Function at 0x444fa0
Capabilities:
Get common file path
Query environment variable

Disassembly:
mov eax, 0x50d8
call fcn.00502fa0
mov eax, dword [0x5513d4]
xor eax, esp
mov dword [esp + 0x50d4], eax
cmp byte [0x558b34], 0
push ebx
push esi
mov esi, dword [esp + 0x50e4]
mov ebx, ecx
jne 0x444ffc
cmp word [esi], 0x2e
jne 0x444ffc
movzx eax, word [esi + 2]
push eax
call fcn.00484d20
test al, al
je 0x444feb
add esi, 4
cmp word [esi], 0x2e
je 0x444fd2
jmp 0x444ffc
cmp word [esi], 0x2e
jne 0x444ffc
cmp word [esi + 2], 0
je 0x4454a7
push 0x800
lea eax, [esp + 0x3018]
push eax
push esi
call fcn.004846e0
mov ecx, 0x5244d8
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x44503c
test dx, dx
je 0x445038
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x44503c
add eax, 4
add ecx, 4
test dx, dx
jne 0x445016
xor eax, eax
jmp 0x445041
sbb eax, eax
or eax, 1
push edi
test eax, eax
push esi
sete byte [esp + 0x13]
call fcn.00485250
mov edi, eax
movzx ecx, word [edi]
push ecx
call fcn.00484d20
test al, al
je 0x4450a4
cmp byte [esp + 0xf], 0
jne 0x4450a4
lea ecx, [esp + 0x3018]
mov eax, esi
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x445096
test dx, dx
je 0x445092
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x445096
add eax, 4
add ecx, 4
test dx, dx
jne 0x445070
xor eax, eax
jmp 0x44509b
sbb eax, eax
or eax, 1
test eax, eax
je 0x4450a4
xor eax, eax
mov word [edi], ax
push ebp
xor ebp, ebp
mov edi, esi
mov dword [esp + 0x14], ebp
cmp word [esi], bp
je 0x4450ee
cmp word [edi], 0x2e
jne 0x4450ea
cmp word [edi + 2], 0x2e
jne 0x4450ea
movzx eax, word [edi + 4]
push eax
call fcn.00484d20
test al, al
jne 0x4450d4
cmp word [edi + 4], 0
jne 0x4450ea
xor eax, eax
cmp word [edi + 4], ax
setne al
inc ebp
lea edi, [edi + eax*2]
add edi, 4
cmp word [edi], 0
jne 0x4450b2
mov dword [esp + 0x14], ebp
cmp byte [0x558b34], 0
je 0x445112
cmp byte [esp + 0x50f0], 0
je 0x445112
push esi
call fcn.00484bf0
test al, al
je 0x445112
mov ecx, ebx
call fcn.00445510
cmp byte [ebx + 0x1042], 0
je 0x445147
mov ecx, dword [ebx + 0x2144]
mov eax, ebp
cmp ebp, ecx
jl 0x445129
mov eax, ecx
cmp byte [esp + 0x13], 0
je 0x445132
mov eax, ecx
test eax, eax
je 0x445147
push 0
push eax
mov ecx, ebx
call fcn.00446630
push 0
jmp 0x44549e
mov byte [ebx + 0x1042], 0
cmp byte [0x558b34], 0
je 0x445240
push 0
push 0x5255ac
push str.FileList
call fcn.004ae540
test eax, eax
je 0x445178
test ebp, ebp
je 0x4454a5
push 0x800
lea eax, [esp + 0x2020]
mov ecx, 0x57b208
push eax
call fcn.004066d0
mov ecx, 0x5244d8
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4451bc
test dx, dx
je 0x4451b8
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4451bc
add eax, 4
add ecx, 4
test dx, dx
jne 0x445196
xor eax, eax
jmp 0x4451c1
sbb eax, eax
or eax, 1
test eax, eax
je 0x4451f2
push esi
mov ecx, 0x57b208
call fcn.00408170
test al, al
je 0x4451f2
xor eax, eax
lea ecx, [esp + 0x201c]
test ebp, ebp
setle al
dec eax
and eax, ecx
mov ecx, ebx
push eax
call fcn.00449d40
jmp 0x4454a5
push 0x800
lea eax, [esp + 0x20]
mov ecx, 0x57b208
push eax
call fcn.00406070
