Function at 0x44a880
Capabilities:
Get common file path

Disassembly:
push 0x8b4
mov eax, 0x52035e
call fcn.004ac5bf
mov edi, ecx
push 0x208
xor ebx, ebx
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.004e9750
add esp, 0xc
lea eax, [ebp - 0x218]
push ebx
push 0xb
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
mov esi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x218]
push 0x526c08
push eax
call esi
lea eax, [ebp - 0x218]
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHCreateDirectory]
push 0x208
lea eax, [ebp - 0x420]
push ebx
push eax
call fcn.004e9750
add esp, 0xc
mov ecx, ebx
movzx eax, word [ebp + ecx - 0x218]
lea ecx, [ecx + 2]
mov word [ebp + ecx - 0x422], ax
test ax, ax
jne 0x44a8f2
push 0x526da8
lea eax, [ebp - 0x420]
push eax
call esi
mov ecx, 0x56dff0
call fcn.00449c9e
lea ecx, [ebp - 0x890]
push ecx
mov ecx, eax
call fcn.0045198c
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 4], ebx
jb 0x44a93b
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x878]
push eax
call fcn.00516250
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 2
call fcn.004049c9
mov ebx, str.hnote.exe
push ebx
call fcn.00408db0
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x878]
call fcn.004126e0
cmp dword [ebp - 0x864], 8
lea eax, [ebp - 0x878]
lea ecx, [ebp - 0x420]
cmovae eax, dword [ebp - 0x878]
xor ebx, ebx
push ebx
push ecx
push ebx
push eax
mov ecx, edi
call fcn.0044a663
push 0x208
lea eax, [ebp - 0x628]
push ebx
push eax
call fcn.004e9750
add esp, 0xc
mov ecx, ebx
movzx eax, word [ebp + ecx - 0x218]
lea ecx, [ecx + 2]
mov word [ebp + ecx - 0x62a], ax
test ax, ax
jne 0x44a9b3
push 0x526dc0
lea eax, [ebp - 0x628]
push eax
call esi
mov ecx, 0x56dff0
call fcn.00449c9e
lea ecx, [ebp - 0x8a8]
push ecx
mov ecx, eax
call fcn.0045198c
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 3
jb 0x44a9fd
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x860]
push eax
call fcn.00516250
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x8a8]
mov byte [ebp - 4], 5
call fcn.004049c9
mov ebx, str.notepaper.exe
push ebx
call fcn.00408db0
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x860]
call fcn.004126e0
cmp dword [ebp - 0x84c], 8
lea eax, [ebp - 0x860]
lea ecx, [ebp - 0x628]
cmovae eax, dword [ebp - 0x860]
xor ebx, ebx
push ebx
push ecx
push ebx
push eax
mov ecx, edi
call fcn.0044a663
push 0x208
lea eax, [ebp - 0x830]
push ebx
push eax
call fcn.004e9750
add esp, 0xc
mov edx, ebx
movzx eax, word [ebp + edx - 0x218]
lea edx, [edx + 2]
mov word [ebp + edx - 0x832], ax
test ax, ax
jne 0x44aa75
push 0x526df4
lea eax, [ebp - 0x830]
push eax
call esi
mov ecx, 0x56dff0
call fcn.00449c9e
lea ecx, [ebp - 0x8c0]
push ecx
mov ecx, eax
call fcn.0045198c
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 6
jb 0x44aabf
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x848]
push eax
call fcn.00516250
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x8c0]
mov byte [ebp - 4], 8
call fcn.004049c9
mov esi, str.Uninst.exe
push esi
call fcn.00408db0
pop ecx
push eax
push esi
lea ecx, [ebp - 0x848]
call fcn.004126e0
cmp dword [ebp - 0x834], 8
lea ecx, [ebp - 0x830]
push ebx
push ecx
lea eax, [ebp - 0x848]
mov ecx, edi
cmovae eax, dword [ebp - 0x848]
push ebx
push eax
call fcn.0044a663
push ebx
push 1
lea ecx, [ebp - 0x848]
call fcn.00409a10
push ebx
push 1
lea ecx, [ebp - 0x860]
call fcn.00409a10
push ebx
push 1
lea ecx, [ebp - 0x878]
call fcn.00409a10
call fcn.004ac569
ret