Function at 0x44b3e8
Capabilities:
Get common file path

Disassembly:
push ebp
sub esp, 0x60
lea ebp, [esp - 4]
mov eax, dword [0x59d300]
xor eax, ebp
mov dword [ebp + 0x60], eax
push 0x8c
mov eax, 0x523b57
call fcn.00506664
mov edi, edx
push edi
xor esi, esi
push esi
push esi
push 0x23
xor eax, eax
push esi
mov ebx, ecx
mov dword [ebp + 0x40], edi
mov word [edi], ax
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
cmp eax, esi
je 0x44b42f
push 0xffffffffffffffec
pop eax
jmp 0x44b545
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, si
jne 0x44b434
sub eax, edx
sar eax, 1
cmp word [edi + eax*2 - 2], 0x5c
je 0x44b460
dec edi
dec edi
mov ax, word [edi + 2]
inc edi
inc edi
cmp ax, si
jne 0x44b44c
mov esi, 0x5418b4
movsd dword es:[edi], dword [esi]
mov edi, dword [ebp + 0x40]
cmp dword [ebx + 0x18], 8
jb 0x44b46b
mov eax, dword [ebx + 4]
jmp 0x44b46e
lea eax, [ebx + 4]
mov edx, eax
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x44b470
sub eax, edx
dec edi
dec edi
mov cx, word [edi + 2]
inc edi
inc edi
test cx, cx
jne 0x44b47e
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
push 3
mov ecx, eax
pop ebx
and ecx, ebx
rep movsb byte es:[edi], byte [esi]
call fcn.0040dbda
cmp byte [eax], 0
jne 0x44b562
lea eax, [ebp - 0x98]
push eax
call fcn.0040d9e1
push dword [ebp + 0x40]
xor ebx, ebx
lea esi, [ebp + 0x1c]
mov dword [ebp - 4], ebx
call fcn.0040b812
push eax
push 0x543368
lea eax, [ebp - 0x90]
push str.XpiUnInstaller.cpp:_DetermineFFDir
push eax
mov byte [ebp - 4], 1
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push eax
call fcn.0040b612
pop ecx
pop ecx
push ebx
push 1
mov byte [ebp - 4], bl
call fcn.0040dac5
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x98]
call fcn.0040bf31
lea edi, [ebp + 0x44]
mov byte [ebp - 4], 2
call fcn.0040ba4e
push ebx
push 1
mov esi, edi
call fcn.0040dac5
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x98]
call fcn.0040c22b
mov eax, dword [ebp + 0x40]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x44b537
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x60]
xor ecx, ebp
call fcn.004ffa47
add ebp, 0x64
leave
ret
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 4], ebx
call fcn.0040b935
push dword [ebp + 0x40]
lea esi, [ebp]
mov byte [ebp - 4], 4
call fcn.0040b812
mov edi, eax
mov byte [ebp - 4], 5
call fcn.0040dbda
lea ecx, [ebp + 0x1c]
call fcn.0040b84b
mov byte [ebp - 4], 6
cmp dword [eax + 0x18], 8
jb 0x44b5a2
mov esi, dword [eax + 4]
jmp 0x44b5a5
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x54331c
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push esi
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543314
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push str.XpiUnInstaller.cpp:_DetermineFFDir
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push 0x543368
push eax
call fcn.0040c0a0
pop ecx
pop ecx
push edi
push eax
call fcn.0040b612
pop ecx
pop ecx
xor edi, edi
push edi
push 1
lea esi, [ebp + 0x1c]
call fcn.0040dac5
push edi
push 1
lea esi, [ebp]
mov byte [ebp - 4], 4
call fcn.0040dac5
lea eax, [ebp + 0x38]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 7
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x44b65c
lea eax, [ebp + 0x1c]
push eax
lea ecx, [ebp - 0x90]
call fcn.0040b831
push 0x28
push str..XpiUnInstaller.cpp
push eax
push esi
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 8
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
push edi
push 1
lea esi, [ebp + 0x1c]
call fcn.0040dac5
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 4
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], bl
call fcn.0040b8a0
jmp 0x44b531