Function at 0x44a930
Capabilities:
Get common file path

Disassembly:
mov eax, 0x180c
call fcn.004b1040
mov eax, dword [0x4da8f0]
xor eax, esp
mov dword [esp + 0x1808], eax
push ebp
mov ebp, dword [esp + 0x1814]
push esi
push edi
mov edi, ecx
mov ecx, 0x4c7b2c
mov eax, ebp
jmp 0x44a960
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x44a986
test dx, dx
je 0x44a982
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x44a986
add eax, 4
add ecx, 4
test dx, dx
jne 0x44a960
xor eax, eax
jmp 0x44a98b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete al
cmp byte [edi + 0x81a], 0
mov byte [esp + 0xf], al
je 0x44a9fa
xor esi, esi
test al, al
je 0x44a9a8
mov esi, 1
mov ecx, 0x4c7884
mov eax, ebp
nop
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x44a9d6
test dx, dx
je 0x44a9d2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x44a9d6
add eax, 4
add ecx, 4
test dx, dx
jne 0x44a9b0
xor eax, eax
jmp 0x44a9db
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x44a9e5
mov esi, dword [edi + 0x91c]
test esi, esi
je 0x44a9fa
push 0
push esi
mov ecx, edi
call fcn.004462a0
push 0
jmp 0x44ac02
mov byte [edi + 0x81a], 0
cmp byte [0x51b789], 0
je 0x44ab1a
push 0
push 0x4c8a78
push str.FileList
call fcn.00460ee0
test eax, eax
je 0x44aa2e
cmp byte [esp + 0xf], 0
je 0x44ac09
push 0x400
lea eax, [esp + 0x1018]
push eax
mov ecx, 0x5229e0
call fcn.00413300
mov ecx, 0x4c7884
mov eax, ebp
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x44aa76
test dx, dx
je 0x44aa72
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x44aa76
add eax, 4
add ecx, 4
test dx, dx
jne 0x44aa50
xor eax, eax
jmp 0x44aa7b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x44aaad
push ebp
mov ecx, 0x5229e0
call fcn.004131e0
test al, al
je 0x44aaad
movzx ecx, byte [esp + 0xf]
neg ecx
sbb ecx, ecx
lea edx, [esp + 0x1014]
and ecx, edx
push ecx
mov ecx, edi
call fcn.00449b90
jmp 0x44ac09
push 0x400
lea eax, [esp + 0x818]
push eax
mov ecx, 0x5229e0
call fcn.00413320
xor eax, eax
jmp 0x44aad0
movzx ecx, word [esp + eax + 0x814]
mov word [esp + eax + 0x14], cx
add eax, 2
test cx, cx
jne 0x44aad0
lea ecx, [esp + 0x14]
push ecx
call fcn.00456da0
lea edx, [esp + 0x14]
push edx
call fcn.0048be70
mov ecx, edi
call fcn.00448b30
test al, al
je 0x44ac09
lea eax, [esp + 0x814]
push eax
call fcn.00456820
jmp 0x44ac01
push 0x400
lea ecx, [esp + 0x1018]
push ecx
call fcn.0048cf70
cmp byte [esp + 0xf], 0
je 0x44abe3
xor eax, eax
lea esp, [esp]
movzx ecx, word [esp + eax + 0x1014]
mov word [esp + eax + 0x14], cx
add eax, 2
test cx, cx
jne 0x44ab40
lea edx, [esp + 0x814]
push edx
lea eax, [esp + 0x18]
push eax
call fcn.00457c10
lea ecx, [esp + 0x14]
push ecx
call fcn.004561a0
lea edx, [esp + 0x814]
push edx
call fcn.004561a0
lea eax, [esp + 0x814]
push eax
lea ecx, [esp + 0x18]
push ecx
call fcn.00478290
test eax, eax
jne 0x44abe3
cmp dword [edi + 0x91c], eax
jle 0x44aba6
mov byte [edi + 0x81a], 1
push eax
jmp 0x44ac02
mov eax, dword [edi]
lea edx, [esp + 0x10]
push edx
push 0x11
push eax
mov dword [esp + 0x1c], 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x5220b8
call fcn.00447050
mov eax, dword [0x53fe04]
mov ecx, dword [esp + 0x10]
mov edx, dword [eax]
mov edx, dword [edx + 0x14]
push ecx
push eax
call edx
push 0
jmp 0x44ac02
push ebp
call fcn.0048be70
cmp byte [esp + 0xf], 0
je 0x44abff
lea eax, [esp + 0x1014]
push eax
call fcn.00456820
jmp 0x44ac01
xor eax, eax
push eax
mov ecx, edi
call fcn.004492b0
mov ecx, dword [esp + 0x1814]
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.004b102c
add esp, 0x180c
ret 4