push 0x800
lea eax, [esp + 0x20]
push eax
lea esi, [ebx + 0x1044]
push esi
call fcn.0049ce90
push esi
call fcn.004852e0
mov ecx, ebx
call fcn.00445510
test al, al
je 0x4454a5
lea eax, [esp + 0x1c]
push eax
call fcn.00485280
jmp 0x44549d
push 0x800
lea ebp, [ebx + 0x1044]
push ebp
lea eax, [esp + 0x2024]
push eax
call fcn.0049ce90
mov edi, dword [esp + 0x14]
xor eax, eax
mov word [esp + 0x1c], ax
test edi, edi
jle 0x445351
lea esp, [esp]
cmp byte [ebx + 0x1042], 0
jne 0x445351
push ebp
call fcn.00484bc0
test al, al
je 0x445301
movzx eax, word [ebx + 0x1048]
push eax
call fcn.00484d20
test al, al
je 0x445301
cmp word [ebx + 0x104a], 0
jne 0x445301
cmp dword [ebx + 0x2144], 0
jle 0x4452b8
mov byte [ebx + 0x1042], 1
jmp 0x44531d
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0
push eax
push 0
push 0
push 0x11
push dword [ebx + 0x30]
call dword [sym.imp.SHELL32.dll_SHGetFolderLocation]
push dword [esp + 0x18]
mov ecx, 0x57de98
call fcn.0044c2f0
mov eax, dword [0x5b976c]
push dword [esp + 0x18]
push eax
mov ecx, dword [eax]
mov edi, dword [ecx + 0x14]
mov ecx, edi
call dword [0x523720]
call edi
mov edi, dword [esp + 0x14]
jmp 0x44531d
push 0x800
push ebp
call fcn.00485280
push eax
lea eax, [esp + 0x24]
push eax
call fcn.0049ce90
push ebp
call fcn.004852e0
dec edi
cmp word [esi], 0x2e
mov dword [esp + 0x14], edi
jne 0x445339
jmp 0x445330
add esi, 2
cmp word [esi], 0x2e
je 0x445330
movzx eax, word [esi]
push eax
call fcn.00484d20
test al, al
je 0x445349
add esi, 2
test edi, edi
jg 0x445270
cmp byte [esp + 0x13], 0
je 0x445380
push 0x800
lea eax, [esp + 0x1020]
push eax
push ebp
call fcn.004846e0
push 0x800
lea eax, [esp + 0x1020]
push eax
push ebp
call fcn.0049ce90
jmp 0x4453b5
push esi
call fcn.00484bf0
test al, al
je 0x445398
push 0x800
push esi
push ebp
call fcn.0049ce90
jmp 0x4453b5
cmp word [esi], 0
je 0x4453b5
push 0x800
push ebp
call fcn.004836c0
push 0x800
push esi
push ebp
call fcn.0049ce50
push ebp
call fcn.004846a0
mov edi, eax
cmp edi, 0xffffffff
je 0x4453ec
call fcn.004d5610
mov edx, 1
mov ecx, edi
shl edx, cl
test edx, eax
jne 0x4453ec
push 0x800
lea eax, [esp + 0x2020]
push eax
push ebp
call fcn.0049ce90
jmp 0x4454a5
cmp byte [ebx + 0x1042], 0
jne 0x44548e
push ebp
call fcn.00474160
test al, al
jne 0x44548e
push 0x800
lea eax, [esp + 0x1020]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
test eax, eax
je 0x445440
cmp eax, 0x800
jae 0x445440
lea eax, [esp + 0x101c]
push eax
call fcn.00474160
test al, al
je 0x445440
lea eax, [esp + 0x101c]
jmp 0x445482
push ebp
push 0x6c
call fcn.00496b20
push eax
lea eax, [esp + 0x4024]
push 0x864
push eax
call fcn.004027c0
add esp, 0x10
push 0x10
push 0x66
call fcn.00496b20
push eax
lea eax, [esp + 0x4024]
push eax
push dword [0x558aa8]
call fcn.004d6c50
lea eax, [esp + 0x201c]
push 0x800
push eax
push ebp
call fcn.0049ce90
movzx eax, word [esp + 0x1c]
lea ecx, [esp + 0x1c]
neg eax
sbb eax, eax
and eax, ecx
push eax
mov ecx, ebx
call fcn.0044ab10
pop ebp
pop edi
mov ecx, dword [esp + 0x50dc]
pop esi
pop ebx
xor ecx, esp
call fcn.00502f8e
add esp, 0x50d8
ret 8