Function at 0x44e370
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45f83c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xda4
push edi
mov dword [ebp - 0xd9c], ecx
mov dword [ebp - 0x964], str._FONTS
mov dword [ebp - 0x960], 0x4749b0
mov dword [ebp - 0x95c], str._DESKTOPDIRECTORY
mov dword [ebp - 0x958], str._PROGRAMS
mov dword [ebp - 0x954], str._STARTUP
mov dword [ebp - 0x950], str._SYSTEM
mov dword [ebp - 0x94c], str._PROGRAM_FILES
mov dword [ebp - 0x544], 0x14
mov dword [ebp - 0x540], 0x24
mov dword [ebp - 0x53c], 0x10
mov dword [ebp - 0x538], 2
mov dword [ebp - 0x534], 7
mov dword [ebp - 0x530], 0x25
mov dword [ebp - 0x52c], 0x26
mov dword [ebp - 0x10], 7
mov byte [ebp - 0x944], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x943]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x948], 0
jmp 0x44e45c
mov eax, dword [ebp - 0x948]
add eax, 1
mov dword [ebp - 0x948], eax
mov ecx, dword [ebp - 0x948]
cmp ecx, dword [ebp - 0x10]
jge 0x44e522
push 0x200
push 0
lea edx, [ebp - 0x944]
push edx
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
mov eax, dword [ebp - 0x948]
mov ecx, dword [ebp + eax*4 - 0x544]
push ecx
lea edx, [ebp - 0x944]
push edx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
push 4
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [ebp - 0xd78], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0xd78], 0
je 0x44e4da
lea eax, [ebp - 0x944]
push eax
mov ecx, dword [ebp - 0xd78]
call sub.MFC42.DLL_CString::CString_1
mov dword [ebp - 0xda0], eax
jmp 0x44e4e4
mov dword [ebp - 0xda0], 0
mov ecx, dword [ebp - 0xda0]
mov dword [ebp - 0xd74], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xd74]
push edx
mov eax, dword [ebp - 0x948]
mov ecx, dword [ebp + eax*4 - 0x964]
push ecx
mov ecx, dword [ebp - 0xd9c]
add ecx, 0x13c
call fcn.0040ad30
jmp 0x44e44d
lea ecx, [ebp - 0x328]
call fcn.00402030
mov byte [ebp - 0xb68], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0xb67]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea edx, [ebp - 0xb68]
push edx
push str._WINDOWS
mov ecx, dword [ebp - 0xd9c]
call fcn.0044e8dd
mov byte [ebp - 0x210], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x20f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x744], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x743]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xb68]
push eax
push str._sSystem32
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea edx, [ebp - 0xb68]
push edx
push str._sSysWOW64
lea eax, [ebp - 0x744]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea ecx, [ebp - 0x328]
push ecx
lea edx, [ebp - 0x744]
push edx
call sub.MFC42.DLL_CFile::GetStatus
cmp eax, 1
jne 0x44e655
push 4
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [ebp - 0xd80], eax
mov dword [ebp - 4], 1
cmp dword [ebp - 0xd80], 0
je 0x44e619
lea eax, [ebp - 0x744]
push eax
mov ecx, dword [ebp - 0xd80]
call sub.MFC42.DLL_CString::CString_1
mov dword [ebp - 0xda4], eax
jmp 0x44e623
mov dword [ebp - 0xda4], 0
mov ecx, dword [ebp - 0xda4]
mov dword [ebp - 0xd7c], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xd7c]
push edx
push 0x474a24
mov ecx, dword [ebp - 0xd9c]
add ecx, 0x13c
call fcn.0040ad30
jmp 0x44e6c9
push 4
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [ebp - 0xd88], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0xd88], 0
je 0x44e68f
lea eax, [ebp - 0x210]
push eax
mov ecx, dword [ebp - 0xd88]
call sub.MFC42.DLL_CString::CString_1
mov dword [ebp - 0xda8], eax
jmp 0x44e699
mov dword [ebp - 0xda8], 0
mov ecx, dword [ebp - 0xda8]
mov dword [ebp - 0xd84], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xd84]
push edx
push str._SYSTEM_32BIT
mov ecx, dword [ebp - 0xd9c]
add ecx, 0x13c
call fcn.0040ad30
mov byte [ebp - 0xd70], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0xd6f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x528], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x527]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
movsx eax, byte [ebp - 0xb68]
push eax
push str._c:Program_Files
lea ecx, [ebp - 0xd70]
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
movsx edx, byte [ebp - 0xb68]
push edx
push str._c:Program_Files__x86_
lea eax, [ebp - 0x528]
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea ecx, [ebp - 0x328]
push ecx
lea edx, [ebp - 0x528]
push edx
call sub.MFC42.DLL_CFile::GetStatus
cmp eax, 1
jne 0x44e7c3
push 4
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [ebp - 0xd90], eax
mov dword [ebp - 4], 3
cmp dword [ebp - 0xd90], 0
je 0x44e787
lea eax, [ebp - 0x528]
push eax
mov ecx, dword [ebp - 0xd90]
call sub.MFC42.DLL_CString::CString_1
mov dword [ebp - 0xdac], eax
jmp 0x44e791
mov dword [ebp - 0xdac], 0
mov ecx, dword [ebp - 0xdac]
mov dword [ebp - 0xd8c], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xd8c]
push edx
push 0x474a70
mov ecx, dword [ebp - 0xd9c]
add ecx, 0x13c
call fcn.0040ad30
jmp 0x44e837
push 4
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [ebp - 0xd98], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0xd98], 0
je 0x44e7fd
lea eax, [ebp - 0xd70]
push eax
mov ecx, dword [ebp - 0xd98]
call sub.MFC42.DLL_CString::CString_1
mov dword [ebp - 0xdb0], eax
jmp 0x44e807
mov dword [ebp - 0xdb0], 0
mov ecx, dword [ebp - 0xdb0]
mov dword [ebp - 0xd94], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0xd94]
push edx
push str._PROGRAM_FILES_32BIT
mov ecx, dword [ebp - 0xd9c]
add ecx, 0x13c
call fcn.0040ad30
lea ecx, [ebp - 0x968]
call sub.MFC42.DLL_CString::CString_3
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 0xd9c]
add ecx, 0x13c
call fcn.0040ad50
mov dword [ebp - 0xb6c], eax
cmp dword [ebp - 0xb6c], 0
je 0x44e8bc
lea eax, [ebp - 0xb70]
push eax
lea ecx, [ebp - 0x968]
push ecx
lea edx, [ebp - 0xb6c]
push edx
mov ecx, dword [ebp - 0xd9c]
add ecx, 0x13c
call sub.MFC42.DLL_CMapStringToOb::GetNextAssoc
push 0
mov ecx, dword [ebp - 0xb70]
call sub.MFC42.DLL_CString::GetBuffer
push eax
mov eax, dword [ebp - 0x968]
push eax
push str.CXSyncDlg::LoadSpecialDirMap___s____s_
push 1
mov ecx, dword [0x476a9c]
push ecx
call fcn.00407ea0
add esp, 0x14
jmp 0x44e860
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x968]
call sub.MFC42.DLL_CString::CString
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
mov esp, ebp
pop ebp
ret