016a0
add esp, 0xc
mov esi, eax
mov ecx, ebx
mov byte [ebp - 4], 3
call fcn.00444910
push eax
lea eax, [ebp - 0xc4]
push esi
push eax
call fcn.004016a0
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 4
push ecx
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.0040bfb0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 5
push ecx
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.0040bfb0
push str.cache.merge
push eax
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 6
push eax
call fcn.004016a0
add esp, 0x30
mov ecx, edi
push eax
call fcn.00407d00
mov edx, dword [ebp - 0x68]
cmp edx, 8
jb 0x4435d0
mov ecx, dword [ebp - 0x7c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4435c6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443780
push edx
push ecx
call fcn.004876f4
add esp, 8
mov edx, dword [ebp - 0x80]
xor eax, eax
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 7
mov word [ebp - 0x7c], ax
cmp edx, 8
jb 0x443621
mov ecx, dword [ebp - 0x94]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x443617
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443780
push edx
push ecx
call fcn.004876f4
add esp, 8
mov edx, dword [ebp - 0x98]
xor eax, eax
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 7
mov word [ebp - 0x94], ax
cmp edx, 8
jb 0x44367b
mov ecx, dword [ebp - 0xac]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x443671
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443780
push edx
push ecx
call fcn.004876f4
add esp, 8
mov edx, dword [ebp - 0xb0]
xor eax, eax
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 7
mov word [ebp - 0xac], ax
cmp edx, 8
jb 0x4436d8
mov ecx, dword [ebp - 0xc4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4436ce
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443780
push edx
push ecx
call fcn.004876f4
add esp, 8
mov edx, dword [ebp - 0xc8]
xor eax, eax
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 7
mov word [ebp - 0xc4], ax
cmp edx, 8
jb 0x443731
mov ecx, dword [ebp - 0xdc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x443727
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x443780
push edx
push ecx
call fcn.004876f4
add esp, 8
mov edx, dword [ebp - 0xe0]
xor eax, eax
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 7
mov word [ebp - 0xdc], ax
cmp edx, 8
jb 0x443790
mov ecx, dword [ebp - 0xf4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x443786
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x443786
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004876f4
add esp, 8
xor eax, eax
cmp dword [edi + 0x14], 8
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
jb 0x4437b5
mov edi, dword [edi]
lea eax, [ebp - 0x4c]
push eax
push 0
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExW]
test eax, eax
je 0x4437d6
cmp dword [ebp - 0x2c], 0x2800000
ja 0x4437d6
mov ecx, dword [ebp - 0x14]
mov bl, 1
jmp 0x4437db
mov ecx, dword [ebp - 0x14]
xor bl, bl
cmp ecx, 8
jb 0x44380e
lea edx, [ecx*2 + 2]
mov ecx, dword [ebp - 0x28]
mov eax, ecx
cmp edx, 0x1000
jb 0x443804
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44384e
push edx
push ecx
call fcn.004876f4
add esp, 8
mov edx, dword [ebp - 0x50]
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x44385e
mov ecx, dword [ebp - 0x64]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x443854
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x443854
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004876f4
add esp, 8
mov al, bl
jmp 0x443864
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00487702
mov esp, ebp
pop ebp
ret 4
call fcn.00403d20
nop
stc
xor al, 68
add ch, bl
xor al, 0x44
add bl, ch
xor al, 0x44
add dl, dh
xor al, 0x44
add ah, ah
xor al, 0x44
add cl, bl
aaa
inc esp
add byte [eax], al
add eax, 0x5050505
add eax, 33621253
add eax, 84214533
add eax, -858993660
int3