Function at 0x44d7a0
Capabilities:
Get common file path

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x50f52a
push eax
mov dword fs:[0], esp
sub esp, 0x240
push ebx
push ebp
push esi
push edi
mov esi, ecx
call fcn.004f80f4
mov eax, dword [eax + 4]
xor ebp, ebp
cmp dword [eax + 0x9ec], ebp
je 0x44d817
cmp dword [esi + 0x4b0], ebp
je 0x44d817
mov eax, dword [esi + 0x54c]
or ebx, 0xffffffff
cmp eax, ebx
je 0x44d81a
push eax
mov ecx, 0x55f6e8
call fcn.004b2e10
mov edi, eax
cmp edi, ebp
je 0x44d80b
lea eax, [esp + 0x10]
push eax
call fcn.004d44e6
mov eax, dword [eax]
mov dword [edi + 0x128], eax
mov ecx, 0x55f6e8
call fcn.004b1770
jmp 0x44d81a
or ebx, 0xffffffff
mov dword [0x55f6cc], ebp
mov eax, dword [esi + 0x458]
cmp eax, ebx
mov dword [esi + 0x430], ebp
mov dword [esi + 0x434], ebp
je 0x44d875
push eax
call sub.WSOCK32.dll_closesocket
lea ecx, [esp + 0x10]
push 0xe869
push ecx
mov dword [esi + 0x458], ebx
call fcn.0042e2e0
add esp, 8
mov eax, dword [eax]
mov ecx, esi
push eax
mov dword [esp + 0x25c], ebp
call fcn.00467ff0
lea ecx, [esp + 0x10]
mov dword [esp + 0x258], ebx
call fcn.004dd44d
mov eax, dword [esi + 0x45c]
cmp eax, ebx
je 0x44d88b
push eax
call sub.WSOCK32.dll_closesocket
mov dword [esi + 0x45c], ebx
call fcn.004f80f4
mov eax, dword [eax + 4]
mov dword [eax + 0x9ec], ebp
mov eax, dword [esi + 0x47c]
cmp eax, ebp
je 0x44d8f1
lea ebp, [esi + 0x470]
mov ecx, ebp
call fcn.004d7f94
mov edi, eax
test edi, edi
mov dword [esp + 0x14], edi
je 0x44d8e5
lea ecx, [edi + 8]
mov dword [esp + 0x258], 1
call fcn.004dd44d
lea ecx, [edi + 4]
mov dword [esp + 0x258], ebx
call fcn.004dd44d
push edi
call fcn.004ddabf
add esp, 4
mov eax, dword [esi + 0x47c]
test eax, eax
jne 0x44d8a9
xor ebp, ebp
mov edx, dword [esi + 0x55c]
mov dword [esi + 0x4a4], ebp
mov eax, dword [edx + 8]
dec eax
mov dword [esp + 0x10], eax
js 0x44d971
mov eax, dword [esi + 0x55c]
lea edx, [esp + 0x48]
push edx
push 0x104
mov ecx, dword [eax + 4]
mov edi, dword [ecx + ebp*4]
mov ebx, dword [edi + 4]
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [esp + 0x14c]
lea ecx, [esp + 0x48]
push eax
push ebx
push 0x55615c
push ecx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
lea edx, [esp + 0x14c]
push edx
call fcn.004c4aee
add esp, 4
test edi, edi
je 0x44d963
mov ecx, edi
call fcn.004dd44d
push edi
call fcn.004ddabf
add esp, 4
mov eax, dword [esp + 0x10]
inc ebp
cmp ebp, eax
jle 0x44d907
xor ebp, ebp
or ebx, 0xffffffff
mov ecx, dword [esi + 0x55c]
push ebx
push ebp
call fcn.004d72d5
mov ebx, dword [esi + 0x57c]
mov edi, ebp
dec ebx
js 0x44d9ab
mov eax, dword [esi + 0x578]
mov ebp, dword [eax + edi*4]
test ebp, ebp
je 0x44d9a6
mov ecx, ebp
call fcn.004dd44d
push ebp
call fcn.004ddabf
add esp, 4
inc edi
cmp edi, ebx
jle 0x44d989
or ebp, 0xffffffff
lea ecx, [esi + 0x574]
push ebp
push 0
call fcn.004d72d5
mov ecx, dword [esi + 0x3a4]
mov edi, 0
mov ebx, dword [ecx + 8]
dec ebx
js 0x44d9e9
mov edx, dword [esi + 0x3a4]
