Function at 0x4044c7
Capabilities:
Get common file path
Get program files directory

Disassembly:
push 0x31c
mov eax, 0x419d5e
call fcn.00409881
lea eax, [ebp - 0x320]
xor edi, edi
push eax
mov dword [ebp - 0x324], edi
call fcn.00408e90
push eax
lea eax, [ebp - 0x320]
push edi
push eax
call fcn.00408e10
lea eax, [ebp - 0x21c]
push eax
call fcn.00408e90
push eax
lea eax, [ebp - 0x21c]
push edi
push eax
call fcn.00408e10
lea eax, [ebp - 0x324]
push 1
push eax
call section..text
call fcn.0040435c
mov ebx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsNewStartPanel
push ebx
mov esi, 0x80000002
push esi
call fcn.00408118
push edi
push str.208D2C60_3AEA_1069_A2D7_08002B30309D
push ebx
push esi
call fcn.00407f0f
add esp, 0x40
push ebx
push esi
call fcn.004082dc
mov edi, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsClassicStartMenu
push edi
push esi
call fcn.00408118
push 0
push str.208D2C60_3AEA_1069_A2D7_08002B30309D
push edi
push esi
call fcn.00407f0f
push edi
push esi
call fcn.004082dc
push ebx
dec esi
push esi
call fcn.00408118
push 0
push str.208D2C60_3AEA_1069_A2D7_08002B30309D
push ebx
push esi
call fcn.00407f0f
add esp, 0x40
push ebx
push esi
call fcn.004082dc
push edi
push esi
call fcn.00408118
push 0
push str.208D2C60_3AEA_1069_A2D7_08002B30309D
push edi
push esi
call fcn.00407f0f
push edi
push esi
call fcn.004082dc
mov ebx, str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309D
push ebx
mov esi, 0x80000000
push esi
call fcn.00408118
push ebx
push esi
call fcn.00403916
push 0x41c468
push str.InfoTip
push ebx
push esi
call fcn.0040804f
add esp, 0x48
push str.Internet_Explorer
push str.LocalizedString
push ebx
push esi
call fcn.0040804f
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309DDefaultIcon
push esi
call fcn.00408118
add esp, 0x18
cmp dword [ebp + 0xc], 0
mov edi, 0x41b2d6
jne 0x404607
push str.shdoclc.dll__190
jmp 0x40460c
push str.ieframe.dll__190
push edi
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309DDefaultIcon
push esi
call fcn.00407ff0
add esp, 0x10
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309DInProcServer32
push esi
call fcn.00408118
cmp dword [ebp + 0xc], 0
pop ecx
pop ecx
jne 0x404635
push str._SystemRoot__system32_shdocvw.dll
jmp 0x40463a
push str._SystemRoot__system32ieframe.dll
push edi
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309DInProcServer32
push esi
call fcn.00407ff0
add esp, 0x10
push str.Apartment
push str.ThreadingModel
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309DInProcServer32
push esi
call fcn.00407f7c
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309D_shell
push esi
call fcn.00408118
push str.Open
push edi
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309D_shell
push esi
call fcn.00407ff0
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309D_shellOpen
push esi
call fcn.00408118
push 0x41c338
push edi
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309D_shellOpen
push esi
call fcn.00407ff0
add esp, 0x40
cmp dword [ebp + 0xc], 0
jne 0x4046a6
push str._shdoclc.dll__10241
jmp 0x4046ab
push str._ieframe.dll__10241
push str.MUIVerb
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309D_shellOpen
push esi
call fcn.00407f7c
add esp, 0x10
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309D_shellOpenCommand
push esi
call fcn.00408118
push 0x105
call fcn.00409397
add esp, 0xc
push 0
push 0x26
push eax
push 0
mov dword [ebp - 0x328], eax
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
lea eax, [ebp - 0x118]
push eax
call fcn.00408e90
push eax
lea eax, [ebp - 0x118]
push 0
push eax
call fcn.00408e10
push dword [ebp - 0x328]
lea eax, [ebp - 0x118]
push eax
call fcn.00408d20
lea eax, [ebp - 0x118]
push str.Internet_Exploreriexplore.exe
push eax
call fcn.00408d20
lea eax, [ebp - 0x118]
push 0x41bb6c
push eax
call fcn.00408d20
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.00408d20
lea eax, [ebp - 0x118]
push eax
push edi
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309D_shellOpenCommand
push esi
call fcn.00407ff0
add esp, 0x40
cmp dword [ebp - 0x328], 0
je 0x404776
push dword [ebp - 0x328]
call fcn.00409371
pop ecx
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309DShellFolder
push esi
call fcn.00408118
push edi
push str.HideFolderVerbs
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309DShellFolder
push esi
call fcn.00407f7c
push edi
push str.WantsParseDisplayName
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309DShellFolder
push esi
call fcn.00407f7c
push edi
push str.HideOnDesktopPerUser
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309DShellFolder
push esi
call fcn.00407f7c
push 0
push str.Attributes
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309DShellFolder
push esi
call fcn.00407f0f
add esp, 0x48
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309D_shell_
push esi
call fcn.00408118
push str.rundll32.exe_shell32.dll_Control_RunDLL_inetcpl.cpl__0
push edi
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309D_shell_
push esi
call fcn.00407ff0
and dword [ebp - 4], 0
push ebx
push esi
call fcn.004082dc
add esp, 0x20
jmp 0x404800
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309DDefaultIcon
push esi
mov dword [ebp - 4], 2
call fcn.004082dc
pop ecx
pop ecx
jmp 0x404821
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309DInProcServer32
push esi
mov dword [ebp - 4], 4
call fcn.004082dc
pop ecx
pop ecx
jmp 0x404842
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309D_shell
push esi
mov dword [ebp - 4], 6
call fcn.004082dc
pop ecx
pop ecx
jmp 0x404863
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309D_shellOpen
push esi
mov dword [ebp - 4], 8
call fcn.004082dc
pop ecx
pop ecx
jmp 0x404884
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309D_shellOpenCommand
push esi
mov dword [ebp - 4], 0xa
call fcn.004082dc
pop ecx
pop ecx
jmp 0x4048a5
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309DShellFolder
push esi
mov dword [ebp - 4], 0xc
call fcn.004082dc
pop ecx
pop ecx
jmp 0x4048c6
push str.CLSID208D2C60_3AEA_1069_A2D7_08002B30309D_shell_
push esi
mov dword [ebp - 4], 0xe
call fcn.004082dc
pop ecx
pop ecx
call fcn.004098dd
ret