Function at 0x4448d0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x418
mov eax, dword [0x67432c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x208
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x418], ecx
push 0
push eax
call fcn.00480640
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call fcn.00480640
add esp, 0x18
call fcn.00452579
test al, al
je 0x44492e
test al, 0x82
invalid
pop ebx
sub esp, ebp
mov cl, 0xaa
into
adc bl, byte [eax - 0x46]
call fcn.004524aa
test al, al
je 0x444949
and edx, dword [ecx]
int3
push 0
push 0x2b
lea eax, [ebp - 0x20c]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
call fcn.004523db
test al, al
je 0x444980
mov dl, 0x24
loop 0x444925
mov ebx, 0x97d58e4e
popal
das
cmp eax, 0x9b16e0e8
invalid
call fcn.0045223d
test al, al
je 0x44499e
mov ch, 0x58
add byte [ebp + 0x29], 0xb7
mov ecx, 0x294719e6
movsb byte es:[edi], byte [esi]
adc byte [ebx + 0x72e41a6a], dl
xor edi, dword [ebx]
lodsb al, byte [esi]
call fcn.00452396
test al, al
je 0x4449b9
lea esi, [0xfb1f6cb]
pop ds
mov ebx, dword [esi]
insd dword es:[edi], dx
dec eax
pop esi
movsd dword es:[edi], dword [esi]
in al, 0xf2
sti
pop ebx
sbb byte [ebx - 0x41773], cl
inc dword [ebx + 0x79835cc1]
adc al, 8
mov ecx, dword [ebp - 0x418]
add ecx, 0x5c
cmp dword [ecx + 0x14], 8
jb 0x4449ca
mov ecx, dword [ecx]
lea edx, [ebp - 0x414]
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx], ax
lea edx, [edx + 2]
test ax, ax
jne 0x4449d0
lea edi, [ebp - 0x20c]
add edi, 0xfffffffe
nop word [eax + eax]
mov ax, word [edi + 2]
lea edi, [edi + 2]
test ax, ax
jne 0x4449f0
mov eax, dword [0x5e6ba4]
lea edx, [ebp - 0x20c]
mov dword [edi], eax
add edx, 0xfffffffe
nop dword [eax]
mov cx, word [edx + 2]
lea edx, [edx + 2]
test cx, cx
jne 0x444a10
mov ecx, dword [0x5e6c2c]
lea edi, [ebp - 0x20c]
mov dword [edx], ecx
add edi, 0xfffffffe
mov ecx, dword [str.nNengWB]
mov dword [edx + 4], ecx
mov ecx, dword [0x5e6c34]
mov dword [edx + 8], ecx
mov ecx, dword [0x5e6c38]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x5e6c3c]
mov dword [edx + 0x10], ecx
mov cx, word [edi + 2]
lea edi, [edi + 2]
test cx, cx
jne 0x444a51
mov dword [edi], eax
lea eax, [ebp - 0x20c]
push eax
call fcn.00458c2f
add esp, 4
call fcn.004522c7
test al, al
je 0x444a8b
fadd dword [eax]
add byte [eax + eax*8 - 0xad1eb8c], al
cmc
mov cl, byte [ebp - 0x56]
pop ebx
sub al, 0x73
xor eax, edi
push ds
shl byte [eax], 1
xor dword [eax], 0xf39c7179
mov eax, 0xd654e8
add byte [eax + eax*8 - 0x5306e18c], al
call fcn.004520e4
test al, al
je 0x444ab2
stc
lodsb al, byte [esi]
dec esi
jmp 0x444a70
call fcn.004521b3
test al, al
je 0x444ada
fistp dword [eax]
mov ch, 0xfb
ficom dword [edi + 0x1b]
jb 0x444a8a
cmp ch, byte es:[esi + esi - 0xf]
add eax, 0x7d094890
sbb ebp, dword [esi]
das
push edx
lcall 0x5094, 0x2cd6e381
lea ecx, [ebp - 0x20c]
add ecx, 0xfffffffe
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x444ae3
mov eax, dword [0x5e6c2c]
mov dword [ecx], eax
mov eax, dword [str.nNengWB]
mov dword [ecx + 4], eax
mov eax, dword [0x5e6c34]
mov dword [ecx + 8], eax
mov eax, dword [0x5e6c38]
mov dword [ecx + 0xc], eax
mov eax, dword [0x5e6c3c]
mov dword [ecx + 0x10], eax
lea ecx, [ebp - 0x20c]
add ecx, 0xfffffffe
nop
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x444b20
mov eax, dword [0x5ea754]
mov dword [ecx], eax
mov eax, dword [0x5ea758]
mov dword [ecx + 4], eax
mov ax, word [0x5ea75c]
mov word [ecx + 8], ax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x414]
push eax
push str.InstallPath
push str.Globals
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ebx, dword [ebp - 0x418]
lea eax, [ebp - 0x414]
push eax
push str.InstallPath
mov ecx, ebx
call fcn.004716d2
call fcn.00451f46
test al, al
je 0x444b95
or byte [ebx + esi + 0x69], bh
popal
sti
add dword [ebx - 0x72], 0x18de2943
iretd
lea eax, [ebp - 0x414]
mov ecx, ebx
push eax
push str.InstallPath
call fcn.00444dd0
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0046d81d
mov esp, ebp
pop ebp
ret