Function at 0x444bd0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x418
mov eax, dword [0x67432c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x208
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x418], ecx
push 0
push eax
call fcn.00480620
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call fcn.00480620
add esp, 0x18
call fcn.00452596
test al, al
je 0x444c2e
xchg esp, eax
invalid
call fcn.004524c7
test al, al
je 0x444c49
xor edi, esp
stosd dword es:[edi], eax
outsd dx, dword [esi]
cmp eax, 0xd76037ae
wait
sbb ebp, ecx
mov byte [ebx], cl
add byte [edx], cl
fidivr word [edx]
push 0
push 0x2b
lea eax, [ebp - 0x20c]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
call fcn.004523f8
test al, al
je 0x444c80
cld
movsd dword es:[edi], dword [esi]
test al, 0x5d
or eax, 0x5f28767a
das
cmp al, 0x1f
aas
mov eax, 0xcd65ac5b
imul ebp, dword [edi - 0x58c5ecc], 0x6d
outsd dx, dword [esi]
ret
call fcn.0045225a
test al, al
je 0x444c9e
xchg esp, eax
mov ecx, 0x801c14c3
and dword [edi + 0x3d2c26e1], 0xffffffef
dec ecx
pop ss
out dx, al
mov cs, word [ebx]
mov dword [edi + 0xd710e8], esi
add byte [eax + eax*8 - 0x2102ed8c], al
mov dword [0x60d8db51], eax
call fcn.004523b3
test al, al
je 0x444cb9
std
fisub word [ebx + 0x60d8db51]
and al, 0x78
mov cs, word [edi]
int1
jno 0x444d28
into
cmpsb byte [esi], byte es:[edi]
inc byte [ebp - 0x75]
invalid
mov ecx, dword [ebp - 0x418]
add ecx, 0x5c
cmp dword [ecx + 0x14], 8
jb 0x444cca
mov ecx, dword [ecx]
lea edx, [ebp - 0x414]
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx], ax
lea edx, [edx + 2]
test ax, ax
jne 0x444cd0
lea edi, [ebp - 0x20c]
add edi, 0xfffffffe
nop word [eax + eax]
mov ax, word [edi + 2]
lea edi, [edi + 2]
test ax, ax
jne 0x444cf0
mov eax, dword [0x5e6bac]
lea edx, [ebp - 0x20c]
mov dword [edi], eax
add edx, 0xfffffffe
nop dword [eax]
mov cx, word [edx + 2]
lea edx, [edx + 2]
test cx, cx
jne 0x444d10
mov ecx, dword [0x5e6c34]
lea edi, [ebp - 0x20c]
mov dword [edx], ecx
add edi, 0xfffffffe
mov ecx, dword [str.nNengWB]
mov dword [edx + 4], ecx
mov ecx, dword [0x5e6c3c]
mov dword [edx + 8], ecx
mov ecx, dword [0x5e6c40]
mov dword [edx + 0xc], ecx
mov ecx, dword [0x5e6c44]
mov dword [edx + 0x10], ecx
mov cx, word [edi + 2]
lea edi, [edi + 2]
test cx, cx
jne 0x444d51
mov dword [edi], eax
lea eax, [ebp - 0x20c]
push eax
call fcn.00458c36
add esp, 4
call fcn.004522e4
test al, al
je 0x444d8b
lcall 0x44f4, 0xb33825df
xor bl, byte [ebp - 0x3058e2b6]
retf 0xf49d
call fcn.00452101
test al, al
je 0x444db2
fucomi st(6)
cmp ebx, dword [edx + 5]
insb byte es:[edi], dx
pop es
xchg dh, ch
lodsb al, byte gs:[esi]
dec ecx
stosd dword es:[edi], eax
mov dl, byte [eax + 0x727e321a]
sbb ch, byte [eax - 0x80]
xchg esp, eax
out 0x3d, eax
inc ecx
loop 0x444dee
test eax, 0xd419e8
add byte [eax + eax*8 - 0x5ec1e08c], al
mov dl, 0xf2
ret
call fcn.004521d0
test al, al
je 0x444dda
mov eax, dword ds:[0x53c3f2b2]
sub dword [ebx + esi*8], edx
adc eax, 0x364688f6
inc ecx
ja 0x444da8
xor dword [ecx + 0x556d6edc], eax
fdiv dword [ebp + ecx + 0x6e]
sbb dword es:[eax - 0x22], esi
lea ecx, [ebp - 0x20c]
add ecx, 0xfffffffe
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x444de3
hlt
mov eax, dword [0x5e6c34]
mov dword [ecx], eax
mov eax, dword [str.nNengWB]
mov dword [ecx + 4], eax
mov eax, dword [0x5e6c3c]
mov dword [ecx + 8], eax
mov eax, dword [0x5e6c40]
mov dword [ecx + 0xc], eax
mov eax, dword [0x5e6c44]
mov dword [ecx + 0x10], eax
lea ecx, [ebp - 0x20c]
add ecx, 0xfffffffe
nop
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x444e20
mov eax, dword [0x5ea754]
mov dword [ecx], eax
mov eax, dword [0x5ea758]
mov dword [ecx + 4], eax
mov ax, word [0x5ea75c]
mov word [ecx + 8], ax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x414]
push eax
push str.InstallPath
push str.Globals
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov ebx, dword [ebp - 0x418]
lea eax, [ebp - 0x414]
push eax
push str.InstallPath
mov ecx, ebx
call fcn.00471692
call fcn.00451f63
test al, al
je 0x444e95
int 0xd6
jno 0x444ecc
adc dh, byte [eax + 0x34]
inc ebx
pop edx
aad 0x6b
and al, 0x37
stosd dword es:[edi], eax
shl byte [0xfbec858d], 0xff
dec dword [ebx + 0x5c6850cb]
imul ebx, dword [esi], 0x228e8
add byte [ebx + 0x5e5ffc4d], cl
lea eax, [ebp - 0x414]
mov ecx, ebx
push eax
push str.InstallPath
call int.004450d0
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0046d802
mov esp, ebp
pop ebp
ret
add byte [bp + di], dh
lds ecx, [ecx + 0x5653fc45]