mov eax, dword [edx + 4]
mov ecx, dword [eax + edi*4]
test ecx, ecx
je 0x44d9e4
mov edx, dword [ecx]
push 1
call dword [edx + 4]
inc edi
cmp edi, ebx
jle 0x44d9cd
mov ecx, dword [esi + 0x3a4]
push ebp
push 0
call fcn.004d72d5
mov ecx, esi
call fcn.0042eab0
mov ecx, dword [esi + 0x4b0]
test ecx, ecx
je 0x44da31
mov eax, dword [esi + 0x4a8]
cmp eax, 0x1a9
je 0x44da31
cmp eax, 0x1aa
je 0x44da31
test ecx, ecx
je 0x44da27
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov dword [esi + 0x4b0], 0
lea ecx, [esp + 0x10]
push 0xfb
push ecx
mov dword [esi + 0x54c], ebp
call fcn.0042e2e0
add esp, 8
mov ecx, dword [esi + 0x3c]
mov eax, dword [eax]
mov edi, 2
push eax
mov edx, dword [ecx]
mov dword [esp + 0x25c], edi
call dword [edx + 0x50]
lea ecx, [esp + 0x10]
mov dword [esp + 0x258], ebp
call fcn.004dd44d
call fcn.004ddcd1
test eax, eax
je 0x44da82
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x44da84
xor eax, eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, eax
call fcn.004da8e1
call fcn.004f80f4
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x704]
test ecx, ecx
je 0x44db3a
cmp dword [esp + 0x24], edi
jne 0x44db3a
mov edx, dword [0x5580c0]
mov dword [esp + 0x14], edx
mov dword [esp + 0x258], 3
call fcn.004f80f4
call fcn.004f80f4
mov eax, dword [eax + 0xc]
push edi
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
mov edi, eax
lea eax, [esp + 0x18]
push 0xfb
push eax
call fcn.0042e2e0
add esp, 8
mov ebx, dword [eax]
mov byte [esp + 0x258], 4
call fcn.004ddcd1
test eax, eax
je 0x44db0a
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x44db0c
xor eax, eax
push ebx
push edi
lea ecx, [eax + 0x8e4]
call fcn.004b03d0
lea ecx, [esp + 0x18]
mov byte [esp + 0x258], 3
call fcn.004dd44d
lea ecx, [esp + 0x14]
mov dword [esp + 0x258], ebp
call fcn.004dd44d
mov eax, dword [esi + 0x254]
push 0
push 0
push 0x14b
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push 0x55cde0
lea ecx, [esi + 0x238]
call fcn.004dcf3b
call fcn.004f80f4
mov ecx, dword [eax + 4]
call fcn.00445130
push 0x55cde0
lea ecx, [esi + 0x550]
call fcn.004dd5d6
push 0x55cde0
lea ecx, [esi + 0x570]
call fcn.004dd5d6
mov eax, dword [esi + 0x44c]
test eax, eax
jne 0x44dba8
mov ecx, esi
call fcn.00467810
mov dword [esi + 0x44c], 1
mov ecx, dword [esi + 0x1c]
push 0xa
push ecx
mov dword [esi + 0x5a4], 0
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x55eee8]
push eax
mov edx, dword [eax]
call dword [edx + 0x20]
call fcn.004c46af
call fcn.004ddcd1
pop edi
pop esi
pop ebp
pop ebx
test eax, eax
je 0x44dbe4
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x44dbe6
xor eax, eax
push 0
push 0
lea ecx, [eax + 0x81c]
call fcn.004e6e12
mov ecx, eax
call fcn.0042eab0
call fcn.004ddcd1
test eax, eax
je 0x44dc0e
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x44dc10
xor eax, eax
push 0
push 0
lea ecx, [eax + 0x758]
call fcn.004e6e12
mov ecx, eax
call fcn.00480510
mov ecx, dword [esp + 0x240]
mov dword fs:[0], ecx
add esp, 0x24c
ret