Function at 0x44d570
Capabilities:
Get common file path
Get file system object information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x538548
mov eax, dword fs:[0]
push eax
sub esp, 0x7a8
mov eax, dword [0x5954a0]
xor eax, ebp
mov dword [ebp - 0x20], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x7a8], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x508], 4
mov dword [ebp - 0x504], 0xc8
mov dword [ebp - 0x500], 0x64
mov dword [ebp - 0x4fc], 0x96
mov dword [ebp - 0x4f8], 0x64
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 1
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x128], 0
xor eax, eax
mov word [ebp - 0x124], ax
push 0xfe
push 0
lea ecx, [ebp - 0x122]
push ecx
call fcn.004f8090
add esp, 0xc
xor edx, edx
mov word [ebp - 0x23c], dx
push 0xfe
push 0
lea eax, [ebp - 0x23a]
push eax
call fcn.004f8090
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x714], cx
push 0xfe
push 0
lea edx, [ebp - 0x712]
push edx
call fcn.004f8090
add esp, 0xc
xor eax, eax
mov word [ebp - 0x60c], ax
push 0xfe
push 0
lea ecx, [ebp - 0x60a]
push ecx
call fcn.004f8090
add esp, 0xc
push 0x17
lea edx, [ebp - 0x71c]
push edx
mov ecx, 0x59a55c
call fcn.00494360
mov dword [ebp - 0x730], eax
mov eax, dword [ebp - 0x730]
mov ecx, dword [eax]
mov dword [ebp - 0x734], ecx
mov edx, dword [ebp - 0x734]
push edx
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [ebp - 0x71c]
call fcn.0044f990
push 0x18
lea ecx, [ebp - 0x720]
push ecx
mov ecx, 0x59a55c
call fcn.00494360
mov dword [ebp - 0x73c], eax
mov edx, dword [ebp - 0x73c]
mov eax, dword [edx]
mov dword [ebp - 0x740], eax
mov ecx, dword [ebp - 0x740]
push ecx
lea edx, [ebp - 0x23c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [ebp - 0x720]
call fcn.0044f990
push 0x19
lea eax, [ebp - 0x724]
push eax
mov ecx, 0x59a55c
call fcn.00494360
mov dword [ebp - 0x748], eax
mov ecx, dword [ebp - 0x748]
mov edx, dword [ecx]
mov dword [ebp - 0x74c], edx
mov eax, dword [ebp - 0x74c]
push eax
lea ecx, [ebp - 0x714]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [ebp - 0x724]
call fcn.0044f990
push 0x1a
lea edx, [ebp - 0x728]
push edx
mov ecx, 0x59a55c
call fcn.00494360
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x754]
mov ecx, dword [eax]
mov dword [ebp - 0x758], ecx
mov edx, dword [ebp - 0x758]
push edx
lea eax, [ebp - 0x60c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [ebp - 0x728]
call fcn.0044f990
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x1c], ecx
lea edx, [ebp - 0x23c]
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0x714]
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x60c]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x7a8]
mov eax, dword [ebp + 0xc]
mov dword [edx + 0x6c], eax
mov ecx, dword [ebp - 0x7a8]
mov edx, dword [ebp + 0x10]
mov dword [ecx + 0x70], edx
mov eax, dword [ebp - 0x7a8]
mov ecx, dword [ebp + 0x14]
mov dword [eax + 0x74], ecx
mov edx, dword [ebp - 0x7a8]
mov eax, dword [ebp + 0x18]
mov dword [edx + 0x78], eax
mov ecx, dword [ebp - 0x7a8]
mov edx, dword [ebp + 0x1c]
mov dword [ecx + 0x7c], edx
mov eax, dword [ebp - 0x7a8]
mov ecx, dword [ebp + 0x20]
mov dword [eax + 0x80], ecx
mov edx, dword [ebp - 0x7a8]
add edx, 0x54
mov dword [ebp - 0x770], edx
lea eax, [ebp + 8]
push eax
mov ecx, dword [ebp - 0x770]
call fcn.0044f9d0
mov ecx, dword [ebp - 0x7a8]
add ecx, 0x58
mov dword [ebp - 0x784], ecx
lea edx, [ebp + 8]
push edx
mov ecx, dword [ebp - 0x784]
call fcn.0044f9d0
mov ecx, dword [ebp - 0x7a8]
call fcn.004bfded
mov dword [ebp - 0x138], eax
push 0
push 0
push 0x1200
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 0x20]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x718], 0
jmp 0x44d88c
mov edx, dword [ebp - 0x718]
add edx, 1
mov dword [ebp - 0x718], edx
mov eax, dword [ebp - 0x718]
cmp eax, dword [ebp - 0x508]
jge 0x44d8dc
mov ecx, dword [ebp - 0x610]
push ecx
mov edx, dword [ebp - 0x718]
mov eax, dword [ebp + edx*4 - 0x504]
push eax
mov ecx, dword [ebp - 0x718]
mov edx, dword [ebp + ecx*4 - 0x134]
push edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp + eax*4 - 0x1c]
push ecx
mov edx, dword [ebp - 0x718]
push edx
mov ecx, dword [ebp - 0x7a8]
call fcn.004b621f
jmp 0x44d87d
mov dword [ebp - 0x50c], 0
cmp dword [ebp - 0x7a8], 0
jne 0x44d8fb
mov dword [ebp - 0x7ac], 0
jmp 0x44d90a
mov eax, dword [ebp - 0x7a8]
mov ecx, dword [eax + 0x20]
mov dword [ebp - 0x7ac], ecx
lea edx, [ebp - 0x50c]
push edx
push 0
mov eax, dword [ebp - 0x7ac]
push eax
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
push 0x2b4
push 0
lea ecx, [ebp - 0x4f4]
push ecx
call fcn.004f8090
add esp, 0xc
push 0x4009
push 0x2b4
lea edx, [ebp - 0x4f4]
push edx
push 0
mov eax, dword [ebp - 0x50c]
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [ebp - 0x614], eax
cmp dword [ebp - 0x7a8], 0
jne 0x44d971
mov dword [ebp - 0x7b0], 0
jmp 0x44d980
mov ecx, dword [ebp - 0x7a8]
mov edx, dword [ecx + 0x20]
mov dword [ebp - 0x7b0], edx
mov eax, dword [ebp - 0x614]
push eax
push 1
push 0x1003
mov ecx, dword [ebp - 0x7b0]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push ecx
mov edx, esp
mov dword [ebp - 0x72c], esp
mov dword [ebp - 0x7a0], edx
mov eax, dword [ebp - 0x7a8]
mov ecx, dword [eax + 0x54]
sub ecx, 0x10
mov dword [ebp - 0x788], ecx
mov edx, dword [ebp - 0x788]
push edx
call fcn.0044fd30
add esp, 4
mov dword [ebp - 0x78c], eax
mov eax, dword [ebp - 0x78c]
add eax, 0x10
mov ecx, dword [ebp - 0x7a0]
mov dword [ecx], eax
mov edx, dword [ebp - 0x7a0]
mov dword [ebp - 0x7b4], edx
mov ecx, dword [ebp - 0x7a8]
call fcn.0044dab0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0044f990
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x20]
xor ecx, ebp
call fcn.004f8124
mov esp, ebp
pop ebp
ret 0x1c